Feature updates and improvements​

Dependencies​

• Bumped nf-tower@1.17.6 by @pditommaso

Bug fixes​

Language features​

• Fixed formatting bug with map key expression by @bentsherman in #6893
• Fixed incorrect evaluation of secret process directive by @bentsherman in #6934
• Fixed params block in included module by @bentsherman in #6940
• Fixed params inclusion across modules in v2 parser by @bentsherman in #6766

Configuration​

• Fixed resolution of params in resolved config text by @jorgee in #7072

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v25.10.5

Feature updates and improvements​

Configuration​

• Renamed nextflow.preview.types feature flag to nextflow.enable.types by @pditommaso in #7067
• Added support for validation of collection params with record types by @bentsherman in #7025

General​

• Added -user-secret and -workspace-secret flags to nextflow launch by @rnaidu-seqera in #7040

Bug fixes​

Language features​

• Fixed runtime type reflection in nf-lang by @bentsherman in #7077

General​

• Fixed ANSI colors in error messages by @ewels in #7078

Dependencies​

• Bumped nf-tower@1.27.0

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.04.0

Container building​

• Added BuildEnabled flag in MultiPlatformBuildService by @munishchouhan in #1030

General​

• Added missing configuration documentation by @munishchouhan in #1025
• Refined Docker Compose setup for Wave Lite by @munishchouhan in #1033
• Reduced Wave resource requirements in installation manifests by @bebosudo in #1028
• Updated documentation with minor clarity improvements by @christopher-hakkaart in #1034

Dependencies​

• Updated third-party dependency versions to latest stable by @cristianrcv in #1037

Bug fixes​

Container building​

• Added micromamba clean to v2 templates to reduce image size by @munishchouhan in #1038

Singularity​

• Fixed pixi Singularity template PATH environment by @munishchouhan in #1036

Full changelog: https://github.com/seqeralabs/wave/compare/v1.33.2...v1.33.3

Access control​

• Added PKCE and consent flow support to OIDC, enabling Seqera Platform to act as an identity provider for OIDC/OAuth2 clients such as the Seqera AI CLI.

Bug fixes​

Pipelines​

• Fixed Nextflow timeline config generation to resolve NXF_TML_FILE via System.getenv instead of relying on shell variable expansion.
• Fixed the Browse button in the pipeline launch form being hidden for users with Launch, Connect, or View workspace roles by gating it on the correct permission instead of the Studios studio:execute grant.

Upgrade notes​

No breaking changes. Standard upgrade procedure applies.

Language features​

• Removed unnecessary runtime checks with strict syntax by @bentsherman in #6539

Dependencies​

• Bumped nf-amazon@3.4.4
• Bumped nf-google@1.23.5
• Bumped nf-tower@1.17.5

Bug fixes​

Language features​

• Fixed false error with optional param by @bentsherman in #6811
• Fixed false error with multi-line tuple assignment in v2 parser by @bentsherman in #6786
• Fixed false error in v2 parser when including config file from HTTP URL by @bentsherman in #6753

AWS Batch​

• Added isCompleted check in getNumSpotInterruptions by @munishchouhan in #6806

General​

• Fixed LogsCheckpoint thread blocking shutdown for up to 90 seconds by @pditommaso in #6787

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.4-edge

• Methurator (#3447)
  • A Python package designed to estimate CpGs saturation for DNA methylation sequencing data.
• riboWaltz (#3465)
  • Computes P-site offsets and performs quality control for ribosome profiling (Ribo-seq) data.

Feature updates and improvements​

• Add uv as an installation method in docs and README (#3493)
• Add Claude PostToolUse hook for code formatting (#3461)
• Bump default AI models for Anthropic (#3430)
• Remove HTML tags in generated module docs (#3509)
• Enable code review workflow to post comments on PRs (#3506)
• better header k/v spacing (#3471)
• Hide AI summary sections when simple_output is enabled (#3500)
• export_plots_timeout: Add docs and increase default to 60s (#3433)

Module updates​

• Clarify RSeQC bam_stat proper pairs column title (#3526)
• Fix mosdepth coverage in general stats if key is missing (#3432)
• fastp: Add limits, update color scale of % PF/% Adapter (#3454)
• fastp: Pick up version number for fasterp runs (#3392)
• Freyja: Use safe alternative to eval() (#3531)

