3 people d3869fcdb2 feat: gate guest apps by their mode and the protection rule alone (#12061) ...

* feat: gate guest apps by their mode and the protection rule alone

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: keep apps that admitted no guest closed on upgrade

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 0605eac866b49f0de913ab41c1168b79eec31ca0

This commit updates the EE repository reference after PR #931 was merged in windmill-ee-private.

Previous ee-repo-ref: 1f643a1aaa697578b36d67982358299ee20af7f4

New ee-repo-ref: 0605eac866b49f0de913ab41c1168b79eec31ca0

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-10-28 13:35:44 +01:00

..

runnable_settings

perf: eliminate dual-connection DB pool contention across worker, queue, and api (#9798)

2026-06-25 21:33:17 +00:00

secret_backend

fix: return variable.value as text so widening it changes no result type (#11976)

2026-10-23 16:10:12 +02:00

agent_workers.rs

feat: let agent workers authenticate with a workload identity token (#11858)

2026-10-18 10:44:50 +02:00

agent_workload_identity.rs

feat: let agent workers authenticate with a workload identity token (#11858)

2026-10-18 10:44:50 +02:00

apps.rs

feat: chat with a saved agent from a raw app through an agent runnable (#11921)

2026-10-22 21:01:09 +02:00

assets.rs

feat: let // materialize declare a dbt:// warehouse-relation write (#10978)

2026-09-07 17:38:07 +02:00

audit.rs

…

auth.rs

feat: configurable workspace roles with per-workspace overrides (#11821)

2026-10-21 15:51:54 +02:00

azure_workload_identity.rs

fix: log the db auth mode used and hint at the ms_entraid sentinel (#10508)

2026-08-04 13:16:24 +00:00

bench.rs

perf: drop v2_job side-table ON DELETE CASCADE FKs to speed retention deletes (#9786)

2026-06-25 13:52:30 +00:00

cache.rs

fix: stop running deleted script versions from worker caches (#11456)

2026-10-01 13:37:00 +02:00

client.rs

feat: per-user Anthropic Workload Identity Federation for Windmill AI (#11998)

2026-10-25 16:37:29 +01:00

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

datatable_roles_oss.rs

feat: add the viewer's roles to unnamed data table connections (#11709)

2026-10-13 09:01:21 +00:00

datatable_roles.rs

feat: add the viewer's roles to unnamed data table connections (#11709)

2026-10-13 09:01:21 +00:00

db.rs

fix: encrypt ai session backups with aes-256-gcm (#11734)

2026-10-13 23:12:48 +02:00

dbt_manifest.rs

feat: ingest dbt column lineage and real column schemas from the engine's parquet index (#10977)

2026-09-08 09:58:38 +02:00

deploy_origin.rs

feat(fork): merge a fork deletion on evidence, not on the counters (#10484)

2026-08-04 00:50:27 +02:00

deployment_requests_oss.rs

feat: add deploy restriction rule and fork review requests (#8804)

2026-04-13 17:10:37 +00:00

ee_oss.rs

feat: configurable workspace roles with per-workspace overrides (#11821)

2026-10-21 15:51:54 +02:00

email_oss.rs

fix(smtp): explain why a test email failed instead of 'deadline has elapsed' (#10620)

2026-08-10 21:21:14 +02:00

error.rs

feat: workspace settings as one document, applied server-side (#11740)

2026-10-14 12:35:08 +00:00

external_instance_pg_oss.rs

feat: external instance cluster for data tables and Ducklake catalogs (#11197)

2026-09-29 14:45:47 +02:00

external_instance_pg.rs

feat: audit declarative instance config writes (#11684)

2026-10-12 16:37:05 +02:00

external_ip.rs

perf: resolve the worker external IP in the background (#10697)

2026-08-14 14:27:21 +02:00

feature_usage_oss.rs

feat(telemetry): extend feature-usage tracking beyond AI features (#10681)

2026-08-14 18:50:38 +02:00

flow_conversations.rs

feat: chat with a saved agent from a raw app through an agent runnable (#11921)

2026-10-22 21:01:09 +02:00

flow_status.rs

…

flows.rs

fix: build hub script urls and cache keys from the parsed id only (#12028)

2026-10-26 23:14:31 +01:00

folders.rs

refactor: make the app policy's principal the authority for its identity (#10440)

2026-09-12 09:10:15 +02:00

fork_storage.rs

feat: isolate fork object storage under a per-fork prefix (#11829)

2026-10-16 22:21:38 +02:00

git_sync_oss.rs

feat: bring gitlab repositories to parity for git sync (#10938)

2026-09-08 11:54:43 +02:00

global_settings.rs

feat: gate guest apps by their mode and the protection rule alone (#12061)

2026-10-28 13:35:44 +01:00

guest_jwt.rs

feat: let agent workers authenticate with a workload identity token (#11858)

2026-10-18 10:44:50 +02:00

hub_resource_types.rs

feat: replace the hub_sync script with an opt-in daily server sync (#11624)

2026-10-09 18:32:05 +02:00

indexer.rs

feat: make the service log retention period an instance setting (#10889)

2026-08-29 19:39:14 +02:00

instance_config.rs

feat: build MCP OAuth urls from the api base url, narrowable per surface (#12010)

2026-10-26 23:02:27 +01:00

item_digest.rs

feat: add trigger, tag, run-as and digest claims to job OIDC tokens (#11481)

2026-10-02 19:02:17 +02:00

job_metrics.rs

perf: optimize job_stats storage for timestamps and zero-memory jobs (#8289)

2026-03-10 04:59:56 +00:00

job_provenance.rs

fix: issue oidc tokens to a deployed flow's dynamic select (#12046)

