kestra

Changelog

🚀 Features

system

• d007168 expose SSE follow-connection metrics in Prometheus (#17004), closes #16982 #16997 #17004

📘 Subtasks

version

• 39b1fd0 update to version '1.0.49'

🐛 Bug Fixes

core

• ab068a7 throw an illegal exception when a sort is null or empty
• b6bc2da compilation issue due to bad merge
• 380d763 fix exponential retry delay — first retry was 0s, growth was linear not exponential

dashboard

• 3b81bae apply active dashboard filters to chart CSV export

flows

• ab74ed1 apply query and namespace filters in findSourceCode

repository

• bab80cb complete SQL-injection backport on 1.0.x (test compile + flow-label NOT_EQUALS) (#17071), closes #17071
• 281f2d4 escape jq string metacharacters in H2 label-key filters
• edd2c9a return HTTP 422 on unknown sort field instead of NPE

security

• 5fd73ab escape control characters in jq string literals and add tests

storage

• cf4d970 return 4xx for storage/authorization failures instead of 500 (#16961), closes #16897 #16957 #16961

system

• 03d0b0d SQL injection in SQL regex

triggers

• a2839d0 make JDBC trigger create() idempotent

🏭 Tests

flows

• fd74c8d add missing 3-arg builder overload in AbstractFlowRepositoryTest (#17047), closes #17047

🛠 Build

release

• 90f3c89 use kestra base images when publishing docker

• 12f94d6 Increase timeout in ExecutionControllerRunnerTest dependency test (#17126), closes #17126

Contributors

We'd like to thank the following people for their contributions:
Barthélémy Ledoux, Claude, Claude Opus 4.8, Florian Hussonnois, GitHub, Loïc Mathieu, Nicolas K., Roman Acevedo, Steven Meek, github-actions[bot], nKwiatkowski