Fixes​

• Fix heatmap axis labels not updating when toggling clustering (#3487)
• Fix bug: Toggling highlighting for AI summary sample names didn't work (#3455)
• fix table scroll styling with sticky headers (#3437)

Module fixes​

• Fix sample name cleaning in CheckM and CheckM2 modules (#3464)
• CrosscheckFingerprints: Fix bug due to overwriting row_number variable (#3458)
• Porechop: Fix bug with "End Trimmed Percent" denominator (#3456)
• Fix incorrect plot title in umicollapse module (#3446)
• SNPsplit: Fix module datetime serialization error (#3444)

Infrastructure and packaging​

• Switch from pre-commit to prek (#3467)

New Contributors​

• @CelinePrakash made their first contribution in https://github.com/MultiQC/MultiQC/pull/3458
• @nictru made their first contribution in https://github.com/MultiQC/MultiQC/pull/3487
• @drbh made their first contribution in https://github.com/MultiQC/MultiQC/pull/3392

Full Changelog: https://github.com/MultiQC/MultiQC/compare/v1.33...v1.34

Language features​

• Added option to disable printing workflow outputs by @bentsherman in #7018
• Resolved structured process input types by @bentsherman in #7014

S3​

• Applied socket timeout to S3 CRT connections by @jorgee in #7024
• Managed AWS SDK exceptions to convert to the appropriate IO exceptions by @jorgee in #6707

Plugins​

• Updated missing pf4j updates by @jorgee in #7016

Fusion​

• Added Fusion GPU metrics collection by @pditommaso in #7022
• Used Fusion trace metrics to replace bash command-trace wrapper by @pditommaso in #7041

General​

• Added -files-from option to lint command to avoid ARG_MAX limit by @adamrtalbot in #6858
• Added 26.04 migration docs by @bentsherman in #7000
• Allowed cloning from local Git repositories when --offline by @MatthiasZepper in #7035
• Allowed running pipeline from URL and main script path by @jorgee in #6602
• Filtered autoLabels to selected workflow-metadata fields by @pditommaso in #7049
• Honored process.resourceLabels in nf-seqera executor by @pditommaso in #7048
• Renamed module info subcommand to module view by @pditommaso in #7052
• Simplified demo module README template by @pditommaso in #7051
• Suppressed lint progress logging with -q flag by @ewels in #6880

Bug fixes​

Language features​

• Fixed formatting issues with complex expressions by @bentsherman in #7027

S3​

• Fixed S3FileSystemProvider.newInputStream() draining full object on close by @jorgee in #7046

Plugins​

• Fixed inconsistent indentation in nf-amazon by @bentsherman in #7047
• Fixed nextflowVersion for nf-tower and nf-seqera plugins by @pditommaso in cbc0a2d8e

General​

• Fixed generated process name in module create command by @jorgee in #7008
• Fixed module info formatting separator by @pditommaso in #7033
• Fixed resolution of -with-tower with TOWER_API_ENDPOINT by @bentsherman in #7045
• Fixed saveCacheFiles early return skipping log file uploads by @munishchouhan in #7015

Dependencies​

• Bumped org.bouncycastle:bcpkix-jdk18on from 1.79 to 1.84 by @dependabot in #7042
• Bumped nf-amazon@3.8.3
• Bumped nf-k8s@1.5.2
• Bumped nf-seqera@0.18.0
• Bumped nf-tower@1.25.0
• Bumped nf-wave@1.19.1

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.3-edge

Container Building​

• Added max size validation for container layer location by @pditommaso in #1006

General​

• Updated wave.build.public-repo reference language by @christopher-hakkaart in #1008
• Replaced local DurationUtils with shared lib-util-time by @pditommaso in #1010

Dependencies​

• Updated actions/checkout action to v4.3.1 by @seqeralabs-renovate[bot] in #1013
• Updated actions/setup-java action to v4.8.0 by @seqeralabs-renovate[bot] in #1014
• Updated actions/setup-node action to v4.4.0 by @seqeralabs-renovate[bot] in #1015
• Updated actions/upload-artifact action to v4.6.2 by @seqeralabs-renovate[bot] in #1016
• Updated aws-actions/amazon-ecr-login action to v1.7.1 by @seqeralabs-renovate[bot] in #1017
• Updated aws-actions/configure-aws-credentials action to v1.7.0 by @seqeralabs-renovate[bot] in #1018
• Updated dependency node to v20.20.2 by @seqeralabs-renovate[bot] in #1019
• Updated docker/login-action action to v3.7.0 by @seqeralabs-renovate[bot] in #1020
• Updated docker/setup-buildx-action action to v3.12.0 by @seqeralabs-renovate[bot] in #1021
• Upgraded third-party dependencies to latest stable versions by @cristianrcv in #998
• Pinned dependencies by @seqeralabs-renovate[bot] in #1012

