Enhancements and Features

Manage Azure OpenAI deployments on existing providers

Azure OpenAI model deployments can now be added or removed on an existing provider from the provider's edit page, without re-provisioning the whole resource. New providers no longer ask for a model up front. Pick from the live catalog on the edit page once the account is ready.

Custom desktop session wallpaper in org theme

Org admins can now upload a custom desktop session wallpaper from the organization theme page. New desktop sessions for users in the organization use the uploaded image; otherwise they fall back to the platform default.

Bug Fixes

• Desktop sessions break on non-singularity clusters
• Clicking a deleted instance opens the live instance with the same name
• Confirm-disconnect modal appears when cluster is already unreachable
• Monitor jobs page is laggy with thousands of jobs
• Open terminal on /docs page causes double scrollbar
• Queues table header scrolled past on cluster queues page
• Reset onboarding control is active when onboarding is disabled
• User with write access to shared cluster cannot destroy cluster
• Pbs scheduler jobs slow refresh on busy clusters
• Clicking managed cluster from a session returns 404
• Corrupt credentials file breaks cluster connection
• List field stays collapsed when adding a new item, hiding the new entry
• Loading cluster definition from marketplace returns 404
• Oidc sign out lands user on idp error when id_token has expired
• Platform admin cannot delete or update another org's marketplace item
• Presigned URL generation fails for Google bucket downloads
• Scale-down workspaces modal lists obsolete 'existing' cluster criterion
• Shared cluster with same name in another widget toggles together when first is expanded or collapsed

Bug Fixes

• Api key hint too short to distinguish between keys
• Cluster path and workspace path defaults not prefilled on existing clusters
• Org settings sidebar jumps when navigating to cost dashboard
• Shared AI chats are indistinguishable from your own in the sidebar
• Unknown error on organization users page
• Userworkspace scale-down skipped when existing cluster is always connected
• Workspace terminal corrupts pasted text containing CPR-shaped bytes
• Workspace terminal echoes cursor position reports as visible garbage

Bug Fixes

• Cannot duplicate cluster definition with login-only access
• "Use Custom Domain" option in sessions fails when not configured on platform
• Dropdown options clipped inside modals
• Outdated 'Browse Workflows' CTA in Sessions widget empty state
• Subworkflow steps show no name on session loading page
• Workflow sometimes attempts to use shared cluster instead of user's own when names match

Bug Fixes

• Desktop sessions flaky on cluster with multiple login nodes
• Multiple cluster agent tunnels live across ingress replicas

Enhancements and Features

Secondary user groups in workspace container

Your workspace container now mirrors the platform groups you belong to as POSIX system groups. Running id or groups inside the workspace shows each of your platform groups, and files owned by those groups respect the correct ownership and permissions - making it easier to share data within a group across users in the same workspace environment.

Bug Fixes

• Onboarding creates forks for workflows instead of favoriting latest
• Forking an item from marketplace drops desktop session settings and doesn't set organization properly

Bug Fixes

• HPC cluster auto-connect fails with "ssh: connection refused" on reconnect

Enhancements and Features

Minimum agent version enforcement

Platform admins can now set a minimum agent version on the Settings page. Agents below the configured version are rejected at connect and evicted if already connected, so operators can force-retire old agent builds after shipping a fix.

Enhancements and Features

Pw ssh -R for remote port forwarding

pw ssh now supports the -R flag for remote port forwarding, matching OpenSSH semantics. This lets you expose a service running on your laptop to a remote cluster over the existing pw ssh connection. For example to serve a local development environment or database for a workflow to reach.

Configurable PKI domain control validation file

Platform admins can now configure a file served at /.well-known/pki-validation/ for HTTP-based domain control validation when issuing certificates. The endpoint is publicly accessible without authentication; only admins can edit the filename and content.

Default workspace images for users

You can now set default workspace images at the organization or platform level. Instead of assigning an image to every user individually, admins can leave a user's image unset and it will automatically fall back to the organization default, or the platform default if no organization default is configured.

Descriptive help text below form fields

Form fields can now show descriptive help text directly below the input instead of only via a hover tooltip. Forms that already set a description on a field (such as parts of the LDAP auth configuration) will start surfacing that guidance inline, so it's scannable without hovering the label icon.

Home renamed to Dashboard

The Home page is now called the Dashboard. Sidebar, breadcrumbs, and related tooltips have been updated in all five supported languages.

Kubernetes session tunnels reconnect when the pod is replaced

Kubernetes session tunnels now automatically reconnect when the underlying pod is replaced. If a pod backing a deployment or service is evicted, restarted, or rolling-updated, the tunnel will detect the disconnection and re-establish the port forward to the new pod - no manual reconnection needed. The tunnel retries with exponential backoff and gives up after ~2 minutes if the new pod never becomes available

OIDC sector_identifier_uri for IdPs using pairwise subject types

Adds support for OIDC IdPs that use pairwise subject types: an admin can now list the platform hostnames covered by an OIDC auth method, and the platform publishes a sector_identifier_uri document the IdP can register, allowing one IdP client across multiple hostnames with a stable pairwise sub claim.

Quick launch VS Code and Desktop sessions from cluster details

Launch VS Code or a Remote Desktop session in one click from any running cluster's details page, without leaving the page or re-picking the cluster from a list.

Replace workflow annotations by id

You can now pass id=<value> on ::error::, ::warning::, and ::notice:: workflow log directives. Emitting another directive with the same id replaces the previous annotation in place instead of adding a duplicate, which makes it easy to surface progress updates (uploads, retries, percentages) as a single, always-current annotation.

jobs:
  example:
    steps:
      - run: |
          echo "::error id=upload::Uploading: 0%"
          sleep 1
          echo "::error id=upload::Uploading: 50%"
          sleep 1
          echo "::error id=upload::Uploading: 100%"

Show image on instance detail page

The instance detail page now shows the launch image (provider icon + image ID/name) as a new row in Instance Definition, matching the compact chip used on the instance creation form.

Split terminal panes side-by-side

Terminals can now be split into side-by-side panes within a single tab (VSCode-style), with draggable dividers, drag-and-drop reordering, and layout persistence across reload. Creating or closing a terminal in one browser tab now shows up in real time in any other tab of the same workspace.

Workspace terminals open in home directory by default

Workspace terminals now open in your home directory (~) by default instead of ~/pw/.

Bug Fixes

• Create organization button touches the breadcrumb bar
• Workflow annotations with reused id only show first and last update
• Action bar on user edit page going past page width
• Admin and org pages scrollbar inset from viewport edge
• Admin images three-dot menu appears disconnected from row
• Agent processes keep reconnecting after user disconnects cluster
• AI chat improperly derives deleted status
• API docs response panel is blank for endpoints that return a map
• Azure northcentralus shows an empty required zone dropdown
• Back button returns to blank page after sso redirect
• Can click "workspace" in session widget, leading to 404 page
• Cannot delete existing cluster configuration while connected
• Cannot open more than 9 working terminals
• Cloud account subnet table labels availability zone as "name"
• Cluster mounts fail for usernames containing underscores
• Compute nodes fail to boot from snapshots with stale /etc/fstab entries
• Copy to clipboard copies empty string instead of IP address during cluster provisioning
• Custom icons missing on onboarding confirmation screen
• Desktop sessions fail or get stuck on shared HPC nodes
• Duplicating a cluster can create a name with spaces
• Dynamic form dropdown lag
• Edit icon remains as if still hovered
• Efs filesystems are created without names in the aws console
• Error pages always link to home instead of going back
• Existing cluster ssh fails when login hostname has port suffix
• Filtering Azure instances by architecture crashes when an instance is missing arch metadata
• FSx storage capacity does not show GiB unit
• Log viewer ANSI colors render as plain text in light mode
• Login banner preserves leading and trailing whitespace
• Login pages remain in back button history after authentication
• Network CIDR field placeholder can be mistaken for a default value
• Network name field accepts dashes that server rejects
• Newly created group not appearing in groups list
• Org sidebar settings auto-save on every click
• Org theme preview settings toggle is off by default
• PBS qstat parse error spam on Cray clusters
• Desktop sessions create huge core dump files in user home
• Snapshot creation rejects names with cryptic regex error
• Vscode session never launches when tunnel reconnects
• Authentication method edit link 404s due to doubled URL segment
• Cannot hide Resource Groups, Inbox from Sidebar settings
• Image dropdown on instance pages doesn't match surrounding dropdowns
• One-click SSH opens a second workspace terminal
• Workflow form auto-capitalizes explicitly provided labels
• Workflow run summary panel takes over the screen on smaller screens

Other Changes

• Remove automatic symlink of ~/pw to /pw in workspace
• Combine LDAP and OIDC add pages into unified flow

Enhancements and Features

Create sessions from home page widget

You can now create sessions directly from the Sessions widget on the home page without leaving the dashboard.

