Pro Control Plane

Changelog for ZenML Pro.

Stay up to date with the latest features, improvements, and fixes in ZenML Pro.

0.13.21 (2026-07-09)

See what's new and improved in version 0.13.21.

Dedicated Codespace authentication: Codespaces now use ZenML Pro Codespace tokens instead of workspace-level service account credentials. Each Codespace receives its own scoped ZenML Store API key when it is created, making Codespace access easier to manage and better isolated to the linked workspace.
Organization announcements: Organizations can now include a structured list of announcements. This gives ZenML Pro teams a consistent place to surface organization-level messages, with an API shape that can support additional announcement metadata in the future.

Fixed

Stale session reuse after credential changes: Tokens issued before a user password change or API key rotation are now rejected. This ensures that changing a password or rotating an API key reliably invalidates older sessions derived from those credentials, improving account and workspace security.

0.13.18 (2026-06-18)

See what's new and improved in version 0.13.18.

Command steps are easier to inspect: Command-based steps now show the configured command in the UI instead of displaying step code that may not be relevant. This makes run and snapshot inspection clearer for teams using command steps, so you can quickly confirm what was executed without digging through implementation details.
Snapshot platform event trigger: ZenML Pro now supports a Platform Event Trigger for snapshots. You can use snapshot events as an automation source, making it easier to build workflows that react when snapshots are created or updated.

0.13.15 (2026-06-01)

See what's new and improved in version 0.13.15.

Organization Member Management Improvements

Inviting existing ZenML users to your organization is now faster and more seamless. When you invite someone who already has a ZenML account, they can be added directly to your organization without needing to accept a pending email invitation. This streamlined flow works automatically when SSO is enabled and applies to both SaaS and on-premise deployments.

The organization members table now displays email addresses alongside usernames when available, making it easier to identify team members at a glance.

Fixed

Tag display overflow: Tags in table columns now wrap properly instead of overflowing their containers
Step log permissions: Users without proper permissions now see clear error messages when attempting to view step logs, instead of encountering unclear failures
Artifact version status: The producer run status in the artifact version sidebar now displays the correct current status instead of a hardcoded value
Organization access controls: Users who access an organization without proper permissions can now still log out and access their personal settings
Email case sensitivity: Fixed an issue where invitation emails with mixed-case characters (e.g., from Slack authentication) would fail to match, preventing users from accepting invitations. Email matching is now case-insensitive throughout the invitation flow

0.13.14 (2026-05-13)

See what's new and improved in version 0.13.14.

Sharing secrets and service connectors now works as expected. When you grant Read or Edit permissions to another user, they automatically receive the necessary permissions to view secret values and use service connectors for authentication—not just see metadata. The access list now accurately reflects who can actually use these resources.

Organization Trusted Domains

Organization operators can now configure trusted email domains to define which company email addresses belong to their organization. This makes it easier to find and invite existing ZenML users from your company—the system can surface matching accounts where policy allows, instead of relying solely on email invitations.

Configuring trusted domains:

ZenML-managed deployments: To enable or change trusted domains for your organization, contact ZenML support or your account contact.
Self-hosted deployments: Accounts with super-user privileges can configure trusted domains through the ZenML Pro API on organization create and update operations using the trusted_domains field.

Fixed

Personal Access Tokens now appear consistently in account settings regardless of whether you're viewing from within an organization or from the organization list
Invitations menu item in personal account settings now only appears when SSO is enabled, matching the behavior in the avatar menu
Organizations overview now loads all organizations you have access to, fixing an issue where only the first ~100 organizations would appear in the list and org switcher
Code repository links now generate correctly

0.13.13 (2026-05-12)

See what's new and improved in version 0.13.13.

Fixed

When you shared a workspace secret with someone and gave them read access, they could see the secret in the app but not the actual key/value content. This has been fixed—Read and Edit permissions on shared secrets now work as expected, allowing users to view secret values when they have read or edit access.

Helm Chart Enhancements

You can now load sensitive configuration values from existing Kubernetes Secrets instead of plain Helm values. This includes:

OAuth SSO client credentials via zenml.auth.sso.credentialsSecretRef—reference an existing secret containing your OAuth client ID and client secret
Admin password via external secret reference, following the same pattern as the existing database password configuration

This approach aligns with Kubernetes security best practices and makes it easier to integrate ZenML with your existing secret management workflows.

Workspace Filtering

Fixed

Two issues with the list workspaces endpoint have been resolved:

The is_managed filter was being ignored for non-super-users
The is_managed filter was mapped incorrectly, not properly handling the default value of True when the database column was unset

0.13.12 (2026-04-27)

See what's new and improved in version 0.13.12.

Fixed

When sharing a workspace secret with read access, recipients can now view the secret's key/value content as expected. Previously, users with read permissions could see the secret existed but couldn't access its actual values. Both read and edit permissions now work correctly for shared secrets.

