mirror of https://github.com/windmill-labs/windmill.git synced 2026-09-09 08:03:50 +00:00

Files

T

Ruben Fiszel 22ec4da5f0 tighten security from vuln report (#9264 )

* fix: harden app preview S3, WM_ env reservation, set_progress scoping

* fixup: minimize #1 fix to single SQL-level filter

* fixup: apply WM_* filter to HTTP agent-worker branch + normalize app S3 scope path

2026-05-20 14:02:50 +00:00

.cargo

chore: add mold linker config for aarch64-unknown-linux-gnu

2026-02-08 12:55:51 +00:00

.sqlx

tighten security from vuln report (#9264 )

2026-05-20 14:02:50 +00:00

.vscode

…

api

…

custom_migrations

…

generate_mcp_endpoints_tools

fix: include endpoint descriptions in mcp tools (#8925 )

2026-04-23 16:21:15 +00:00

migrations

feat: export audit logs to a dedicated object store folder (#9207 )

2026-05-19 14:43:54 +00:00

parsers

chore(main): release 1.704.1 (#9226 )

2026-05-19 05:46:13 +00:00

src

feat(nsjail): make tmpfs size configurable via instance setting (#9261 )

2026-05-20 13:24:49 +00:00

tests

fix: enforce auth guards on app component preview execution (#9235 )

2026-05-19 17:40:55 +00:00

windmill-ai

refactor: move anthropic proxy building (#9238 )

2026-05-19 14:23:31 +00:00

windmill-alerting

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api

tighten security from vuln report (#9264 )

2026-05-20 14:02:50 +00:00

windmill-api-agent-workers

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058 )

2026-03-05 06:19:51 +00:00

windmill-api-assets

feat: Broad filters for search (#8112 )

2026-02-26 14:03:46 +00:00

windmill-api-auth

feat: read-only flag on API tokens (#9144 )

2026-05-13 15:26:21 +00:00

windmill-api-client

feat: add scheduled job deletion with configurable retention period (#8753 )

2026-04-08 04:15:28 +00:00

windmill-api-configs

refactor: replace SELECT * with explicit column lists (#9010 )

2026-05-04 08:39:45 +00:00

windmill-api-debug

fix: derive debug signing key deterministically from JWT_SECRET (#8917 )

2026-04-22 20:05:08 +00:00

windmill-api-embeddings

refactor: replace SELECT * with explicit column lists (#9010 )

2026-05-04 08:39:45 +00:00

windmill-api-flow-conversations

fix: correct flow conversation pagination (#8919 )

2026-04-23 16:29:29 +00:00

windmill-api-flows

fix: include labels when loading flow with draft for editing (#8981 )

2026-04-29 21:21:14 +00:00

windmill-api-groups

feat(git-sync): sync extra_perms for flows/scripts/apps (#9162 )

2026-05-14 08:16:24 +00:00

windmill-api-inputs

fix: hide _ENTRYPOINT_OVERRIDE jobs from script/flow history panel (#9088 )

2026-05-08 16:56:42 +00:00

windmill-api-integration-tests

fix: advance postgres replication slot lsn via periodic standby status updates (#9227 )

2026-05-19 05:44:13 +00:00

windmill-api-jobs

tighten security from vuln report (#9264 )

2026-05-20 14:02:50 +00:00

windmill-api-npm-proxy

chore: upgrade axum 0.7 to 0.8 (#8539 )

2026-03-27 09:55:04 +00:00

windmill-api-openapi

feat: add typed request body to OpenAPI spec generation (#8481 )

2026-03-24 09:29:06 +00:00

windmill-api-schedule

feat(forks): handle triggers and schedules in wmill workspace merge (#9023 )

2026-05-07 13:29:10 +00:00

windmill-api-scripts

fix: reset parent_hash in auto_parent when all versions at path are archived (#9172 )

2026-05-16 07:43:35 +00:00

windmill-api-settings

feat: export audit logs to a dedicated object store folder (#9207 )

2026-05-19 14:43:54 +00:00

windmill-api-sse

refactor: extract windmill-api into subcrates for parallel compilation (#7845 )

2026-02-07 22:12:55 +00:00

windmill-api-users

feat: include service accounts in instance settings users list (#9157 )

2026-05-14 06:46:48 +00:00

windmill-api-workers

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815 )

2026-04-14 00:04:10 +00:00

windmill-api-workspaces

offline (URL-bound) license keys (#9089 )

2026-05-11 22:09:21 +00:00

windmill-audit

…

windmill-autoscaling

…

windmill-common

tighten security from vuln report (#9264 )

2026-05-20 14:02:50 +00:00

windmill-dep-map

fix: prevent flow-dep job stalls under row-lock contention (#8952 )

2026-04-27 16:03:57 +00:00

windmill-duckdb-ffi-internal

fix: Update duckdb to 1.5.2 (Ducklake 1.0.0) (#8848 )

2026-04-16 06:23:57 -07:00

windmill-git-sync

feat: add Azure Event Grid triggers (#8888 )