Bug fixes​

Container Building​

• Fixed Conda builds for packages requiring __cuda virtual package by @pditommaso in #1027

Singularity​

• Fixed build error with --build-template conda/micromamba:v2 for Singularity by @munishchouhan in #972

Full changelog: https://github.com/seqeralabs/wave/compare/v1.33.1...v1.33.2

Language features​

• Added typed workflows by @bentsherman in #6881

Modules​

• Added module create subcommand by @pditommaso in #6992
• Added module spec command by @jorgee in #6859
• Added module validate subcommand by @pditommaso in #6993
• Replaced custom ModuleRegistryClient with npr-client API by @pditommaso in #7012

General​

• Added compute env ID and provider support to Seqera executor by @pditommaso in #6906
• Added resourceAllocation field to trace record by @pditommaso in #6973
• Replaced Auth0 with Platform OIDC PKCE for auth login by @pditommaso in #6953
• Used inline metadata from trace create response by @pditommaso in #6976

Bug fixes​

General​

• Fixed NPE in GitLab/Gitea getGitCredentials when password is null but token is set by @robsyme in #7007
• Fixed missing version for junit-platform-launcher dependency by @pditommaso in #7011

Dependencies​

• Bumped nf-amazon@3.8.2
• Bumped nf-seqera@0.17.0
• Bumped nf-tower@1.24.0

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.2-edge

Studios​

• Updated Studios micromamba to conda/micromamba:v2 and Wave to 1.33.0.

Compute environments​

• Added private VNet and subnet support for Azure Batch compute environments.
• Added separate Azure managed identities for head and compute jobs.
• Improved compute environment metering system with observability and retry logic.

Datasets​

• Added frontend implementation for dataset import from URL.
• Added preview support for linked datasets.

Data Explorer​

• Added Fusion symlink support in Data Explorer.
• Increased maximum data-link name length to 512 characters.

Bug fixes​

Compute environments​

• Fixed projectId on WIF LoggingOptions for log retrieval.
• Fixed WIF log retrieval to resolve project number to project name.
• Fixed WIF organization and workspace context propagation for log retrieval and data links.

Pipelines​

• Fixed parallel requests to pipeline info in launch form.

Datasets​

• Fixed dataset name field to apply input normalization.
• Fixed column order preservation in dataset preview for TSV files.

Access control​

• Fixed handling of absent Auth0 organization context.

Feature updates and improvements​

Studios​

• Improved Studios session management and stability.
• Updated Studios micromamba builds to use conda/micromamba:v2 and Wave 1.33.0.
• Added nameStrategy configuration option to Studios workspace settings.
• Renamed Studios settings route from data-studios to studios.
• Added ability to edit stopped Studios without restarting them.
• Container registry improvements:
  • Configurable container repository path for custom image builds.
  • Configurable container image naming strategy (default, tag prefix, image suffix, none).
• Studios work with Wine/XFCE/VNC (Windows compatible OS).

Compute environments​

• Added separate head and worker pool support for Azure Batch compute environments in both Forge and manual modes.
• Added ability to disable a compute environment.
• Improved Seqera Compute integration.
• Improved compute environment form warning display with individual stacked alerts.

Azure​

• Changed default Azure Batch job timeout to 7 days and exposed it as a new configuration item.
• Updated default Azure termination policy in compute environment creation form.
• Added VNet and subnet support for Azure Batch compute environments.
• Added support for separate managed identity client IDs for head and compute jobs in Azure Batch.
• Enabled Entra (service principal) credentials for Azure Batch Forge pool creation and Fusion v2.

AWS​

• Added AWS credential modes with support for key-based and role-based access.
• Added AWS External ID support for role-based credentials.

