Ruben FiszelandClaude Opus 5.5 6646c86351 fix: run bun and npm installs under nsjail sandboxing (#11845) ...

* fix: pass --save-text-lockfile only to bun installs

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: run bun and npm installs under nsjail sandboxing

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: mount npmrc cafile paths given with ${VAR} or ~ in the install jail

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* perf: keep bun's cache hardlinks for jailed installs

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: harden the bun install staging dir and npm-mode jail mounts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: reach the bun staging dir only through no-follow descriptors

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: create bun staging files new and check outputs after the move

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* feat: add DISABLE_BUN_INSTALL_SANDBOX to run bun installs unjailed

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-17 09:59:33 +00:00

..

runnable_settings

perf: eliminate dual-connection DB pool contention across worker, queue, and api (#9798)

2026-06-25 21:33:17 +00:00

secret_backend

fix: decrypt secret variables via external backend in common resolvers (#9784)

2026-06-25 12:05:21 +02:00

agent_workers.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

apps.rs

fix: relock apps in place so imported script changes reach them (#11789)

2026-10-15 16:27:41 +02:00

assets.rs

feat: let // materialize declare a dbt:// warehouse-relation write (#10978)

2026-09-07 17:38:07 +02:00

audit.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

auth.rs

feat: read data as the job's identity, viewer is opt-in per runnable (#11744)

2026-10-14 00:05:52 +02:00

azure_workload_identity.rs

fix: log the db auth mode used and hint at the ms_entraid sentinel (#10508)

2026-08-04 13:16:24 +00:00

bench.rs

perf: drop v2_job side-table ON DELETE CASCADE FKs to speed retention deletes (#9786)

2026-06-25 13:52:30 +00:00

cache.rs

fix: stop running deleted script versions from worker caches (#11456)

2026-10-01 13:37:00 +02:00

client.rs

fix: bound s3 ai attachment downloads before encoding (#11534)

2026-10-05 14:50:03 +00:00

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

datatable_roles_oss.rs

feat: add the viewer's roles to unnamed data table connections (#11709)

2026-10-13 09:01:21 +00:00

datatable_roles.rs

feat: add the viewer's roles to unnamed data table connections (#11709)

2026-10-13 09:01:21 +00:00

db.rs

fix: encrypt ai session backups with aes-256-gcm (#11734)

2026-10-13 23:12:48 +02:00

dbt_manifest.rs

feat: ingest dbt column lineage and real column schemas from the engine's parquet index (#10977)

2026-09-08 09:58:38 +02:00

deploy_origin.rs

feat(fork): merge a fork deletion on evidence, not on the counters (#10484)

2026-08-04 00:50:27 +02:00

deployment_requests_oss.rs

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

ee_oss.rs

feat: let operators compose flows when the workspace grants the right (#11228)

2026-09-30 18:09:14 +02:00

email_oss.rs

fix(smtp): explain why a test email failed instead of 'deadline has elapsed' (#10620)

2026-08-10 21:21:14 +02:00

error.rs

feat: workspace settings as one document, applied server-side (#11740)

2026-10-14 12:35:08 +00:00

external_instance_pg_oss.rs

feat: external instance cluster for data tables and Ducklake catalogs (#11197)

2026-09-29 14:45:47 +02:00

external_instance_pg.rs

feat: audit declarative instance config writes (#11684)

2026-10-12 16:37:05 +02:00

external_ip.rs

perf: resolve the worker external IP in the background (#10697)

2026-08-14 14:27:21 +02:00

feature_usage_oss.rs

feat(telemetry): extend feature-usage tracking beyond AI features (#10681)

2026-08-14 18:50:38 +02:00

flow_conversations.rs

feat: agents run on behalf of their deployer (#11430)

2026-10-15 19:31:21 +02:00

flow_status.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

flows.rs

feat: add an AI decision flow step (TypeSafe's Jev, Cloudflare's Clef) (#11474)

2026-10-05 14:23:34 +00:00

folders.rs

refactor: make the app policy's principal the authority for its identity (#10440)

2026-09-12 09:10:15 +02:00

fork_storage.rs

feat: isolate fork object storage under a per-fork prefix (#11829)

2026-10-16 22:21:38 +02:00

git_sync_oss.rs

feat: bring gitlab repositories to parity for git sync (#10938)

2026-09-08 11:54:43 +02:00

global_settings.rs

fix: run bun and npm installs under nsjail sandboxing (#11845)

2026-10-17 09:59:33 +00:00

guest_jwt.rs

chore(security): bump jsonwebtoken to 10 (#11194)

2026-09-21 14:36:03 +00:00

hub_resource_types.rs

feat: replace the hub_sync script with an opt-in daily server sync (#11624)

2026-10-09 18:32:05 +02:00

indexer.rs

feat: make the service log retention period an instance setting (#10889)

2026-08-29 19:39:14 +02:00

instance_config.rs

[ee] feat: add a toggle to not isolate forks of non-dev workspaces (#11830)

2026-10-16 20:32:59 +02:00

item_digest.rs

feat: add trigger, tag, run-as and digest claims to job OIDC tokens (#11481)

2026-10-02 19:02:17 +02:00

job_metrics.rs

perf: optimize job_stats storage for timestamps and zero-memory jobs (#8289)

2026-03-10 04:59:56 +00:00

job_provenance.rs

feat: add trigger, tag, run-as and digest claims to job OIDC tokens (#11481)

2026-10-02 19:02:17 +02:00

jobs.rs

fix: give inline script runs their own job dir (#11822)