2026-04-23 16:30:18 +00:00

windmill-indexer

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

windmill-jseval

feat: add flow_user_state(key) to QuickJS input transform sandbox (WIN-1947) (#9093 )

2026-05-19 13:49:57 +00:00

windmill-macros

…

windmill-mcp

fix(mcp): sanitize and enrich nested resource schemas (#9158 )

2026-05-14 06:54:32 +00:00

windmill-native-triggers

feat: read-only flag on API tokens (#9144 )

2026-05-13 15:26:21 +00:00

windmill-oauth

feat: migrate slack OAuth to v2 (#8859 )

2026-04-17 12:16:09 +00:00

windmill-object-store

feat: support S3Object input args in native SQL scripts (#8954 )

2026-04-28 20:01:06 +00:00

windmill-operator

refactor: switch operator from CRD to ConfigMap (#7972 )

2026-02-17 00:06:56 +00:00

windmill-queue

feat: parse windmill_failure field to tag run as failure (#9073 )

2026-05-08 15:57:34 +00:00

windmill-runtime-nativets

test(nativets): cover deno_telemetry init contract + http trace export E2E (#9165 )

2026-05-14 10:54:19 +00:00

windmill-store

test: provision migrated db for mutual-resource recursion test (WIN-1958) (#9247 )

2026-05-19 16:52:08 +00:00

windmill-test-utils

fix: advance postgres replication slot lsn via periodic standby status updates (#9227 )

2026-05-19 05:44:13 +00:00

windmill-trigger

fix: handle singlestepflow zombies and stop filtering them from runs page (#9055 )

2026-05-07 08:00:38 +00:00

windmill-trigger-azure

feat: add Azure Event Grid triggers (#8888 )

2026-04-23 16:30:18 +00:00

windmill-trigger-email

chore: upgrade axum 0.7 to 0.8 (#8539 )

2026-03-27 09:55:04 +00:00

windmill-trigger-gcp

nit tests

2026-05-01 20:52:47 +00:00

windmill-trigger-http

docs: add SAFETY comments to all dynamic SQL call sites (#9009 )

2026-05-03 07:14:14 +00:00

windmill-trigger-kafka

nit tests

2026-05-01 20:52:47 +00:00

windmill-trigger-mqtt

chore: upgrade axum 0.7 to 0.8 (#8539 )

2026-03-27 09:55:04 +00:00

windmill-trigger-nats

nit tests

2026-05-01 20:52:47 +00:00

windmill-trigger-postgres

fix: advance postgres replication slot lsn via periodic standby status updates (#9227 )

2026-05-19 05:44:13 +00:00

windmill-trigger-sqs

chore: upgrade axum 0.7 to 0.8 (#8539 )

2026-03-27 09:55:04 +00:00

windmill-trigger-websocket

feat: add application-level heartbeat support for websocket triggers (#8686 )

2026-04-03 11:31:08 +00:00

windmill-types

fix: validate entrypoint override to prevent worker code injection (GHSA-wxjq-w5pj-jqhx) (#9204 )

2026-05-18 09:01:05 +00:00

windmill-worker

feat(nsjail): make tmpfs size configurable via instance setting (#9261 )

2026-05-20 13:24:49 +00:00

windmill-worker-volumes

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058 )

2026-03-05 06:19:51 +00:00

.devcontainer.json

…

.gitattributes

…

.gitignore

…

.ignore

…

build.rs

…

Cargo.lock

feat(snowflake): derive public key from private key when omitted (WIN-1959) (#9251 )

2026-05-20 06:48:10 +00:00

Cargo.toml

fix(frontend): open customer portal in popup synchronously to bypass Safari blocker (#9242 )

2026-05-19 15:26:32 +00:00

check_no_symlink.sh

…

CLAUDE.md

refactor: slim down claude instructions for lean context and fast iteration (#8136 )

2026-02-28 07:00:19 +00:00

ee-repo-ref.txt

fix(s3): sandbox stored XSS via download response headers (#9263 )

2026-05-20 13:59:39 +00:00

LICENSE

…

NOTICE

…

oauth_connect.json

oauth: add docusign provider (#9155 )

2026-05-18 22:32:49 +00:00

oauth_login.json

…

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

…

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

…

README.md

…

run_until_fail.sh

…

rustfmt.toml

…

substitute_ee_code.sh

nit: revert ee.rs in substitute_ee_code.sh (#8672 )

2026-04-02 10:16:28 +00:00

summarize_schema.py

internal: Improve instructions for claude (#7921 )

2026-02-12 07:19:44 +00:00

summarized_schema.txt

fix: correct flow conversation pagination (#8919 )

2026-04-23 16:29:29 +00:00

test_debounce_e2e.sh

fix: preserve debouncing settings for flows with preprocessors (#8043 )

2026-02-22 14:16:52 +00:00

test_wac_e2e.sh

feat: workflow-as-code (WAC) v2 (#8172 )

2026-03-09 19:39:24 +00:00

update_sqlx.sh

sqlx

2026-02-12 13:19:05 +00:00

write_latest_ee_ref.sh

fix: resolve schedule update deadlock (#8701 )

2026-04-03 17:44:10 +00:00

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise