Feature updates and improvements​

Pipelines​

• Updated the bundled Nextflow version to 25.10.6.

Bug fixes​

Data Explorer​

• Fixed the IGV genome viewer failing to load reference genomes in Data Explorer by signing reference genome URLs.
• Fixed IGV genome viewer rendering in Data Explorer, which no longer depends on an externally hosted genome registry.
• Fixed IGV previews of Google Cloud Storage files in Data Explorer returning an authorization error, by signing those URLs with V4 signatures.
• Fixed IGV previews in Data Explorer failing at high zoom levels by signing index URLs independently of their data file URLs.

Upgrade notes​

No breaking changes. Standard upgrade procedure applies.

Feature updates and improvements​

Compute environments​

• Added a maxCpusPerUser setting to cap per-user vCPU usage in compute environments.
• Standardized head node instance type helper text across AWS, Azure, and Google Cloud compute environment forms.

Pipelines​

• Added support for Nextflow v25.10.6 and v25.10.7.

General​

• Removed the redundant Projects section from the workspace side navigation.

Bug fixes​

Studios​

• Fixed Studios row card horizontal scrolling when the sidebar is expanded on small screens.

Compute environments​

• Fixed GCP pipeline secrets to be pinned to the compute environment region.
• Fixed GCP IAM policy write conflicts during Forge compute environment creation.

Pipelines​

• Fixed shared pipeline resolution by passing the source workspace ID.

Datasets​

• Fixed dataset queries to exclude deleted runs.

Labels​

• Fixed generic label editing to no longer drop project labels.

Co-Scientist​

• Fixed the Co-Scientist portal web session link.

Feature updates and improvements​

Compute environments​

• Added support for private Azure Container Registry (ACR) image pulls on Azure Cloud.

Studios​

• Added the ability to display logs for the latest Studio run.
• Added support for applying custom CA configuration to Studios.

Co-Scientist​

• Added the ability to select Co-Scientist conversation history.
• Added page context and screenshot sharing to Co-Scientist chat.

Projects​

• Refined project details workflows.

Credits​

• Added audit log events for the self-serve credit purchase lifecycle.
• Added a root endpoint to cancel purchases stuck in the PENDING state.

General​

• Aligned the key-value date search filter hint with its control.

Bug fixes​

Compute environments​

• Fixed duplicated AWS Batch compute environments carrying a stale ec2KeyPair value by reconciling select values against loaded options.
• Prevented orphaned agent session-expiration tasks from flooding the scheduled task pool.

Studios​

• Fixed flickering of Studio environment variables.

Seqera AI​

• Surfaced the server error reason in Co-Scientist chat.

Security​

• Redacted tokens and secrets from application logs.

General​

• Fixed dark-theme issues from the semantic color token migration.

Feature updates and improvements​

Access control​

• Enabled IdP claims mapping by default for Enterprise.
• Added an organization allowlist to the IdP claims-mapping feature flag.
• Added a warning when revoking IdP group delegation.
• Added audit logs for SCIM token events.
• Added audit logging for team IdP group changes.
• Added configurable OIDC scopes via TOWER_OIDC_SCOPES.

Compute environments​

• Added bring-your-own networking support for Azure Cloud compute environments.

Bug fixes​

Access control​

• Fixed membership revocation by treating absent IdP group claims as empty.
• Fixed IdP group mapping visibility to refresh when toggling SSO.
• Fixed the IdP reconciler to create UserRole entries for workspace visibility.

Compute environments​

• Fixed end-to-end GCP Cloud compute environment support for Workload Identity Federation (WIF) credentials.
• Fixed GCP Batch error reporting to surface actionable API errors instead of a misleading WIF hint.
• Fixed xpack-google secret resolution by setting GOOGLE_CLOUD_PROJECT on the GCP Batch head job.

Monitoring​

• Fixed an OptimisticLockException when deleting audit log v2 records.

Upgrade notes​

No breaking changes. Standard upgrade procedure applies.

