80 posts tagged with "seqera cloud"

Breaking changes​

Google credentials now accept only service account keys. Creating or updating a credential with a key of another type, a non-Google token URI, or a universe domain other than googleapis.com fails, and a stored credential that fails the same check becomes invalid at its next validation. Workload Identity Federation credentials are unchanged.

Feature updates and improvements​

Compute environments​

• Added Fusion version and Fusion snapshots settings to the compute environment, pipeline, and launch forms.

Studios​

• Added a capacity check that blocks a Studio when its AWS Batch compute environment is full, and reports a session waiting for resources.

Agents​

• Renamed the agent Pause and Resume actions to Disable and Enable.

Co-Scientist​

• Changed a new conversation to bill the organization of the workspace it starts from, rather than one inferred from the page.

Datasets​

• Moved the datasets table to the comfortable layout, with taller rows and more space in each cell.
• Added a View hint to the runs link on a dataset row.

Pipelines​

• Added Nextflow 26.10.0 to the version catalog.

Data Explorer​

• Added a specific error for a bucket the selected credentials cannot access, in place of a generic failure.
• Moved the Data Explorer list from row cards to a headed table in the comfortable layout. Hidden now sits next to a repository's name, beside Public.

Bug fixes​

Compute environments​

• Fixed a Google Cloud head VM staying up when its first self-delete was refused. It now retries for up to an hour.
• Fixed an Azure Cloud run that ends before Nextflow reports its start giving no diagnosis. The error now points to the head's launcher output.
• Fixed AWS Forge leaving s3:AbortMultipartUpload out of the policy it writes for the work directory bucket, where a failed or canceled multipart upload left incomplete parts behind. Compute environments created before this release keep their existing policy.
• Fixed a Studio on a Google Cloud compute environment failing to pull a private container image from Artifact Registry or Container Registry. The head VM now authenticates to the registry with its own identity.

Pipelines​

• Fixed the launch form leaving nested run parameters empty when a config profile set them.
• Fixed a long version name misaligning the columns of the Launchpad list.
• Fixed editing a pipeline's Seqera Platform schema failing with an "already exists" error when the schema declares an $id.

Co-Scientist​

• Fixed a conversation showing no feedback while its transcript loaded.

Agents​

• Fixed a failed agents list showing the "No agents configured yet" empty state instead of an error.

Projects​

• Fixed the project edit form omitting project pipelines that sorted past the first page.

Data Explorer​

• Fixed the data picker offering Upload to users without permission to upload.

Credits​

• Fixed storage and network usage not being priced, so it never drew from credit grants.

Monitoring and observability​

• Fixed a run with no output directory showing a lineage message on its Outputs tab.
• Fixed folders on a run's Outputs tab not expanding. The pipeline outputs list is now always a tree.

Studios​

• Fixed long Studio names truncating in the Studios list while the name column still had room.

General​

• Fixed form controls not repainting after a silent value update.
• Fixed the Fusion throughput quota never applying at launch.

Breaking changes​

A Fusion version selected in the launch form or saved on a pipeline no longer takes effect on its own. Runs use the Fusion version from the Nextflow launcher container unless the Fusion version override is enabled on the compute environment.

Feature updates and improvements​

Co-Scientist​

• Moved the current page out of the status bar and onto a Context chip in the composer, where it stays visible after a page screenshot is skipped or dismissed.
• Added arrow-key navigation into and out of a category in the @ mention menu.
• Changed Esc at the top level of the @ mention menu to close the panel instead of reopening it.

Agents​

• Added the bound GitHub App credential to an agent's Details tab.
• Added a message to the Service account picker on the agent form when the workspace has no service account.

Actions​

• Added a link from an action's Target card to the agent it runs.
• Added a message to the Agent picker on the action form when the workspace has no agent.

Bug fixes​

Compute environments​

• Fixed cancelling a run on Google Batch failing and leaving its task jobs running.
• Fixed runs on EC2 instance types without live console output being marked unknown and dropped from monitoring.

Pipelines​

• Fixed resuming a run disabling every compute environment when the environment's work directory ends in a slash.

Feature updates and improvements​

Co-Scientist​

• Replaced the Recent shortcut in the @ mention menu with a Search context field, per-category browsing, paginated results, and status badges.