Bug Fixes

• Admin code editor detaches from container when page scrolls
• Org login page shows org name instead of platform name in title
• Platform admin settings cannot be saved when WAF is enabled
• Saving login banner returns 403
• Single-org platform sso page missing org layout
• Top app bar overflows on mobile
• Subdomain session links require extra click to open in new tab
• Cloud account network page continually refreshes and jumps to top
• Cluster workspace mounts repeatedly unmount and remount
• Existing clusters stop auto-reconnecting after a transient disconnect
• Inconsistent margin on provision error logs
• Pasting hex color on org theme page reverts to previous color
• Pressing enter on auth token/apikey prompt with empty input prints unfriendly error
• Terminal page crashes when session expires
• Workflow DAG viewer stays same absolute size regardless of window/zoom

Enhancements and Features

Abillity to create AWS compute nodes with multiple network cards if the instance types supports them

When configuring an AWS cluster, you can now see a Multiple Network Card option under the Partition section. Only certain instance types support having multiple EFA interfaces.

Azure Files support in Explorer

Azure Files shares now have an Explorer tab alongside buckets. You can browse, upload, download, and delete files directly from the UI, and grant the share's storage account the CORS rules it needs with a single click.

Pw users reset-onboarding CLI command

Adds pw users reset-onboarding <username>... so organization admins can restart the onboarding flow for multiple users in one command

Users can revisit onboarding flow

Users may now opt to go back to onboarding from their settings page. Organization admins can also reset this for a user so the next time they visit the site they will revisit onboarding.

Bug Fixes

• Annotations hidden below DAG/TREE views require scrolling to find
• Attached filesystems with a '/' at the end of the mountpoint will fail validation checks
• Deleted users remain in org user list for up to 30 seconds
• Ephemeral storage missing on cluster cost estimate and shows empty region
• Failed cloud network can't be retried with the same name
• Failed snapshots appear as selectable options on image dropdown
• Jobs being marked as failed when never run
• Logs command in user workspace only tails, preventing reading previous logs
• Multi-select download in explorer only downloads first file
• OpenAI passthrough breaks opencode on GPT-5 reasoning models
• PW agent can't get external IP on Oracle
• Saving login banner redirects to org users page
• Sessions not removed when workflow reaches terminal status
• Storage explorer refresh loses folder location
• Terminal page shows blank space below terminal after navigation
• User workspace logs connection errors twice
• Users with org:groups role see empty member dropdown when editing groups
• Vscode sessions show Not Found page after server pre-cache

Documentation Changes

• Built-in documentation for external AI tool usage

Other Changes

• Capture VS Code session output to per-session log
• Explorer UI polish, use pw name in paths

Enhancements and Features

Add disable option for machine images

Adds the ability for platform admins to disable machine images, preventing them from being selected by users without deleting them.

Login flow now preserves deep links

Navigating to a specific page while unauthenticated no longer loses the destination; users land on the intended page after signing in.

User workspace shell prompt and terminal tab show "workspace" as hostname

User workspace shell prompt and terminal tab titles now display workspace as the hostname instead of an internal pod/container name, giving a cleaner, consistent experience across all workspaces.

Bug Fixes

• Admin errors table overflows horizontally with long paths
• AI provider display name auto-filled with preset name on creation
• AI provider with long API key silently appears to succeed
• Ai usage pie chart tooltip shows grey glyph instead of series color
• Cluster tabs unclickable on node not found page
• Collecting variables stuck at spinning when step failed for storages
• Hovered series in usage chart tooltips isn't bolded
• List type resets sibling fields when adding new item
• Log viewer ANSI white text invisible on light theme
• Organization AI providers not showing for other org admins
• Terminal covers admin/org sidebar items with no way to scroll to them
• Terminal tab rename and close icons invisible on hover for some users

Enhancements and Features

Group and filter reports by SKU

The reports page now supports grouping and filtering by SKU, so you can slice costs by individual custom SKU codes in addition to type, subtype, and user.

Show thousands separators in allocation total budget input

Allocation total budget now displays thousands separators while typing, so large amounts like 1,000,000 are easier to read at a glance.

Right-click context menu for terminal tabs

Terminal tabs now support right-click to rename or close them.

Bug Fixes

• Existing cluster details page shows disconnected while list shows connected
• Cluster thumbnail edit and delete buttons don't appear on hover
• Cramped spacing in pwtty terminal title bar
• Workflow string fields with prefillDefault cannot be edited
• Cloud account names only allow alphanumeric characters
• Log viewer gets stuck at bottom
• NFS and disk attachments silently stuck in provisioning

Enhancements and Features

Admin error logs pagination and search

Admins can now browse all error logs with pagination and search instead of being limited to the most recent 100 entries.

Custom AI providers unable to connect to endpoints with self-signed TLS certificates

Custom AI providers now support endpoints with self-signed TLS certificates. When adding or editing a provider with an HTTPS endpoint, you can either paste a CA certificate (PEM) for secure validation, or skip TLS verification entirely as a fallback. Custom provider endpoints are also no longer forced to use /v1, so providers with non-standard API paths (e.g. /v4) now work correctly.

Bug Fixes

• Cleanup step hangs when referencing missing output from failed job
• Cluster runtime alert sends at the wrong time
• Hammerspace NFS shows error page after creation
• Parent org admins denied access to managed organization cloud accounts

Enhancements and Features

Allow specifying initial directory for VS Code sessions

VS Code sessions now open directly to a specified directory instead of prompting users to select a folder. The directory defaults to the user's home directory and can be customized when creating the session.

Workflow run diagram overhaul

We have overhauled the workflow run diagram to have a more modern look.

Integrated API documentation

In-app API documentation replaces the external viewer, providing a polished, theme-aware API reference integrated directly into the platform navigation.

First-class Kubernetes namespace management with RBAC sharing

Kubernetes namespaces are now manageable as first-class platform resources. Organization admins can create, delete, and configure namespaces on any connected cluster, assign budget allocations, and share namespace access with platform groups using Kubernetes RBAC roles (admin, edit, view).

Queue messages while AI is responding in chat

Users can now send messages while the AI is generating a response. Messages are queued and automatically sent when the current response completes, making it easy to add follow-up questions without waiting.

Rename terminal tabs

Terminal tabs can now be renamed by double-clicking the tab title or clicking the pencil icon. Custom names persist across page refreshes and are not overridden by shell commands like clear.

Bug Fixes

• Kubernetes clusters use default icon instead of the custom one
• Annotations for a step only appear after the step runs
• Workflow run and view commands exit with code 1 in non-TTY environments
• Error when clicking on custom instance types under organization
• Group dropdown for capacity reservation shows all groups instead of filtering by CSP
• Shared chat with "view" permission still allows other users to send messages
• Target missing for Kubernetes sessions
• Workflow step outputs not resolved when referenced via needs expression

Enhancements and Features

Admin interface for managing platform-level previews

Admins can now manage platform-wide feature previews from the admin panel.

Mobile App

Adds a mobile app for iOS and Android that lets you monitor clusters, workflows, runs, and sessions, and connect to SSH terminals from your phone.

Bug Fixes

• Inbox notifications always showing info icon
• Wasm files not included in build-time compression
• Workflows can still be launched when workspace storage is full

Other Changes

• Faster forms
• Pre-compress static assets and compress API responses

Enhancements and Features

AI gateway billing, metering, and usage dashboard APIs

Organization administrators can now configure per-model pricing and enablement on AI providers, enforce budget limits on AI usage, and view usage analytics dashboards showing cost breakdowns by model, user, and allocation.

Require reason when impersonating a user

Admins are now required to provide a reason when impersonating a user. The reason is recorded in the audit log for accountability.

Select existing placement policy for GCP clusters

Adds support for using existing GCP placement policies with cluster partitions. This enables targeting reservations that require specific placement policies.

Store return-to location for impersonate

Stopping impersonation now returns admins to the page they were on when they started impersonating, instead of always redirecting to the admin users page.

Workflow runs widget status filter

The home page workflow runs widget now allows filtering by status.

Bug Fixes

• Able to directly ssh to AWS compute nodes on public-ip networks
• Cluster connection toast missing View Logs button
• Cluster json configuration resets after a period of time
• Scaled-up workspace starts with old image instead of the configured version
• Cannot scroll in feature preview detail
• Recursive download of entire bucket fails with "Destination/Source not specified"
• Job monitor runtime inflated on clusters with non-UTC timezone
• Longer top banner causes Add Cluster button to be hidden behind the app bar

Documentation Changes

• Cloud account permission documentation links return 404

Enhancements and Features

API key management enhancements with AI key support

API keys now support two types: Platform and AI. Keys now display key hints for identification and track last-used timestamps. The key management UI has been redesigned with a unified card-based layout and inline creation modals.

Cluster provisioning logs show ansible task progress

Cluster startup now shows detailed progress for controller node configuration, with each setup task visible as an expandable sub-item with its own status.

Display name for AI providers

AI providers now support display names. You can set a friendly display name with spaces and special characters when creating or editing an AI provider.

Show disk cloud identifier on storage details page

Disk storage details page now shows the cloud-specific disk identifier (Volume ID for AWS, Disk ID for Google, Disk Resource ID for Azure) after provisioning.

Add instances home page widget

Added an Instances widget to the home page so users can view and manage their single VM instances directly from the dashboard.

Pw agent pixel art startup banner

The agent will now show a Parallel Works pixel art logo with the version number when starting.