GCP​

• Added Workload Identity Federation (WIF) credential support for Google Batch and Google Cloud compute environments.
• Added support for network tagging in Google Batch.
• Added boot disk image selection for Google Batch compute environments.
• Added support for multiple machine types in Google Batch compute environments.
• Configurable retry behavior for tasks with null exit codes in Google Batch compute environments.

Pipelines​

• Redesigned workflow notification email templates with updated styling.
• Added GitHub App manifest flow for credential creation.
• Improved clipboard UX in workflow details header.
• Updated schema radio control copy.
• Redesigned report preview modal header layout and modal.
• Registered Nextflow CLI as a static OIDC client for authorization code with PKCE flow.
• Enriched the POST /trace/create response with platform metadata to reduce downstream API calls from Nextflow. (link needed)

Datasets​

• Added preview support for linked (URL-referenced) dataset versions.

Data Explorer​

• Added data lake support in Data Explorer.
• Added Molstar 3D viewer for PDB and CIF file preview.
• Added extensible view mode selection for JSON files in Data Explorer (JSON, IGV, and plain text).
• Updated Data Explorer to display non-native browser files as text when opened in a new tab.
• Added Fusion symlink resolution to the Data Explorer API.
• Increased the maximum data link name length to 512 characters.

Access control​

• Added required description field to custom role creation.
• Exposed roles API endpoints in the OpenAPI specification.
• Added SSO domain-based redirect for the login guard.

Monitoring and observability​

• Added real-time active user count display in the admin panel.
• Added workspace usage metrics.
• Added CSV export for audit logs v2 with configurable maximum record limit.
• Added audit event metadata (owner ID, workspace ID) to Studios audit events.
• Switched audit logs v2 to token-based pagination for improved performance.
• Added comprehensive audit logging for SSO lifecycle events.
• Migrated telemetry usage queries to use the audit logs v2 table.
• Updated the audit log cleaner to handle both v1 and v2 audit log tables.
• Added CSV export button to the admin audit logs v2 table.
• Added descriptions and documentation metadata to audit event types.
• Added audit event metadata to the remaining Studios session audit events.
• Added audit event metadata (owner ID, workspace ID) to all data link audit events.
• Added target_name field to the audit log v2 data model.
• Renamed outdated audit event types to use consistent naming conventions.
• Deprecated the legacy /admin/audit-logs (v1) endpoint.
• Added target resource names to all audit event emission points.
• Refined audit log v2 target resource context labels in API, UI, and CSV export.
• Added a TOWER_AUDIT_LOG_V2_WRITE_MODE setting supporting v1, v2, and dual modes.
• Removed unused instanceId and instanceName columns from the audit log v2 table.
• Updated the audit log v2 admin table to display resource names alongside target IDs.
• Added target organization, workspace, and user context to audit log v2 interfaces.

General​

• Bumped Micronaut from 4.7.6 to 4.8.3.
• Improved admin workspace list toolbar responsiveness.
• Applied updated status icons across platform components.
• Redesigned page header layout with improved toolbar and breadcrumb integration.
• Added automatic breadcrumb navigation to page headers.
• Updated delete workspace confirmation modal text to clarify the impact of deletion.
• Removed the unused Containers page.
• Removed the dynamic resource labels feature toggle (feature is now always active).

New environment variables in 26.1​

The following environment variables are new or changed in 26.1. See the Configuration overview for the full descriptions and defaults:

• TOWER_DATA_STUDIO_ALLOWED_WORKSPACES — control which workspaces have Studios enabled.
• TOWER_AUDIT_LOG_V2_WRITE_MODE — switch between v1, v2, and dual-write audit log tables.
• TOWER_AUDIT_LOG_V2_CSV_EXPORT_MAX_LOGS — cap the number of records in a CSV export.
• TOWER_AUDIT_LOG_V2_PRE_POST_CHANGE_ENABLED — capture pre/post change state images.
• TOWER_CRON_AUDIT_LOG_CLEAN_UP_* — tune the audit log cleanup cron job.
• TOWER_COMPUTE_ENV_CLEANUP_* — tune the cron job that transitions compute environments stuck in CREATING or DELETING states.
• New Studios family variables for default lifespan, privacy default, list page size, feature manifest URL, Connect iframe scoping, Wave build status checks, disallowed registries, and startup metrics. See Data features.

Bug fixes​

Studios​

• Added workspace existence check before creating Studios workspace settings.
• Fixed R-IDE icon styling.
• Added validation of git repository configuration files when creating a Studio.
• Fixed broken navigation from Studio details page for private Studios.

