starred/windmill

Fork 0

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-20 08:03:28 +00:00

Files

T

History

be23abb360 feat: let agent workers authenticate with a workload identity token (#11858 )

* feat: let agent workers authenticate with a workload identity token

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: throttle failed workload identity key fetches per issuer

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: keep stale workload identity keys through an issuer outage

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: refuse workload identity rules with an empty claim value

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: validate workload identity issuers in declarative sync and share the JWKS cache

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: say workload identity issuers are optional in agent worker settings

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 96e8e2aa15bdc5968a1dae10f4e81d47d7ea49e0

This commit updates the EE repository reference after PR #897 was merged in windmill-ee-private.

Previous ee-repo-ref: 0e98880edb8db269d53120ca606025c81f320f5c

New ee-repo-ref: 96e8e2aa15bdc5968a1dae10f4e81d47d7ea49e0

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-10-18 10:44:50 +02:00

.cargo

perf: opt into sqlx test templates through SQLX_TEST_TEMPLATE (#11853 )

2026-10-17 23:23:53 +02:00

.sqlx

test: fix error handler test flake and merge handler test binaries (#11850 )

2026-10-17 22:04:45 +02:00

.vscode

…

api

…

custom_migrations

…

generate_mcp_endpoints_tools

feat: infer a script's schema when a deploy (e.g. MCP) sends none (#11339 )

2026-09-25 10:00:49 +00:00

migrations

feat: isolate fork object storage under a per-fork prefix (#11829 )

2026-10-16 22:21:38 +02:00

parsers

chore(main): release 1.840.0 (#11840 )

2026-10-17 23:24:18 +02:00

src

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

tests

test: drain pg arg and custom type cases on one worker (#11849 )

2026-10-17 22:14:32 +02:00

windmill-ai

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-alerting

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api

chore(main): release 1.840.0 (#11840 )

2026-10-17 23:24:18 +02:00

windmill-api-agent-workers

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

windmill-api-assets

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-auth

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-client

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-configs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-debug

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-embeddings

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-flow-conversations

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-flows

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-groups

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-inputs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-integration-tests

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-jobs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-npm-proxy

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-openapi

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-schedule

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-scripts

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-settings

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

windmill-api-sse

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-users

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-workers

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-workspaces

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-audit

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-autoscaling

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-common

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

windmill-dep-map

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-duckdb-ffi-internal

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

windmill-git-sync

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-indexer

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-jseval

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-macros

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-mcp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-native-triggers

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-oauth

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-object-store

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-operator

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-queue

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-runtime-nativets

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-store

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-test-utils

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-amqp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-azure

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-email

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-gcp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-http

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-kafka

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-mqtt

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-nats

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-postgres

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-sqs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-websocket

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-types

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-worker

gate unix-only bun staging items for the Windows worker build (#11856 )

2026-10-18 02:47:24 +00:00

windmill-worker-volumes

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

.devcontainer.json

…

.gitattributes

…

.gitignore

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

.ignore

…

AGENTS.md

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

build.rs

fix: embed a VERSIONINFO resource in the Windows binary (#11433 )

2026-09-30 09:20:58 +02:00

Cargo.lock

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

Cargo.toml

chore(main): release 1.840.0 (#11840 )

2026-10-17 23:24:18 +02:00

check_no_symlink.sh

…

CLAUDE.md

docs(agents): rework agent context, fix dev-env docs, vendor skills (#10667 )

2026-08-13 11:12:20 +00:00

ee-repo-ref.txt

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

LICENSE

…

NOTICE

…

oauth_connect.json

feat: one Entra app for the Teams bot and ms_teams Graph connect (#11718 )

2026-10-16 19:00:52 +00:00

oauth_login.json

fix(oauth): show the account chooser on an explicit Google/Microsoft login (#10961 )

2026-09-05 11:08:27 +00:00

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

…

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

…

README.md

…

run_until_fail.sh

…

rustfmt.toml

…

substitute_ee_code.sh

…

summarize_schema.py

…

summarized_schema.txt

feat: share AI sessions read-only by link, optionally public (#11799 )

2026-10-15 18:51:11 +02:00

test_debounce_e2e.sh

…

test_wac_e2e.sh

…

THREAT_MODEL.md

fix: apply SSRF validation to workspace webhook URLs (#11285 )

2026-09-22 08:14:12 +00:00

update_sqlx.sh

…

write_latest_ee_ref.sh

…

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise