hugocasaandClaude Opus 5 8e95bfe615 fix: scope a fork's cloned app policy and custom path to its creator (#10589) ...

* fix: scope cloned app policy and custom path to the fork's creator

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* refactor: share the app custom-path scoping rule across its call sites

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs: tighten the cloned-app-policy comments

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* docs: correct the execution_mode and custom-path scoping rationale

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-07 12:37:04 +02:00

..

docs

feat: self-host docs search for chat, mcp, cli; drop inkeep (#9772)

2026-06-25 16:32:07 +02:00

mcp

feat(mcp): serve the 2026-07-28 spec alongside the legacy protocol (#10535)

2026-08-05 13:52:09 +02:00

native_triggers

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

triggers

feat: add public sharing option for job pages (#10573)

2026-08-06 17:18:29 +02:00

ai_skills.rs

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

ai.rs

fix: pin validated DNS address to close SSRF DNS-rebinding TOCTOU (#10303)

2026-07-24 15:04:40 +02:00

approvals.rs

feat: show groups and notes in flow status viewer (#8535)

2026-03-26 08:18:01 +00:00

apps_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

apps_raw_bundle.rs

feat: deploy a raw app from its sources, bundling them on a worker (#10500)

2026-08-04 14:29:13 +00:00

apps_raw_bundler.ts

feat: deploy a raw app from its sources, bundling them on a worker (#10500)

2026-08-04 14:29:13 +00:00

apps.rs

fix: scope a fork's cloned app policy and custom path to its creator (#10589)

2026-08-07 12:37:04 +02:00

args.rs

feat(s3): replace CE 50MB upload cap with 10GiB workspace storage quota (#9874)

2026-07-03 00:57:19 +02:00

audit.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

auth.rs

feat: make WM_END_USER_EMAIL display users from different workspaces (#8208)

2026-03-04 11:50:59 +00:00

azure_proxy_oss.rs

feat: DuckDB support write to Azure (#7618)

2026-01-20 12:52:58 +00:00

capture.rs

feat(triggers): add AMQP (RabbitMQ) trigger via lapin (#10230)

2026-07-21 15:10:29 +00:00

concurrency_groups.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

db_health.rs

feat: add per-workspace job-retention override (#10050)

2026-07-11 23:46:34 +02:00

db.rs

feat: list draft-only runnables on the homepage again (#10361)

2026-07-27 18:17:32 +02:00

dbt.rs

feat(dbt): reach any dbt adapter through a dbt_profile resource, and constrain the warehouse picker (#10525)

2026-08-05 00:34:26 +02:00

drafts.rs

fix(jobs): sanitize NUL in completed job result before jsonb insert (#10274)

2026-07-23 10:39:38 +02:00

ee_oss.rs

offline (URL-bound) license keys (#9089)

2026-05-11 22:09:21 +00:00

embeddings.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

favorite.rs

feat: favorite datatable and ducklake tables + asset page nits (#7795)

2026-02-04 18:48:51 +00:00

flows.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

folder_history.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

folders.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

git_sync_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

granular_acls.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

group_history.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

groups.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

health.rs

fix(health): detect read-only replica via pg_is_in_recovery() (#9722)

2026-06-23 09:37:29 +02:00

hub_publish.rs

chore: remove the unreachable hub raw-app embed proxy (#10332)

2026-07-26 14:07:55 +02:00

indexer_oss.rs

feat: move index management out of /srch/, add storage size reporting (#8169)

2026-03-03 16:46:10 +00:00

integration.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

internal_db.rs

fix: Move database manager SQL queries to backend (#8306)

2026-03-24 09:45:37 +00:00

job_helpers_oss.rs

feat: add explore button for object storage resources (#10306)

2026-07-24 18:41:09 +02:00

job_metrics.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

jobs_export.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

jobs.rs

feat: add public sharing option for job pages (#10573)

2026-08-06 17:18:29 +02:00

lib.rs

feat(mcp): serve the 2026-07-28 spec alongside the legacy protocol (#10535)

