3 people 99e96d3f78 fix: let instances withhold signing secrets from the settings API (#11483) ...

* fix: never return the instance signing secrets from the settings API

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: tell wmill instance get-config users that jwt_secret is not exported

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* chore: point ee-repo-ref at the oidc signing key fix

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: block rsa_keys from agent workers and keep get-config stdout pure yaml

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: keep server secrets in exports by default behind EXPORT_SERVER_SECRETS

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* chore: update ee-repo-ref to 43b2ce8866a393b2666b17647ddb1466afc70bb1

This commit updates the EE repository reference after PR #842 was merged in windmill-ee-private.

Previous ee-repo-ref: 3a0d0c3f45eeb9f5fe8d50ce3798239aa9101a22

New ee-repo-ref: 43b2ce8866a393b2666b17647ddb1466afc70bb1

Automated by sync-ee-ref workflow.

* fix: withhold server secrets on any non-true EXPORT_SERVER_SECRETS value

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-10-02 19:25:04 +02:00

..

audit_logs_s3_backfill.rs

fix(audit): don't read pg_authid from an elevated context in S3 export migration (#9832)

2026-06-28 14:21:38 +02:00

audit_logs_s3.rs

perf(audit): re-anchor S3 audit export on enable + opt-in backfill (#9818)

2026-06-26 21:37:33 +02:00

background_task.rs

fix: log cleanup scans S3 orphans and works cross-server (#8729)

2026-04-05 16:56:46 +00:00

datatable_roles_oss.rs

feat: put a data table's connection under Postgres roles (#11020)

2026-09-18 13:56:41 +02:00

ee_oss.rs

offline (URL-bound) license keys (#9089)

2026-05-11 22:09:21 +00:00

lib.rs

fix: let instances withhold signing secrets from the settings API (#11483)

2026-10-02 19:25:04 +02:00

log_cleanup.rs

feat: make the service log retention period an instance setting (#10889)

2026-08-29 19:39:14 +02:00

storage_usage.rs

fix: log cleanup scans S3 orphans and works cross-server (#8729)

2026-04-05 16:56:46 +00:00