dagu

v2.7.4 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 12d Automation & Workflows

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-workflow cron data-pipeline devops durable-execution durable-workflows

+14 more

human-in-the-loop job-scheduler mcp-server multiplayer-agent on-premise private-runners self-hosted self-service selfservice-portal task-automation task-scheduler workflow-engine workflow-orchestration workflow-scheduler

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 12d

Version v2.7.4 introduces DAG run resource limits and MCP auditability while fixing several display and mailer issues.

Why it matters: New DAG run resource limits enable tighter control over workflow execution; bug fixes correct status display, mail attachment handling, zombie repair false positives, and retry dispatch stability.

Summary

AI summary

Updates refactor, fix, and feat across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Adds DAG run resource limits. Adds DAG run resource limits. Source: llm_adapter@2026-05-22 Confidence: high	—
Feature	Medium	Adds MCP auditability. Adds MCP auditability. Source: llm_adapter@2026-05-22 Confidence: high	—
Dependency	Medium	Bumps ui-security group dependencies with three updates. Bumps ui-security group dependencies with three updates. Source: llm_adapter@2026-05-22 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes display of DAG tool preparation status. Fixes display of DAG tool preparation status. Source: llm_adapter@2026-05-22 Confidence: high	—
Bugfix	Medium	Fixes mailer to forward cfg.Attachments instead of empty slice. Fixes mailer to forward cfg.Attachments instead of empty slice. Source: llm_adapter@2026-05-22 Confidence: high	—
Bugfix	Medium	Prevents false zombie repair for live local runs. Prevents false zombie repair for live local runs. Source: llm_adapter@2026-05-22 Confidence: high	—
Bugfix	Medium	Stabilizes queued retry dispatch mechanism. Stabilizes queued retry dispatch mechanism. Source: llm_adapter@2026-05-22 Confidence: high	—
Refactor
Refactor	Medium	Refactors distributed attempt ownership extraction. Refactors distributed attempt ownership extraction. Source: llm_adapter@2026-05-22 Confidence: low	—
Refactor	Medium	Refactors DAG-run intake module extraction. Refactors DAG-run intake module extraction. Source: llm_adapter@2026-05-22 Confidence: low	—
Refactor	Medium	Refactors queue dispatch module extraction. Refactors queue dispatch module extraction. Source: llm_adapter@2026-05-22 Confidence: low	—
Refactor	Medium	Refactors StepExecutor for step execution extraction. Refactors StepExecutor for step execution extraction. Source: llm_adapter@2026-05-22 Confidence: low	—
Refactor	Medium	Stages DAG spec compiler. Stages DAG spec compiler. Source: llm_adapter@2026-05-22 Confidence: low	—
Refactor	Medium	Refactors process wiring modules extraction. Refactors process wiring modules extraction. Source: llm_adapter@2026-05-22 Confidence: low	—
Refactor	Low	Extracts distributed attempt ownership logic. Extracts distributed attempt ownership logic. Source: granite4.1:30b@2026-05-22-audit Confidence: low	—

Full changelog

This is primarily a bug fix release.

Added

feat: add DAG run resource limits (#2179) @yohamta0
feat: add MCP auditability (#2193) @yohamta0

Changed

refactor: extract DAG-run intake module (#2178) @yohamta0
refactor: extract queue dispatch module (#2180) @yohamta0
chore(deps): bump the ui-security group across 1 directory with 3 updates (#2182) @dependabot
refactor: extract distributed attempt ownership (#2183) @yohamta0
refactor: extract StepExecutor for step execution (#2185) @yohamta0
refactor: stage DAG spec compiler (#2186) @yohamta0
refactor: extract process wiring modules (#2188) @yohamta0

Fixed

fix: show DAG tool preparation status (#2184) @yohamta0
fix(mail): forward cfg.Attachments to the mailer instead of an empty slice (#2190) @bitsmashtrader
fix: prevent false zombie repair for live local runs (#2191) @yohamta0
fix: stabilize queued retry dispatch (#2192) @yohamta0

Contributors

Thanks to our contributors for this release:

| Contribution | Contributor |
| --- | --- |
| chore(deps): bump the ui-security group across 1 directory with 3 updates (#2182) | @dependabot |
| fix(mail): forward cfg.Attachments to the mailer instead of an empty slice (#2190) | @bitsmashtrader |
| Zombie detector false-positive: child-agent heartbeat stalls >90s under concurrent dispatch + long SSH steps (2.6.10) (#2189) | @JonBasse (report) |

New Contributors

@bitsmashtrader made their first contribution in https://github.com/dagucloud/dagu/pull/2190

Full Changelog: https://github.com/dagucloud/dagu/compare/v2.7.3...v2.7.4

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track dagu

Get notified when new releases ship.

About dagu

A local-first workflow engine built the way it should be: declarative, file-based, self-contained, air-gapped ready. One binary that scales from laptop to distributed cluster. Your Workflow Operator handles creating and debugging workflows.

All releases →