Compute environments​

• Added Use private address to Azure Batch Forge compute environments, for pool nodes without public IP addresses.
• Added the instance ID and failing command to setup script warnings in the run execution log.

Studios​

• Added a link from a Studio's details page to its compute environment.

Service accounts​

• Added service accounts: non-human identities that belong to an organization and that an agent can run as. Organization owners add, view, edit, and delete them from the new Service accounts tab under Access control.
• Added workspace roles for service accounts.
• Added organization membership rules for service accounts. Each service account counts toward the organization's member limit.
• Marked service accounts in the admin panel. The users list and the Members of organization and Workspace participants tabs show a service account badge and a distinct avatar, and the organization role column reads Service account.

General​

• Redesigned the organization, workspace, and user profile settings pages.

Bug fixes​

Co-Scientist - projects​

• Fixed the project Datasets tab showing unusable dataset actions to Launch users and non-functional buttons in empty projects.
• Fixed relaunching a run from a project's Runs tab returning to the workspace instead of the project.

Pipelines​

• Fixed Launch users being unable to resume runs of pipelines with Pull latest enabled.
• Fixed Azure data repositories selected as a run output directory producing an invalid path.
• Fixed a Fusion version selected in the launch form ignoring the compute environment's Fusion snapshots setting. A selected version with no Fusion snapshots build now fails the launch with an error.

Compute environments​

• Fixed AWS compute environments reporting an unexpected error instead of an access denial when credentials cannot reach the work directory bucket.

Credentials​

• Fixed Bitbucket Server credentials with an access token and no password being rejected when adding a pipeline or opening its launch form.

Data Explorer​

• Fixed the IGV preview losing its reference annotation track, chromosome ideogram, and gene name search.

Data lineage​

• Fixed selecting a task in global search results opening the run's Tasks tab instead of the task.

Secrets​

• Fixed pipeline secrets with underscores in their names being wrongly rejected as duplicates.

General​

• Fixed muted text using the light theme color in the dark theme.
• Fixed muted and raised surfaces being indistinguishable in the dark theme.
• Fixed pipeline and compute environment addresses in the public 12.0.0.0/8 and 172.32.0.0-172.37.255.255 ranges being rejected as private.
• Fixed screen readers not announcing a field's label together with its value.

Feature updates and improvements​

Co-Scientist​

• Made Projects available in organization workspaces to roles with the Projects permission, which existing custom roles don't include.
• Added the Project workspace role, for a user who launches a project's pipelines, adds datasets, and reads run reports from the Projects view, without the workspace's Launchpad, Runs, Datasets, Compute, or Settings pages.
• Added a Projects permission category to custom roles.
• Surfaced proj_ labels as projects in Labels settings.
• Limited the launch picker on a project's Runs tab to pipelines that carry the project's label.

Pipelines​

• Added a Fusion version selector to the launch form, and limited both version lists to compatible versions.

Studios​

• Added Conda packages for custom container images under More settings.
• Shortened the browser tab title on the Studio details and connect pages to Studio: <name>.

Data Explorer​

• Added the bucket versioning state (Enabled, Suspended, Disabled, or Unknown) to the About data repository dialog for Amazon S3 and Google Cloud Storage data repositories.

Data lineage​

• Changed See in Data Explorer on the run Outputs tab to use the output directory from the run's lineage record.

Credentials​

• Added the Set up Workload Identity Federation in GCP panel to Google Workload Identity credentials created from the compute environment form.

Monitoring​

• Added a Quick launch action to the empty runs list.

Bug fixes​

Pipelines​

• Fixed the Add and Update buttons on the action and pipeline forms staying disabled after a pipeline revision failed to load.

Actions​

• Fixed a paused action that names a deleted pipeline being resumable instead of asking you to point it at a live pipeline.

Compute environments​

• Fixed Azure Batch Forge compute environment creation accepting a malformed container registry credential ID, or more than one.

Access control​

• Fixed selecting a template for a custom role not applying its permissions.

General​

• Fixed the Runs and All runs pages showing no results when opened or reloaded with a search filter in the URL.
• Fixed cancelled runs showing an empty Metrics tab.

Feature updates and improvements​

Monitoring​

• Added a live task execution timeline to the run Tasks tab, showing each task's queued and running time.