Shared conversations show author of each message

Shared AI chat conversations now show who wrote each message. When viewing a conversation with multiple participants, messages from other users display their name and profile picture, making it easy to tell who said what.

Bug Fixes

• AWS billing fails when listing bucket with too many objects
• Content is required on AI chat API calls
• Errors from AI providers are not surfaced
• Empty credentials file on remote host breaks cluster connection
• New networks don't have private service access
• Scheduler agent bugs
• Workflow forms are slow to load

Enhancements and Features

Network diagrams and organization network topology

Network topology diagrams are now available on network creation and detail pages, showing the full cloud architecture including VPCs, subnets, compute nodes, and gateways. A new organization-wide Topology page under Cloud settings provides a unified view of all cloud accounts and networks in a single interactive, zoomable diagram.

Bug Fixes

• Queue filter URL params get recursively JSON-encoded on each toggle
• pw kube auth fails with permission denied on .kube directory

Other Changes

• Lazy-load heavy bundles and defer WASM initialization

Bug Fixes

• "Can collaborate" is cut off on the share with group dropdown on AI conversations
• "My Jobs" filter not matching jobs on existing clusters with __USER__ slurmUsername
• Cloud cluster slurm jobs not appearing in job monitor page
• Desktop session black screen from orphaned Xvnc after agent restart
• Scheduler jobs returning "Resource not found" for existing clusters on multi-pod deployments
• Bucket explorer crashing
• OpenStack not capitalized on admin images page
• Show cluster panels with no jobs on global jobs page

Bug Fixes

• Impersonate button missing pointer cursor on hover
• Storages status would show failed on provisioning if it was previously failed

Enhancements and Features

Jobs dashboard with queue status and node utilization

Added a new Jobs Dashboard with real-time monitoring of HPC jobs across all clusters, plus a Queues tab showing partition status, node utilization, and time limits at a glance.

Refresh admin panel tabs with sidebar navigation

Admin panel navigation is now a sidebar with grouped sections instead of horizontal tabs.

Bug Fixes

• Dropdown default substitution overrides valid empty string selections
• Feature preview descriptions not showing
• Feature preview toggle on user profile does not persist
• Org user edit page missing top padding
• Sidebar buttons and badges unreadable on activate theme hover
• Workflow configurations reset the form upon saving

Enhancements and Features

Add org delete and delete confirmation prompts

Organizations can now be deleted via the CLI with pw orgs delete. Both user and organization delete commands now require typing the name to confirm before proceeding, which can be skipped with the -f flag.

Bug Fixes

• Allow deleting cloud accounts with unprovisioned networks
• Breadcrumbs not always visible on org groups page
• Ephemeral lustre storage not mounting in fstab

Bug Fixes

• Cursor position reports echoed as visible garbage in pwtty terminal
• Home page session widget broken image and overflow on small containers
• Marketplace publish button silently fails with no feedback

Enhancements and Features

Workflows can opt-out of flattening wizard steps

Workflows that use the wizard mode can now opt-out of automatic flattening of inputs by specifying flatten: false in the wizard configuration. Below is an example:

'on':
  execute:
    inputs:
      $meta:
        wizard:
          mode: wizard
          navigation:
            showSteps: true
            allowJump: false
          flatten: false

pw orgs ls command for listing organizations

Added pw orgs ls command to list organizations you have access to.

Bug Fixes

• Failed tunnel creation blocks all subsequent tunnels from being created
• Feature preview box starts small then gets big
• Home page compute sliders use org theme color regardless of active theme

Enhancements and Features

pw users ls and pw users delete commands

Add CLI commands for listing and deleting organization users via pw users ls and pw users delete.

Enable onboarding gate and add enableOnboarding platform setting

New users can now be guided through an onboarding flow on first login to set up their theme, language, and initial resources. Admins can enable or disable this from the platform settings page (disabled by default).

Bug Fixes

• cancel-jobs action in workflows causes existing cluster connection to drop
• Cluster nodes page does not load for default clusters created for new users
• Skip automatic checkout always shows as disabled for marketplace workflows
• VNC sessions fail on RHEL 8 clusters due to missing libxcvt

Other Changes

• Redesign org pages with sidebar navigation

Enhancements and Features

Single cluster filtering with pw clusters ls

You can now filter pw clusters ls to show a single cluster by providing the full URI: pw clusters ls pw://username/cluster-name. Note that this filters the list output and does not provide additional details beyond what pw clusters ls already shows.

Oracle cluster provisioning

Bug Fixes

• Clusters list page returns 500 when a shared cluster's owner has been deleted
• Storage definitions can be deleted while attached to

Enhancements and Features

Logs panel on cluster details page

There is a new panel at the top of the cluster details page providing quick-access links to provisioning, deletion, connection, and scheduler logs. Logs are still accessible by clicking on the status.

Terminal tabs show resource icons next to name

The built-in terminal will now show the icon of the connected resource next to each terminal tab.

Bug Fixes

• Allow tab navigation when nodes page shows resource not found
• Cannot delete Google managed lustre instance
• Session link missing on workflow runs created from CLI
• Authenticated users can navigate to login pages
• Automatic SSO redirects pollute browser history
• Invalid /sso paths show platform 404 instead of redirecting

Enhancements and Features

Download workflow executor before executing

Workflows now automatically use the latest workflow executor when available, ensuring you always have the newest features and fixes without needing to restart your workspace.

Running clusters show disk attachments in provision status

Attaching and detaching disks to running clusters will generate new logs in the provision status UI.

Bug Fixes

• Messages from CLI don't persist to same chat but go to new convo
• Marketplace item edit page crashes when shared with group

Enhancements and Features

Instance provisioning status expandable sub-steps

Instance provisioning status now shows bootstrap sub-steps as expandable items under "Configuring instance."

Region column added to pw nfs ls table output

pw nfs ls -o table now displays the region associated with the NFS storage.

Bug Fixes

• Existing cluster page makes unnecessary API calls
• Cannot remove unprovisioned disks from cluster definitions

Enhancements and Features

Reference clusters and buckets by name using pw:// URIs in workflows

Added support for pw://username/name URI format when referencing clusters and buckets in workflow inputs. This makes it simpler to set default values and write inputs manually without needing to use the form to look up resource IDs. The workflow execute page also now shows two JSON tabs: one for form values and one for the resolved backend payload.

Add ap-southeast-1 (Singapore) region to AWS

Added support for the AWS ap-southeast-1 (Singapore) region for networks, clusters, and storage.

Support non-streaming OpenAI chat completions

Support non-streaming responses on the OpenAI-compatible chat completions endpoint, enabling compatibility with standard OpenAI clients that don't use streaming by default.

Add Oracle Cloud instances integration

Workflow matrices

Added matrix strategy support for workflows, enabling jobs to run across multiple configurations simultaneously. Define a strategy.matrix in your workflow YAML to automatically expand jobs over combinations of values with support for include/exclude filters, fail-fast, and max-parallel controls.

Example usage:

jobs:
  build:
    strategy:
      matrix:
        field1: ["ubuntu", "windows"]
        field2: [18, 20]
    steps:
      - name: Print combo
        run: echo "OS=${{ matrix.field1 }} VERSION=${{ matrix.field2 }}"

Bug Fixes

• uses: github/ subworkflows have no way of specifying thumbnails, multiple subworkflows in same repo cannot be used
• Workflow expressions cause validation error when used in matrix
• Disabled fields appear enabled in cluster form
• Existing cluster not autoreconnecting after restarting workspace
• Marketplace remote workflows do not respect "skip checkout" setting
• PW_PLATFORM_HOST contains https prefix sometimes
• Desktop sessions flicker with multiple tabs open
• Home page dashboard animates from left to right on page load

Other Changes

• Move AI chat into its own category
• Move AI providers to the top level
• Remove legacy provider query param from groups endpoint

Enhancements and Features

Kubernetes clusters page UX and thumbnail support

Kubernetes clusters page now shows cluster thumbnails, inline connect/delete actions per row, and the cluster definition page has been redesigned with an editable thumbnail and improved layout.

Bug Fixes

• Add workflow schema validation for uses and with when possible
• Incorrect text on storage deletion prompts
• Pw_id_rsa unnecessarily generated during cloud cluster bootstrap
• Workflow builder navigates away after saving
• Workflows fail if SSH client creation or git clone fails once

Enhancements and Features

GitHub integration with platform-level app config and user OAuth linking

Platform admins can now configure a GitHub App integration under Admin Settings → Integrations, and individual users can link their GitHub accounts via OAuth from User Settings → Connections. This enables the platform to access users' GitHub repositories on their behalf for workflows and AI coding features.

Bug Fixes

• Inconsistent loading spinner on homepage widgets
• Wrong marketplace doc url

Enhancements and Features

Workflows support multi-select for compute-clusters and buckets types

Workflow developers can now add multi: true to the compute-clusters and buckets types to transform the clusters dropdown into a mutli-select. This will provide an array of inputs to the workflow rather than a single resource.

