Ruben Fiszel 7efeae26d8 feat: add fork_parent_workspace claim to OIDC tokens for fork workspaces (#9987) ...

* feat: add parent_workspace claim to OIDC job tokens for fork workspaces

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* refactor: rename claim to fork_parent_workspace for clarity

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to e2df172596e00877068d4b0a98afaef62fe429d1

This commit updates the EE repository reference after PR #651 was merged in windmill-ee-private.

Previous ee-repo-ref: f73001ac6c038694cfc2604233a59be1c0daa40b

New ee-repo-ref: e2df172596e00877068d4b0a98afaef62fe429d1

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-07-07 16:21:32 +00:00

..

runnable_settings

perf: eliminate dual-connection DB pool contention across worker, queue, and api (#9798)

2026-06-25 21:33:17 +00:00

secret_backend

fix: decrypt secret variables via external backend in common resolvers (#9784)

2026-06-25 12:05:21 +02:00

agent_workers.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

apps.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

assets.rs

feat(pipelines): auto-derive cascade edges from ducklake/s3 reads (+ muted-read badge) (#9963)

2026-07-06 18:12:12 +00:00

audit.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

auth.rs

feat: use derived username instead of email for non-member superadmins (#9857)

2026-07-01 14:54:07 +00:00

bench.rs

perf: drop v2_job side-table ON DELETE CASCADE FKs to speed retention deletes (#9786)

2026-06-25 13:52:30 +00:00

cache.rs

fix(flows): reject corrupt step paths at deploy + atomic cache writes (#9751) (#9813)

2026-06-26 18:06:27 +02:00

client.rs

feat: add flow_user_state(key) to QuickJS input transform sandbox (WIN-1947) (#9093)

2026-05-19 13:49:57 +00:00

db_params.rs

feat: add Entra ID (Azure Workload Identity) database auth (#8526)

2026-04-02 16:00:33 +02:00

db.rs

docs: add SAFETY comments to all dynamic SQL call sites (#9009)

2026-05-03 07:14:14 +00:00

deployment_requests_oss.rs

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

ee_oss.rs

feat(licensing): enforce offline license seat cap (#9845)

2026-06-30 23:52:12 +02:00

email_oss.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

error.rs

skip workspaced-route duplicate checks on cloud (#9305)

2026-05-25 16:13:28 +00:00

external_ip.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

flow_conversations.rs

refactor: extract windmill-dep-map crate for parallel api/worker compilation (#7846)

2026-02-08 00:39:56 +00:00

flow_status.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

flows.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

folders.rs

feat: folder default_permissioned_as rules for ownership defaults on deploy (#8801)

2026-04-12 20:14:07 +00:00

git_sync_oss.rs

fix: sanitize git credentials from ansible executor errors and logs (#9697)

2026-06-22 11:02:24 +02:00

global_settings.rs

fix(workspaces): add instance setting to disable workspace invite/add emails (#9643)

2026-06-18 16:59:11 +02:00

indexer.rs

fix: lower default indexer memory/batch settings to prevent OOM (#8347)

2026-03-13 06:03:45 +00:00

instance_config.rs

feat: sandboxed daemonless container runtime via '# sandbox <image>' (#9453)

2026-06-05 08:35:51 +00:00

job_metrics.rs

perf: optimize job_stats storage for timestamps and zero-memory jobs (#8289)

2026-03-10 04:59:56 +00:00

jobs.rs

perf: eliminate dual-connection DB pool contention across worker, queue, and api (#9798)

2026-06-25 21:33:17 +00:00

jwt.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

lib.rs

feat(pipelines): schema contracts — save-time consumer checks vs captured schemas (#9917)

2026-07-04 10:40:00 +02:00

lockfiles.rs

fix: dep jobs improvements (#7081)

2025-11-07 11:04:53 +00:00

log_context.rs

feat(otel): connect jobs to the inbound distributed trace (#9456)

