mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-21 16:03:26 +00:00

Files

T

Alexander PetricandClaude Opus 4.8 4685792e08 address review: derive end-user label, guard mint on step staleness, trim comment

- Derive the token label the same way as create_token
  (ephemeral-script-end-user-{created_by} when permissioned_as differs from
  created_by) so run-on-behalf-of flows keep the end-user override that
  username_override_from_label relies on, instead of hardcoding "ephemeral-script".
- Only mint the fresh token when the finished step could actually have expired it
  (duration >= SCRIPT_TOKEN_EXPIRY/2), so the common short-step path keeps the
  pull-time token and avoids an extra get_job_perms query per completion.
- Add warn_after_seconds(5) on the mint, matching create_token.
- Trim the comment to the durable invariant and drop the internal ticket id
  (comment + log line) per AGENTS.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-30 16:55:29 +02:00

nsjail

fix(worker): mount /dev/shm as tmpfs in the Docker v2 nsjail sandbox (#10240 )

2026-07-21 15:49:29 +00:00

src

address review: derive end-user label, guard mint on step staleness, trim comment

2026-07-30 16:55:29 +02:00

build.rs

refactor: isolate deno_core into windmill-runtime-nativets subcrate (#7848 )

2026-02-08 09:16:37 +00:00

Cargo.toml

feat: make bigquery and snowflake script languages available in CE (#10324 )