hugocasaandClaude Opus 4.8 c1f31c0e47 fix(backend): validate ansible vault_id entries before config generation (#9681) ...

* fix(backend): validate ansible vault_id entries before config generation

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* test(backend): cover ansible.cfg write-boundary vault_id validation

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-19 16:54:25 +02:00

..

ai

fix(ai): enforce resource authz when loading MCP tools in agent worker (#9571)

2026-06-14 23:50:18 +02:00

agent_workers.rs

feat: Data tables (#7226)

2025-12-05 23:08:58 +00:00

ai_executor.rs

fix(mcp): resolve MCP resource token via caller RLS + SSRF-guard url (#9428)

2026-06-03 09:00:43 +00:00

ansible_executor.rs

fix(backend): validate ansible vault_id entries before config generation (#9681)

2026-06-19 16:54:25 +02:00

bash_executor.rs

feat(worker): #ssh directive to run a bash script on a remote SSH host (#9479)

2026-06-10 15:14:37 +00:00

bigquery_executor.rs

fix(security): sanitize dependency names & connection strings against command/SQL injection (#9590)

2026-06-15 19:06:00 +02:00

bun_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

common.rs

fix: actually isolate windows job children from CTRL_BREAK_EVENT + reap on worker death (#9563)

2026-06-14 09:57:52 +02:00

config.rs

feat: replace ephemeral tokens by jwt (#3908)

2024-06-14 13:07:35 +02:00

csharp_executor.rs

feat: make C# dotnet target framework configurable via DOTNET_TARGET_FRAMEWORK (#9454)

2026-06-05 09:43:40 +00:00

dedicated_worker_oss.rs

feat: flow for loop squashing (#7107)

2025-11-25 17:25:34 +01:00

deno_executor.rs

refactor: resolve workspace imports via /f/,/u/ not $f/,$u/ aliases (#9438)

2026-06-03 17:27:24 +00:00

docker_v2.rs

feat(sandbox): pull/extract images with crane instead of podman (#9455)

2026-06-05 13:52:55 +00:00

duckdb_executor.rs

fix(security): sanitize dependency names & connection strings against command/SQL injection (#9590)

2026-06-15 19:06:00 +02:00

global_cache.rs

fix: atomic bundle cache writes to prevent parallel cold-load race (#9186)

2026-05-15 21:04:16 +00:00

go_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

graphql_executor.rs

improve graphql error reporting (#6092)

2025-07-01 15:45:04 +02:00

handle_child.rs

oom_adj nit

2026-05-21 04:29:34 +00:00

java_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

job_logger_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

job_logger.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

js_eval.rs

fix: retry js eval up to 3 times on timeout from slow DB (#7890)

2026-02-10 17:50:41 +00:00

lib.rs

fix(ai): enforce resource authz when loading MCP tools in agent worker (#9571)

2026-06-14 23:50:18 +02:00

memory_common.rs

refactor: move ai sse plumbing to windmill-ai (#9059)

2026-05-11 10:01:45 +00:00

memory_oss.rs

refactor: move ai sse plumbing to windmill-ai (#9059)

2026-05-11 10:01:45 +00:00

mssql_executor.rs

feat: support S3Object input args in native SQL scripts (#8954)

2026-04-28 20:01:06 +00:00

mysql_executor.rs

feat: support S3Object input args in native SQL scripts (#8954)

2026-04-28 20:01:06 +00:00

nu_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

oracledb_executor.rs

fix: track dollar-quoted strings in SQL block splitter (#8891)

2026-04-21 17:07:01 +00:00

otel_oss.rs

feat(otel): connect jobs to the inbound distributed trace (#9456)

2026-06-05 16:50:07 +00:00

otel_tracing_proxy_oss.rs

feat: add otlp/http internal collector (#7690)

2026-01-26 19:29:09 +00:00

pg_executor.rs

feat: CLI datatable serve / psql (#9267)

2026-05-20 16:56:50 +00:00

pg_raw_output.rs

feat: CLI datatable serve / psql (#9267)

2026-05-20 16:56:50 +00:00

php_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

prepare_deps.rs

feat: debuggers for python and bun v0 (#7546)

2026-01-13 15:20:06 +00:00

pwsh_executor.rs

fix(security): sanitize dependency names & connection strings against command/SQL injection (#9590)

2026-06-15 19:06:00 +02:00

python_executor.rs

feat(python, windows): enable S3 to cache wheels (#5199)

2026-06-19 13:11:35 +00:00

python_versions.rs

fix(nsjail): precompile python stdlib + raise download rlimit_as (#9429)

2026-06-03 08:47:19 +00:00

r_executor.rs

fix(security): sanitize dependency names & connection strings against command/SQL injection (#9590)

2026-06-15 19:06:00 +02:00

result_processor.rs

feat: Data Pipelines alpha (#9193)

2026-06-18 18:09:02 +02:00

ruby_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

rust_executor.rs

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

sanitized_sql_params.rs

feat: add support for contextual vars in SQL (#6791)

2025-10-10 18:52:24 +00:00

schema.rs

fix: parse Python datetime.datetime and datetime.date type annotations (#7856)

2026-02-09 15:17:26 +00:00

snowflake_executor.rs

fix(security): sanitize dependency names & connection strings against command/SQL injection (#9590)

2026-06-15 19:06:00 +02:00

sql_s3_input.rs

feat: support S3Object input args in native SQL scripts (#8954)

2026-04-28 20:01:06 +00:00

sql_utils.rs

Nit better test and comment (#8030)

2026-02-20 12:06:05 +00:00

ssh_executor_oss.rs

feat(worker): #ssh directive to run a bash script on a remote SSH host (#9479)

2026-06-10 15:14:37 +00:00

universal_pkg_installer.rs

fix: pair PG arg type with actual Rust binding to keep query_typed_raw safe (#8999)

2026-05-01 17:08:59 +00:00

volume_oss.rs

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058)

2026-03-05 06:19:51 +00:00

wac_executor.rs

fix: detect WAC v2 Python workflows that only use step() (no @task) (#8819)

2026-04-13 23:22:30 +00:00

worker_flow.rs

fix: trigger flow error handler on unrecoverable (OOM/zombie) step failures (#9662)

2026-06-19 09:57:05 +00:00

worker_lockfiles.rs

feat(flow): support worker tag override on AI agent steps (#9513)

2026-06-10 13:54:05 +00:00

worker_utils.rs

refactor: convert read-hot globals to AtomicBool/I64 and ArcSwap (#8815)

2026-04-14 00:04:10 +00:00

worker.rs

fix: trigger flow error handler on unrecoverable (OOM/zombie) step failures (#9662)

2026-06-19 09:57:05 +00:00