2026-10-28 01:28:43 +01:00

jobs.rs

chore: normalize NUL escapes in job args before name-based checks (#11989)

2026-10-23 16:41:05 -07:00

jwt.rs

chore(security): bump jsonwebtoken to 10 (#11194)

2026-09-21 14:36:03 +00:00

lib.rs

fix: tighten file handling in deno/bun, stricter codebase tarball,executor isolation (#11990)

2026-10-23 17:45:03 -07:00

lockfiles.rs

…

log_context.rs

[ee] feat: job cancel signals (oidc refusal, agent 5s ping, job.canceled) (#11592)

2026-10-07 16:44:57 +00:00

login_rate_limit.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

materialization.rs

feat(pipelines): fork data environments for ducklake materialization (dev data) (#9915)

2026-07-05 09:58:06 +02:00

min_version.rs

fix: return variable.value as text so widening it changes no result type (#11976)

2026-10-23 16:10:12 +02:00

more_serde.rs

…

notify_events.rs

…

oauth2.rs

feat: one Entra app for the Teams bot and ms_teams Graph connect (#11718)

2026-10-16 19:00:52 +00:00

oidc_oss.rs

feat: per-user Anthropic Workload Identity Federation for Windmill AI (#11998)

2026-10-25 16:37:29 +01:00

otel_oss.rs

feat: audit declarative instance config writes (#11684)

2026-10-12 16:37:05 +02:00

partition_oss.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

per_minute_counter.rs

refactor: combine the per-minute counters onto one shared helper (#10687)

2026-08-14 18:45:20 +02:00

pipeline_advanced_oss.rs

feat(pipeline): write-audit-publish for materialization data tests (#9911)

2026-07-04 17:19:49 +02:00

query_builders.rs

feat: rework the db manager: native grid, tabs, sql editor, joined columns (#11340)

2026-09-25 15:58:25 +02:00

queue_metrics.rs

feat: live queue status per tag and bounded queue metric charts (#11067)

2026-09-10 18:40:54 +00:00

queue.rs

feat: live queue status per tag and bounded queue metric charts (#11067)

2026-09-10 18:40:54 +00:00

result_stream.rs

…

roles.rs

feat: per-role fork capability and fork role mapping on rulesets (#12054)

2026-10-28 00:43:33 +01:00

runnable_job_stats.rs

feat: per-script resource rollup and heaviest scripts table (#11631)

2026-10-09 15:23:18 +02:00

runnables.rs

feat: refresh MCP tools when scripts and flows change (#11337)

2026-09-25 09:38:41 +00:00

runtime_assets.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

schedule.rs

…

schema_contracts.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

schema.rs

feat: WM_TESTED_RUNNABLE env var + wildcards in test: annotation (#8926)

2026-04-24 12:52:25 +00:00

scopes.rs

feat: let AI agents answer in Slack (#11630)

2026-10-19 23:16:17 +02:00

scripts.rs

fix: build hub script urls and cache keys from the parsed id only (#12028)

2026-10-26 23:14:31 +01:00

sensitive_log_masks.rs

fix: register the job token with the sensitive log masking system (#10943)

2026-09-18 15:15:02 +02:00

server.rs

fix: show the email handler's SMTP status to non-superadmin admins (#11745)

2026-10-13 22:51:48 +02:00

ssrf.rs

feat: let ALLOW_PRIVATE_MCP_SERVER_URLS name the private hosts it allows (#11869)

2026-10-19 01:18:52 +02:00

stats_oss.rs

improve analytics (#8418)

2026-03-17 20:14:02 +00:00

stream.rs

…

teams_oss.rs

…

tracing_init.rs

feat: audit declarative instance config writes (#11684)

2026-10-12 16:37:05 +02:00

trashbin.rs

feat: add trashbin system for soft-deleting items (#8519)

2026-03-26 09:51:34 +00:00

trigger_history.rs

feat: add trigger_history table with source tracking (#10696)

2026-08-14 17:57:11 +02:00

triggers.rs

fix: keep native triggers attached when a runnable is renamed (#10432)

2026-07-31 23:44:25 +02:00

user_drafts.rs

feat: let operators with manage rights save schedule and trigger drafts (#11646)

2026-10-14 15:50:31 +02:00

usernames.rs

fix: skip instance group members that are not email addresses (#11128)

2026-09-15 09:45:10 +02:00

users.rs

feat: configurable workspace roles with per-workspace overrides (#11821)

2026-10-21 15:51:54 +02:00

utils.rs

fix: build hub script urls and cache keys from the parsed id only (#12028)

2026-10-26 23:14:31 +01:00

variables.rs

feat: run a workspace handler when a variable's value expires (#10837)

2026-10-23 18:12:55 +02:00

wac_failure_corpus.json

test(wac): pin the failure record with one corpus both SDKs read (#10385)

2026-07-28 16:54:40 +02:00

wac.rs

fix: wake a WAC parent from every path that completes its child (#11119)

2026-09-14 18:51:21 +00:00

webhook.rs

fix: apply SSRF validation to workspace webhook URLs (#11285)

2026-09-22 08:14:12 +00:00

worker_group_job_stats.rs

…

worker.rs

feat: worker group toggle to keep the worker's proxy out of jobs (#11958)

2026-10-23 00:47:12 +02:00

workspace_crypt.rs

feat: workspace settings as one document, applied server-side (#11740)

2026-10-14 12:35:08 +00:00

workspace_dependencies.rs

chore: bump go to 1.27.1 in the worker and extra images (#11537)

2026-10-05 14:47:35 +00:00

workspaces.rs

feat: gate guest apps by their mode and the protection rule alone (#12061)

2026-10-28 13:35:44 +01:00