2026-08-05 13:52:09 +02:00

live_migrations.rs

fix(datatable): provision the replication user on managed postgres (#10375)

2026-07-28 12:17:09 +02:00

mcp_oauth_oss.rs

feat(aiagent): handle oauth for mcp tools (#7564)

2026-01-14 12:06:40 +00:00

mcp_tools.rs

fix(mcp): resolve MCP resource token via caller RLS + SSRF-guard url (#9428)

2026-06-03 09:00:43 +00:00

oauth2_oss.rs

feat(cli): non-interactive Slack connect/disconnect + sync round-trip fixes (#8935)

2026-04-24 17:14:08 +00:00

offboarding.rs

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

oidc_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

path_autocomplete.rs

feat: Db-backed user drafts (#9351)

2026-06-15 10:23:16 +02:00

public_app_layer.rs

feat(aiagent): handle oauth for mcp tools (#7564)

2026-01-14 12:06:40 +00:00

public_app_rate_limit.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

raw_apps.rs

feat: folder-level label inheritance for scripts, flows and jobs (#9524)

2026-06-11 07:49:02 +00:00

resources.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

runnables.rs

feat: list draft-only runnables on the homepage again (#10361)

2026-07-27 18:17:32 +02:00

s3_log_batching.rs

fix: debounce S3 proxy logs (#8694)

2026-04-03 13:46:09 +00:00

s3_proxy_oss.rs

fix s3 proxy dev build (#6535)

2025-09-04 22:05:22 +00:00

saml_oss.rs

SSRF protection for SAML and MCP OAuth endpoints (#8473)

2026-03-22 17:18:22 +00:00

scim_oss.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

scripts.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

secret_backend_ext.rs

fix: decrypt secret variables via external backend in common resolvers (#9784)

2026-06-25 12:05:21 +02:00

service_logs.rs

fix(api): authorize and harden log-file reading endpoints (#9368)

2026-05-29 04:50:31 +00:00

slack_approvals.rs

fix: authenticate slack callback payload with per-workspace hmac (#9461)

2026-06-06 08:02:20 +00:00

smtp_server_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

static_assets.rs

fix(apps): stop cross-origin isolating the raw app viewer (#10370)

2026-07-28 10:41:08 +02:00

storage_list_oss.rs

feat: lazily expand s3 explorer folders one level at a time (#10420)

2026-08-04 01:41:06 +02:00

stripe_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_approvals_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_cache_oss.rs

fix: teams api improvements (#6643)

2025-09-19 17:43:16 +00:00

teams_oss.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

token.rs

fix: add apps:run to the token scope picker and confine path-scoped app tokens (#10428)

2026-07-31 11:38:05 +02:00

tracing_init.rs

fix: keep uri and method on request logs under RUST_LOG=error (#10462)

2026-08-03 11:23:46 +02:00

trash.rs

feat(triggers): add AMQP (RabbitMQ) trigger via lapin (#10230)

2026-07-21 15:10:29 +00:00

users_oss.rs

handle OSS onboarding error gracefully (#8459)

2026-03-20 12:37:05 +00:00

users.rs

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

utils.rs

feat: multiple homepage sort orders via an efficient merged runnables endpoint (#10297)

2026-07-24 23:16:10 +02:00

variables.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

volumes_oss.rs

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058)

2026-03-05 06:19:51 +00:00

webhook_util.rs

refactor: extract windmill-dep-map crate for parallel api/worker compilation (#7846)

2026-02-08 00:39:56 +00:00

workspace_dependencies.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

workspace_shared_ui.rs

feat: workspace-shared ui/ folder reusable across raw apps (#8974)

2026-04-29 18:54:55 +00:00

workspaces_export.rs

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

workspaces.rs

feat(cli): non-interactive Slack connect/disconnect + sync round-trip fixes (#8935)

2026-04-24 17:14:08 +00:00