2026-10-16 17:52:28 +02:00

jwt.rs

chore(security): bump jsonwebtoken to 10 (#11194)

2026-09-21 14:36:03 +00:00

lib.rs

feat: isolate fork object storage under a per-fork prefix (#11829)

2026-10-16 22:21:38 +02:00

lockfiles.rs

fix: dep jobs improvements (#7081)

2025-11-07 11:04:53 +00:00

log_context.rs

[ee] feat: job cancel signals (oidc refusal, agent 5s ping, job.canceled) (#11592)

2026-10-07 16:44:57 +00:00

login_rate_limit.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

materialization.rs

feat(pipelines): fork data environments for ducklake materialization (dev data) (#9915)

2026-07-05 09:58:06 +02:00

min_version.rs

feat: accept Ed25519-signed license keys alongside RSA (#11810)

2026-10-16 10:16:22 +02:00

more_serde.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

notify_events.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

oauth2.rs

feat: one Entra app for the Teams bot and ms_teams Graph connect (#11718)

2026-10-16 19:00:52 +00:00

oidc_oss.rs

feat: count OIDC signatures and reuse server-side tokens (#11556)

2026-10-06 15:34:20 +02:00

otel_oss.rs

feat: audit declarative instance config writes (#11684)

2026-10-12 16:37:05 +02:00

partition_oss.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

per_minute_counter.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

pipeline_advanced_oss.rs

feat(pipeline): write-audit-publish for materialization data tests (#9911)

2026-07-04 17:19:49 +02:00

query_builders.rs

feat: rework the db manager: native grid, tabs, sql editor, joined columns (#11340)

2026-09-25 15:58:25 +02:00

queue_metrics.rs

feat: live queue status per tag and bounded queue metric charts (#11067)

2026-09-10 18:40:54 +00:00

queue.rs

feat: live queue status per tag and bounded queue metric charts (#11067)

2026-09-10 18:40:54 +00:00

result_stream.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

runnable_job_stats.rs

feat: per-script resource rollup and heaviest scripts table (#11631)

2026-10-09 15:23:18 +02:00

runnables.rs

feat: refresh MCP tools when scripts and flows change (#11337)

2026-09-25 09:38:41 +00:00

runtime_assets.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

schedule.rs

refactor: extract windmill-types crate from windmill-common (#7851)

2026-02-08 14:15:07 +00:00

schema_contracts.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

schema.rs

feat: WM_TESTED_RUNNABLE env var + wildcards in test: annotation (#8926)

2026-04-24 12:52:25 +00:00

scopes.rs

feat: restricted job tokens per script and flow (#11484)

2026-10-03 09:33:44 +02:00

scripts.rs

feat: restricted job tokens per script and flow (#11484)

2026-10-03 09:33:44 +02:00

sensitive_log_masks.rs

fix: register the job token with the sensitive log masking system (#10943)

2026-09-18 15:15:02 +02:00

server.rs

fix: show the email handler's SMTP status to non-superadmin admins (#11745)

2026-10-13 22:51:48 +02:00

ssrf.rs

fix: let ALLOW_PRIVATE_AI_BASE_URLS name the private hosts it allows (#11841)

2026-10-17 08:36:22 +00:00

stats_oss.rs

improve analytics (#8418)

2026-03-17 20:14:02 +00:00

stream.rs

fix: add size limit to indexer queries on jobs table to avoid oom (#6293)

2025-07-29 18:27:59 +00:00

teams_oss.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

tracing_init.rs

feat: audit declarative instance config writes (#11684)

2026-10-12 16:37:05 +02:00

trashbin.rs

feat: add trashbin system for soft-deleting items (#8519)

2026-03-26 09:51:34 +00:00

trigger_history.rs

feat: add trigger_history table with source tracking (#10696)

2026-08-14 17:57:11 +02:00

triggers.rs

fix: keep native triggers attached when a runnable is renamed (#10432)

2026-07-31 23:44:25 +02:00

user_drafts.rs

feat: let operators with manage rights save schedule and trigger drafts (#11646)

2026-10-14 15:50:31 +02:00

usernames.rs

fix: skip instance group members that are not email addresses (#11128)

2026-09-15 09:45:10 +02:00

users.rs

fix: skip instance group members that are not email addresses (#11128)

2026-09-15 09:45:10 +02:00

utils.rs

feat: encrypt workspace secrets with AES-256-GCM (#11678)

2026-10-13 08:27:13 +02:00

variables.rs

feat: agents run on behalf of their deployer (#11430)

2026-10-15 19:31:21 +02:00

wac_failure_corpus.json

test(wac): pin the failure record with one corpus both SDKs read (#10385)

2026-07-28 16:54:40 +02:00

wac.rs

fix: wake a WAC parent from every path that completes its child (#11119)

2026-09-14 18:51:21 +00:00

webhook.rs

fix: apply SSRF validation to workspace webhook URLs (#11285)

2026-09-22 08:14:12 +00:00

worker_group_job_stats.rs

fix nits worker group stats

2025-09-11 09:19:09 +00:00

worker.rs

feat: add a no_network annotation for sandboxed jobs (#11844)

2026-10-17 09:25:55 +00:00

workspace_crypt.rs

feat: workspace settings as one document, applied server-side (#11740)

2026-10-14 12:35:08 +00:00

workspace_dependencies.rs

chore: bump go to 1.27.1 in the worker and extra images (#11537)

2026-10-05 14:47:35 +00:00

workspaces.rs

feat: add a Require isolated forks protection rule (#11834)

2026-10-16 22:40:21 +02:00