v1.804.0
Added 7
- Replace the context panel with an assistant settings modal in AI sessions
- Group the agent form and edit saved agents as drafts in frontend
- Introduce guest app execution mode, a role that takes no seat
- Add guest JWT entry for embedded apps
- Instrument sandbox isolation, data tables and in-flow script edits
- Make S3 permission rules reorderable by drag and drop
- Reconcile IdP instance groups from the SSO groups claim
Fixed 9
- Deploy a relocked script version only when its lock changed
- Render ordered lists in markdown descriptions in frontend
- Keep braces inside string tool arguments out of JSON depth count
- Keep the instance user editor popover inside the viewport
- Meter WAC compute per segment, not the whole sleep
- Name the extension to load when duckdb autoload hits the fence
- Show the account chooser on an explicit Google or Microsoft login in OAuth
- Render the MCP OAuth consent page without a workspace
- Stand the WAC park down for a cancel that beat it to the row
Security 1
- Patch critical CVEs in the worker image
From Windmill
1.804.0 (2026-09-05)
Features
- ai-sessions: replace the context panel with an assistant settings modal (#10919) (fda7b3f)
- frontend: group the agent form and edit saved agents as drafts (#10880) (f037c73)
- guest app execution mode, a role that takes no seat (#10929) (fce635d)
- guest JWT entry for embedded apps (#10954) (8aab503)
- instrument sandbox isolation, data tables and in-flow script edits (#10981) (130a2f7)
- make S3 permission rules reorderable by drag and drop (#10958) (2257b05)
- reconcile IdP instance groups from the SSO groups claim (#10957) (79426a1)
Bug Fixes
- deploy a relocked script version only when its lock changed (#10966) (1113828)
- frontend: render ordered lists in markdown descriptions (#10973) (a0295b2)
- keep braces inside string tool arguments out of JSON depth count (#10965) (3e3d2a6)
- keep the instance user editor popover inside the viewport (#10979) (1901d31)
- meter WAC compute per segment, not the whole sleep (#10985) (5428710)
- name the extension to load when duckdb autoload hits the fence (#10972) (64b6798)
- oauth: show the account chooser on an explicit Google/Microsoft login (#10961) (9f7908e)
- patch critical CVEs in the worker image (#10962) (b100606)
- render the MCP OAuth consent page without a workspace (#10988) (ebfac29)
- stand the WAC park down for a cancel that beat it to the row (#10990) (f977f5b)