starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-12 16:02:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: note the aead gate covers workers only and is one-way

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Alexander Petric
2026-10-11 19:01:18 +00:00
co-authored by Claude Opus 5.5
parent 91e0aea0fa
commit ccb1a3614d
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/windmill-common/src/min_version.rs
+3 -1
View File
@@ -25,7 +25,9 @@ pub const MIN_VERSION_SUPPORTS_BUN_LOCKFILE_V2: VC = vc(1, 794, 0, "Bun v2 lockf
pub const MIN_VERSION_SUPPORTS_JOB_TOKEN_SCOPES: VC = vc(1, 822, 0, "Restricted job tokens");
// The release that reads AES-256-GCM workspace ciphertext. A worker that predates it reads
// secrets from the database with the CBC cipher alone and fails every job using a value
// written in the new format. Must name the release this ships in.
// written in the new format. Must name the release this ships in. Only worker versions are
// seen here, not servers; once met, the background pass rewrites every secret variable, so
// going back below this release leaves them unreadable.
pub const MIN_VERSION_SUPPORTS_AEAD_SECRETS: VC = vc(1, 831, 0, "AES-GCM secret encryption");
pub const MIN_VERSION_SUPPORTS_NODE_DEBOUNCING: VC = vc(1, 658, 0, "Flow node debouncing");
pub const MIN_VERSION_SUPPORTS_TOKEN_HASH: VC = vc(1, 659, 0, "Token hash storage");