mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-26 08:01:38 +00:00

Files

T

Ruben Fiszel 073857ac0a fix(apps): relock no longer reverts raw app to a stale version (#9432 )

When a dependency job for an app is triggered by a relative/workspace
import (e.g. an imported script was updated), handle_app_dependency_job
re-appended the version captured at job-creation time to the versions
array. On a git-sync/CLI push that deploys both the imported script and
the importing app in the same batch, the script's dependency job
snapshots the app's old version; the app push then creates a newer
version (uploading its bundle against that new version); finally the
relock runs and re-appends the old version, making it latest again.

For raw apps this is fatal: bundle_secret is computed from the latest
version, so the served HTML requests /apps_u/get_data/v/<secret>.{js,css}
for a version that has no stored bundle -> 404 and a white screen.
Manually redeploying fixes it until the next merge re-triggers the revert.

Two changes:
- Re-query the current latest version to relock (mirrors the flow
  dependency handler, #8673), so we don't lock a stale snapshot.
- Guard the re-publish append with `versions[array_upper(...)] = $1` so
  it is a single atomic, never-demoting statement: it can only re-append
  the version that is already latest, never revert to an older one. A
  relock never creates a new app_version, so there is never a version to
  legitimately promote here.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-03 13:21:54 +00:00

nsjail

fix(nsjail): precompile python stdlib + raise download rlimit_as (#9429 )

2026-06-03 08:47:19 +00:00

src

fix(apps): relock no longer reverts raw app to a stale version (#9432 )

2026-06-03 13:21:54 +00:00

build.rs

refactor: isolate deno_core into windmill-runtime-nativets subcrate (#7848 )

2026-02-08 09:16:37 +00:00

Cargo.toml

feat(snowflake): derive public key from private key when omitted (WIN-1959) (#9251 )