Skip to main content

Seqera Platform Enterprise v26.1

Significant integration, troubleshooting, and management improvements.

info

The legacy distribution endpoint at cr.seqera.io/private is deprecated. Only bug fixes for existing major releases will continue to be published there. New major releases of Seqera Platform are available from cr.seqera.io/enterprise. Seqera will provide updated credentials for the new endpoint — contact your Seqera representative if you need access.

Feature updates and improvements​

Studios​

  • Improved Studios session management and stability.
  • Updated Studios micromamba builds to use conda/micromamba:v2 and Wave 1.33.0.
  • Added nameStrategy configuration option to Studios workspace settings.
  • Renamed Studios settings route from data-studios to studios.
  • Added ability to edit stopped Studios without restarting them.
  • Container registry improvements:
    • Configurable container repository path for custom image builds.
    • Configurable container image naming strategy (default, tag prefix, image suffix, none).
  • Studios work with Wine/XFCE/VNC (Windows compatible OS).

Compute environments​

  • Added separate head and worker pool support for Azure Batch compute environments in both Forge and manual modes.
  • Added ability to disable a compute environment.
  • Improved Seqera Compute integration.
  • Improved compute environment form warning display with individual stacked alerts.

Azure​

  • Changed default Azure Batch job timeout to 7 days and exposed it as a new configuration item.
  • Updated default Azure termination policy in compute environment creation form.
  • Added VNet and subnet support for Azure Batch compute environments.
  • Added support for separate managed identity client IDs for head and compute jobs in Azure Batch.
  • Enabled Entra (service principal) credentials for Azure Batch Forge pool creation and Fusion v2.

AWS​

  • Added AWS credential modes with support for key-based and role-based access.
  • Added AWS External ID support for role-based credentials.

GCP​

  • Added Workload Identity Federation (WIF) credential support for Google Batch and Google Cloud compute environments.
  • Added support for network tagging in Google Batch.
  • Added boot disk image selection for Google Batch compute environments.
  • Added support for multiple machine types in Google Batch compute environments.
  • Configurable retry behavior for tasks with null exit codes in Google Batch compute environments.

Pipelines​

  • Redesigned workflow notification email templates with updated styling.
  • Added GitHub App manifest flow for credential creation.
  • Improved clipboard UX in workflow details header.
  • Updated schema radio control copy.
  • Redesigned report preview modal header layout and modal.
  • Registered Nextflow CLI as a static OIDC client for authorization code with PKCE flow.
  • Enriched the POST /trace/create response with platform metadata to reduce downstream API calls from Nextflow. (link needed)

Datasets​

  • Added preview support for linked (URL-referenced) dataset versions.

Data Explorer​

  • Added data lake support in Data Explorer.
  • Added Molstar 3D viewer for PDB and CIF file preview.
  • Added extensible view mode selection for JSON files in Data Explorer (JSON, IGV, and plain text).
  • Updated Data Explorer to display non-native browser files as text when opened in a new tab.
  • Added Fusion symlink resolution to the Data Explorer API.
  • Increased the maximum data link name length to 512 characters.

Access control​

  • Added required description field to custom role creation.
  • Exposed roles API endpoints in the OpenAPI specification.
  • Added SSO domain-based redirect for the login guard.

Monitoring and observability​

  • Added real-time active user count display in the admin panel.
  • Added workspace usage metrics.
  • Added CSV export for audit logs v2 with configurable maximum record limit.
  • Added audit event metadata (owner ID, workspace ID) to Studios audit events.
  • Switched audit logs v2 to token-based pagination for improved performance.
  • Added comprehensive audit logging for SSO lifecycle events.
  • Migrated telemetry usage queries to use the audit logs v2 table.
  • Updated the audit log cleaner to handle both v1 and v2 audit log tables.
  • Added CSV export button to the admin audit logs v2 table.
  • Added descriptions and documentation metadata to audit event types.
  • Added audit event metadata to the remaining Studios session audit events.
  • Added audit event metadata (owner ID, workspace ID) to all data link audit events.
  • Added target_name field to the audit log v2 data model.
  • Renamed outdated audit event types to use consistent naming conventions.
  • Deprecated the legacy /admin/audit-logs (v1) endpoint.
  • Added target resource names to all audit event emission points.
  • Refined audit log v2 target resource context labels in API, UI, and CSV export.
  • Added a TOWER_AUDIT_LOG_V2_WRITE_MODE setting supporting v1, v2, and dual modes.
  • Removed unused instanceId and instanceName columns from the audit log v2 table.
  • Updated the audit log v2 admin table to display resource names alongside target IDs.
  • Added target organization, workspace, and user context to audit log v2 interfaces.

