3 people d1260d7c5a feat: refuse OIDC tokens to previews that impersonate a path their user cannot write (#11396) ...

* feat: add provenance claims to job OIDC tokens and mark preview sub

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: require a flow or script job's version to belong to its path for deployed

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: derive app script paths server-side and test job provenance in CE

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: count an app script as deployed only when a deployed app run stamped it

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* docs: state the deployed condition for the preview sub prefix

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* feat: keep the plain OIDC sub for previews by users who can write the path

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* feat: refuse OIDC tokens to previews by users who cannot write the path

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* refactor: keep OIDC token issuance unchanged, leaving provenance to the claims

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* refactor: name the root job's trigger claim root_trigger_kind

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* feat: report the request-supplied paths in a job's provenance

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* feat: count a worker-pushed preview under deployed code as deployed

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: drop the claimed parent of a restarted flow preview

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: only read a job's modules from its args when it is a preview

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: never count a preview whose modules came in its args as deployed

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* chore: update ee-repo-ref to dba91044a174f8c9275fefea2619dc966b0f9250

This commit updates the EE repository reference after PR #832 was merged in windmill-ee-private.

Previous ee-repo-ref: a703cb17776d0858255fbfd817dce132377d3e80

New ee-repo-ref: dba91044a174f8c9275fefea2619dc966b0f9250

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-09-29 19:09:48 +02:00

..

ai_shared_artifacts.sql

feat(ai-sessions): share session artifacts with the workspace by link (#11115)

2026-09-14 22:46:26 +02:00

app_custom_path_cross_workspace.sql

fix: actionable error when a custom_path is taken by an app in another workspace (#9190)

2026-05-16 08:29:53 +00:00

app_preview_auth.sql

fix: add apps:run to the token scope picker and confine path-scoped app tokens (#10428)

2026-07-31 11:38:05 +02:00

base.sql

feat: store hashed tokens instead of plaintext (#8217)

2026-03-17 01:15:38 +00:00

batch_rerun.sql

fix: handle singlestepflow zombies and stop filtering them from runs page (#9055)

2026-05-07 08:00:38 +00:00

bun_edge_cases.sql

feat: upgrade bun to v1.3.8 with regression tests (#7761)

2026-02-04 11:38:15 +00:00

capture_cross_workspace.sql

fix: scope capture deletion to the workspace in the request path (#10795)

2026-08-22 10:01:25 +00:00

datatable_migrations_grants.sql

fix: surface the real postgres error when data table migrations fail (#10371)

2026-07-28 14:29:06 +02:00

dedicated_flows.sql

fix: dedicated worker dispatch, cross-workspace deps, UI improvements (#8689)

2026-04-03 17:50:07 +00:00

dependency_map.sql

feat: workspace dependencies (#7124)

2025-11-28 16:00:11 +00:00

djob_debouncing.sql

feat: dependency job debouncing (#6769)

2025-10-16 16:49:35 +00:00

drafts_move_mirror.sql

feat: drafts follow their item through a move; behind means base ≠ head (#10577)

2026-09-18 20:54:23 +02:00

drafts_move_taken.sql

feat: drafts follow their item through a move; behind means base ≠ head (#10577)

2026-09-18 20:54:23 +02:00

drafts_nul.sql

fix(backend): strip NUL bytes from draft values on write (#9673)

2026-06-19 13:33:36 +00:00

drafts_save_follows_move.sql

feat: drafts follow their item through a move; behind means base ≠ head (#10577)

2026-09-18 20:54:23 +02:00

end_user_email.sql

refactor: deprecate username_to_email in favor of WM_END_USER_EMAIL (#10429)

2026-07-31 11:47:58 +02:00

folder_default_permissioned_as.sql

feat: folder default_permissioned_as rules for ownership defaults on deploy (#8801)

2026-04-12 20:14:07 +00:00

fork_deployment_requests.sql

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

git_sync_autopull_identity.sql

fix(git-sync): run auto-pull as the admin who enabled it (#11121)

2026-09-15 10:34:57 +02:00

git_sync_autopull_recovery.sql

fix: clear a stale git auto-pull failure and show the status time (#11100)

2026-09-12 08:55:35 +02:00

git_sync_fork_credential.sql

feat: bring gitlab repositories to parity for git sync (#10938)

2026-09-08 11:54:43 +02:00

hello.sql

feat: add preprocessor support for dedicated workers and bunnative scripts (#8284)