Feature updates and improvements​

General​

• Consolidated installation capability toggles under wave.capabilities.* and added a strict environment that disables them all by @pditommaso in #1098
• Added the ability to disable the Wave direct image pull path so callers must use freeze mode by @gavinelder in #1089
• Reduced log noise from expected Platform-connectivity errors in the token watcher by @pditommaso in #1085
• Documented the workflow-bound ephemeral token lifecycle by @pditommaso in #1084

Dependencies​

• Upgraded Micronaut to 4.10.17 to patch jackson-databind (COMP-1957) by @cristianrcv in #1091

Bug fixes​

General​

• Fixed freeze and mirror images being served through the Wave proxy token path by @gavinelder in #1087
• Fixed the Wave release workflow to run only on master and release-* branches (DEVOPS-1531) by @ShahzebMahmood in #1072

Full changelog: https://github.com/seqeralabs/wave/compare/v1.36.0...v1.37.0

Feature updates and improvements​

Studios​

• Added the Studios allowed-user table and data model.
• Implemented DataStudioAllowedUserService to persist allowed users on Studio create and start.
• Authorized allow-listed users to connect to and run private Studios.
• Exposed the allowlist in the Studios API response.
• Added revalidation of the last checkpoint in Studios.

Compute environments​

• Added a Nextflow version selector, including feature-based version requirements and its specification.
• Disabled Nextflow version selection when a custom launcher container is pinned.
• Added persistence of the AWS Cloud log group and forwarding to the CloudWatch agent.
• Added clickable row cards with new hover tokens.
• Added root-only admin validate endpoints.

Pipelines​

• Added a toggle for the Nextflow syntax parser v2.

Access control​

• Added the foundation for OAuth 2.0 refresh-token rotation.
• Added an organization allowlist to the IdP claims-mapping feature flag.
• Added audit image support for team IdP groups.
• Added audit logs for SCIM tokens.

Monitoring and observability​

• Added a current-month CPU hours metric.

General​

• Enhanced the global search UI with infinite scroll and suggestions.

Bug fixes​

Compute environments​

• Surfaced actionable GCP Batch API errors instead of a misleading WIF hint.
• Set GOOGLE_CLOUD_PROJECT on the GCP Batch head job for xpack-google secret resolution.
• Fixed selecting a Nextflow version when the source pinned none.
• Added retries for AWS forge calls under IAM throttling.
• Fixed a deadlock on last_used updates.
• Avoided a full table rebuild in the m158 cost-retrieval migration.
• Added INSTANT-safe overrides for algorithm-pinned migrations.
• Removed a redundant compute environment work-directory pre-flight check.
• Restored inner target="_blank" links under wtSmartNav.

Data explorer​

• Fixed stale REFRESH_IN_PROGRESS states by timing them out so Data explorer self-heals.

Access control​

• Fixed disabled personal workspaces remaining accessible through their URL.
• Fixed the IdP reconciler to create UserRole entries for workspace visibility.

Platform API​

• Corrected the managed credentials path parameter.

Feature updates and improvements​

Language features​

• Added a Semantics reference page to the docs by @bentsherman in #7271

Configuration​

• Added the docker.cpuLimits config option by @bentsherman in #7289
• Added the seqera.executor.providerConfig option by @pditommaso in #7335

Google Batch​

• Added a docs note about IAM roles for google.batch.serviceAccountEmail by @bentsherman in #7291

Plugins​

• Sent pipeline-secret references to the Seqera Scheduler from nf-seqera by @pditommaso in #7314
• Skipped nf-tower when superseded by nf-seqera by @jorgee in #7283
• Reverted "Consolidate nf-tower plugin into nf-seqera (#7252)" by @pditommaso in da5afcfe9
• Reverted "Skip nf-tower when superseded by nf-seqera (#7283)" by @pditommaso in c5dec3b4e

General​

• Added a graceful fallback for the array directive with unsupported executors by @bentsherman in #7296
• Added two Indian scientists to NameGenerator by @deepmind11 in #7079
• Clarified Bitbucket API token auth requirements in the docs by @pditommaso in #7279
• Clarified the override behavior of the resourceLabels directive in the docs by @bentsherman in #7287
• Dropped the dead oss.sonatype.org repository by @pditommaso in #7282
• Showed the absolute path in the missing main script error by @bentsherman in #7286
• Used the scheduler API exit code, falling back to the .exitcode file by @jordeu in #7273