Compute environments​

• Fixed Google Batch machine type migration to be portable across MySQL and MariaDB.
• Removed hardcoded prediction model configuration from AWS Cloud platform provider.
• Fixed metering event handling to batch events when more than 100 events are received, preventing silent data loss.
• Removed default terminateAsync implementation to enforce explicit provider implementations.
• Fixed Workload Identity Federation (WIF) log retrieval by setting the project ID on the Cloud Logging client.
• Fixed WIF log retrieval by resolving GCP project numbers to project names for Cloud Logging filters.
• Fixed WIF credential context propagation for log retrieval and data link operations.
• Propagated AWS Forge disposal failures instead of silently swallowing exceptions.
• Pinned google-cloud-storage to a compatible version to fix NoClassDefFoundError on GCS data link access.
• Returned an actionable error message when an Azure Batch pool is missing during job submission.
• Propagated GCP Forge disposal failures instead of silently ignoring resource deletion errors.
• Enabled cloud cache for Kubernetes compute environments with local PVC paths.
• Reverted unintended cloud cache change for Kubernetes compute environments.

Pipelines​

• Fixed pipeline implicit default version resolution.
• Removed logs from AI debug button URL to prevent URI too large errors.
• Replaced document.write with client-side form submission in GitHub App manifest flow to fix Firefox blank page issue.
• Made workflow job cancellation idempotent to prevent 500 errors on concurrent cancel requests.
• Fixed parallel requests to pipeline info in the launch form.

Datasets​

• Fixed LazyInitializationException in avatar resolution during dataset creation.
• Fixed dataset name field to apply input normalization (spaces converted to underscores).
• Fixed column order preservation in dataset preview for TSV files.

Data Explorer​

• Fixed IGV MIME type detection in Data Explorer.

Access control​

• Fixed refresh token JWT secret configuration for enterprise deployments.
• Hardened the Auth0 OAuth2 flow with retries against ResponseClosedException errors.
• Fixed auth0org_id column naming to align with Hibernate naming strategy.
• Fixed erroneous @QueryValue annotations on SSO controller path variables causing 404 errors.
• Fixed @PermissionRequired interceptor binding with @Type annotation.
• Fixed @JWTAuthRequired interceptor binding with @Type annotation to prevent silent bypass.

Monitoring and observability​

• Fixed dashboard drop-down scrolling and character overflow.
• Fixed task logging to use populated taskId instead of empty id.
• Fixed user_sign_in audit events to correctly populate the actor field with the signing user's ID.

General​

• Fixed side navigation width not updating in Safari when toggling the collapsed state.
• Fixed credits banner appearing during page load.
• Fixed oversized icon on the forbidden access page.

Upgrade notes​

No breaking changes. Standard upgrade procedure applies.

Configuration changes​

• TOWER_AUDIT_LOG_V2_ENABLED and TOWER_AUDIT_LOG_V2_WRITE_MODE added as configuration options.

  • TOWER_AUDIT_LOG_V2_WRITE_MODE: Turns on the v2 Audit Log for parallel writes with v1 Audit Log.
  • TOWER_AUDIT_LOG_V2_ENABLED: Turns on or off the v2 Audit Log view from the Admin Panel.

Database migrations​

Database migrations run automatically during upgrade. No manual steps required.

Studios​

• Added Wave nameStrategy workspace setting for Studios.

Compute environments​

• Added Azure service principal credentials support.
• Added Workload Identity Federation support for Google Batch compute environments.
• Added Entra credentials for Azure Batch Forge and Fusion v2.
• Added resource labels as metadata on Azure Batch jobs.
• Added support for multiple machine types in Google Batch compute environments.

Pipelines​

• Added Nextflow CLI as a static OIDC client.

Datasets​

• Added URL redirection logic to dataset file endpoint.

Data Explorer​

• Added extensible view mode selection for JSON files.
• Added open in new tab support for all files.

Monitoring​

• Updated database model to include target resource name.

General​

• Applied new email design to all email templates.
• Updated copy in delete workspace confirmation modal.
• Removed unused Containers page.
• Upgraded to Angular 21.

Bug fixes​

Studios​

• Fixed git config file validation when creating a Studio.

