16d (edited) • General discussion
Studio 1.11 is out: every secret is encrypted at rest
Studio 1.11.1 is live. The headline is secrets: everything Studio stores that could unlock
something of yours is now encrypted in the database.
-----------------------
IMPORTANT: This is a database upgrade so follow the upgrade steps below.
-----------------------
Secrets are encrypted at rest
Organization secrets, provider credentials, webhook tokens, secret fields in your nodes and
secrets entered on a run form are all sealed in the database. Studio refuses to write a
secret in plain text, so a new feature cannot quietly store one unencrypted.
Members see secrets as configured, never as values
Members see that a secret field or header is set, read only. The values stay with admins, and
copying, importing or installing a workflow from the marketplace leaves webhook secrets behind.
Steps are now nodes
Everywhere you read it in Studio, a workflow step is now called a node, and every page uses
one name for each thing.
Also in this release
- Chatterbox Turbo text to speech works.
- Wait for Webhook checks the caller's API Key or JWT before it resumes the run.
- Logs and error traces have secret values scrubbed out.
- Notifications can be deleted or marked unread, and a rejected approval keeps its reason.
- Approvals, manual nodes and reruns hand off to the next node the way they should.
- Saving one section of Organization Settings leaves the others alone.
- Tables and dialogs fit a phone screen.
- 1.11.1 picks up the fix for the eMudhra/emSign certificate issue the Python community flagged
this week, and Studio images no longer ship pip.
-----------------------
To upgrade
Back up your database first. On the first start, Studio encrypts the secrets you already have,
and there is no going back to 1.10 after that.
Then run `studio-console upgrade` and pick 1.11.1.
If you run workers outside Docker with the `studio-workers` package, upgrade them to
1.11.2 as well (`uv tool upgrade studio-workers`), since Studio checks that worker and API
versions match. Docker workers update with the rest of the install.
Full notes on GitHub: https://github.com/selfhosthub/studio/releases/tag/v1.11.0
-----------------------
Any questions? Let me know.
Cheers,
Kawika
0
0 comments
Studio 1.11 is out: every secret is encrypted at rest
skool.com/selfhosthub
Build automation infrastructure you own. Self-hosted workflows for images, video, and voice, running on your machine, where a retry costs nothing.
Leaderboard (30-day)
1
+1
Powered by