Pipelines​

• Extended the Nextflow version list back to 23.03, from a previous floor of 25.10.
• Added the pipeline diagram declared in manifest.diagram to the launchpad pipeline details page.

Studios​

• Added custom Studio icons, shown in the Studios list and on the Studios page.

Co-Scientist​

• Moved the sandbox chip into the chat composer toolbar, beside the context chips.

Data lineage​

• Made data lineage available in organization workspaces for runs on AWS compute environments.
• Added pipeline:<name> and pipelineId:<id> qualifiers to lineage search, matching a pipeline's runs, tasks, and published files.
• Added pipeline names to lineage search results and a See syntax tips link to the search modal.
• Changed data lineage ingestion from SQS polling to SNS notifications and added s3:ListBucket to the lineage IAM policy; manually configured workspaces must be reconfigured.

General​

• Added the reason an action stopped or failed to the Actions list.
• Redesigned the Actions list as a table showing each action's source, status, last event, and creator, with usage details in a dialog.
• Added guided empty states to list pages, naming the next step to take.

Bug fixes​

Co-Scientist​

• Fixed a closed Co-Scientist chat reopening on page refresh.
• Fixed the left navigation staying collapsed after closing the Co-Scientist chat.

Pipelines​

• Fixed GitHub Redeliver not retrying an action trigger whose launch failed.

Studios​

• Fixed Studios SSH authorization rate limiting applying across all sessions instead of per session.

General​

• Fixed labels beyond the first 100 missing from the launch form and label search, and label assignments dropping selections not on the current page.
• Fixed an unstable sort order that repeated or omitted labels when paging through the label list.

Breaking changes​

• Google Batch and Google Cloud compute environments now require a VPC network when Use private address is enabled, and Google Batch also requires a subnet. Both the compute environment form and the API reject a create or update request that enables private addressing without them. Previously, the environment was accepted and failed later at pipeline launch.

Feature updates and improvements​

Compute environments​

• Added the AWS r9gd instance family to the local NVMe list.
• Removed the Preview badge from Seqera Compute in the compute environment platform list.

Credentials​

• Removed the Beta notice from Azure Entra service principal credentials.
• Added a Set up Workload Identity Federation in GCP panel to Google Workload Identity credentials, listing the values to copy into your Google Cloud project: the OpenID Connect issuer URL, the google.subject mapping that makes Cloud Audit Logs trace activity back to the acting Seqera user, and a recommended attribute condition that pins the workload identity pool to your organization and workspace. The provider, service account email, and token audience fields moved to a Connect the federated identity panel.

Pipelines​

• Added deduplication of repeated GitHub webhook deliveries to an action, preventing a resend from launching the pipeline a second time. A delivery that cannot be recorded now returns 500, and GitHub offers the resend rather than reporting success.
• Added an audit log record for every action firing.
• Added a Created by column to the Actions list.
• Grouped the action form into Details, Trigger, and Target sections. The form omits the Trigger section for GitHub and Seqera sources, which a webhook endpoint drives instead.

Bug fixes​

Compute environments​

• Fixed Kubernetes, EKS, and GKE compute environment validation reporting every connection failure as Unexpected error while processing request, so connection timeouts, refused connections, DNS failures, TLS and certificate errors, and endpoints that are not a Kubernetes API server now each report what failed.
• Fixed GKE cluster discovery reporting a generic 400 for revoked keys, exceeded quotas, and unreachable API endpoints instead of the underlying Google Cloud error.
• Fixed compute environment validation reusing a cached client from a different compute environment, so correcting a field and resubmitting, or updating credentials, now validates against the new values.
• Fixed GKE compute environments that use Workload Identity Federation failing with a 500 when reading run logs or downloading files.
• Fixed Azure Cloud compute environment creation failing with an unexplained error when the credentials cannot read back a resource the forge has just created, so the error now names the resource and the missing read permission.
• Fixed pipeline additions against Tower Agent compute environments intermittently failing with Timeout waiting for command response.

Studios​

• Fixed Studios with mounted data links failing to start on Seqera Compute and on AWS Cloud, Azure Cloud, and Google Cloud compute environments.

Feature updates and improvements​

Secrets​

• Migrated the workspace and user secrets lists to the shared row-card table already used by compute environments and credentials. Edit and Delete moved into the row's kebab menu, and the whole row opens the edit form for users with update permission.