Compute environments​

• Fixed errors not propagated when a job is terminated asynchronously.
• Removed deprecated seqera.executor.predictionModel configuration.
• Removed terminateAsync default implementation.

Access control​

• Fixed Auth0 OAuth2 flow to handle ResponseClosedException.

Monitoring​

• Fixed credential audit events to include metadata.
• Fixed task logging to use populated taskId instead of empty id.

General​

• Fixed page-header actions, documentation links, and spacing.
• Fixed forbidden page icon size.

Container building​

• Refactored build vs cache IAM permission structure by @gwright99 in #999

UI/UX​

• Updated list to cards on tutorials page by @christopher-hakkaart in #993

General​

• Updated index page by @christopher-hakkaart in #1004
• Updated copyright to 2026 by @munishchouhan in #1003
• Updated token cache duration and clarified public repository documentation by @munishchouhan in #1007

Dependencies​

• Migrated dependencies to Gradle version catalog (libs.versions.toml) by @cristianrcv in #996
• Bumped Netty to 4.2.10.Final and Micronaut to 4.10.10 by @pditommaso in #1001

Full changelog: https://github.com/seqeralabs/wave/compare/v1.33.0...v1.33.1

Language features​

• Hardened ProcessEntryHandler types and added test for dot-notation conflicts by @pditommaso in #6966
• Added print workflow outputs on run completion by @bentsherman in #6875
• Used destructuring syntax for process record/tuple inputs by @pditommaso in #6912

General​

• Added -project-dir option to lint command by @bentsherman in #6728
• Added platform-related metadata to WorkflowRun lineage record by @jorgee in #6545
• Added request timeout to tower client by @jorgee in #6950
• Added support for Java 26 by @pditommaso in #6969
• Improved module command: enabled logging for module run, fixed info URL and search output by @pditommaso in #6961
• Skipped launch metadata fetch for CLI-submitted runs by @pditommaso in #6975
• Used -d flag for bkill in LSF executor by @cgoina in #6784

Bug fixes​

Language features​

• Fixed handling of empty publishedValues in PublishOp.onComplete for optional outputs by @jorgee in #6979
• Fixed incorrect evaluation of secret process directive by @bentsherman in #6934
• Fixed params block in included module by @bentsherman in #6940

S3​

• Fixed download of empty files in old MinIO-based S3 transfers by @jorgee in #6944

AWS Batch​

• Fixed AWS Batch machine type trace for new instance families by @FloWuenne in #6952

Plugins​

• Fixed jackson-databind dependency in nf-amazon by @pditommaso in #6941

Dependencies​

• Fixed netty and jackson vulnerabilities by @jorgee in #6955
• Fixed security vulnerabilities by @jorgee in #6938

General​

• Fixed AgentLogObserver printing [SUCCESS] on failed runs by @pditommaso in #6962
• Fixed LogsCheckpoint thread interrupt race condition by @pditommaso in #6939
• Fixed module run CLI params cast to declared meta.yml input types by @jorgee in #6968
• Fixed typo in TowerRetryPolicy: maxAttemps → maxAttempts by @robsyme in #6949

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.1-edge

Studios​

• Added IGV viewer for genomic data visualization.
• Added clipboard permissions to Studios iframe.
• Added support for previewing multitrack IGV JSON files.
• Improved Studios capabilities version check to normalize to major.minor granularity.

Compute environments​

• Added KMS encryption policy to AWS Cloud compute environments to support mounting KMS buckets in Studios.
• Added boot disk image selection for Google Batch compute environments.
• Added machine type selection for Google Batch compute environments.

Datasets​

• Added dataset link foundations.
• Added validate and link endpoints for dataset linking.

Pipelines​

• Improved pipeline launch form to scroll to first invalid control and highlight invalid parameters step.

General​

• Updated tabs component styles.
• Unified Seqera logos in compute environment and credential forms.

Bug fixes​

Compute environments​

• Fixed Google Batch secrets support.

Data Explorer​

• Fixed horizontal scrolling in Data Explorer file preview modal.

Access control​

• Fixed and clarified refresh token properties.
• Fixed permission required interceptor.
• Fixed JWTAuthRequired interceptor binding to prevent silent bypass.

General​

• Fixed nginx absolute redirects.