General​

  • Bumped Micronaut from 4.7.6 to 4.8.3.
  • Improved admin workspace list toolbar responsiveness.
  • Applied updated status icons across platform components.
  • Redesigned page header layout with improved toolbar and breadcrumb integration.
  • Added automatic breadcrumb navigation to page headers.
  • Updated delete workspace confirmation modal text to clarify the impact of deletion.
  • Removed the unused Containers page.
  • Removed the dynamic resource labels feature toggle (feature is now always active).

New environment variables in 26.1​

The following environment variables are new or changed in 26.1. See the Configuration overview for the full descriptions and defaults:

Bug fixes​

Studios​

  • Added workspace existence check before creating Studios workspace settings.
  • Fixed R-IDE icon styling.
  • Added validation of git repository configuration files when creating a Studio.
  • Fixed broken navigation from Studio details page for private Studios.

Compute environments​

  • Fixed Google Batch machine type migration to be portable across MySQL and MariaDB.
  • Removed hardcoded prediction model configuration from AWS Cloud platform provider.
  • Fixed metering event handling to batch events when more than 100 events are received, preventing silent data loss.
  • Removed default terminateAsync implementation to enforce explicit provider implementations.
  • Fixed Workload Identity Federation (WIF) log retrieval by setting the project ID on the Cloud Logging client.
  • Fixed WIF log retrieval by resolving GCP project numbers to project names for Cloud Logging filters.
  • Fixed WIF credential context propagation for log retrieval and data link operations.
  • Propagated AWS Forge disposal failures instead of silently swallowing exceptions.
  • Pinned google-cloud-storage to a compatible version to fix NoClassDefFoundError on GCS data link access.
  • Returned an actionable error message when an Azure Batch pool is missing during job submission.
  • Propagated GCP Forge disposal failures instead of silently ignoring resource deletion errors.
  • Enabled cloud cache for Kubernetes compute environments with local PVC paths.
  • Reverted unintended cloud cache change for Kubernetes compute environments.

Pipelines​

  • Fixed pipeline implicit default version resolution.
  • Removed logs from AI debug button URL to prevent URI too large errors.
  • Replaced document.write with client-side form submission in GitHub App manifest flow to fix Firefox blank page issue.
  • Made workflow job cancellation idempotent to prevent 500 errors on concurrent cancel requests.
  • Fixed parallel requests to pipeline info in the launch form.

Datasets​

  • Fixed LazyInitializationException in avatar resolution during dataset creation.
  • Fixed dataset name field to apply input normalization (spaces converted to underscores).
  • Fixed column order preservation in dataset preview for TSV files.

Data Explorer​

  • Fixed IGV MIME type detection in Data Explorer.

Access control​

  • Fixed refresh token JWT secret configuration for enterprise deployments.
  • Hardened the Auth0 OAuth2 flow with retries against ResponseClosedException errors.
  • Fixed auth0org_id column naming to align with Hibernate naming strategy.
  • Fixed erroneous @QueryValue annotations on SSO controller path variables causing 404 errors.
  • Fixed @PermissionRequired interceptor binding with @Type annotation.
  • Fixed @JWTAuthRequired interceptor binding with @Type annotation to prevent silent bypass.

Monitoring and observability​

  • Fixed dashboard drop-down scrolling and character overflow.
  • Fixed task logging to use populated taskId instead of empty id.
  • Fixed user_sign_in audit events to correctly populate the actor field with the signing user's ID.

General​

  • Fixed side navigation width not updating in Safari when toggling the collapsed state.
  • Fixed credits banner appearing during page load.
  • Fixed oversized icon on the forbidden access page.

Upgrade notes​

No breaking changes. Standard upgrade procedure applies.

Configuration changes​

  • TOWER_AUDIT_LOG_V2_ENABLED and TOWER_AUDIT_LOG_V2_WRITE_MODE added as configuration options.

    • TOWER_AUDIT_LOG_V2_WRITE_MODE: Turns on the v2 Audit Log for parallel writes with v1 Audit Log.
    • TOWER_AUDIT_LOG_V2_ENABLED: Turns on or off the v2 Audit Log view from the Admin Panel.

Database migrations​

Database migrations run automatically during upgrade. No manual steps required.

Seqera Cloud v26.1.0_cycle48

Feature updates and improvements​

Studios​

  • Added Wave nameStrategy workspace setting for Studios.

Compute environments​

  • Added Azure service principal credentials support.
  • Added Workload Identity Federation support for Google Batch compute environments.
  • Added Entra credentials for Azure Batch Forge and Fusion v2.
  • Added resource labels as metadata on Azure Batch jobs.
  • Added support for multiple machine types in Google Batch compute environments.

Pipelines​

  • Added Nextflow CLI as a static OIDC client.

Datasets​

  • Added URL redirection logic to dataset file endpoint.

Data Explorer​

  • Added extensible view mode selection for JSON files.
  • Added open in new tab support for all files.

