Waiso versions

1.6.3 · Action needed

2026-11-07T12:00:00Z

A security fix for the web robot engine on self-hosted installs. Update soon, and with Docker Compose take the compose file from this version.

Action needed

Before: With Docker Compose, get this version's compose file. It gives the robot engine the one extra permission it needs to start its network protections.
git pull
After: Check the robot engine's log. It should say that egress to 169.254.0.0/16 is blocked.
docker compose logs scraper-engine | grep entrypoint

Security

On self-hosted installs the web robot engine started without the permission it uses to block robots from reaching the cloud metadata address and private networks, so those blocks were off. Update soon, especially on a cloud server.
With Helm, the engine now starts with that permission and drops to an unprivileged user right after setting the blocks.

Fixed

Site-wide crawling works on self-hosted installs. It was turned off because the same blocks could not be set.

1.6.2

2026-11-07T12:00:00Z

Waiso now has a versions page, and an install tells its admins when a newer version is out. Nothing to do besides updating.

Nothing to do, just update.

New

Every version is listed at waiso.dev/changelog, newest first. Each one says at the top whether you need to do anything besides updating, with the exact line to paste when you do.
Pick the version you run and the page gathers every step between it and the newest, in the order to do them.
Admins see a small notice in the top bar when a newer version is out, linking to what changed. Nobody else sees it.
A feed in English and in Portuguese, for anyone who wants new versions in a feed reader.
A new docs page, Update your install, for Docker Compose and Helm.

Improved

To stop the new-version check, set WAISO_UPDATE_CHECK=off. With Docker Compose this needs the compose file from this version; the check reads a public file and sends nothing about your install.

1.6.1

2026-11-07T12:00:00Z

Small fixes in the flow step screen that came out of using 1.6.0, and one in the web robot.

Nothing to do, just update.

Fixed

Testing a script step that reads a secret variable no longer asks you to type the value. The server fills it in and the value never reaches your browser.
After you test a SQL step, the next step's suggestions know its columns. Before, you had to run the whole flow first.
Publishing a flow with a broken input now tells you which step and which field, and takes you there.
Run step sits under the code, as in the script editor, and Ctrl+Enter runs it.
A web robot that presses Enter on a page that has already moved on no longer fails the run.

1.6.0 · Action needed

2026-11-06T12:00:00Z

Flow inputs are now one expression each, and clicking a step opens one screen with everything about it. Existing flows are converted on the first start.

Action needed

After: If a flow relied on a step stopping when an earlier output had no such field, add a condition before that step. It now receives null and the flow goes on.

New

Every value a step reads is one expression, such as nodes.fetch.output.total, vars.API_KEY or "Ana", with completion and checks as you type.
Clicking a step opens one screen: its inputs on the left, the step in the middle with its output below, and settings, history and the assistant on the right.
The same screen shows a past run of the step, with the values it received and the code it ran.

Improved

Light is now the default theme. Dark is still one click away.
Flows, drafts, published versions and older versions are converted for you. Endpoints, schedules and share links keep working with nothing to republish.

Removed

The separate edit panels for each kind of step. Everything they did lives in the new screen.

1.5.10

2026-11-04T12:00:00Z

The Projects tab is a list with an overview panel, and every MCP answer explains itself in plain words. Nothing to change in .env.

Nothing to do, just update.

New

The Projects tab is a list you can search and sort, with a panel showing runs, failures and approvals waiting for you.

Improved

Every MCP tool answer carries a short summary in plain words, and an AI assistant can now reach every part of the product.

1.5.9

2026-11-01T12:00:00Z

Your code can tell which run, flow, step and trigger it is running under.

Nothing to do, just update.

New

Every run gets nine WAISO_* variables: the run, the flow run and its root, the step, the loop index, the project, the item path, the trigger and the schedule.
waiso.run.context() returns the same in every language.
Those nine names are reserved. A project variable with one of them is marked and the run's value wins.

1.5.8

2026-10-31T12:00:00Z

Fixes from a full review of every screen. The version before it, 1.5.7, was never published.

Nothing to do, just update.

Fixed

Settings shows the install's E-mail, S3 and Google app tabs again. They were hidden from everyone.
The e-mail settings side panels explain what each choice does.
Email Studio uses the same page layout as the rest of the app.
Pages load with skeletons in the shape of what is coming, instead of jumping.

1.5.6

2026-10-30T12:00:00Z

The apps editor gains folders, history with restore, shortcuts and completion for HTML, CSS and JavaScript. Nothing to set.

Nothing to do, just update.

New

Folders and file icons in the apps editor.
An app's history shows what changed between versions, and you can restore one.
Completion for HTML, CSS and JavaScript while you edit an app.
A run started by an app shows the request it received in its own tab.

Improved

Keyboard shortcuts in the apps editor.

1.5.5

2026-10-30T12:00:00Z

Changes to the public site only. Nothing changes in a self-hosted install.

Nothing to do, just update.

Improved

The Apps example on waiso.dev is easier to follow.

1.5.4

2026-10-30T12:00:00Z

An AI chat beside your app, editing app files by hand, and larger requests reaching your scripts whole.

Nothing to do, just update.

New

An AI chat beside the app that proposes changes to its files.
Edit an app's files by hand.

Fixed

Larger request bodies reach your scripts whole.

1.5.3

2026-10-29T12:00:00Z

An app opens like the code editor, and the projects page feels faster.

Nothing to do, just update.

