v1.760.0

1.760.0 (2026-07-15)

Features

• nsjail: make python/ansible rlimit_as configurable per worker (GIT-921) (#10138) (1787201)

Bug Fixes

• ai: disable redirects on worker AI provider client (GHSA-5q4v) (#10122) (27ead8d)
• ai: stop sending the AI agent system prompt twice for OpenAI (#10126) (8bfe5c9)
• apps: invalidate cached app policy on change or deletion (GHSA-r5v4-cxh9-7qhq) (#10121) (f7eb5c4)
• bash: normalize CRLF line endings before running scripts (#10131) (6407d9f)
• cli-image: patch fixable CRITICAL CVEs in windmill-cli image (GIT-922) (#10135) (5626768)
• frontend: graceful small-screen timeframe picker on the runs page (#10073) (af177ce)
• frontend: keep session-exit URL clean by syncing new_draft strip with the router (#10101) (9705d60)
• frontend: only carry custom-tag overrides on 'Run again' (#10137) (bd3adc9)
• frontend: treat a displaced draft save as superseded, not failed (#10094) (2fe999f)
• reject git URL fragment/query SSRF bypass (GHSA-p5cj-8cfh-mjv6) (#10120) (73c8d7f)
• security: enforce variables:write scope on resource-delete var cascade (GHSA-xmr2-98m6-cjf7) (#10123) (188647a)