Guilhem LemouelandClaude Opus 5.5 90540dccdd fix: check fork rights first and gate edit in fork on the forked workspace's role ...

- create_workspace_fork runs check_can_fork before the stale fork-state purges.
- The fork form's default base falls back to a base the role may fork.
- Script and flow rows show Edit in fork when the role hides the direct editor.
- Run details read the run workspace's capabilities for Edit in fork.
- Document that a dev workspace with copy_members keeps the creator's parent role.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-23 05:33:33 -07:00

..

agent-worker-e2e.md

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

ai-agent-evals.md

feat: AI agent evals: datasets, scored runs and comparison (#10633)

2026-08-24 11:08:56 +02:00

ai-session-backups.md

feat: delete a browser's copy of an AI session past its workspace retention (#11156)

2026-09-16 09:57:43 +02:00

app-mode-ai-chat-review.md

docs: remove stale planning notes (#9342)

2026-05-27 07:19:51 +00:00

app-policy-email-removal.md

refactor: make the app policy's principal the authority for its identity (#10440)

2026-09-12 09:10:15 +02:00

auth-surface.md

feat: job_token_scopes OIDC claim (#11551)

2026-10-06 15:32:12 +02:00

datatable-viewer-roles.md

feat: read data as the job's identity, viewer is opt-in per runnable (#11744)

2026-10-14 00:05:52 +02:00

dbt-runtime.md

feat: make snowflake_oauth work as a dbt warehouse on every engine (#11095)

2026-09-12 00:00:17 +02:00

docker-security.md

chore: retire the standalone lsp and multiplayer images from examples, drop lsp/Dockerfile (#11341)

2026-09-25 17:13:06 +02:00

docker-v2-runtime.md

fix: return result.json and stdout results from sandboxed containers (#10460)

2026-08-03 12:35:12 +02:00

duckdb-execution.md

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780)

2026-10-15 16:49:50 +02:00

ducklake-materialization.md

feat: let // materialize declare a dbt:// warehouse-relation write (#10978)

2026-09-07 17:38:07 +02:00

enterprise.md

feat(pipeline): write-audit-publish for materialization data tests (#9911)

2026-07-04 17:19:49 +02:00

external-instance-datatables.md

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780)

2026-10-15 16:49:50 +02:00

feature-telemetry.md

feat: gate forking behind a role capability

2026-10-22 06:57:11 -07:00

fork-object-storage.md

feat: add a Require isolated forks protection rule (#11834)

2026-10-16 22:40:21 +02:00

fork-triggers.md

fix(forks): keep trigger/schedule operational state owned by the parent - WIN-2019 (#9476)

2026-06-08 16:18:12 +00:00

frontend-import-cycles.md

chore: re-land vite 8.2.0 with the chunk cycle that broke it (#10472)

2026-08-03 18:09:06 +02:00

git-repo-viewer-hub-script.md

fix: show symlinked files in the git repo viewer (#11081)

2026-09-11 09:25:24 +02:00

git-sync-github-app-permissions.md

feat: automatic git-to-windmill sync (polling, webhooks, in-app PRs + checks) (#9552)

2026-07-16 15:55:44 +02:00

git-sync-gitlab-setup.md

feat: bring gitlab repositories to parity for git sync (#10938)

2026-09-08 11:54:43 +02:00

git-sync-pull-design.md

fix(git-sync): run auto-pull as the admin who enabled it (#11121)

2026-09-15 10:34:57 +02:00

npm-proxy-storage.md

feat(npm-proxy): keep package files on disk and in the object store (#10638)

2026-08-11 16:40:53 +00:00

operator-builder-rights.md

feat: chat with a saved agent from a raw app through an agent runnable (#11921)

2026-10-22 21:01:09 +02:00

operator-write-rights.md

fix: check fork rights first and gate edit in fork on the forked workspace's role

2026-10-23 05:33:33 -07:00

pipeline-env-isolation.md

feat(pipelines): fork data environments for ducklake materialization (dev data) (#9915)

2026-07-05 09:58:06 +02:00

pipeline-local-dev.md

perf: load public raw apps without the loading screen (#11608)

2026-10-08 09:15:01 +02:00

pipeline-metrics-layer.md

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

pipelines-vs-dbt.md

fix(pipelines): dedup guard for keyed merge + deploy-time SCD2 validation (#9936)

2026-07-05 22:24:41 +02:00

reusable-ai-agents.md

feat(ai-agent): add compaction memory that summarizes older context (#10928)

2026-09-29 19:01:53 +02:00

validation.md

fix: patch sqlx so a cancelled BEGIN cannot poison a pooled connection (#10823)

2026-08-24 22:29:44 +02:00

wac-sdk-e2e.md

feat: retry a workflow-as-code task from its task options (#11013)

2026-09-08 11:37:56 +02:00

workspace-roles.md

fix: keep fork out of is_restricted and read it from the caller's role

2026-10-22 07:36:36 -07:00