v1.838.0 v1.839.0

medium risk

windmill-labs/windmillOct 16, 2026 → Oct 16, 20260 days between releases

What's New

Adds isolated fork storage and protection rule to prevent cross-fork data leakage.

New Features

  • Add a Require isolated forks protection rule
  • Isolate fork object storage under a per-fork prefix
  • Consolidate Teams bot and Graph connect into a single Entra app
  • Route Python S3 client settings through the S3 proxy

Improvements

  • Isolate fork object storage under a per-fork prefix for better security
  • Consolidate Entra app for Teams bot and ms_teams Graph connect
  • Route Python S3 client settings through the S3 proxy

Bug Fixes

  • Verify Bot Framework JWT on incoming Teams activities to improve security

Upgrade Notes

Fork object storage is now isolated under a per-fork prefix, which may affect external S3 access. The Teams bot and Graph connect now use a single Entra app, requiring configuration updates if custom app IDs were previously set.

The Two Releases

v1.838.0

v1.838.0

Oct 16, 2026· 5 days ago

This release introduces support for Ed25519 license keys, makes the frontend installable as a Progressive Web App (PWA), and improves performance by routing dev workspace and fork jobs to dedicated worker groups. It also includes several bug fixes for AI chat, MCP tools, and database queries.

Full release notes
v1.839.0

v1.839.0

Oct 16, 2026· 5 days ago

This release focuses on improving security and isolation for project forks, consolidating Teams integration components, and enhancing S3 proxy routing. It introduces a new protection rule for isolated forks and fixes a security vulnerability regarding Teams activity verification.

Full release notes