v1.839.0 v1.840.0
medium risk
HKUDS/Vibe-TradingOct 16, 2026 → Oct 17, 20261 day between releases
What's New
Adds `no_network` sandboxing, warns on secret forwarding, and hardens AI proxy paths
Breaking Changes
- Refuse dot segments in AI proxy paths to prevent potential path traversal
New Features
- Add `no_network` annotation for sandboxed jobs
- Mount Python script modules into nsjail sandbox
- Run bun and npm installs under nsjail
- Allowlisted private AI base URLs
Improvements
- Warn when WHITELIST_ENVS forwards a secret-shaped variable
- Refuse dot segments in AI proxy paths
- Route Python S3 client settings through the S3 proxy
- Use one Entra app for Teams bot and ms_teams Graph connect
Bug Fixes
- Verify Bot Framework JWT on incoming Teams activities
- Keep script and flow deploys off a second pool connection
- Allow ALLOW_PRIVATE_AI_BASE_URLS to name private hosts
Upgrade Notes
Review AI proxy configurations to ensure they do not contain `..` segments, as these are now rejected. You can now use the `no_network` annotation to restrict network access in sandboxed jobs. Watch for warnings regarding `WHITELIST_ENVS` forwarding potential secrets.
The Two Releases
v1.839.0
v1.839.0
Oct 16, 2026· 5 days ago
Windmill release focusing on isolation, security, and Teams bot connectivity improvements.
Full release notesv1.840.0
v1.840.0
Oct 17, 2026· 4 days ago
Windmill release enhancing sandboxing capabilities, adding security warnings, and improving AI proxy path handling.
Full release notes