Monitoring​

  • Updated database model to include target resource name.

General​

  • Applied new email design to all email templates.
  • Updated copy in delete workspace confirmation modal.
  • Removed unused Containers page.
  • Upgraded to Angular 21.

Bug fixes​

Studios​

  • Fixed git config file validation when creating a Studio.

Compute environments​

  • Fixed errors not propagated when a job is terminated asynchronously.
  • Removed deprecated seqera.executor.predictionModel configuration.
  • Removed terminateAsync default implementation.

Access control​

  • Fixed Auth0 OAuth2 flow to handle ResponseClosedException.

Monitoring​

  • Fixed credential audit events to include metadata.
  • Fixed task logging to use populated taskId instead of empty id.

General​

  • Fixed page-header actions, documentation links, and spacing.
  • Fixed forbidden page icon size.

Wave v1.33.1

Feature updates and improvements​

Container building​

  • Refactored build vs cache IAM permission structure by @gwright99 in #999

UI/UX​

  • Updated list to cards on tutorials page by @christopher-hakkaart in #993

General​

  • Updated index page by @christopher-hakkaart in #1004
  • Updated copyright to 2026 by @munishchouhan in #1003
  • Updated token cache duration and clarified public repository documentation by @munishchouhan in #1007

Dependencies​

  • Migrated dependencies to Gradle version catalog (libs.versions.toml) by @cristianrcv in #996
  • Bumped Netty to 4.2.10.Final and Micronaut to 4.10.10 by @pditommaso in #1001

Full changelog: https://github.com/seqeralabs/wave/compare/v1.33.0...v1.33.1

Nextflow 26.03.1-edge

Feature updates and improvements​

Language features​

  • Hardened ProcessEntryHandler types and added test for dot-notation conflicts by @pditommaso in #6966
  • Added print workflow outputs on run completion by @bentsherman in #6875
  • Used destructuring syntax for process record/tuple inputs by @pditommaso in #6912

General​

  • Added -project-dir option to lint command by @bentsherman in #6728
  • Added platform-related metadata to WorkflowRun lineage record by @jorgee in #6545
  • Added request timeout to tower client by @jorgee in #6950
  • Added support for Java 26 by @pditommaso in #6969
  • Improved module command: enabled logging for module run, fixed info URL and search output by @pditommaso in #6961
  • Skipped launch metadata fetch for CLI-submitted runs by @pditommaso in #6975
  • Used -d flag for bkill in LSF executor by @cgoina in #6784

Bug fixes​

Language features​

  • Fixed handling of empty publishedValues in PublishOp.onComplete for optional outputs by @jorgee in #6979
  • Fixed incorrect evaluation of secret process directive by @bentsherman in #6934
  • Fixed params block in included module by @bentsherman in #6940

S3​

  • Fixed download of empty files in old MinIO-based S3 transfers by @jorgee in #6944

AWS Batch​

  • Fixed AWS Batch machine type trace for new instance families by @FloWuenne in #6952

Plugins​

  • Fixed jackson-databind dependency in nf-amazon by @pditommaso in #6941

Dependencies​

  • Fixed netty and jackson vulnerabilities by @jorgee in #6955
  • Fixed security vulnerabilities by @jorgee in #6938

General​

  • Fixed AgentLogObserver printing [SUCCESS] on failed runs by @pditommaso in #6962
  • Fixed LogsCheckpoint thread interrupt race condition by @pditommaso in #6939
  • Fixed module run CLI params cast to declared meta.yml input types by @jorgee in #6968
  • Fixed typo in TowerRetryPolicy: maxAttemps → maxAttempts by @robsyme in #6949

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.1-edge

Seqera Cloud v26.1.0_cycle47

Feature updates and improvements​

Studios​

  • Added IGV viewer for genomic data visualization.
  • Added clipboard permissions to Studios iframe.
  • Added support for previewing multitrack IGV JSON files.
  • Improved Studios capabilities version check to normalize to major.minor granularity.

Compute environments​

  • Added KMS encryption policy to AWS Cloud compute environments to support mounting KMS buckets in Studios.
  • Added boot disk image selection for Google Batch compute environments.
  • Added machine type selection for Google Batch compute environments.

Datasets​

  • Added dataset link foundations.
  • Added validate and link endpoints for dataset linking.

Pipelines​

  • Improved pipeline launch form to scroll to first invalid control and highlight invalid parameters step.

General​

  • Updated tabs component styles.
  • Unified Seqera logos in compute environment and credential forms.

Bug fixes​

Compute environments​

  • Fixed Google Batch secrets support.

Data Explorer​

  • Fixed horizontal scrolling in Data Explorer file preview modal.

Access control​

  • Fixed and clarified refresh token properties.
  • Fixed permission required interceptor.
  • Fixed JWTAuthRequired interceptor binding to prevent silent bypass.

