starred/windmill

Fork 0

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-30 16:17:25 +00:00

Files

T

History

e3b4dcffbc chore: apply the untrusted-input check to trigger, resume and asset args (#12031 )

* chore: apply the untrusted-input check to trigger, resume and asset args

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: apply the check to every native trigger and slack/teams commands

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: accept resume references the approver can read

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: refuse every reference in a resume payload

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 5e7b1de9a07114e277a22e9e3c68b0809c06f18d

This commit updates the EE repository reference after PR #927 was merged in windmill-ee-private.

Previous ee-repo-ref: 15733e7ee1e8ab0efa56a429801be31fe40277e2

New ee-repo-ref: 5e7b1de9a07114e277a22e9e3c68b0809c06f18d

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-10-27 23:55:10 +01:00

.cargo

perf: opt into sqlx test templates through SQLX_TEST_TEMPLATE (#11853 )

2026-10-17 23:23:53 +02:00

.sqlx

feat: run a workspace handler when a variable's value expires (#10837 )

2026-10-23 18:12:55 +02:00

.vscode

…

api

…

custom_migrations

…

generate_mcp_endpoints_tools

feat: infer a script's schema when a deploy (e.g. MCP) sends none (#11339 )

2026-09-25 10:00:49 +00:00

migrations

feat: tool approval and a question tool for ai agent steps (#11826 )

2026-10-26 19:22:45 +01:00

parsers

chore(main): release 1.850.0 (#12019 )

2026-10-27 01:28:52 +01:00

src

feat: build MCP OAuth urls from the api base url, narrowable per surface (#12010 )

2026-10-26 23:02:27 +01:00

tests

chore: apply the untrusted-input check to trigger, resume and asset args (#12031 )

2026-10-27 23:55:10 +01:00

windmill-ai

feat: tool approval and a question tool for ai agent steps (#11826 )

2026-10-26 19:22:45 +01:00

windmill-alerting

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api

chore: apply the untrusted-input check to trigger, resume and asset args (#12031 )

2026-10-27 23:55:10 +01:00

windmill-api-agent-workers

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

windmill-api-assets

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-auth

fix: serve new MCP OAuth sign-ins the session toolset on the tools server URLs (#12024 )

2026-10-26 18:25:47 +01:00

windmill-api-client

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-configs

fix: make the autoscaling Test scaling button run the integration (#11972 )

2026-10-23 14:43:36 +02:00

windmill-api-debug

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-embeddings

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-flow-conversations

feat: chat with a saved agent from a raw app through an agent runnable (#11921 )

2026-10-22 21:01:09 +02:00

windmill-api-flows

Merge commit from fork

2026-10-23 18:49:17 -04:00

windmill-api-groups

feat: run a workspace handler when a variable's value expires (#10837 )

2026-10-23 18:12:55 +02:00

windmill-api-inputs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-integration-tests

fix: restore workspace pg_dump changes reverted by 812ff6ea5e (#11988 )

2026-10-23 18:56:08 -04:00

windmill-api-jobs

feat: app conversations through the memory_id query parameter (#12025 )

2026-10-27 23:51:35 +01:00

windmill-api-npm-proxy

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-openapi

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-schedule

Merge commit from fork

2026-10-23 18:49:17 -04:00

windmill-api-scripts

Merge commit from fork

2026-10-23 18:49:17 -04:00

windmill-api-settings

feat: build MCP OAuth urls from the api base url, narrowable per surface (#12010 )

2026-10-26 23:02:27 +01:00

windmill-api-sse

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-users

fix: list usr columns explicitly in whoami's user lookup (#11970 )

2026-10-23 13:51:05 +02:00

windmill-api-workers

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-workspaces

fix: restore workspace pg_dump changes reverted by 812ff6ea5e (#11988 )

2026-10-23 18:56:08 -04:00

windmill-audit

fix: stop audit inserts from silently rolling back saves (#11938 )

2026-10-22 17:15:05 +02:00

windmill-autoscaling

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-common

feat: app conversations through the memory_id query parameter (#12025 )

2026-10-27 23:51:35 +01:00

windmill-dep-map

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-duckdb-ffi-internal

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

windmill-git-sync

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-indexer

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-jseval

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-macros

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-mcp

feat: show runs, run tables, deploy reviews and items as mcp apps cards (#11969 )

2026-10-27 23:42:14 +01:00

windmill-native-triggers

fix: return variable.value as text so widening it changes no result type (#11976 )

2026-10-23 16:10:12 +02:00

windmill-oauth

feat: fill docusign, salesforce and quickbooks fields on connect (#11960 )

2026-10-23 18:01:13 +02:00

windmill-object-store

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-operator

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-queue

chore: apply the untrusted-input check to trigger, resume and asset args (#12031 )

2026-10-27 23:55:10 +01:00

windmill-runtime-nativets

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-store

Merge commit from fork

2026-10-23 18:49:17 -04:00

windmill-test-utils

fix: stop audit inserts from silently rolling back saves (#11938 )

2026-10-22 17:15:05 +02:00

windmill-trigger

chore: apply the untrusted-input check to trigger, resume and asset args (#12031 )

2026-10-27 23:55:10 +01:00

windmill-trigger-amqp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-azure

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-email

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-gcp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-http

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-kafka

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-mqtt

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-nats

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-postgres

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-sqs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-websocket

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-types

feat: tool approval and a question tool for ai agent steps (#11826 )

2026-10-26 19:22:45 +01:00

windmill-worker

feat: tool approval and a question tool for ai agent steps (#11826 )

2026-10-26 19:22:45 +01:00

windmill-worker-volumes

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

.devcontainer.json

…

.gitattributes

…

.gitignore

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

.ignore

…

AGENTS.md

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

build.rs

fix: embed a VERSIONINFO resource in the Windows binary (#11433 )

2026-09-30 09:20:58 +02:00

Cargo.lock

chore(main): release 1.850.0 (#12019 )

2026-10-27 01:28:52 +01:00

Cargo.toml

chore(main): release 1.850.0 (#12019 )

2026-10-27 01:28:52 +01:00

check_no_symlink.sh

…

CLAUDE.md

…

ee-repo-ref.txt

chore: apply the untrusted-input check to trigger, resume and asset args (#12031 )

2026-10-27 23:55:10 +01:00

LICENSE

…

NOTICE

…

oauth_connect.json

fix: use linkedin openid connect default scopes (#11953 )

2026-10-23 18:20:04 +02:00

oauth_login.json

fix(oauth): show the account chooser on an explicit Google/Microsoft login (#10961 )

2026-09-05 11:08:27 +00:00

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

…

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

…

README.md

…

run_until_fail.sh

…

rustfmt.toml

…

substitute_ee_code.sh

…

summarize_schema.py

…

summarized_schema.txt

feat: tool approval and a question tool for ai agent steps (#11826 )

2026-10-26 19:22:45 +01:00

test_debounce_e2e.sh

…

test_wac_e2e.sh

…

THREAT_MODEL.md

fix: apply SSRF validation to workspace webhook URLs (#11285 )

2026-09-22 08:14:12 +00:00

update_sqlx.sh

…

write_latest_ee_ref.sh

…

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise