Ruben FiszelandClaude Opus 5 471246eb9a fixup: redact the job token from the wrapper's debug echo ...

`RUST_LOG=windmill=debug` echoes each stdin command, and those lines land in the
job's own logs — `execd_wac` carries that job's ephemeral token. Also restores a
previously-unset WM_JOB_ID/WM_TOKEN by deleting rather than assigning undefined,
which would leave the literal string behind.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VMNiDoBuUY9jzqcuFLT2wU

2026-08-22 08:25:49 +00:00

..

ai

fix: carry the token label into job-run audit rows (#10433)

2026-07-31 16:13:12 +02:00

agent_workers.rs

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

ai_executor.rs

feat: send prompt_cache_key on the openai responses api (#10507)

2026-08-04 12:28:09 +00:00

ansible_executor.rs

fix(ci): unbreak the windows test jobs and the discord comment relay (#10799)

2026-08-21 12:52:06 +00:00

bash_executor.rs

fix(bash): normalize CRLF line endings before running scripts (#10131)

2026-07-15 12:46:26 +02:00

bigquery_executor.rs

fix: heartbeat job ping during s3object materialization in SQL executors (#10152)

2026-07-16 15:48:11 +02:00

bun_executor.rs

fixup: redact the job token from the wrapper's debug echo

2026-08-22 08:25:49 +00:00

common.rs

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

config.rs

feat: replace ephemeral tokens by jwt (#3908)

2024-06-14 13:07:35 +02:00

csharp_executor.rs

feat: auto-build binaries to object storage on deployment (#10673)

2026-08-13 07:50:28 +02:00

dbt_engine.rs

feat(dbt): reach any dbt adapter through a dbt_profile resource, and constrain the warehouse picker (#10525)

2026-08-05 00:34:26 +02:00

dbt_executor.rs

feat(dbt): reach any dbt adapter through a dbt_profile resource, and constrain the warehouse picker (#10525)

2026-08-05 00:34:26 +02:00

dbt_profiles.rs

feat(dbt): reach any dbt adapter through a dbt_profile resource, and constrain the warehouse picker (#10525)

2026-08-05 00:34:26 +02:00

dedicated_worker_oss.rs

feat: flow for loop squashing (#7107)

2025-11-25 17:25:34 +01:00

deno_executor.rs

wip: run workflow-as-code rounds on a bun dedicated worker

2026-08-22 08:10:51 +00:00

docker_v2.rs

fix: return result.json and stdout results from sandboxed containers (#10460)

2026-08-03 12:35:12 +02:00

duckdb_executor.rs

fix: bound duckdb result collection so an oversized result cannot OOM the worker (#10641)

2026-08-12 02:17:07 +02:00

global_cache.rs

feat: auto-build binaries to object storage on deployment (#10673)

2026-08-13 07:50:28 +02:00

go_executor.rs

feat: auto-build binaries to object storage on deployment (#10673)

2026-08-13 07:50:28 +02:00

graphql_executor.rs

improve graphql error reporting (#6092)

2025-07-01 15:45:04 +02:00

handle_child.rs

wip: run workflow-as-code rounds on a bun dedicated worker

2026-08-22 08:10:51 +00:00

java_executor.rs

fix: locate coursier artifacts by coordinate so private maven registries work (#10501)

2026-08-04 11:38:33 +00:00

job_logger_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

job_logger.rs

fix: return result.json and stdout results from sandboxed containers (#10460)

2026-08-03 12:35:12 +02:00

js_eval.rs

fix: retry js eval up to 3 times on timeout from slow DB (#7890)

2026-02-10 17:50:41 +00:00

lib.rs

feat: improve duckdb isolation (#10565)

2026-08-06 12:01:12 +02:00

memory_common.rs

refactor: move ai sse plumbing to windmill-ai (#9059)

2026-05-11 10:01:45 +00:00

memory_oss.rs

refactor: move ai sse plumbing to windmill-ai (#9059)

2026-05-11 10:01:45 +00:00

mssql_executor.rs

fix: log the db auth mode used and hint at the ms_entraid sentinel (#10508)

2026-08-04 13:16:24 +00:00

mysql_executor.rs

fix: heartbeat job ping during s3object materialization in SQL executors (#10152)

2026-07-16 15:48:11 +02:00

nu_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

oracledb_executor.rs

fix: track dollar-quoted strings in SQL block splitter (#8891)

2026-04-21 17:07:01 +00:00

otel_oss.rs

feat(otel): connect jobs to the inbound distributed trace (#9456)

2026-06-05 16:50:07 +00:00

otel_tracing_proxy_oss.rs

feat: add otlp/http internal collector (#7690)

2026-01-26 19:29:09 +00:00

pg_executor.rs

fix: bound postgres result collection so an oversized result cannot OOM the worker (#10644)

2026-08-12 09:11:56 +02:00

pg_raw_output.rs

fix: bound postgres result collection so an oversized result cannot OOM the worker (#10644)

2026-08-12 09:11:56 +02:00

php_executor.rs

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

prepare_deps.rs

feat(debugger): install debug session deps from the instance registry settings (#10550)

2026-08-05 20:16:38 +00:00

pwsh_executor.rs

fix(security): sanitize dependency names & connection strings against command/SQL injection (#9590)

2026-06-15 19:06:00 +02:00

python_executor.rs

wip: run workflow-as-code rounds on a bun dedicated worker

2026-08-22 08:10:51 +00:00

python_versions.rs

perf: cache resolved python interpreter path across worker restarts (#10701)

2026-08-14 14:58:35 +02:00

r_executor.rs

fix: pass Windows system env vars to R renv install subprocess (#10313)

2026-07-24 18:33:42 +02:00

result_processor.rs

fix: git sync missed metadata-only deploys, deploy check missed job link (#10662)

2026-08-13 11:02:59 +00:00

ruby_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

rust_executor.rs

feat: auto-build binaries to object storage on deployment (#10673)

2026-08-13 07:50:28 +02:00

sanitized_sql_params.rs

feat: add support for contextual vars in SQL (#6791)

2025-10-10 18:52:24 +00:00

schema.rs

fix: parse Python datetime.datetime and datetime.date type annotations (#7856)

2026-02-09 15:17:26 +00:00

snowflake_executor.rs

feat: make bigquery and snowflake script languages available in CE (#10324)

2026-07-25 12:07:28 +02:00

sql_s3_input.rs

fix: heartbeat job ping during s3object materialization in SQL executors (#10152)

2026-07-16 15:48:11 +02:00

sql_utils.rs

Nit better test and comment (#8030)

2026-02-20 12:06:05 +00:00

ssh_executor_oss.rs

feat(worker): #ssh directive to run a bash script on a remote SSH host (#9479)

2026-06-10 15:14:37 +00:00

universal_pkg_installer.rs

fix: locate coursier artifacts by coordinate so private maven registries work (#10501)

2026-08-04 11:38:33 +00:00

volume_oss.rs

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058)

2026-03-05 06:19:51 +00:00

wac_executor.rs

wip: run workflow-as-code rounds on a bun dedicated worker

2026-08-22 08:10:51 +00:00

worker_flow.rs

fix(security): a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124)

2026-08-19 22:33:46 +02:00

worker_lockfiles.rs

fix: resolve a script path to its new version as soon as the lock lands (#10794)

2026-08-21 11:54:51 +02:00

worker_utils.rs

perf: resolve the worker external IP in the background (#10697)

2026-08-14 14:27:21 +02:00

worker.rs

perf: back off the interactive worker shell under EXIT_AFTER_N_JOBS (#10700)

2026-08-14 14:28:30 +02:00