Bug fixes​

Credentials​

• Fixed the inline credentials form in compute environment creation offering fewer options than the Credentials page. AWS supports role-based credentials with external ID generation, Google supports Workload Identity Federation, and Azure uses the same credential fields as that page.
• Fixed the row actions column reserving an empty strip in the compute environment and credentials lists for users without permission to act on the row.
• Fixed the credentials kebab menu opening an empty panel for users without permission to act on the row.

Pipelines​

• Fixed lineage resolution for resumed runs. Each run in a resume chain now shows its own Lineage ID, instead of every run in the chain showing the most recently indexed one. A resumed run shows - while it executes, then its own Lineage ID once it completes.

Feature updates and improvements​

Compute environments​

• Grouped compute environment selects by platform, listed the workspace primary environment first, and added an in-panel search that matches on name, region, and platform.
• Changed the pre-selected compute environment in launch forms from the alphabetically first environment to the workspace primary environment.

General​

• Removed the count badges from the Runs, Reports, Datasets, and Projects tabs.

Bug fixes​

Credentials​

• Fixed the Password field helper text on the GitLab and Gitea credential forms to state that a personal access token must be entered in both the Access token and Password fields, and that the Password field is required for Nextflow versions before 26.04.

Pipelines​

• Fixed the launch form to preserve the output directory when resuming a run, instead of publishing to the pipeline default.
• Fixed user-typed launch parameters being discarded when a config profile or revision change re-fetched the parameters.
• Fixed schema default parameters being dropped from the submitted parameters after selecting a config profile.
• Fixed nested parameter groups being submitted as null, which disabled Launch with no way to clear the error.

Feature updates and improvements​

Studios​

• Added filtering to the Studios list, with the selected filters persisted across navigation.

Compute environments​

• Added an OS disk size setting to Azure Cloud compute environments.
• Added an optional Region field to the Azure credential forms, with autocomplete suggestions and free-text entry for regions outside the catalog.

Pipelines​

• Added support for Nextflow v26.08.0-edge.
• Improved launch performance by reducing the number of SCM calls made on the launch path.

Data Explorer​

• Added search to the data link selector in the bucket action form.

Bug fixes​

Compute environments​

• Fixed false "region not found" warnings on Azure credentials by probing Azure Batch in the credential's own region instead of westeurope, and by validating Batch access on the compute environment rather than the credential.
• Fixed compute environment deletion being possible while creation was still in progress.
• Fixed the compute environment details page to redirect to the compute environment list after a deletion.
• Fixed forged Azure Cloud compute environments losing their Nextflow configuration.
• Fixed runs being flagged for attention when a UserData script failed.

Credentials​

• Fixed credential validation to back off and escalate probes that fail permanently, instead of retrying them at the same rate.

Monitoring and observability​

• Fixed the runs toolbar disappearing in loading and empty states.

Credits​

• Fixed the credits report download to show progress and offer a cancel control.

General​

• Fixed the default workspace preference not being cleared correctly.

Feature updates and improvements​

Compute environments​

• Added an optional KMS key ARN to AWS Batch compute environments, so pipeline secrets in AWS Secrets Manager can be encrypted with a customer-managed key instead of the AWS-managed default.

Access control​

• Updated the copy and API URL chip on the Access tokens page.

General​

• Added the page number and search terms to paginated list URLs, so list state survives back-navigation and list URLs are shareable.

Bug fixes​

Compute environments​

• Fixed AWS Cloud head job failures returning an empty log page when the compute environment's IAM instance profile has no role attached.
• Fixed compute environment create and update accepting credentials already recorded as invalid or soft-deleted, and update resetting a credential's status without checking it.
• Fixed exhausted Google Cloud IAM retries to report a meaningful error, and added jitter to the retry backoff.

Data Explorer​

• Fixed tab flicker and a full-width action button in the file browser.
• Fixed IGV reference genome URLs not being signed, and corrected IGV rendering.
• Fixed an error when listing data in workspaces with auto-discovery disabled.

Monitoring and observability​

• Fixed the Runs tab pagination being scoped incorrectly on the project details page.
• Removed the ambiguous "last run" chips from the project header.