General​

  • Fixed nginx absolute redirects.

Nextflow 26.03.0-edge

Feature updates and improvements​

Language features​

  • Added module system by @pditommaso in #6650
  • Added multi-arch support to arch process directive by @pditommaso in #6897
  • Added record types by @bentsherman in #6679
  • Propagated errors from workflow outputs by @bentsherman in #6876

Configuration​

  • Added provider option to Seqera executor config by @pditommaso in #6908

Google Batch​

  • Added support for GCP Ops Agent by @ejseqera in #6608
  • Added support for latest-generation Google Cloud machine families by @sosoihd in #6841

Fusion​

  • Defaulted Fusion to v2.6 for Seqera executor by @pditommaso in #6933

General​

  • Added NVMe disk allocation and diskMountPath support by @pditommaso in #6879
  • Added logStreamId to Tower task record by @pditommaso in #6877
  • Excluded container from task trace when containers are not enabled by @bentsherman in #6824
  • Increased tasks.cloudZone width from 15 to 25 by @ramonamela in #6907

Bug fixes​

Language features​

  • Fixed formatting bug with map key expression by @bentsherman in #6893
  • Fixed path traversal, resource leak, and race condition in module system by @pditommaso in #6929
  • Fixed remote modules when base dir is not the current working directory by @jorgee in #6932
  • Fixed stageAs method signature in typed process by @bentsherman in #6915

Configuration​

  • Fixed type detection of CLI params in v2 config parser by @bentsherman in #6765

Google Batch​

  • Fixed Google Batch exit code when spot claim is successfully retried by @jorgee in #6926

Kubernetes​

  • Fixed K8s token refresh by caching K8sClient at executor level by @pditommaso in #6925

Plugins​

  • Fixed HttpPluginRepository empty plugin list check by @pditommaso in #6650

General​

  • Fixed TraceFileObserver NPE when trace file already exists by @robsyme in #6891

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.03.0-edge

Seqera Cloud v26.1.0_cycle46

Feature updates and improvements​

Compute environments​

  • Added human-readable messages for Google Batch exit codes.
  • Added network tags support for Google Batch compute environments.

Data Explorer​

  • Updated S3-compatible storage label in Data Explorer filter.

Access control​

  • Moved edit button to organization details card.
  • Improved welcome email UI.
  • Updated authentication error page background.

General​

  • Added navigation side-nav component for in-page navigation.
  • Added expandable-text component to design system.

Bug fixes​

Studios​

  • Fixed Studios expiry check to include stopping Studios.

Pipelines​

  • Fixed tower.launch.params.maxSize to be passed to the frontend and used in validators.
  • Fixed database migration by removing DEFAULT constraint on LONGTEXT column in tw_task_data_ext.

General​

  • Fixed vertical alignment of checkboxes in table select column.
  • Fixed table checkbox positioning.

Wave v1.33.0

Feature updates and improvements​

Container building​

  • Added multi-platform container builds for amd64 and arm64 by @pditommaso in #985

Dependencies​

  • Externalized lib-pairing module to libseqera by @pditommaso in #958

General​

  • Added validation and documentation for commands in the container API by @munishchouhan in #961
  • Added support for cross AWS account IAM role authentication by @munishchouhan in #979
  • Added Server-Side Request Forgery (SSRF) protection to the validate-creds API by @munishchouhan in #962

Bug fixes​

General​

  • Fixed error messages by @munishchouhan in #957
  • Added explicit type casts for ECR auth token requests by @pditommaso in #992

Full Changelog: https://github.com/seqeralabs/wave/compare/v1.32.6...v1.33.0

Seqera Cloud v26.1.0_cycle45

Feature updates and improvements​

Compute environments​

  • Added m8gn and m8gb instance families to NVMe list.

Datasets​

  • Added initial support for datasets linking remote HTTP/HTTPS URLs.

Data Explorer​

  • Added support for selecting data-link subfolders directly by subpath.
  • Added mountDataV2 API endpoint for mounting data-links with a specified path.

Access control​

  • Updated OIDC authentication with PKCE and consent support.

Monitoring​

  • Improved accessibility tags on progress bar percentage component.

General​

  • Redesigned table component visuals.

Bug fixes​

Studios​

  • Fixed Studios analytics query to handle usage edge cases.

Compute environments​

  • Fixed httpPutResponseHopLimit specification for AWS instances to allow Nextflow containers to authenticate with the metadata service.
  • Fixed 404 errors on legacy pod deletion during Kubernetes compute environment disposal.
  • Excluded Micronaut transitive dependencies from sched-pairing-client.

Pipelines​

  • Fixed NXF_TML_FILE to use System.getenv in timeline configuration.

Access control​

  • Fixed an intermittent login redirect bug.