Ruben FiszelandClaude Opus 4.8 072d866e78 fix: bound every dimension of the JWKS cache (URL, key count, key bytes) ...

The retained-bytes cap left two dimensions unbounded that reviewers named: the
cache keys on the admin-supplied URL (unbounded TEXT column), and the per-key
fixed cost (many tiny keys serialize small but each Jwk and its map slot cost
memory). Add a URL-length cap in fetch_jwks (the choke point save validates
through, so an overlong URL is never stored or cached) and a usable-key count
cap alongside the retained-bytes cap, both measured after filtering so a mixed-
use set is judged by its signing keys. Every dimension is now bounded.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VF3v6LA9399gNphmZaHYG3

2026-09-04 15:51:59 +02:00

..

runnable_settings

perf: eliminate dual-connection DB pool contention across worker, queue, and api (#9798)

2026-06-25 21:33:17 +00:00

secret_backend

fix: decrypt secret variables via external backend in common resolvers (#9784)

2026-06-25 12:05:21 +02:00

agent_workers.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

apps.rs

Revert "fix: scope a fork's cloned app policy and custom path to its creator …" (#10592)

2026-08-07 12:39:44 +02:00

assets.rs

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

audit.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

auth.rs

fix: the deploy-time guest path guard checks the destination of a rename and refuses a leading slash

2026-09-04 09:32:26 +02:00

azure_workload_identity.rs

fix: log the db auth mode used and hint at the ms_entraid sentinel (#10508)

2026-08-04 13:16:24 +00:00

bench.rs

perf: drop v2_job side-table ON DELETE CASCADE FKs to speed retention deletes (#9786)

2026-06-25 13:52:30 +00:00

cache.rs

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

client.rs

feat: make the Git Repo Viewer work with GitHub App repositories (#10765)

2026-08-20 22:05:24 +02:00

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

db.rs

docs: add SAFETY comments to all dynamic SQL call sites (#9009)

2026-05-03 07:14:14 +00:00

dbt_manifest.rs

feat: give dbt its own editor with an explicitly refreshed model graph (#10448)

2026-08-03 03:32:08 +02:00

deploy_origin.rs

feat(fork): merge a fork deletion on evidence, not on the counters (#10484)

2026-08-04 00:50:27 +02:00

deployment_requests_oss.rs

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

ee_oss.rs

feat: alert on expired online license key (#10295)

2026-07-24 10:53:24 +02:00

email_oss.rs

fix(smtp): explain why a test email failed instead of 'deadline has elapsed' (#10620)

2026-08-10 21:21:14 +02:00

error.rs

fix: make the guest grant a server-minted label, not a declarable scope

2026-09-01 21:51:07 +00:00

external_ip.rs

perf: resolve the worker external IP in the background (#10697)

2026-08-14 14:27:21 +02:00

feature_usage_oss.rs

feat(telemetry): extend feature-usage tracking beyond AI features (#10681)

2026-08-14 18:50:38 +02:00

flow_conversations.rs

fix: truncate strings on char boundaries to avoid panics on multibyte input (#10390)

2026-07-28 18:29:45 +02:00

flow_status.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

flows.rs

refactor(flows): make the flow-value round-trip preserve display-only fields in one place (#10382)

2026-07-28 13:09:08 +02:00

folders.rs

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

git_sync_oss.rs

fix(security): validate ansible git repository URLs before invoking git (#10759)

2026-08-19 14:04:39 +02:00

global_settings.rs

Merge remote-tracking branch 'origin/main' into license-app-only-implicit-promotion

2026-09-04 08:45:31 +02:00

guest_jwt.rs

fix: bound every dimension of the JWKS cache (URL, key count, key bytes)

2026-09-04 15:51:59 +02:00

indexer.rs

feat: make the service log retention period an instance setting (#10889)

2026-08-29 19:39:14 +02:00

instance_config.rs

feat: auto-build binaries to object storage on deployment (#10673)

2026-08-13 07:50:28 +02:00

job_metrics.rs

perf: optimize job_stats storage for timestamps and zero-memory jobs (#8289)

2026-03-10 04:59:56 +00:00

jobs.rs

fix(security): a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124)

2026-08-19 22:33:46 +02:00

jwt.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

lib.rs

Merge remote-tracking branch 'origin/license-app-only-implicit-promotion' into guest-jwt-app-entry

2026-09-04 09:18:43 +02:00

lockfiles.rs

fix: dep jobs improvements (#7081)