Improved

An app opens like the code editor: files on the left, code or preview in the middle, a side panel on the right.
The projects page shows up sooner.

1.5.2

2026-10-29T12:00:00Z

A clearer Apps page.

Nothing to do, just update.

Improved

The Apps page opens with an overview of your apps.
Every upload shows its progress.

1.5.1

2026-10-29T12:00:00Z

A fix on the public site only. Nothing changes in a self-hosted install.

Nothing to do, just update.

Fixed

The use-case pages on waiso.dev load without errors.

1.5.0

2026-10-29T12:00:00Z

Apps: sites and screens hosted in a project that call its scripts and flows. Publishing them needs an apps domain.

Nothing to do, just update.

New

Apps are static sites and screens kept in a project. They call the project's scripts and flows.
To publish apps, set WAISO_APPS_DOMAIN in .env and point a wildcard DNS record at your server. Without it you can still make, preview and download them.
App files live in a volume of the install, or in your own S3 bucket with the WAISO_SITES_S3_* settings.

1.4.2

2026-10-29T12:00:00Z

The Bash logo follows the theme.

Nothing to do, just update.

Fixed

The Bash logo no longer shows black on the dark theme.

1.4.1

2026-10-29T12:00:00Z

A clearer message when you add a person who already exists.

Nothing to do, just update.

Fixed

Adding a person whose e-mail or username is already in use says so, instead of failing with an error.

1.4.0

2026-10-28T12:00:00Z

Community, a free self-hosted tier. An install with no licence, or one whose licence lapses, keeps running.

Nothing to do, just update.

New

Community is free and has every feature. One person changes things and everyone else can view.
Get a free licence on waiso.dev.

Improved

Nothing stops for licensing any more. An install with no licence, or with a lapsed one, runs on Community.

1.3.6

2026-10-28T12:00:00Z

Changes to the hosted service only. Nothing changes in a self-hosted install.

Nothing to do, just update.

Improved

The hosted service moved behind a new network edge. Self-hosted installs are not affected.

1.3.5

2026-10-28T12:00:00Z

The access tokens list uses the same filter bar as the Runs page.

Nothing to do, just update.

Improved

Access tokens are filtered with the same bar as Runs, with My tokens and All tokens as its last chips.

1.3.4

2026-10-28T12:00:00Z

A calmer API reference, with one language picker for the whole page.

Nothing to do, just update.

Improved

The API reference has one language picker, and every example is a whole program you can run.

1.3.3

2026-10-28T12:00:00Z

Fixes for compile errors and for reading JSON in C, C++ and Bash.

Nothing to do, just update.

Fixed

A compile error is reported as one, with its own code, so you can tell it apart from a crash.
C, C++ and Bash scripts read JSON answers from waiso.api correctly.
JSON in the API reference is highlighted.

1.3.2

2026-10-28T12:00:00Z

Runs with a very long error now end, and scripts can start other scripts through waiso.api.

Nothing to do, just update.

New

waiso.api.scripts.run starts another script from your code.

Fixed

A run whose error is very long, such as a big compile error, now ends as failed instead of staying on running.

1.3.1

2026-10-28T12:00:00Z

The API reference is linked from the site's header and footer.

Nothing to do, just update.

Improved

The API reference is one click away from every public page.

1.3.0

2026-10-27T12:00:00Z

Access tokens work over HTTP and MCP, scoped per project and area, and scripts can call Waiso itself. Nothing to change in .env.

Nothing to do, just update.

New

Access tokens call your install at <your address>/api and over MCP. Each token is limited to the projects and areas you pick.
Scripts can call Waiso from their own code through waiso.api, in every language.
An API reference with a whole working program per language.

1.2.9

2026-10-27T12:00:00Z

Help opens as a small popover. It also carries the robots built over MCP from 1.2.8.

Nothing to do, just update.

Improved

Help is a small popover instead of a full page.

1.2.8

2026-10-27T12:00:00Z

Build a web robot from your own AI assistant over MCP, with no AI key in Waiso.

Nothing to do, just update.

New

Your AI assistant can build a web robot over MCP. It explores the site, checks every selector and tests the robot against the rows you expect, and Waiso needs no AI key of its own.
The robot studio shows that session live, with a Stop button.

1.2.7

2026-10-27T12:00:00Z

The AI connection dialog lists your key's models, plus a Cookie settings page. The version before it, 1.2.6, was never published.

Nothing to do, just update.

New

A Cookie settings page where you can change your choice at any time.

Improved

Adding an AI connection shows the models your key can use, and a test answers with a notification.

1.2.5

2026-10-26T12:00:00Z

Profile photos from Google and GitHub are kept in your install.

Nothing to do, just update.

Improved

The photo from a Google or GitHub sign-in is saved in your own storage, so it no longer depends on their servers.

1.2.4

2026-10-26T12:00:00Z

A fix for sign-in with GitHub on the hosted service, and clearer words on the sign-in page.

Nothing to do, just update.

Improved

The small print on the sign-in page is easier to read.

Fixed

1.2.3

2026-10-26T12:00:00Z

Two-step sign-in, sign-in with GitHub, and a security update in the web robot engine.

Nothing to do, just update.

New

Two-step sign-in with an authenticator app. Each person can turn it on, and admins can require it for everyone.
Sign in with GitHub, once you set GITHUB_CLIENT_ID and GITHUB_CLIENT_SECRET in .env.

Security

The web robot engine moves to a patched Node (CVE-2026-111497). Update soon.