Feature updates and improvements
Studios
Added the Studios allowed-user table and data model.
Implemented DataStudioAllowedUserService to persist allowed users on Studio create and start.
Authorized allow-listed users to connect to and run private Studios.
Exposed the allowlist in the Studios API response.
Added revalidation of the last checkpoint in Studios.
Compute environments
Added a Nextflow version selector, including feature-based version requirements and its specification.
Disabled Nextflow version selection when a custom launcher container is pinned.
Added persistence of the AWS Cloud log group and forwarding to the CloudWatch agent.
Added clickable row cards with new hover tokens.
Added root-only admin validate endpoints.
Pipelines
Added a toggle for the Nextflow syntax parser v2.
Access control
Added the foundation for OAuth 2.0 refresh-token rotation.
Added an organization allowlist to the IdP claims-mapping feature flag.
Added audit image support for team IdP groups.
Added audit logs for SCIM tokens.
Monitoring and observability
Added a current-month CPU hours metric.
General
Enhanced the global search UI with infinite scroll and suggestions.
Bug fixes
Compute environments
Surfaced actionable GCP Batch API errors instead of a misleading WIF hint.
Set GOOGLE_CLOUD_PROJECT on the GCP Batch head job for xpack-google secret resolution.
Fixed selecting a Nextflow version when the source pinned none.
Added retries for AWS forge calls under IAM throttling.
Fixed a deadlock on last_used updates.
Avoided a full table rebuild in the m158 cost-retrieval migration.
Added INSTANT-safe overrides for algorithm-pinned migrations.
Removed a redundant compute environment work-directory pre-flight check.
Restored inner target="_blank" links under wtSmartNav.
Data explorer
Fixed stale REFRESH_IN_PROGRESS states by timing them out so Data explorer self-heals.
Access control
Fixed disabled personal workspaces remaining accessible through their URL.
Fixed the IdP reconciler to create UserRole entries for workspace visibility.
Corrected the managed credentials path parameter.
Feature updates and improvements
Studios
Added NVIDIA environment variables for GPU Studios.
Compute environments
Added bring-your-own networking support for Azure Cloud compute environments.
Pipelines
Added pipeline secrets support for scheduler-backed Cloud compute environments, covering both storage and the launch form.
Disabled Nextflow version selection when a custom launcher container is pinned.
Updated Nextflow launcher to v26.04.6.
Security
Redacted full user email addresses from logs.
Bug fixes
Compute environments
Added retries for AWS Forge calls under IAM throttling.
Fixed xpack-google secret resolution by setting GOOGLE_CLOUD_PROJECT on the GCP Batch head job.
Fixed work directory validation for legacy Seqera Compute configurations.
Surfaced actionable GCP Batch API errors instead of the misleading Workload Identity Federation hint.
Feature updates and improvements
Compute environments
Added the compute environment ID to the compute environment row card.
Added the c9gd instance family to the NVMe instance list.
Updated the list of available Azure regions.
Bug fixes
Compute environments
Added a clear error message when Azure Batch pool deletion fails.
Disabled compute environment form submission while the form is invalid.
Data explorer
Signed GCS genomic file URLs with V4 for IGV preview.
Feature updates and improvements
Compute environments
Added VPC and multiple subnet selection to AWS Cloud compute environments.
Added the number of instances provisioned per run to the run page, sourced from the Scheduler run summary.
Added the g7 instance family to the NVMe list.
Required Spot provisioning for Fusion snapshots and aligned the GCP provisioning interface.
Refined the compute environment list with a type label, Cloud feature hiding, and an Invalid status.
Pipelines
Updated Nextflow to v26.04.4.
Access control
Split the data_link and data_link_object permissions into separate scopes. Workspace members with View , Connect , or Launch roles can now download files and generate download URLs from data-links. Upload and delete file operations remain restricted to Maintain and above.
Added pre-filling of first and last name from GitHub signup.
Added a groups scope to SSO connections.
Added handling for malformed groups claims.
Rejected group creation with commas when Auth0 is enabled.