Bug Fixes

• Ai chat clicking stop on an in progress message deletes the whole message
• Attach storage modal with multiple storages constrains dropdown
• Canceling old executor job doesnt work with new executor feature flag and vice versa
• Change default from gp2 to gp3 for AWS disks
• Improve existing cluster connect/disconnect stability

Other Changes

• Always show org logo when available

Bug Fixes

• Workflow executor fails to checkout repositories when on non-bash shell

Enhancements and Features

Support remote host forwarding for workspace sessions

Workspace sessions now support forwarding to remote hosts, not just localhost. You can create tunnel sessions that forward traffic to services running on other machines accessible from your workspace, such as on-prem cluster nodes. Managed clusters are also now available as session targets.

Workflow command annotations

Workflow steps now support commands for structured annotations. Echo ::error::, ::warning::, or ::notice:: in your step scripts to surface important messages as colored banners on the run detail page. Log output also supports ::group::/::endgroup:: for collapsible sections and ::debug:: for verbose messages hidden by default.

Bug Fixes

• Awkward spaces in messages
• Existing cluster on marketplace shows internal fields and double panel
• Managed cluster components have different sizes for each page
• Missing link to workflow run on sessions list page
• Workflow with: suggestions now amend input expressions accordingly

Bug Fixes

• Cannot see shared cluster's scheduler jobs
• Correctly configure Slurm cores for Azure VMs with hyperthreading
• Help message in pw clusters list --status=on shows no clusters found
• Agent re-authentication not triggering on expired token
• Session port has five digit zero padding, session target not showing

Enhancements and Features

Expand cmd+k command palette with quick actions, resource browsing, and recent items

The command palette (Cmd+K) now supports quick actions like creating API keys, connecting to clusters via SSH, and opening the terminal. You can also browse workflows, runs, sessions, instances, and IP addresses directly from the palette, and recently visited items appear at the top for quick re-access.

Generate SSH keys for node-to-node access on managed clusters

Managed clusters with "Access Management" enabled will automatically generate SSH keys in each users home directory the first time the user logs in, facilitating node-to-node access.

Executor statuses and messaging performance

The workflow executor has been updated with new transition statuses and significant performance improvements. Two new statuses now appear during workflow teardown: canceling (shown before canceled) and faulted (shown before error). These make it clear that a workflow is still actively running during shutdown, rather than jumping straight to a final state.

Under the hood, we've reworked how the workflow and platform exchange messages, resulting in meaningfully faster messaging and overall executor performance.

To try it: Enable "New Executor" under the Feature Preview menu.

Background existing cluster connection process

Users can now connect to existing HPC clusters in the background while continuing to use the platform. A new log viewer shows real-time connection progress and any errors. Clusters with auto-reconnect enabled will automatically reconnect when the workspace restarts.

Optional NAT gateway for private networks without peering

When creating private networks on AWS, you will now have an option to deploy a sibling public network with only a NAT Gateway deployed. This is separate from the current public networking mode where controllers are assigned public IPs and compute nodes use a NAT Gateway. In this private mode, all nodes will continue to only be assigned a private IP, but they will have access to the internet through the NAT Gateway.

Note this option is unavailable when using transit gateways to peer the network to the platform, as traffic is assumed to go through a central networking account, so no NAT Gateways are provisioned.

pw sessions create now supports --name and --wait flags

pw session create now supports a --name flag for custom session names and returns immediately by default. Use --wait to block until the session is ready.

Support Windows images on instances

Instances now support Windows images. Users can bring their own Windows images on AWS, GCP, and Azure, with automatic setup of SSH and RDP access.

Bug Fixes

• Pw upgrade cross-device link error
• Workflow widget shows "no matches" when user has no favorites
• Marketplace item description not persisting on save
• Kubernetes session tunnels failing with invalid OIDC token
• AI provider shows incorrect text when sharing with organization
• Code block syntax highlighting uses wrong theme colors in AI chat
• Navigating to non-existent cluster page does not show a "not found" error
• No jobs listed under jobs tab in a cluster detail page or jobs page from the sidebar
• Relative URLs in GitHub markdown do not link to GitHub
• Set UTF-8 encoding for VNC desktop sessions

Bug Fixes

• Marketplace run slug numbering resets to 1 for old-format slugs
• SSH terminal closes on connection failure, preventing error output from being read

Bug Fixes

• Managed clusters are not being autoselected in compute resource list
• Switch language without hard page reload
• Workflow run page crashes with unknown error on certain workflows
• Improve API key banner readability in dark mode
• Marketplace page flashes on tab refocus

Bug Fixes

• Forking remote market workflow to local workflow resulted in incorrect yaml definition
• Regular users can see delete/duplicate managed clusters shortcuts
• User workspace logs too verbose
• Validation error messages not very user-friendly

Enhancements and Features

USER_LOGIN webhook

There is a new USER_LOGIN webhook that organizations can configure to respond to successful logins.

Tunnel session health tracking

Tunnel sessions now show when the remote service isn't reachable. Running tunnels display "Remote unreachable" on the sessions page and "unhealthy" on the AI providers page when the destination service is down, with automatic recovery when it comes back online.

Bug Fixes

• Tunnel icon shown instead of AI chat icon for OpenAI sessions
• Pw upgrade doesn't work inside user workspaces
• Model selector disappears and unreachable sessions not shown on chat page
• Shared OpenAI tunnel sessions not shown on AI providers page
• Terminal page incorrectly has slide down effect
• TERMINATE migration policy is not set for H4D, H3, and A4 GCP instance types
• Unable to add groups to kubernetes cluster

Other Changes

• Provide pw uri from storage list endpoints

Enhancements and Features

Workload labels in Kubernetes resource details

Adds the workload's own metadata.labels to the detail view for Deployments, ReplicaSets, Jobs, CronJobs, StatefulSets, and DaemonSets.

Make model optional for pw ai chats new

pw ai chats new no longer requires a model argument. Run it without arguments to pick a model interactively from a list.

CLI AI commands

New pw ai command group for AI chat in the terminal.

Start a chat with pw ai chats new <model>. Responses stream in real time and render as markdown. Use Enter to send and Shift+Enter for a new line. Type /model to switch models, /clear to start over, or /help for available commands.

Resume previous chats with pw ai chats resume <id>. The model is detected automatically from the conversation. Use -p "prompt" on new or resume for non-interactive scripting.

Manage chats with pw ai chats ls/get/delete and providers with pw ai providers ls/get/create/delete/models.

Remove model requirement for custom AI providers

Custom AI providers no longer require a model name during setup. Models are discovered automatically from the provider's API.

Use human-friendly model identifiers for AI chat

AI chat model identifiers now use human-readable provider and session names instead of opaque IDs, making it easier to identify models in the UI and API.

Bug Fixes

• Remove model-specific vision capability checks
• User directive missing in pw vscode SSH config
• Destroy/start button on storage page should never trigger opposite tasks
• Improve CLI error messages for expired auth
• Managed cluster node metrics time window returning old data

Bug Fixes

• AI providers show as shared on creation
• Add skip automatic checkout toggle to workflow creation form
• Animation shift and mismatched loader on AI chat page refresh
• Cannot disconnect from existing cluster when login node is unreachable
• Cannot update the saved configurations
• Remove deprecated GCP I_MPI_FABRICS configuration in node bootstrap
• Show workflow run inputs as JSON
• Update broken documentation links on cloud account page
• Cannot create allocation thresholds

Enhancements and Features

Run subworkflows from yaml stored on GitHub

Workflows can now include subworkflows from GitHub by specifying uses as follow:

- uses: github/username/repo@main

This assumes the workflow is located as a top-level file named workflow.yaml. If that's not the case, you can specify where the file is using this syntax:

  with:
    $yaml: yamls/workflow.yaml

Bug Fixes

• Cannot create azure ai provider
• Session links on runs page navigate to wrong URL
• Stack login banner above login card on small screens
• Print friendly error when credentials file fails to parse

Enhancements and Features

Notify when a newer CLI version is available

The CLI now notifies you when a newer version is available and suggests running pw upgrade.

Rename version-update to upgrade and add download progress bar

The CLI update command has been renamed from pw version-update to pw upgrade and now shows a progress bar during download. The old pw version-update name still works as an alias.

Bug Fixes

• Make session name optional with auto-generation

Enhancements and Features

Add session management subcommands and pw vscode

New CLI commands for managing remote sessions (pw session create/connect/stop) and connecting local VS Code to remote resources (pw vscode).

Bug Fixes

• Update user shows unknown error
• Preserve terminal tab state when navigating away from terminal page
• Cloud account cancel button on darker themes looks bad

Enhancements and Features

cancel-jobs action

Workflows now support a cancel-jobs action that lets you cancel specific jobs within a workflow run or cancel other workflow runs entirely. A workflow can always cancel its own jobs, while canceling jobs in other workflows requires the appropriate permissions to be set.

Add onboarding flow

New users are now guided through a welcome flow to select compute resources, workflows, and a theme when they first log in.

Add status and provider icons to compute resources dropdown

The compute resources dropdown now displays status indicators and provider icons for each option.

