v0.55.1 v1.822.0
medium risk
windmill-labs/windmillOct 2, 2026 → Oct 3, 20261 day between releases
What's New
Enhanced OIDC token management and job security with restricted tokens and key rotation
Breaking Changes
- Restricted job tokens per script and flow may require permission updates
- OIDC signing key rotation requires configuration changes
New Features
- Restricted job tokens per script and flow
- OIDC signing key rotation via file configuration
- Job OIDC tokens include trigger, tag, run-as, and digest claims
- Cancel-only token scope for jobs:cancel
- Instance setting to route dependency jobs to one tag
Improvements
- PostgreSQL job progress logging with stall and dead connection detection
- Enhanced security with restricted job tokens
- Improved OIDC token management via file-based key rotation
Upgrade Notes
Update OIDC signing key configuration to point to the new file path. Review job token scopes as scripts may require updated permissions. Monitor PostgreSQL job progress logs for stalled jobs or connection issues.
The Two Releases
v0.55.1
v0.55.1
Oct 2, 2026· 19 days ago
v0.55.1 optimizes the pipecat-bot-py example by defaulting to Deepgram Aura TTS for faster response times and fixes a bug where bot audio was dropped after resolving pause-mode barge-ins.
Full release notesv1.822.0
v1.822.0
Oct 3, 2026· 19 days ago
Focuses on OIDC token enhancements, including restricted job tokens and improved logging for PostgreSQL job progress.
Full release notes