1.760.0 (2026-07-15)
Features
Bug Fixes
- ai: disable redirects on worker AI provider client (GHSA-5q4v) (#10122) (27ead8d)
- ai: stop sending the AI agent system prompt twice for OpenAI (#10126) (8bfe5c9)
- apps: invalidate cached app policy on change or deletion (GHSA-r5v4-cxh9-7qhq) (#10121) (f7eb5c4)
- bash: normalize CRLF line endings before running scripts (#10131) (6407d9f)
- cli-image: patch fixable CRITICAL CVEs in windmill-cli image (GIT-922) (#10135) (5626768)
- frontend: graceful small-screen timeframe picker on the runs page (#10073) (af177ce)
- frontend: keep session-exit URL clean by syncing new_draft strip with the router (#10101) (9705d60)
- frontend: only carry custom-tag overrides on 'Run again' (#10137) (bd3adc9)
- frontend: treat a displaced draft save as superseded, not failed (#10094) (2fe999f)
- reject git URL fragment/query SSRF bypass (GHSA-p5cj-8cfh-mjv6) (#10120) (73c8d7f)
- security: enforce variables:write scope on resource-delete var cascade (GHSA-xmr2-98m6-cjf7) (#10123) (188647a)