CLI workflow management and interactive run support

Full workflow management is now available directly from the CLI. Create, update, and delete workflows without leaving your terminal. Launch workflow runs and instantly see a live interactive view of your job tree with real-time status updates, animated spinners, expand/collapse navigation, and inline step logs. Monitor active sessions with direct links, cancel running workflows, and clean up old runs with flexible filters. All CLI list commands now default to a clean table output with colorization for a consistent experience across clusters, sessions, storage, and workflows.

New commands: pw workflows view, pw workflows create, pw workflows update, pw workflows delete, pw workflows run, pw workflows runs list, pw workflows runs view, pw workflows runs cancel, pw workflows runs clean.

Workflow runs logs and workflow runs errors commands

Added logs and errors subcommands to pw workflows runs for programmatic access to step logs and error reports. The get command now shows a job/step tree with durations, and list shows run duration.

Expose PW_RUN_SLUG environment variable to workflow steps

Steps now can access the run slug via the PW_RUN_SLUG environment variable.

Managed clusters can now force all SSH traffic to proxy through platform

Organizations using managed clusters can now force all SSH traffic to flow through the platform using a new proxySsh setting.

Prefill user workspace mounts with default values when adding new mounts

When adding new workspace mounts, a default will automatically be filled into the box, allowing for easier editing.

SSH access to private network clusters without VPC Peering

Users can now SSH into cloud clusters deployed on private networks without VPC peering. The cluster controller automatically establishes a secure tunnel to the platform, enabling pw ssh access without requiring a public IP address.

Support specifying max distance when creating Google placement groups

Clusters running on Google Cloud Platform can now specify a max distance when provisioning nodes in a partition. This can increase performance with the trade-off of less availability.

Bug Fixes

• Forked NFS from marketplace and get 404 page
• Unify session link logic and fix OpenAI tunnel provider display
• Cannot clear display name for existing clusters and tags not shown
• Cluster connection tooltips show up in multiple widgets when hovered
• Google managed lustre doesn't check for allocation exceeded
• License renewal fails with "authentication required" during grace period
• Move online status indicator next to username on org users page
• Outputs do not support multiline values
• Pods dropdown empty on create session interface
• Prevent user workspaces endpoint from hanging on unreachable hosts
• Resource gets stuck on loading on allocations page
• Cannot see scheduler logs for shared clusters
• Stop default values from overwriting workflow rerun values
• Unable to select Create k8s PVC in platform admin settings on a new deployment
• Use org slug instead of display name in breadcrumb hrefs
• Use organization display name in org list
• Remove destroy button from managed cluster home page widget

Enhancements and Features

Add Ctrl+V clipboard paste support to terminal on Windows

Ctrl+v will now work to paste in the integrated terminal on Windows systems.

Enabled providers are now determined based on Cloud Account access

Available resource types are now determined by your cloud account access rather than manual provider configuration. If your group has access to a cloud account, the corresponding resources will be available automatically.

Inline workflow runs

You can now execute workflows directly from YAML without saving them first, perfect for quick testing and one-off automation tasks. Each inline run gets a unique, memorable slug (like "clever-falcon-3") making them easy to identify and track in your runs list. Inline runs appear alongside your saved workflow runs with a distinct "inline" badge, giving you full visibility into all your workflow executions in one place.

Session deep-linking to chat and API key support

Session links for OpenAI-compatible sessions now deep-link directly to the correct model in the chat page. Sessions also support API keys for authenticating with OpenAI-compatible endpoints.

Bug Fixes

• AMLFS-DurablePremium-40 Capacity config is not a slider
• Cannot update Kubernetes endpoint and CA certificate fields
• Custom theme not working with sidebar hover options
• Display name missing from workflow creation page
• Metrics chart display issues and time range filtering
• Missing required subworkflow fields not correctly highlighting
• Unable to view azure ml resource details
• User list doesn't automatically refresh after deleting a user
• Managed cluster form doesn't detect pastes as input

Other Changes

• Accept API keys as Bearer
• Remove base infrastructure and cspAccounts feature flag

Bug Fixes

• Icon lost when forking marketplace cluster
• NetApp ONTAP storage page crash and incorrect routing

Enhancements and Features

Migrate OpenStack from base infra to cloud accounts

OpenStack cloud accounts now automatically sync regions, flavors, and networks metadata, enabling simplified cluster configuration without requiring separate base infrastructure setup.

Transit gateway optional when creating private networks

Organizations can now optionally create private networks without requiring peering to the platform.

Bug Fixes

• Missing metric data in cluster charts can cause page to error

Bug Fixes

• Marketplace edit pages not navigating after save and showing stale data
• Use correct slug for runs link on sessions page
• Can't use slug to search marketplace
• Saving providers for groups not working

Enhancements and Features

Add customizable login notices to org settings

Organizations can now configure a custom login notice that appears on their login page. Set a title and body in Customize > Theme to display a notice panel alongside the sign-in form.

Add managed cluster support to pw ssh

Users can now SSH into managed clusters using pw ssh <cluster-name> or pw ssh pw://<cluster-name>, connecting directly to the cluster's configured login node.

Allow adding password auth method on org auth methods

Organizations can now add password-based login as an authentication option directly from the org settings authentication page. This will make the password option show up on organization login pages.

Custom domains for organization login pages

Organizations can now be configured with a custom login domain. When users visit the custom domain, they are automatically directed to the organization-specific login page.

Dark mode logo support for organizations

Organizations can now upload a dark mode variant of their logo or enable automatic logo inversion for dark backgrounds. The appropriate logo is automatically displayed in the sidebar and on login pages based on the current theme.

Support generic linux images on instances

Instances can now be started with any linux image. ACTIVATE will automatically configure the VM to allow SSH access from your user workspace.

Bug Fixes

• Can't duplicate buckets, instances, or Google managed lustre instances
• Check MFA requirements on password reset before creating session
• Google managed lustre realtime billing tracking
• Preserve organization theming when navigating to password login
• Workflow builder does not always recover from schema errors

Enhancements and Features

Add "Run Again" button to workflow run detail page

The run details page now has a run again button.

Display cloud resource identifiers on network pages

Organizations can now see their cloud resource identifiers (VPC/VNet IDs, security groups, DNS zones, subnets) mapped directly in ACTIVATE, making it easier to cross-reference with their cloud provider console.

Remove apps concept from workflows

Apps have been consolidated into workflows. Existing apps will now appear as regular workflows. Session name functionality is preserved.

Bug Fixes

• Quotas usage bar color only fills half the space
• Sessions not creating and schedulerType not populated for managed cluster provider
• Continuous refresh on cloud account page
• Deleted groups cause cloud account permissions drawer to fail
• Redirect to details page instead of definition after resource creation
• Use marketplace slug for default resource names on account creation
• Workflow widget shows non-favorited workflows
• Better display for when user has no SSH keys and never changed password
• Terminal loses which tab its own when you click off of Terminal page

Enhancements and Features

Improved sessions widget on the home dashboard

The sessions widget now features a modern card-based design with color-coded status badges and sessions sorted by state. Running sessions appear first, making it easier to find and manage active work.

Workflows with no inputs are now directly executed

Workflows with no inputs now execute immediately when you click "Run", skipping the empty form page for a faster experience.

Bug Fixes

• Prevent runs page from flashing loading state on background refetch

Enhancements and Features

Automatic LDAP UID propagation

When configuring LDAP authentication for an organization, you can optionally provide a UID Number. If set, users’ workspaces will use the same uid as defined in LDAP, helping keep permissions and file ownership consistent.

If left blank, a UID will be automatically generated for each user—no additional setup required.

Editable group descriptions

Organizations can now update group descriptions from the interface.

Remove storage type from workflow schema and add bucket type

Bug Fixes

• Update mongo port
• Redirect to correct run page after launching marketplace favorites
• Resolve issue preventing users from publishing shared clusters to the marketplace
• Clusters don't time out and self destroy when ephemeral lustres fail to provision
• Existing cluster edits route to correct save endpoint
• Existing clusters show incorrect fields on marketplace preview page
• Use correct log path for subworkflow steps in tree view

Bug Fixes

• Incorrect start/destroy buttons on storage details page
• Marketplace fork for existing clusters
• Remove double panel on marketplace cluster details page

Enhancements and Features

Add skipCheckout setting to workflows

Workflows now support a "Skip Automatic Checkout" option. Enable this on remote workflows that use the parallelworks/checkout action in their YAML to avoid cloning the repository twice.

Platform admin can now edit existing images

Platform admins can now edit existing images. An Edit option has been added to each image’s options menu

Bug Fixes

• Parser: multiple runtime marked expressions in a single string throws error
• Billing doesn't have provision status
• Dynamic form defaults disappearing with conditional hidden
• User bootstrap and health check scripts run as root when no root access policy is set
• Missing tags for Azure resources when creating snapshot
• Organization script does not load correctly

Enhancements and Features

Highlighted text in log viewer now shows contextual copy button

Added the ability to highlight and copy log text, with a contextual button appearing when text is selected.

Improved markdown rendering with syntax highlighting

Improved markdown rendering with syntax highlighting for code blocks, copy-to-clipboard functionality, and modernized styling.

