Ruben FiszelandClaude Opus 5.5 b0c97b34ca fix: let ALLOW_PRIVATE_AI_BASE_URLS name the private hosts it allows (#11841) ...

* fix: refuse dot segments in AI proxy paths

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: refuse spaces, query and fragment markers in AI proxy paths

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: refuse percent signs in AI proxy paths

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: let ALLOW_PRIVATE_AI_BASE_URLS name the private hosts it allows

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: refuse loose and wildcard allowlist entries, judge embedded v4

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: never admit local-use NAT64 addresses through an allowlist net

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-17 08:36:22 +00:00

..

ai_evals

feat: restricted job tokens per script and flow (#11484)

2026-10-03 09:33:44 +02:00

docs

feat: self-host docs search for chat, mcp, cli; drop inkeep (#9772)

2026-06-25 16:32:07 +02:00

mcp

feat: name mcp script and flow tools after their last path segment (#11817)

2026-10-16 17:17:18 +02:00

native_triggers

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

triggers

feat: isolate fork object storage under a per-fork prefix (#11829)

2026-10-16 22:21:38 +02:00

agent_runs.rs

feat: agents run on behalf of their deployer (#11430)

2026-10-15 19:31:21 +02:00

ai_free_tier_oss.rs

feat: free AI tokens + home search/filter revamp (#10020)

2026-08-31 20:09:53 +02:00

ai_sessions.rs

fix: encrypt ai session backups with aes-256-gcm (#11734)

2026-10-13 23:12:48 +02:00

ai_shared_artifacts.rs

feat(ai-sessions): share session artifacts with the workspace by link (#11115)

2026-09-14 22:46:26 +02:00

ai_shared_sessions.rs

feat: share AI sessions read-only by link, optionally public (#11799)

2026-10-15 18:51:11 +02:00

ai.rs

fix: let ALLOW_PRIVATE_AI_BASE_URLS name the private hosts it allows (#11841)

2026-10-17 08:36:22 +00:00

approvals.rs

feat: add a minimal skin for the approval page and slack/teams (#11061)

2026-09-10 18:50:09 +00:00

apps_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

apps_raw_bundle.rs

feat: restricted job tokens per script and flow (#11484)

2026-10-03 09:33:44 +02:00

apps_raw_bundler.ts

refactor: remove vue as a full-code app framework (#11690)

2026-10-12 12:31:01 +02:00

apps_raw_policy.gen.js

feat: read data as the job's identity, viewer is opt-in per runnable (#11744)

2026-10-14 00:05:52 +02:00

apps.rs

feat: isolate fork object storage under a per-fork prefix (#11829)

2026-10-16 22:21:38 +02:00

args.rs

feat: isolate fork object storage under a per-fork prefix (#11829)

2026-10-16 22:21:38 +02:00

audit.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

auth.rs

feat: make WM_END_USER_EMAIL display users from different workspaces (#8208)

2026-03-04 11:50:59 +00:00

azure_proxy_oss.rs

feat: DuckDB support write to Azure (#7618)

2026-01-20 12:52:58 +00:00

capture.rs

fix: hold interpolated references and captures to the token path scopes (#11391)

2026-09-28 18:34:55 +02:00

concurrency_groups.rs

feat: restricted job tokens per script and flow (#11484)

2026-10-03 09:33:44 +02:00

csrf.rs

fix: refuse cross-site GET requests that run Hub scripts (#11054)

2026-09-10 13:14:37 +00:00

db_health.rs

fix(security): a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124)

2026-08-19 22:33:46 +02:00

db.rs

perf: drive schedule already-exists check from an indexed queue lookup (#11783)

2026-10-15 12:36:39 +00:00

dbt.rs

feat(dbt): reach any dbt adapter through a dbt_profile resource, and constrain the warehouse picker (#10525)

2026-08-05 00:34:26 +02:00

drafts.rs

feat: let operators save resource and variable drafts (#11736)

2026-10-15 16:43:11 +02:00

ee_oss.rs

offline (URL-bound) license keys (#9089)

2026-05-11 22:09:21 +00:00

embeddings.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

favorite.rs

feat: list agents with runnables, let them be starred, and fill out their menu (#11651)

2026-10-14 08:59:01 +00:00

flows.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

folder_history.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

folders.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

git_sync_oss.rs

feat: bring gitlab repositories to parity for git sync (#10938)

2026-09-08 11:54:43 +02:00

granular_acls.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

group_history.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

groups.rs

refactor: extract windmill-api-scripts and windmill-api-users subcrates (#7850)

2026-02-08 12:12:03 +00:00

health.rs

fix(health): detect read-only replica via pg_is_in_recovery() (#9722)

2026-06-23 09:37:29 +02:00

hub_publish.rs

feat: create the cloud workspace in onboarding, and teach the empty home (#10959)

2026-09-09 10:22:06 +02:00

indexer_oss.rs

feat: move index management out of /srch/, add storage size reporting (#8169)

2026-03-03 16:46:10 +00:00

integration.rs

feat: make hub integrations usable as examples in global AI chat (#10599)

2026-09-30 20:04:06 +02:00

internal_db.rs

fix: Move database manager SQL queries to backend (#8306)