2026-03-10 18:26:02 +00:00

hub_sync_blacklist.sql

feat: workspace dependencies (#7124)

2025-11-28 16:00:11 +00:00

inline_preview_auth.sql

fix: let operators use wmill.datatable() from within running jobs (#10931)

2026-09-03 08:43:52 +02:00

instance_group_auto_add.sql

test: add integration tests for instance group and workspace auto-add interaction

2026-01-26 23:46:27 +00:00

job_provenance.sql

feat: refuse OIDC tokens to previews that impersonate a path their user cannot write (#11396)

2026-09-29 19:09:48 +02:00

jobs_read_auth.sql

fix: confine jobs:run tokens to the jobs of the runnables they may start (#10635)

2026-08-14 18:57:57 +02:00

lockfile_python.sql

feat(python): per import requirement pin (#5520)

2025-04-11 21:31:51 +00:00

mcp_resource_authz.sql

fix(ai): enforce resource authz when loading MCP tools in agent worker (#9571)

2026-06-14 23:50:18 +02:00

mcp_token_exfil.sql

fix(mcp): resolve MCP resource token via caller RLS + SSRF-guard url (#9428)

2026-06-03 09:00:43 +00:00

multipython.sql

feat(python): inline script metadata (PEP 723) (#5712)

2025-05-24 02:13:47 +02:00

permissions_test.sql

fix: replace email with permissioned_as for triggers/schedules (#8439)

2026-03-20 16:28:38 +00:00

preserve_on_behalf_of.sql

fix(security): a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124)

2026-08-19 22:33:46 +02:00

relative_bun.sql

feat(cache): remove persistent raw values from queue (#4866)

2024-12-16 17:10:16 +01:00

relative_deno.sql

feat(cache): remove persistent raw values from queue (#4866)

2024-12-16 17:10:16 +01:00

relative_python.sql

fix(backend): rework dependency_map handling (#6598)

2025-09-24 13:40:39 +00:00

resource_versioning.sql

feat: version resource values with history, diff and restore (#10596)

2026-08-10 21:32:18 +02:00

resources_test.sql

add back mcp_tools endpoints

2026-02-08 20:50:58 +00:00

restrict_deploy_to_deployers.sql

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

result_format.sql

backend: finalize v2 migration (v2 phase 4 - final) (#5155)

2025-02-13 17:10:30 +01:00

schedule_fork_conflict.sql

fix: walk the whole fork ancestry for app installations and fork conflicts (#11151)

2026-09-16 10:45:34 +02:00

schedule_push.sql

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

schedule.sql

feat(cache): remove persistent raw values from queue (#4866)

2024-12-16 17:10:16 +01:00

secret_backend.sql

fix: parse Python datetime.datetime and datetime.date type annotations (#7856)

2026-02-09 15:17:26 +00:00

session_workspace_status.sql

stop destroying AI sessions in workspaces reached without a usr row (#10567)

2026-08-06 12:45:34 +02:00

start_all_triggers.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_gcp_pubsub.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_kafka.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_mqtt.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_nats.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_postgres_replication.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_sqs.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

start_websocket.sh

test: add end-to-end trigger integration tests and DB CRUD tests

2026-02-09 12:28:25 +00:00

typechecked_python.sql

fix: support @typechecked decorator in Python relative imports (#8495)

2026-08-17 12:30:25 +02:00

variables_test.sql

add back mcp_tools endpoints

2026-02-08 20:50:58 +00:00

wac_approval_urls.sql

feat: bind WAC approval urls to a named wait_for_approval step (#10317)

2026-07-25 11:41:48 +02:00

wac_flow_script.sql

fix: dispatch workflow-as-code tasks from a deployed flow's inline step (#11146)

2026-09-16 09:58:29 +02:00

wac_preprocessor.sql

fix(wac): recognize @workflow main, list WAC in scripts/list, run preprocessor (#8951)

2026-04-27 13:38:49 +00:00

wmill_cli_test.sql

feat(cli): add consistent get/list/new subcommands for all item types (#8047)

2026-02-22 07:53:28 +00:00

workspace_dependencies_leafs.sql

feat: workspace dependencies (#7124)

2025-11-28 16:00:11 +00:00

workspace_dependencies.sql

feat: workspace dependencies (#7124)

2025-11-28 16:00:11 +00:00

ws_specific.sql

feat: add workspace-specific flag for resources and variables (#8836)

2026-05-07 13:35:54 +00:00