Refreshed marketplace design

The Marketplace has been refreshed with a modern, polished design featuring improved card layouts, a prominent search bar, and streamlined filtering options. Item detail pages and the publish form have also been updated with cleaner typography and better visual hierarchy.

Support marking organization variable as required in workflow

Organization variables can now be marked as required at the workflow level. When a user attempts to run a workflow, it will check whether their organization has set all required variables and block execution if any are missing.

Bug Fixes

• Kubernetes DaemonSet info not displaying
• Themes manage notifications not using theme on dark mode
• Unknown errors when loading groups
• Workspace startups fail if some resources already exist
• Allow dashes in marketplace slugs
• Truncate long emails in user menu dropdown
• Use theme-aware colors for MFA manual key display
• Cluster tokens unable to authenticate to certain api endpoints
• Duplicating workflows redirects to incorrect page
• Go install doesn't work in user workspace
• Guidance for using PW CLI doesn't mask token
• Ignore on fields within list templates not working as expected
• Misleading message is shown when attempting to create an already provisioned cluster
• More than 1 nested subworkflow cannot be passed outputs
• NaN shown in cost estimator
• Remove settings button for sessionless buckets in widget
• Starting a workflow run could fail after deleting and recreating a workflow with the same name
• Workflow thumbnail not appearing on home page widget

Enhancements and Features

Administrative maintenance page

Platform administrators have access to a new maintenance page which can help to clean up old records from the database.

CLI context management commands

The pw CLI now supports managing multiple authentication contexts, making it easy to switch between platforms or accounts without re-authenticating.

New Commands

• pw context list - List all contexts (supports -o table|json)
• pw context use <name> - Switch to a different context
• pw context current - Show the current context
• pw context rename <old> <new> - Rename a context
• pw context delete <name> - Delete a context (--force for the current one)

New Global Flag

• --context <name> - Run any command using a specific context without switching

Auth Improvements

• Auth commands (pw auth apikey, pw auth token) now preserve existing contexts instead of overwriting them
• Re-authenticating automatically updates the existing context, even if it was renamed
• New --context-name flag allows creating multiple contexts for the same user/server combination (e.g., different API keys for production vs staging)

Workflow fields can now pre-fill defaults

Workflow developers can now decide for a field to prefill with its default value, to enable easier editing of supplied defaults. This can be done by setting prefillDefault: true on the field.

Workflow tree view

Workflow runs now include a Tree/List view as an alternative to the DAG visualization, making it easier to browse jobs with expandable rows, view logs inline, and quickly search across runs.

Bug Fixes

• Can't delete Google managed lustre instances in failed state
• Redirect to home after first-time MFA setup during login
• Workflow widget is showing workflows which are not favorited

Other Changes

• Improved organization user list responsiveness for large organizations

Enhancements and Features

Monthly Active User usage tracking

Monthly Active Users are now tracked by the platform. Users can see this information this profile and organization admins can see usage statistics for the organization on the organization panel. Admins can see overviews of the entire platform from the admin panel.

Enhancements and Features

Dependency graph quality-of-life updates

Ensures lines between jobs do not pass over jobs, and hides disabled jobs in which the disabled jobs' if property are not expressions dependent on outputs. Also ensures that jobs with nonexistent dependencies do not wait forever.

Log viewer enhancements

User can now click line numbers to select individual lines or Shift + Click to select a range. Also, keywords in your filter results are now automatically highlighted in yellow, making it significantly easier to find what you're looking for

Bug Fixes

• Organization admins cannot add LDAP
• User.last format names show incorrect initials on avatar
• Cannot turn off powered by in app bar, incorrect colors used
• Clusters that time out during provision go into a deleted state and can't be modified
• Settings icon missing from sidebar
• User sidebar settings are being reset intermittently
• Bootable snapshots greater than 100GB cannot be used on partition compute nodes
• Bucket mount fails on cluster resume if credentials are expired
• Clicking cancel from setting up mfa navigates to incorrect link
• Hostname on Azure nodes not always immediately resolvable
• User workspace takes a while to connect immediately following login
• Widgets aren't correctly positioned after dropping onto the home page
• Workflow ".[index]." expressions not fully supported

Enhancements and Features

Scheduler-agent now supports pbs and custom flags

The scheduler-agent workflow action now supports reserving nodes on PBS.

Bug Fixes

• Loading FSx marketplace configs does not work for existing configurations
• Pw operator not correctly updating deployment images

Enhancements and Features

Refreshed navigation, typography, and workflow list widget

The application navigation has been refreshed with a more modern design. Fonts across the application have been updated for improved readability. The workflow list widget on the home page has been modernized.

Bug Fixes

• Code-server settings are lost on workspace restart
• Cost estimator don't show on Google Managed Lustre definition page
• Users with MFA enabled can not login using OIDC
• Certain workflows failing due to scp issue
• Incorrect theme after login
• Terminal not responding to OSC queries
• Bucket credentials button not working on home screen widget
• Cannot run workflow which prompts for session name
• Existing clusters do not autoreconnect
• Google managed lustre instances with same name show incorrect provision status and can't delete properly
• Group by doesn't properly group resources by status
• Hide back to login options if theres only one login option
• Kubernetes only platforms still require user host to be set in platform settings
• Workflows sometimes appear to be running even after they should be finished

Other Changes

• pw CLI shell completions in user workspace
• Remove java from user workspace
• Tmux now available in user workspace

Enhancements and Features

Organizations can now use feature preview interface for their users

Organizations can now toggle feature previews on and off for users within your organization from the user details page.

Show instance bootstrap steps in provision status

Instance bootstrap steps will be shown in provision status modal

Bug Fixes

• Cluster name shown on cluster-specific jobs list
• Scheduler jobs list empty for existing type clusters
• Terminal loses which tab its on when you click off of Terminal page

Enhancements and Features

Legacy Google Lustre and Azure Lustre now removed

Support for the legacy implementations of Google Lustre and Azure Lustre has been removed. New deployments must use the managed versions of these offerings.

Platform name setting

Administrators can now set a platform name from the admin panel. This will be shown on the login pages.

New platform onboarding

Customers that use self-service install can now create the first organization and user from a built-in setup page.

Refreshed login pages

The SSO and authentication pages have been refreshed with a modern look and feel. Organization login pages now automatically derive their theme from the organization’s selected branding for a consistent experience.

Workflow bracket indexing support

Workflows now support numeric indexing with brackets while accessing input properties in expressions.

Bug Fixes

• Workflows failing due to scp error
• Workflows timing out after 6 hours
• Auto retry SCPs in workflow execution up to 2 additional times
• Azure ARM instances are marked as AMD64 in instance selector
• Can type spaces in group creation form
• Cluster warning tooltip behind power button and slider
• Ephemeral and unprovisioned storage show up in attach storage modal
• Fail to get cost estimator for us-gov-west-1 region
• Google managed lustre doesn't return deleting or delete status
• Google managed lustre provision status doesn't handle early deletion
• Not able to delete failed bucket
• Provision requested continuously spins for Google Managed Lustre
• Unable to restart workspace if statefulset doesnt exist

Enhancements and Features

Google Managed Lustre is now generally available

Users with access to Google Cloud Platform accounts can provision Google Managed Lustre directly within ACTIVATE. Once created, this storage can be attached to clusters in the same way as existing storage offerings.

Bug Fixes

• Ignore not present in workflow schema, causing workflow builder to show invalid workflow
• Workspace not starting due to large chown operation

Bug Fixes

• Cannot submit workflows because hidden/optional paremeters are being considered required
• New images are automatically set as latest
• Should not allow creating sshprivatekey with same key name

Documentation Changes

• Remove legacy cluster docs

Bug Fixes

• Disk shows up in disk attach dropdown even if its already attached
• Attaching filesystems list is empty on cluster page when cloud account is enabled
• Azure managed lustre can't provision when selecting autozone
• Cannot delete failed Google Managed Lustre instances
• Cost table not showing 125 MBps/TiB and 250 MBps/TiB tiers on google managed lustre creation page
• Google managed lustre instances fail on creation when auto zone is selected.
• Links on login page uncolored
• Shared cluster definition page can crash randomly
• Userworkspace failed to run on AL2023
• Workflow ignore field not working on flattened groups

Bug Fixes

• Refreshing on user workspace edit page causes unknown error
• Workspaces list page can timeout if some user hosts are unreachable

Other Changes

• Change minimum memory for user worksapces to 500M

Bug Fixes

• Ignored fields in workflows still being sent to API

Enhancements and Features

New compute-resources field for workflows

There is now a compute-resources field which will provide both cluster resources and kubernetes resources to a workflow in a single field.

Organization-level user host setting

When running docker workspaces, the default user host that users land on can now be configured by organization administrators.

PW CLI short term token provided when getting bucket credentials

Getting credentials for a provisioned bucket now provides a default option: using the PW CLI with a short-term token (12 hours) for bucket interaction. The previous method using cloud credentials directly is still available as option 2 on the credentials modal.

