v1.651.1

1.651.1 (2026-03-05)

Bug Fixes

• prevent slow loading toast interval from leaking on promise cancellation (#8240) (2e582b1)
• suppress unused variable warnings on windows builds (#8241) (2d58382)

v1.651.0

1.651.0 (2026-03-05)

Features

• add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058) (5f0ef93)
• hash-based MCP tool names for long paths (#8133) (ce041e8)

Bug Fixes

• python-client: add delete_s3_object (#8216) (90f4c64)
• update CLI bun template to match UI template (#8238) (a8cbe93)
• write fallback package.json for codebase mode nsjail (#8239) (d46913b)

v1.650.0

1.650.0 (2026-03-05)

Features

• add move, delete, and duplicate to flow node context menu (#8050) (c0c9388)
• add variable and resource types to flow env variables (#8214) (164e499)
• Ducklake typechecker (#8118) (53caecf)
• make WINDMILL_DIR configurable via environment variable (#8215) (424ca59)
• make WM_END_USER_EMAIL display users from different workspaces (#8208) (baf2bcf)
• persistent Db manager state in URI (#8134) (4bf827b)
• replace hub error toasts with warning alerts and add disable hub setting (#8225) (63ebae8)
• token expiration notifications (#8190) (e56ccd2)

Bug Fixes

• handle multipart stream errors gracefully instead of panicking (#8226) (19c065b)
• improve windows compatibility (077779e)
• wrap set_encryption_key in a single database transaction (#8212) (62382fd)

v1.649.0

1.649.0 (2026-03-03)

Features

• frontend: add script recorder for offline replay (#8200) (c97d8b4)
• move index management out of /srch/, add storage size reporting (#8169) (ee01acd)

Bug Fixes

• clean up slow-load toast interval on component destroy (#8207) (26f4f2b)
• frontend: prevent subflow expansion from hiding all insertion points (#8203) (e97da86)
• gracefully handle malformed OAuth entries in instance config (#8205) (cac4bdd)
• skip stop_after_if evaluation for skipped (identity) flow steps (#8201) (e6f7775)
• use exact matching for python requirements directive parsing (#8199) (2b2be38)

Performance Improvements

• use two-step query in input history to leverage v2_job index (#8197) (50defdd)

v1.648.0

1.648.0 (2026-03-02)

Features

• add right-click context menu to ObjectViewer (#8181) (1855204)
• frontend: add drag-and-drop node movement in flow editor (#8076) (7a5e487)

Bug Fixes

• don't insert underscore after digit in PascalCase to snake_case conversion (#8184) (a111653)
• frontend: preserve keycloak realm url between instance settings saves (#8189) (cfd9541)
• preserve debouncing settings for post-preprocessing arg accumulation (#8191) (9e92445)

v1.647.2

1.647.2 (2026-03-02)

Bug Fixes

• update oracle instant client arm64 download url (#8179) (758b35f)

v1.647.1

1.647.1 (2026-03-02)

Bug Fixes

• add missing display_name and tenant fields to instance config OAuthClient (#8176) (db44b8b)
• add missing grant_types field to instance config OAuth structs (#8175) (fca94f8)
• show sync endpoint timeout setting on all instances (#8170) (c70307d)

v1.647.0

1.647.0 (2026-03-01)

Features

• populate baseUrl and userId in Nextcloud resource from OAuth (#8132) (5d58a87)
• runScript inline for path and hash (#8019) (7d9d16a)
• slow stream warnings, batch size control, and fix result/skipped filters (#8154) (7a32abe)

Bug Fixes

• : persist show schedules and show future jobs toggles in local storage (#8125) (f1d8568), closes #8123
• add partial index for fast failure filtering on runs page (#8150) (d4673c2)
• copy deps and remove user auto-add on workspace fork (#8142) (0776de6)
• fix custom TS Monaco worker not reloading on file uri change (#8130) (b68ff96)
• Handle CTEs and local tables in SQL asset parser (#8131) (0955051)
• prevent wm-cursor from hanging on stale cursor IPC sockets (b9e3e05)
• process deletes before adds in CLI sync push to avoid conflicts (#8148) (278983c)
• remove review comments from discord notifications and support comment edits (cdc0543)
• restore email domain (MX) setting in instance settings UI (#8152) (13daebf)
• sync flow on_behalf_of_email on load (#8149) (faf190f)
• validate tarball URL host against registry to prevent SSRF and token exfiltration (#8153) (86182ed)

Performance Improvements

• batch large job list requests and fix loadExtraJobs cursor (#8151) (4f5a804)
• lazy-load heavy deps (graphql, openapi-parser, sha256) (#8145) (ba48d70)
• lazy-load markdown in Tooltip components (#8143) (bd9ff03)

v1.646.0

1.646.0 (2026-02-26)

Features

• add force_branch parameter to git sync settings (#8089) (4e1ae27)
• add wmill docs CLI command for querying documentation (#8114) (01c7270)
• Broad filters for search (#8112) (16a6d5e)
• change on behalf selector to allow picking any user + select value in target by default if possible (#8113) (408c5af)

Bug Fixes

• remove duplicate job loading on chart zoom (#8121) (99c01bc)
• runs page date picker query parameter handling (#8120) (427bc64)

v1.645.0

1.645.0 (2026-02-26)

Features

• add resume and cancel button text options to Slack approval API + formatted args + typo (#8095) (c7c828b)
• Data table as pg resource / trigger (#8088) (8e7ba9b)
• option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079) (7ac93f6)
• per-worktree database isolation and Claude Code auto-trust (09970cd)
• show triggers in fork deploy to parent UI. (#8094) (935b005)

Bug Fixes

• backend: fix skip check crash when flow-level skip_expr triggers on first module with skip_if (#8111) (7bb450e)
• backend: pass parent_path for trigger renames in git sync (#8059) (5730009)
• correct asset node x offset inside loops and branches (#8093) (1c9ac97)
• delete non-session tokens on workspace archive and reject token creation for archived workspaces (#8082) (bc67255)
• improve Anthropic API proxy handling and update default models (#8105) (a9968d0)
• optimize slow list_assets query for recents loading (#8103) (0c204b6)
• remove duplicate num_columns in test_parse_relation test (cff9e2c)
• resolve Vite dependency pre-bundling errors (#8102) (07ddcd2)
• use @-prefixed LIKE pattern for email domain matching (#8101) (02d5447)
• use main runtime handle in QuickJS eval to prevent connection pool poisoning (#8106) (af2aca5)