Language features​

• Added module system by @pditommaso in #6650
• Added multi-arch support to arch process directive by @pditommaso in #6897
• Added record types by @bentsherman in #6679
• Propagated errors from workflow outputs by @bentsherman in #6876

Configuration​

• Added provider option to Seqera executor config by @pditommaso in #6908

Google Batch​

• Added support for GCP Ops Agent by @ejseqera in #6608
• Added support for latest-generation Google Cloud machine families by @sosoihd in #6841

Fusion​

• Defaulted Fusion to v2.6 for Seqera executor by @pditommaso in #6933

General​

• Added NVMe disk allocation and diskMountPath support by @pditommaso in #6879
• Added logStreamId to Tower task record by @pditommaso in #6877
• Excluded container from task trace when containers are not enabled by @bentsherman in #6824
• Increased tasks.cloudZone width from 15 to 25 by @ramonamela in #6907

Bug fixes​

Language features​

• Fixed formatting bug with map key expression by @bentsherman in #6893
• Fixed path traversal, resource leak, and race condition in module system by @pditommaso in #6929
• Fixed remote modules when base dir is not the current working directory by @jorgee in #6932
• Fixed stageAs method signature in typed process by @bentsherman in #6915

Configuration​

• Fixed type detection of CLI params in v2 config parser by @bentsherman in #6765

Google Batch​

• Fixed Google Batch exit code when spot claim is successfully retried by @jorgee in #6926

Kubernetes​

• Fixed K8s token refresh by caching K8sClient at executor level by @pditommaso in #6925

Plugins​

• Fixed HttpPluginRepository empty plugin list check by @pditommaso in #6650

General​

• Fixed TraceFileObserver NPE when trace file already exists by @robsyme in #6891

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.0-edge

Compute environments​

• Added human-readable messages for Google Batch exit codes.
• Added network tags support for Google Batch compute environments.

Data Explorer​

• Updated S3-compatible storage label in Data Explorer filter.

Access control​

• Moved edit button to organization details card.
• Improved welcome email UI.
• Updated authentication error page background.

General​

• Added navigation side-nav component for in-page navigation.
• Added expandable-text component to design system.

Bug fixes​

Studios​

• Fixed Studios expiry check to include stopping Studios.

Pipelines​

• Fixed tower.launch.params.maxSize to be passed to the frontend and used in validators.
• Fixed database migration by removing DEFAULT constraint on LONGTEXT column in tw_task_data_ext.

General​

• Fixed vertical alignment of checkboxes in table select column.
• Fixed table checkbox positioning.

Container building​

• Added multi-platform container builds for amd64 and arm64 by @pditommaso in #985

Dependencies​

• Externalized lib-pairing module to libseqera by @pditommaso in #958

General​

• Added validation and documentation for commands in the container API by @munishchouhan in #961
• Added support for cross AWS account IAM role authentication by @munishchouhan in #979
• Added Server-Side Request Forgery (SSRF) protection to the validate-creds API by @munishchouhan in #962

Bug fixes​

General​

• Fixed error messages by @munishchouhan in #957
• Added explicit type casts for ECR auth token requests by @pditommaso in #992

Full Changelog: https://github.com/seqeralabs/wave/compare/v1.32.6...v1.33.0

Dependencies​

• Bumped s5cmd to 2.3.0 by @pditommaso in 80cafbc7b

Full Changelog: https://github.com/seqeralabs/wave/compare/v1.32.6...v1.32.7

Compute environments​

• Added m8gn and m8gb instance families to NVMe list.

Datasets​

• Added initial support for datasets linking remote HTTP/HTTPS URLs.

Data Explorer​

• Added support for selecting data-link subfolders directly by subpath.
• Added mountDataV2 API endpoint for mounting data-links with a specified path.

Access control​

• Updated OIDC authentication with PKCE and consent support.

Monitoring​

• Improved accessibility tags on progress bar percentage component.

General​

• Redesigned table component visuals.

Bug fixes​

Studios​

• Fixed Studios analytics query to handle usage edge cases.

Compute environments​

• Fixed httpPutResponseHopLimit specification for AWS instances to allow Nextflow containers to authenticate with the metadata service.
• Fixed 404 errors on legacy pod deletion during Kubernetes compute environment disposal.
• Excluded Micronaut transitive dependencies from sched-pairing-client.

Pipelines​

• Fixed NXF_TML_FILE to use System.getenv in timeline configuration.

Access control​

• Fixed an intermittent login redirect bug.