Bug Fixes

• Arm instances showing as amd64 architecture
• Cannot close temrinal if tab name is too long
• Cannot disconnect from existing type cluster
• Deleting marketplace workflow does not delete favorited workflow
• Failed nodes prevent you from stopping controller
• Large filesystems show undefined in user workspace storage info
• Stoped clusters do not show on home page cluster list widget
• Unable to update cluster while running
• User workspace status banner doesn't show up if user workspace host unavailable

Other Changes

• Refresh the copy-to-clipboard UI

Bug Fixes

• Workflow run page crashing on certain workflows

Bug Fixes

• New managed clusters cannot load nodes page

Enhancements and Features

Pw ssh cluster name support

You can now use just the cluster name i.e. pw ssh mycluster instead of pw ssh pw://username/mycluster when connecting to clusters in your own account.

Bug Fixes

• Cannot save cluster without tags
• New API keys are not hidden
• Clusters list doesn't load if user workspace is not available
• pw ssh command not sizing the terminal correctly
• pw ssh times out
• __USER__ string not substituted for usernames in existing cluster connection string
• Cannot creation manual sessions with empty remote host
• Connection string not showing for private networks
• Platform with multiple DNS records "continue to session" link incorrect
• Windows pw ssh resize not detected

Enhancements and Features

OS updates for Rocky 8.10 and 9.7 releases

Adds support for missing NVIDIA libraries and migrates to new OFED driver on Azure

Bug Fixes

• Deleted buckets temporarily show up on attach filesystem dropdown
• Cloud clusters not showing in terminal quick connect

Bug Fixes

• Unable to restore from snapshot for disks

Bug Fixes

• Recommended commands in storage credentials modal does not include FIPS variables
• Incorrect "provisioning" state when bucket or Lustre provision scheduling fails
• Mass updater does not use theme color for loader
• Managed clusters access management toggle not showing
• Slurm agent action using wrong log directory path

Bug Fixes

• Sparse checkout for remote workflows not working as expected
• Explorer does not work with shared Azure bucket
• Workspace mount fields are incorrectly editable when cluster is on

Legacy Clusters

Legacy clusters will no longer work after this release. All users must migrate to the current generation of cloud clusters before updating.

For background, see our 2024 announcement: Next-Generation Cloud Clusters

Bug Fixes

• Groups can incorrectly be created with spaces in names
• User with no groups get error instead of empty list when going to kubernetes page
• Start times showing NaN on active cloud nodes table
• Typo in workflow logs when cancel command received
• Workflows with no inputs show empty white panel
• Can't use latest image for clusters in some environments
• Workflow runs submitted via API that do not specify app info fail
• Compute nodes cant use image larger than 100Gb
• Checkout action not working remotely when trying to sparse checkout with multiple patterns
• Unable to provision a cluster in environments where built-in waf is enabled

Documentation Changes

• Add deployment guide

Bug Fixes

• Workflow configuration page crashes intermittently
• pw workflows ls returning 404
• Workflows fallback to GitHub CDN if API is throttled
• Deleted users can cause marketplace not to load

Documentation Changes

• Update restart workspace modal explaining workflows are canceled

Enhancements and Features

New terminal page

There's a new page that is just a full screen version of the user workspace terminal, you can access it by turning it on in your sidebar settings.

Storage Explorer GA

Storage Explorer is now generally available across AWS, Azure, and GCP. You can browse buckets, upload and download files, and generate presigned URLs directly from the ACTIVATE web interface.

Buckets provisioned within the last six months should work automatically. For older buckets, a one-time action is required. When you open the Storage Explorer, click the button to add the required CORS rules.

The Storage Explorer is accessible from both the bucket details page and the sidebar.

Default terminal theme is now dark

The default terminal theme has been updated to the dark theme. You can try out other themes from your settings.

Bug Fixes

• Workflow parser can fail to load if streaming fails
• Unable to select built in workflow configurations
• Cannot select a configuration on launcher modal
• Agent logs can grow too large
• New organizations cannot edit theme
• Display name not used on organization page

Enhancements and Features

Clarified workflow interactions with user workspace restarts

When the user workspace is restarted, all running workflows are immediately canceled. This has always been the case, since workflows run inside the workspace, but the UI did not previously reflect this correctly. Workflows could show a canceled status while individual steps appeared to still be running.

All steps are now correctly marked as skipped, and a clear cancellation reason is available by hovering over the workflow status. In addition, sessions created by a workflow will no longer be automatically re-established after a workspace restart, as this was not intended behavior.

CLI transfers now show progress bar

Transfers to cloud buckets using the PW CLI will now show a progress bar for each file.

User workspace status indicators

When the user workspace is starting, there will now be a dismissible banner present on the top of every page. Additionally, you will not be able to navigate to tunnel sessions or click execute on workflows until your workspace is up.

Bug Fixes

• Prevent executing workflows while workspace is down
• Home page widgets don't drop exactly where they are dropped
• Groups should not be required for mass import
• Cost page doesn't auto select a group
• Buckets not creating
• Snapshotting a cluster's root disk fails but shows provisioned
• Cloud node metrics still show even after node is deleted
• Instance type list not using cached list
• Workflows don't have scheduler type for cloud clusters
• Workflow logs can grow too large
• Updating marketplace items not working
• Node metrics chart tooltip overflows if there's a lot of nodes

Documentation Changes

• Update windows CLI install instructions

Bug Fixes

• Cluster list can fail if it does not have slurm login nodes defined
• Instance monitor does not always list all clusters

Bug Fixes

• Cluster list can fail if it does not have slurm login nodes defined
• Checkout in marketplace remote workflows not working
• Non-snapshot storages appear as options in the snapshot dropdown

Enhancements and Features

Workflow action bar shortcuts

The workflow action bar now includes quick-access shortcuts to fork, duplicate, favorite, and when applicable, a direct link to the Marketplace for Marketplace workflows.

Able to publish/unpublish images from admin panel

Platform administrators can now change the published status of images from the admin panel images page.

pw ssh support for Windows

PW CLI ssh command now works on Windows.

Bug Fixes

• Favorite button on workflow list not working
• Sessions are not showing workflow thumbnails
• Cannot copy snapshots
• OpenAI field in workflow yaml ignored
• Marketplace favorite items are not fetching remote details from marketplace
• Fork and duplicate working inconsistently for workflows
• Running recently favorited marketplace workflows not working when workflow feature preview enabled

Enhancements and Features

Dark themes generally available

Introduced full dark-theme support. Use "Change Theme" in the top-right user menu to switch between light and dark modes.

Allow disabling rate limiting by setting RATE_LIMIT_PER_SECOND to -1

Self-hosted deployments of ACTIVATE can disable rate limiting by settings the RATE_LIMIT_PER_SECOND env variable to -1

Bug Fixes

• Snapshot provision status not showing up and shortcuts incorrectly disabled
• Storage widget does not let users w/ shared access to navigate to details/edit page

Bug Fixes

• Recreating a shared bucket with the same name does not show the newly created bucket to shared users
• Unable to set images to latest in admin panel
• Form slider styling
• Saving cluster config while running wipe out some cluster variables
• Favorite marketplace workflows have out of order inputs
• Can't update cluster partition config on private network deployment
• Kubernetes secret/configmap widget not showing results
• Session slug is not populated properly
• Session text unreadable on dark mode
• Unknown Error when opening see all instances page while node box is empty
• Cannot attach or detach workspace mount while cluster is running
• Kubernetes user workspaces created with wrong configmap name
• Snapshots not finding group is causing page to reload

Enhancements and Features

Workflow parallelworks/checkout action

You can now checkout git repositories inside of a workflow using the parallelworks/checkout action.

Add none scheduler type to existing cluster

existing type clusters can now specify a Batch Scheduler of "None", which is useful for workflows that have special logic based on the type of scheduler used on a cluster. The value of this in a workflow will be an empty string.

Bug Fixes

• Session names always remove underscores
• Error page doesn't automatically clear when fixing remote workflow details
• Provision status is not showing from list pages
• Snapshot page not automatically refreshing
• Remote workflows cached for a time

Documentation Changes

• Actions and workflow updates

Enhancements and Features

Markdown table support

You can now use extended markdown such as tables anywhere you could previously use markdown.

Google Assured Workloads support for Cloud Networks

Cloud account networks now work with Google Cloud Assured Workloads

Refreshed workflow pages design

We've refreshed the workflow pages, making them more similar to the design of the compute resource and storage pages.

Workflows can access scheduler type on input form

Workflows can now access scheduler type via expressions:

jobs:
  echo_on_remote:
    steps:
      - name: Print scheduler type
        run: |
          echo ${{ inputs.cluster.schedulerType }}
'on':
  execute:
    inputs:
      cluster:
        type: compute-clusters
      slurmPartition:
        type: slurm-partitions
        hidden: ${{ inputs.cluster.schedulerType !== 'slurm' }}
        optional: true

Install nvidia-container-toolkit in cluster images

New base images for clusters will have nvidia-container-toolkit pre-installed.

Support storage type on workflow form

The storage type on the workflow builder now exists.

