diff --git a/CHANGELOG.md b/CHANGELOG.md
index a4deb8a300..441203cdc2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.591.4](https://github.com/windmill-labs/windmill/compare/v1.591.3...v1.591.4) (2025-12-12)
+
+
+### Bug Fixes
+
+* **app:** fix raw scripts forbidden by policy if no args ([857adf5](https://github.com/windmill-labs/windmill/commit/857adf5b63fe243736366c38a7e573678552a99b))
+
 ## [1.591.3](https://github.com/windmill-labs/windmill/compare/v1.591.2...v1.591.3) (2025-12-11)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index dade30f4a8..5f126c228f 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -2166,9 +2166,9 @@ dependencies = [
 
 [[package]]
 name = "cmake"
-version = "0.1.54"
+version = "0.1.55"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e7caa3f9de89ddbe2c607f4101924c5abec803763ae9534e4f4d7d8f84aa81f0"
+checksum = "d49d74c227b6cc9f3c51a2c7c667a05b6453f7f0f952a5f8e4493bb9e731d68e"
 dependencies = [
  "cc",
 ]
@@ -15165,7 +15165,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "aws-sdk-config",
@@ -15227,7 +15227,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "argon2",
@@ -15348,7 +15348,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "base64 0.22.1",
  "chrono",
@@ -15363,7 +15363,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -15377,7 +15377,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "axum",
@@ -15396,7 +15396,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15489,7 +15489,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "regex",
  "serde",
@@ -15504,7 +15504,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "bytes",
@@ -15528,7 +15528,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -15544,7 +15544,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -15553,7 +15553,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15565,7 +15565,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -15577,7 +15577,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -15589,7 +15589,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15601,7 +15601,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -15613,7 +15613,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -15624,7 +15624,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -15635,7 +15635,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -15648,7 +15648,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15672,7 +15672,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15686,7 +15686,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15703,7 +15703,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15717,7 +15717,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15736,7 +15736,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "serde",
@@ -15747,7 +15747,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15784,7 +15784,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "wasm-bindgen",
  "wasm-bindgen-test",
@@ -15794,7 +15794,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.591.3"
+version = "1.591.4"
 dependencies = [
  "anyhow",
  "async-once-cell",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index 9a40ebab2b..9fd698b429 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.591.3"
+version = "1.591.4"
 authors.workspace = true
 edition.workspace = true
 
@@ -33,7 +33,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal"]
 
 [workspace.package]
-version = "1.591.3"
+version = "1.591.4"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 8b0f5b5c3d..b5cf379a8a 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.591.3
+  version: 1.591.4
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index 8a9afb9f6b..6622b7beed 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.591.3";
+export const VERSION = "v1.591.4";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/main.ts b/cli/src/main.ts
index 64419a548d..58098ca943 100644
--- a/cli/src/main.ts
+++ b/cli/src/main.ts
@@ -70,7 +70,7 @@ export {
 //   }
 // });
 
-export const VERSION = "1.591.3";
+export const VERSION = "1.591.4";
 
 export const WM_FORK_PREFIX = "wm-fork";
 
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index b043a62849..60263ba7c4 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "windmill-components",
-	"version": "1.591.3",
+	"version": "1.591.4",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "windmill-components",
-			"version": "1.591.3",
+			"version": "1.591.4",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 3ab63cc243..1e4a35a60b 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "windmill-components",
-	"version": "1.591.3",
+	"version": "1.591.4",
 	"scripts": {
 		"dev": "vite dev",
 		"build": "vite build",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 44cfec8039..153d597813 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,8 +4,8 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.591.3"
-wmill_pg = ">=1.591.3"
+wmill = ">=1.591.4"
+wmill_pg = ">=1.591.4"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index 3c369225ea..12c1c4f084 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.591.3
+  version: 1.591.4
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index 3374f12ecb..998287ca7b 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.591.3'
+    ModuleVersion     = '1.591.4'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index b15b059b3b..1e7b12eb18 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.591.3"
+version = "1.591.4"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/python-client/wmill_pg/pyproject.toml b/python-client/wmill_pg/pyproject.toml
index 13721c4c58..1991b412de 100644
--- a/python-client/wmill_pg/pyproject.toml
+++ b/python-client/wmill_pg/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill-pg"
-version = "1.591.3"
+version = "1.591.4"
 description = "An extension client for the wmill client library focused on pg"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index 80ba6995e9..5c51ec9343 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.591.3",
+  "version": "1.591.4",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index 191d702af4..7db9abfa6f 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.591.3",
+  "version": "1.591.4",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "devDependencies": {
diff --git a/version.txt b/version.txt
index 8017911005..36d007323d 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.591.3
+1.591.4