Monitoring and observability
Added audit entries for pre-flight cron status transitions.
General
Added a default workspace preference to the user profile.
Listed avatar and username rows in the avatar-group popover.
Bug fixes
Pipelines
Fixed lineage incorrectly showing as not enabled for submitted runs when it was enabled.
Access control
Fixed detection of a personal access token as a duplicate when creating a GitHub App with the same credentials.
General
Fixed uploaded avatars not persisting when an admin creates a user.
Fixed unknown workspace sub-routes to redirect to the workspace root.
Fixed the favicon to follow the OS light and dark color scheme.
Fixed several UI issues across the run page, Data Explorer, and search.
Feature updates and improvements
Compute environments
Redesigned the compute environment list as a row-card table.
Added attribute chips to the compute environment list.
Added an on-demand credentials validation button.
Feature updates and improvements
Compute environments
Added AWS Cloud compute environment EBS volume encryption with an optional KMS key.
Added the m9gd instance family to the NVMe list.
Pipelines
Bug fixes
Monitoring
Included gpuMetrics in task JSON serialization so GPU usage is now visible in the task payload.
Pipelines
Fixed an unexpected error when the workflow limiter canceled a newly launched workflow.
Preserved a custom schema when added for the first time in pipeline edit mode.
Feature updates and improvements
Access control
Compute environments
Added security group name search to AWS drop-downs.
Pipelines
Surfaced launch-time settings, including profiles and syntax parser, in the run config tab.
Bug fixes
Data explorer
Fixed IGV index file handling by presigning indexURLs independently.
Pipelines
Fixed the Nextflow syntax parser v2 toggle to seed from the saved launch config.
Included syntaxParser in the workflow launch API response.
Cleared stale main script launch errors.
Fixed the launch form to skip the lineage request in user space.
Feature updates and improvements
Pipelines
Exposed tower.launch.config.maxSize to frontend validators so launch configuration size limits stay aligned with the backend.
Bug fixes
Pipelines
Added frontend validation of paramsText against its JSON-serialized size to align launch parameter limits with backend submission constraints.
Added missing metadata, pipeline versioning, and data lineage fields to the workflow launch form summary.
Fixed the workflow launch payload to always send lineage.enabled so the data lineage toggle setting persists correctly.
General
Fixed the workspace switcher to keep the search input focused during arrow-key navigation.
Fixed background worker shutdown by draining workers before JedisPool shutdown to prevent dropped jobs.
Fixed navigation switcher responsiveness.
Feature updates and improvements
Compute environments
Added a configurable boot disk size for Azure Batch pools.
Added r8idn, r8idb, m8idn, and m8idb instance families to the NVMe list.
Pipelines
Added the Lineage ID to the Run Info page.
General
Introduced a panel search input and integrated it into the navigation switcher component.
Improved workspace switch redirects to preserve the active sidebar section.
Bug fixes
Compute environments
Deduplicated the compute environment entry in the launch drop-down.
Data Explorer
Made credentials a required field in the Add data repository form.
Pipelines
Refined workflow_updated events that contain no diff.
Prevented duplicate GitHub credentials across PAT and GitHub App types.
Resolved file paths to the most recent lineage record.
Feature updates and improvements
Compute environments
Added a CloudInfo cloud instance type catalog and chip-selector filters specification.
Added a description field to the Compute Environment V2 form.
Datasets
Exposed dataset file size in version API responses.
Pipelines
Studios
Added the compute environment name to the Studios row card.
Added new API endpoints to fetch compatible compute environments for a Studio and update the compute environment on a Studio.
Enabled updating the compute environment on a Studio.
Resolved the user on SSH Studio connection attempts.
Bug fixes
Data Explorer
Supported GCS pre-signed URLs with WIF credentials in Data Explorer.
Pipelines
Disabled the lineage launch toggle when lineage settings are not configured or when the compute environment does not support lineage.
Studios
Recovered legacy Studio event names in the usage query.
Fell back to baseline Studio capabilities when the manifest is missing or the Studio version is not found in the manifest.