Bug Fixes

• Os-login not disabled on GCP instances
• User login times not localized
• Add org fields wrong color
• Sessions widget doesn't auto refresh
• Clicking reset to default theme not working
• Unable to select image on new partition
• Storage permission "View & Edit" incorrectly named
• Errors on snapshot page not showing error message
• Spaces in remote workflow properties break the workflow
• Sparse checkout not saving
• Kubernetes home page widget always shows error
• Instance dropdown not showing "all sizes" link
• Stop button should be disabled if cluster is provisioning
• Placeholder not allowed on dropdown type
• Restore snapshot on disk page not working
• Localize helm updated at times
• Sessions page has unthemed text
• Workflow slider type always says it must be false
• Tooltips go under table headers
• Blank message pops up when deleting cluster
• Existing clusters without sftp disconnect during healthcheck
• Kubernetes config data overlaps parent panel

Other Changes

• Localize run canceled message

Bug Fixes

• Os-login not disabled on GCP instances

Enhancements and Features

Add partition level slurm suspend timeout setting

Cluster partition now includes Suspend Time. Setting the value to -1 will disable node suspension.

Kubernetes execute shell now allows selecting container

If a pod has more than a single container, a modal will pop up when clicking on execute shell allowing you to choose which container to exec into.

Bug Fixes

• Built-in configurations table has wrong number of columns
• Tooltip in wrong place for sparse checkout list
• Explorer sidebar theme blends into app sidebar on dark mode
• Explorer view empty if only a single bucket is shared
• Unable to restart workspace if its not already running
• Workflow inputs with defaults shows required and fields without explicit label have no label

Documentation Changes

• Examples unreadable on dark mode

Enhancements and Features

Organization admins can revoke user login sessions

Admins and organization administrators can now revoke user login sessions from the organization user page. When revoking sessions, there is an option to also immediately revoke login sessions on cloud resources. This will log the user out of all cloud systems managed by the platform, and kill any processes that they are running..

GitHub input fields now load repo/branch options

Bug Fixes

• Sessioned google bucket deletion failing
• Missing fields not being highlighted on workflow execute
• Kubernetes workload creation times not localized
• Log viewer uses light color scheme on dark mode
• Text on IPs table hard to read on dark mode
• Customized sidebar lost when changing languages
• Home page table headers overlap tooltips
• High levels of zoom cause cluster widget to scroll
• Lustre and github icons dark mode theming
• Sessions widget requires scrolling at high zoom
• Org admin role cannot see allocations
• Tooltip in wrong place for sparse checkout list

Bug Fixes

• Resize the terminal via the maximize/restore button doesn't properly redraw text
• Can't click "here" to config workload widget if not in customizing mode
• Session open in new tab doesnt use slug

Bug Fixes

• Theme can enable "use org logo" even if organization does not have logo
• Cost estimate shows NaN with unknown costs
• Marketplace edit page has duplicate item overview
• Azure controller-nat unable to start compute nodes if cluster was started without partition
• Inconsistent theming on password inputs
• Publish and share icons are not the same everywhere
• Link based sessions do not open

Bug Fixes

• User workspaces not mounting correct home dir path

Bug Fixes

• Canceled workflows continue counting runtime
• Api key text box dark mode theme
• Unable to edit new google filestore
• Forgot password not working when specifying email
• Organizations without themes don't get defaults applied
• Ai provider page cannot scroll when list is long
• Ai provider page dark theme fixes
• Remote workflow icon not shown on workflow list
• Unable to see shared sessions
• Cluster widget not showing correct clusters based on filter

Enhancements and Features

Marketplace item page enhancements

Marketplace item pages now include a details pane that provides key information before you fork or favorite an item.

• Clusters and storage resources: Display provisioning details.
• Remote workflows: Show links to files in the connected repository.

Additionally, workflows in the marketplace now include new tabs for YAML preview and run graph visualization.

Bug Fixes

• Pw CLI permissions on cluster nodes too open
• Temporary workflow directory permissions too open
• Incorrect validation error if session field is empty
• Unable to use ai chats shared by other users
• Forking remote workflow from marketplace has wrong type
• Workflow configs not deleting
• Able to provision aws base infras without selecting a networking mode
• Fsx logs never get past collecting variables
• Workflow runs that fail validation create invalid runs

Documentation Changes

• Document workflow named steps
• Document writing outputs

Enhancements and Features

Manually delete workflow runs

Users can now delete workflow runs from the platform. This will also clean up any files associated with the workflow. Note jobs cannot be deleted while they are running - they must be cancelled first.

Organization admins can reset MFA from user edit page

Organization administrators can now reset the MFA for a specific user from the user edit page.

Bug Fixes

• Buckets fail to provision with empty bucket name
• Google bucket credentials fail to return consistently
• Multi select dropdown missing background
• Unable to create organization groups
• Permission manager second column title not centered
• Dates with no data should show zero in MTD view

Bug Fixes

• Storage provision status breaks out of modal

Bug Fixes

• Cost dashboard intermittently doesn't load
• Groups with no cost data should not be in filters
• AWS snapshots that had buckets attached do not boot

Bug Fixes

• Add delete confirmation to workflow variables
• Deleting buckets gives no UI feedback
• API responds with id in incorrect field for reservations
• CLI version command always prints development
• AWS GovCloud buckets fail to provision
• Custom subdomain sessions not working
• Cannot scroll horizontally on homepage sessions widget

Enhancements and Features

Workflow builder nested workflows suggestions

Smarter Nested Workflow Suggestions

You can now easily discover and insert nested workflows directly while editing your workflow YAML:

• Typing uses: marketplace/ or uses: workflow/ automatically suggests all available nested workflow names and slugs.
• Typing deeper, like uses: marketplace/someworkflow/, shows all version options for that nested workflow.
• After adding with: (note the space), suggestions appear for four input options:
  • inputs and inputs only – insert all nested inputs grouped by category.
  • simplified inputs – insert only top-level input expressions.

Once selected, the inputs are automatically filled in, and if applicable, a dynamic input form is generated in a section labeled after the nested workflow name.
If the YAML doesn’t already contain on.execute.inputs, it is automatically created.

Existing inputs in the YAML remain unchanged.

YAML ↔ JSON Editor Toggle

You can now seamlessly switch between YAML and JSON views in the editor:

• The editor defaults to JSON, but you can switch to YAML using the new button in the top-right corner.
• Switch back to JSON at any time.
• Both views are fully synced — valid edits in one view are reflected in the other.

Bug Fixes

• My workflows hidden incorrectly
• Impersonate option hides incorrectly
• Oidc edit page never stops loading
• Bucket delete modal file name transparent background
• Manage access drawer for storages say cluster access

Enhancements and Features

Customizable top banner

Organizations can add a line of text at the very top of all pages. The color and message can be customized in the organization theme settings.

Bug Fixes

• Storage group settings don't save correctly
• Dark mode theme issues
• Nested workflows do not have tokens
• Prevent deleted buckets from blocking new buckets with same name

Enhancements and Features

Organization User Edit Page Redesign

Redesigned the organization user edit page to consolidate all user settings in one place. The platform-level user edit page has been removed, everything is now managed directly from the organization user page for a streamlined experience.

Allow any image for single instances

You can now select any image you want when creating an instance, when typing in the dropdown there is an option to Use {image id}

Bug Fixes

• Admin images page dark mode fixes
• Favorited and featured items only show up in featured on add page
• Hide values by default on workflow variables

Enhancements and Features

Allow list of public buckets

The Parallel Works CLI can now be used to list public buckets on AWS, Azure, and Google Cloud Platform.

PW CLI cluster filtering

When using the Parallel Works CLI, you can now filter clusters returned with the new --owned and --status flags.

Examples

# List clusters owned by the user "Jake.Thayne" 
pw cluster ls pw://Jake.Thayne
 
# List only clusters you own
pw cluster ls --owned
 
# List only provisioned clusters
pw cluster ls --status=on

Workspace storage usage shown on settings page

You can now see the storage for your user workspace from your account page.

Bug Fixes

• LDAP edit page never loads
• Open in new tab shows up on breadcrumbs incorrectly
• Pw ssh cannot connect to cloud cluster with private ips

Documentation Changes

• Add pw ssh proxy command examples for port forward

Enhancements and Features

Pw ssh proxy command

Now can use pw ssh --proxy-command as the ProxyCommand option for both SSH and SCP Examples: Run as a ProxyCommand for SSH

ssh -o ProxyCommand="pw ssh --proxy-command %h" user@pw://Jake.Thayne/my-resource
ssh -o ProxyCommand="pw ssh --proxy-command %h" user@workspace

Run as a ProxyCommand for SCP

scp -O -o ProxyCommand="pw ssh --proxy-command %h" file.txt user@pw://Jake.Thayne/my-resource:/home/user/file.txt
scp -O -o ProxyCommand="pw ssh --proxy-command %h" file.txt user@workspace:/home/user/file.txt

Note: only scp -O works at the moment (forcing scp to use sftp protocol)

Allow pw CLI to pull from public buckets

The Parallel Works CLI can now copy files from public buckets even if those buckets are not managed by the ACTIVATE platform. This works on AWS, Azure, and Google Cloud Platform.

Bug Fixes

• Cloud account group permissions manager always shows own organization's groups
• Allow organization theme to override legacy theme
• Show error when app target not defined in remote apps
• Cannot create instances on cloud networks shared with organization only
• Empty google bucket on deletion