2026-06-05 16:50:07 +00:00

login_rate_limit.rs

widen login rate limit defaults to reduce false positives (#8603)

2026-03-29 14:01:13 +00:00

materialization.rs

feat(pipelines): fork data environments for ducklake materialization (dev data) (#9915)

2026-07-05 09:58:06 +02:00

min_version.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

more_serde.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

notify_events.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

oauth2.rs

feat: add LOGIN_DOMAIN env var to normalize emails during external login

2026-01-27 00:01:35 +00:00

oidc_oss.rs

feat: add fork_parent_workspace claim to OIDC tokens for fork workspaces (#9987)

2026-07-07 16:21:32 +00:00

otel_oss.rs

test: add OTEL coverage tests (#8558)

2026-03-27 18:28:59 +00:00

partition_oss.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

pipeline_advanced_oss.rs

feat(pipeline): write-audit-publish for materialization data tests (#9911)

2026-07-04 17:19:49 +02:00

query_builders.rs

feat: ducklake time-travel UX (snapshot history + AT VERSION reads) (#9709)

2026-06-24 23:11:47 +02:00

queue.rs

feat: add prometheus metric queue_running_count (#6413)

2025-08-19 22:12:36 +00:00

result_stream.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

runtime_assets.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

schedule.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

schema_contracts.rs

feat(pipelines): schema contracts — save-time consumer checks vs captured schemas (#9917)

2026-07-04 10:40:00 +02:00

schema.rs

feat: WM_TESTED_RUNNABLE env var + wildcards in test: annotation (#8926)

2026-04-24 12:52:25 +00:00

scripts.rs

perf: eliminate dual-connection DB pool contention across worker, queue, and api (#9798)

2026-06-25 21:33:17 +00:00

sensitive_log_masks.rs

fix: smarter secret masking based on secret length (#8629)

2026-03-30 19:59:08 +00:00

server.rs

add opt-in SMTP click tracking disable for email links (#8665)

2026-04-02 20:44:08 +00:00

ssrf.rs

feat: allow private MCP server URLs (#9470)

2026-06-08 14:46:47 +00:00

stats_oss.rs

improve analytics (#8418)

2026-03-17 20:14:02 +00:00

stream.rs

fix: add size limit to indexer queries on jobs table to avoid oom (#6293)

2025-07-29 18:27:59 +00:00

teams_oss.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

tracing_init.rs

feat: export audit logs to a dedicated object store folder (#9207)

2026-05-19 14:43:54 +00:00

trashbin.rs

feat: add trashbin system for soft-deleting items (#8519)

2026-03-26 09:51:34 +00:00

triggers.rs

feat: cascade trigger script_path on runnable rename + fix trigger permissioned_as (#8823)

2026-04-14 20:42:13 +00:00

user_drafts.rs

feat: use derived username instead of email for non-member superadmins (#9857)

2026-07-01 14:54:07 +00:00

usernames.rs

feat: use derived username instead of email for non-member superadmins (#9857)

2026-07-01 14:54:07 +00:00

users.rs

feat: use derived username instead of email for non-member superadmins (#9857)

2026-07-01 14:54:07 +00:00

utils.rs

offline (URL-bound) license keys (#9089)

2026-05-11 22:09:21 +00:00

variables.rs

fix: decrypt secret variables via external backend in common resolvers (#9784)

2026-06-25 12:05:21 +02:00

wac.rs

perf: add inline-persist fast path for WAC v2 step() (#8807)

2026-04-13 16:49:53 +00:00

webhook.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

worker_group_job_stats.rs

fix nits worker group stats

2025-09-11 09:19:09 +00:00

worker.rs

feat(auth): add runtime NO_AUTH mode for authentication bypass (#9962)

2026-07-06 17:02:51 +00:00

workspace_dependencies.rs

feat: add workspace dependencies support for powershell (#8395)

2026-03-16 15:37:28 +00:00

workspaces.rs

feat: add SQL migrations for data tables (#9693)

2026-07-07 08:25:16 +00:00