2026-03-24 09:45:37 +00:00

job_helpers_oss.rs

feat: redesign the s3 explorer and show data files as tables (#11642)

2026-10-11 23:29:05 +02:00

job_metrics.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

jobs_export.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

jobs.rs

feat: route dev workspace and fork jobs to their own worker groups (#11811)

2026-10-16 18:47:41 +02:00

lib.rs

feat: share AI sessions read-only by link, optionally public (#11799)

2026-10-15 18:51:11 +02:00

live_migrations.rs

feat: replace the hub_sync script with an opt-in daily server sync (#11624)

2026-10-09 18:32:05 +02:00

mcp_oauth_oss.rs

feat(aiagent): handle oauth for mcp tools (#7564)

2026-01-14 12:06:40 +00:00

mcp_tools.rs

fix: hold mcp token references to resource reference scopes (#11803)

2026-10-16 17:28:29 +02:00

oauth2_oss.rs

feat(cli): non-interactive Slack connect/disconnect + sync round-trip fixes (#8935)

2026-04-24 17:14:08 +00:00

offboarding.rs

feat: agents run on behalf of their deployer (#11430)

2026-10-15 19:31:21 +02:00

oidc_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

path_autocomplete.rs

fix: list only the paths the caller can read in path autocomplete (#11388)

2026-09-28 17:55:16 +02:00

public_app_layer.rs

feat(aiagent): handle oauth for mcp tools (#7564)

2026-01-14 12:06:40 +00:00

public_app_rate_limit.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

raw_apps.rs

fix: enforce token path scopes on GET /raw_apps/list (#11284)

2026-09-22 08:13:58 +00:00

resources.rs

feat: let the global AI chat call connected MCP servers as the user (#10656)

2026-08-14 18:51:19 +02:00

runnables.rs

feat: list agents with runnables, let them be starred, and fill out their menu (#11651)

2026-10-14 08:59:01 +00:00

s3_log_batching.rs

fix: debounce S3 proxy logs (#8694)

2026-04-03 13:46:09 +00:00

s3_proxy_oss.rs

fix s3 proxy dev build (#6535)

2025-09-04 22:05:22 +00:00

saml_oss.rs

SSRF protection for SAML and MCP OAuth endpoints (#8473)

2026-03-22 17:18:22 +00:00

scim_oss.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

scripts.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

secret_backend_ext.rs

fix: decrypt secret variables via external backend in common resolvers (#9784)

2026-06-25 12:05:21 +02:00

service_logs.rs

feat: serve service log context from parquet and retire the raw log files (#10892)

2026-08-29 18:47:53 +02:00

slack_approvals.rs

feat: add a minimal skin for the approval page and slack/teams (#11061)

2026-09-10 18:50:09 +00:00

smtp_server_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

static_assets.rs

feat: isolate the raw-app editor preview when the app opts into sandboxing (#11572)

2026-10-07 10:52:41 +02:00

storage_list_oss.rs

feat: lazily expand s3 explorer folders one level at a time (#10420)

2026-08-04 01:41:06 +02:00

stripe_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_approvals_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_cache_oss.rs

fix: teams api improvements (#6643)

2025-09-19 17:43:16 +00:00

teams_oss.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

token.rs

feat: add a jobs:run:dependencies token scope for lock generation (#11643)

2026-10-09 19:13:48 +02:00

tracing_init.rs

feat: run turns in several flow chat conversations at once (#11202)

2026-09-29 11:36:30 +02:00

trash.rs

feat: add trigger_history table with source tracking (#10696)

2026-08-14 17:57:11 +02:00

trigger_history.rs

feat: add trigger_history table with source tracking (#10696)

2026-08-14 17:57:11 +02:00

users_oss.rs

handle OSS onboarding error gracefully (#8459)

2026-03-20 12:37:05 +00:00

users.rs

feat: agents run on behalf of their deployer (#11430)

2026-10-15 19:31:21 +02:00

utils.rs

feat: multiple homepage sort orders via an efficient merged runnables endpoint (#10297)

2026-07-24 23:16:10 +02:00

variables.rs

refactor: extract windmill-api into subcrates for parallel compilation (#7845)

2026-02-07 22:12:55 +00:00

volumes_oss.rs

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058)

2026-03-05 06:19:51 +00:00

webhook_util.rs

refactor: extract windmill-dep-map crate for parallel api/worker compilation (#7846)

2026-02-08 00:39:56 +00:00

workspace_dependencies.rs

fix: scope workspace dependencies create to the path workspace (#11385)

2026-09-28 18:15:10 +02:00

workspace_settings_document.rs

refuse data table tenants that name nobody and report every error at once (#11767)

2026-10-14 13:01:59 +00:00

workspace_shared_ui.rs

feat: workspace-shared ui/ folder reusable across raw apps (#8974)

2026-04-29 18:54:55 +00:00

workspaces_export.rs

feat: agents run on behalf of their deployer (#11430)

2026-10-15 19:31:21 +02:00

workspaces.rs

feat: workspace settings as one document, applied server-side (#11740)

2026-10-14 12:35:08 +00:00