Dependencies​

• Bumped jackson 2.21.1 to 2.21.4 to fix high-severity CVEs by @pditommaso in #7274
• Bumped jackson-databind to patched versions to fix deserialization CVEs by @jorgee in #7322
• Replaced the discontinued bcprov-ext with bcprov-jdk18on 1.84 to fix CVE-2025-14813 by @pditommaso in #7284
• Used the wiremock self-contained distribution to drop vulnerable handlebars by @pditommaso in #7275
• Pinned Docusaurus dependencies by @seqeralabs-renovate in #7324
• Updated the actions/checkout action to v6.0.3 by @seqeralabs-renovate in #7325
• Updated the anthropics/claude-code-action action to v1.0.168 by @seqeralabs-renovate in #7326
• Updated ch.qos.logback:logback-classic to v1.5.37 by @seqeralabs-renovate in #7327
• Updated ch.qos.logback:logback-core to v1.5.35 (security) by @seqeralabs-renovate in #7297
• Updated com.azure:azure-compute-batch to v1.0.0-beta.6 by @seqeralabs-renovate in #7128
• Bumped nf-amazon@3.10.1
• Bumped nf-azure@1.23.1
• Bumped nf-google@1.27.4
• Bumped nf-k8s@1.5.5
• Bumped nf-seqera@0.23.0
• Bumped nf-tower@1.29.1
• Bumped nf-wave@1.21.1

Bug fixes​

Language features​

• Fixed error checking in workflow emits by @bentsherman in #7058
• Fixed path input for exec processes by @bentsherman in #7272

Configuration​

• Excluded null config environment entries from the task environment by @bentsherman in #7294

AWS Batch​

• Fixed containerOptions --opt=value parsing for AWS Batch by @bentsherman in #7288
• Rounded up CPUs to the nearest valid value for AWS Batch Fargate by @bentsherman in #7295

Azure​

• Tolerated stale or transient resize errors on autoscale Azure Batch pools by @jorgee in #7312

Fusion​

• Keyed the Fusion license token cache by product and version by @robsyme in #7320

General​

• Fixed a high-severity form-data CRLF injection in the docs site by @pditommaso in #7276
• Fixed a Kryo deserialization error with enum types by @bentsherman in #7277
• Fixed URL percent-encoding lost on resume for HTTP/FTP paths by @bentsherman in #7333
• Force-created staged input symlinks to allow task re-runs by @bentsherman in #7285

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.07.0-edge

Feature updates and improvements​

General​

• Reduced response contents to remove unneeded fields by @gavinelder in #1073
• Added progressive container expiration extension by @pditommaso in #782

Dependencies​

• Pinned Postgres containers and bumped test containers by @gavinelder in #1080

Full changelog: https://github.com/seqeralabs/wave/compare/v1.35.1...v1.36.0

Feature updates and improvements​

Studios​

• Added NVIDIA environment variables for GPU Studios.

Compute environments​

• Added bring-your-own networking support for Azure Cloud compute environments.

Pipelines​

• Added pipeline secrets support for scheduler-backed Cloud compute environments, covering both storage and the launch form.
• Disabled Nextflow version selection when a custom launcher container is pinned.
• Updated Nextflow launcher to v26.04.6.

Security​

• Redacted full user email addresses from logs.

Bug fixes​

Compute environments​

• Added retries for AWS Forge calls under IAM throttling.
• Fixed xpack-google secret resolution by setting GOOGLE_CLOUD_PROJECT on the GCP Batch head job.
• Fixed work directory validation for legacy Seqera Compute configurations.
• Surfaced actionable GCP Batch API errors instead of the misleading Workload Identity Federation hint.

Bug fixes​

Container building​

• Fixed which availability for R (bioconda) post-links in Conda v2 builds by @pditommaso in #1070

General​

• Bumped claude-code-action to v1.0.87 to fix 404 model error by @ShahzebMahmood in #1078

Full changelog: https://github.com/seqeralabs/wave/compare/v1.35.0...v1.35.1