LoginSign Up
← Back to all sparks
N

Nextflow

INFRA · APIS
Velocity5.0

Workflow orchestration engine for scalable and reproducible data pipelines

nextflow.io ↗

Nextflow 26.10.5 adds SOCI lazy loading for Wave containers after October's token fixes.

workflow orchestrationbioinformaticstype systemcontainersseqera platform
◆Current state
Nextflow ships dated edge builds plus 25.10, 26.04 and 26.10 stable lines for backports. October was dominated by the Bitbucket Cloud token leak, patched across all three lines with a rotate-your-tokens advisory and tighter log redaction. The 26.10 line has since moved back to features and fixes: 26.10.5 adds a wave.soci option for lazy-loading container images and fixes typed-process DAG edges and a JVM hang on channel.interval.
◆Where it's heading
With the security cleanup done, the 26.10 patches are about two threads: the typed-process system, which keeps getting checker, formatter and DAG fixes, and the Seqera/Wave container stack, where SOCI lazy loading targets slow image pulls at task start. Seqera plugin bumps, including idempotent task submission, arrive in nearly every patch.
◆Prediction
Expect further 26.10.x patches fixing typed processes and Wave options, with the typed syntax edging toward default; the feed does not yet show a date for that.

◆Recent moves

  1. 7d ago

    Nextflow 26.10.5 adds Wave SOCI lazy loading

    A post-security-fix patch that returns to features: a wave.soci option lets Wave containers lazy-load image layers, cutting task start time on large images. It also fixes missing DAG edges for typed processes and a JVM hang from channel.interval, and makes Seqera task submission idempotent.

    View source ↗
  2. 14d ago

    Nextflow 26.10.4 patch with type-checker fixes

    A Nextflow patch release with type-checker fixes such as file name collision detection in typed processes, plus CI and release-job changes.

    View source ↗
  3. 18d ago

    Nextflow 26.04.9 tightens log redaction

    Improves redaction of sensitive values in logs and bumps two plugins, following the token-leak fix in 26.04.8.

    View source ↗
  4. 18d ago

    Nextflow 26.04.8 stops leaking Bitbucket tokens; rotate them

    Nextflow 26.04.8 keeps Bitbucket Cloud API tokens out of clone URLs and logs; anyone who used a token on 26.04.0 to 26.04.7 should rotate it, since it may have been written to logs and .git/config.

    View source ↗
  5. 20d ago

    Nextflow 25.10.9: Bitbucket token leak fix backported

    The same Bitbucket token-leak fix backported to the 25.10 line; users on 25.10.0 through 25.10.8 who used a token should rotate it.

    View source ↗
  6. 20d ago

    Nextflow 26.10.3: Bitbucket token leak fixed, rotate tokens

    Nextflow 26.10.3 stops Bitbucket Cloud API tokens from being written into clone URLs and logs; users on 25.07.0-edge through 26.10.2 who used one should rotate it.

    View source ↗