2025-11-07 11:04:53 +00:00

log_context.rs

feat(otel): connect jobs to the inbound distributed trace (#9456)

2026-06-05 16:50:07 +00:00

login_rate_limit.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

materialization.rs

feat(pipelines): fork data environments for ducklake materialization (dev data) (#9915)

2026-07-05 09:58:06 +02:00

min_version.rs

feat: upgrade bun to 1.4.0 and demote deno in the language picker (#10784)

2026-08-21 01:16:59 +02:00

more_serde.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

notify_events.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

oauth2.rs

feat: add LOGIN_DOMAIN env var to normalize emails during external login

2026-01-27 00:01:35 +00:00

oidc_oss.rs

feat: add fork_parent_workspace claim to OIDC tokens for fork workspaces (#9987)

2026-07-07 16:21:32 +00:00

otel_oss.rs

test: add OTEL coverage tests (#8558)

2026-03-27 18:28:59 +00:00

partition_oss.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

per_minute_counter.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

pipeline_advanced_oss.rs

feat(pipeline): write-audit-publish for materialization data tests (#9911)

2026-07-04 17:19:49 +02:00

query_builders.rs

fix(duckdb): cast list columns in quicksearch so tables containing them can be previewed (#10614)

2026-08-10 20:48:19 +02:00

queue.rs

feat: add prometheus metric queue_running_count (#6413)

2025-08-19 22:12:36 +00:00

result_stream.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

runtime_assets.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

schedule.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

schema_contracts.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

schema.rs

feat: WM_TESTED_RUNNABLE env var + wildcards in test: annotation (#8926)

2026-04-24 12:52:25 +00:00

scripts.rs

fix: deploy a relocked script version only when its lock changed (#10966)

2026-09-04 01:01:36 +02:00

sensitive_log_masks.rs

fix: smarter secret masking based on secret length (#8629)

2026-03-30 19:59:08 +00:00

server.rs

perf: declare a settings pass instead of reading one setting at a time (#10698)

2026-08-14 18:03:33 +02:00

ssrf.rs

feat: guest JWT entry for embedded apps

2026-09-03 08:00:25 +00:00

stats_oss.rs

improve analytics (#8418)

2026-03-17 20:14:02 +00:00

stream.rs

fix: add size limit to indexer queries on jobs table to avoid oom (#6293)

2025-07-29 18:27:59 +00:00

teams_oss.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

tracing_init.rs

feat: serve service log retrieval from a columnar parquet store (#10886)

2026-08-29 09:51:59 +02:00

trashbin.rs

feat: add trashbin system for soft-deleting items (#8519)

2026-03-26 09:51:34 +00:00

trigger_history.rs

feat: add trigger_history table with source tracking (#10696)

2026-08-14 17:57:11 +02:00

triggers.rs

fix: keep native triggers attached when a runnable is renamed (#10432)

2026-07-31 23:44:25 +02:00

user_drafts.rs

fix: let a principal without a login account own a draft (#10925)

2026-09-01 23:42:08 +02:00

usernames.rs

feat: use derived username instead of email for non-member superadmins (#9857)

2026-07-01 14:54:07 +00:00

users.rs

fix: single-flight the JWKS refresh; design-system textarea; doc placement

2026-09-03 09:08:25 +00:00

utils.rs

fix: explain the 6-field cron format when a schedule is rejected (#10768)

2026-08-19 22:37:06 +02:00

variables.rs

feat: add WM_ROOT_WORKSPACE, the closest dev or prod workspace of a job (#10776)

2026-08-20 15:40:22 +02:00

wac_failure_corpus.json

test(wac): pin the failure record with one corpus both SDKs read (#10385)

2026-07-28 16:54:40 +02:00

wac.rs

fix(wac): one failure record for tasks and steps, in every round (#10368)

2026-07-28 13:15:24 +02:00

webhook.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

worker_group_job_stats.rs

fix nits worker group stats

2025-09-11 09:19:09 +00:00

worker.rs

perf: index the suspended-job resume test instead of filtering it (#10863)

2026-08-27 00:39:03 +02:00

workspace_dependencies.rs

feat: add workspace dependencies support for powershell (#8395)

2026-03-16 15:37:28 +00:00

workspaces.rs

fix: only the scope grammar's own characters bar an app path from guests, refused at deploy as well as at the mint

2026-09-04 09:21:16 +02:00