0.13.9 (2026-04-07)

See what's new and improved in version 0.13.9.

Enhanced Access Control for Resource Pools

Workspace-level role-based access control (RBAC) is now available for resource pools and their subject policies. This enhancement allows you to manage permissions for resource pool operations at a more granular level within your workspaces.

With this update, workspace roles can now control who can create, view, update, and delete resource pools, as well as manage the policies that govern which subjects can access specific resource pools. This provides better security and governance for your infrastructure resources, ensuring that only authorized team members can configure and manage compute resources in your ZenML Pro environment.

0.13.7 (2026-03-26)

See what's new and improved in version 0.13.7.

Performance Improvements

This release includes internal optimizations to improve the responsiveness and scalability of ZenML Pro. Workspace authentication and permission checks now benefit from intelligent caching, reducing database load and improving API response times for all workspace operations.

0.13.6 (2026-03-20)

See what's new and improved in version 0.13.6.

Visualization Improvements

Step Parameter Validation for Snapshots: The snapshot trigger UI now validates step parameters before submission, helping you catch invalid inputs earlier when launching pipeline snapshots.
Wait Condition Support: The dashboard now supports wait conditions for pipelines that use zenml.wait(...), making it easier to inspect paused runs and resolve pending external inputs so execution can continue.
Retried Step Version Visibility: You can now view retried versions of steps in the UI, giving you better visibility into rerun history when debugging or comparing execution attempts.

0.13.5 (2026-03-11)

See what's new and improved in version 0.13.5.

Visualization Improvements

Enhanced JSON Viewer: JSON visualizations now support collapsing and expanding items, making it easier to navigate and explore complex JSON structures in the dashboard.

0.13.4 (2026-03-05)

See what's new and improved in version 0.13.4.

UI Enhancements

Triggers and Native Schedules: Introduced the Trigger concept for automated pipeline execution. The first supported trigger type is Schedules, which offers lifecycle management, automatic synchronization with orchestrators, and centralized management across stacks.

Artifact Version Tags Now Visible in DAG and Timeline Views

You can now see all tags associated with an artifact version directly in the Artifact Version Panel when viewing your pipeline runs in the DAG or timeline view. This makes it easier to identify and understand artifact metadata without navigating away from your pipeline visualization.

Customizable Documentation Buttons

The header now supports custom documentation buttons, allowing for more flexible navigation to relevant documentation and resources tailored to your workspace needs.

0.13.3 (2026-02-20)

See what's new and improved in version 0.13.3.

Dashboard Customization

Organization administrators can now add custom navigation links that appear on the dashboard, making it easier to direct team members to relevant external resources like documentation, wikis, or internal tools. Additionally, custom buttons can be added to the header for quick access to frequently used links.

Artifact Management

Artifact tags are now displayed in the Artifact Version panel when viewing artifacts in both the DAG visualization and timeline view, providing better visibility into artifact metadata and making it easier to identify and organize artifacts.

0.13.2 (2026-02-10)

See what's new and improved in version 0.13.2.

Authentication Enhancements

ZenML Pro now supports running both SSO and username/password authentication methods simultaneously. This enables a smooth transition period when migrating from password-based authentication to SSO, allowing administrators to configure both methods and gradually move users over to SSO without disrupting existing workflows.

The login interface has been updated to dynamically display available authentication options based on your deployment configuration. When both methods are enabled, users can choose between SSO and traditional username/password login. The SSO login button now includes a loading indicator for better user feedback during the authentication process.

Workspace Management

You can now enroll external self-hosted ZenML servers as Pro workspaces directly from the workspace creation interface. A new "enroll" toggle in the workspace creation form allows you to switch between deploying a regular SaaS workspace and enrolling an existing self-hosted server. For on-premises control plane deployments, the interface automatically defaults to enrollment mode, streamlining the process of bringing your existing ZenML infrastructure under Pro management.

0.13.0 (2026-01-30)

See what's new and improved in version 0.13.0.

Stack Management Improvements

Users can now update existing stacks directly from the UI without needing to delete and recreate them. A new dedicated stack update page allows you to modify stack configurations, add new components, or replace existing ones (orchestrators, artifact stores, container registries, etc.). Access the update functionality from the stack detail sheet or the stacks dropdown menu for more efficient stack management.

Enhanced Artifact Version Experience

The Artifact Version view has been completely revamped with a new unified detail page featuring a modern 3-panel layout. Navigate through artifact versions with a searchable, paginated list on the left panel, while viewing detailed version information in the center and right panels. Tag display and management have been improved across all artifact-related screens, and existing deep links continue to work seamlessly via automatic redirects.

Dedicated Logs Viewer

Pipeline runs now feature a standalone logs page with a dedicated URL, making debugging and monitoring much easier. The new logs viewer includes:

A sidebar for navigating between run-level logs and individual step logs
Virtualized rendering for better performance with large log outputs
Built-in search and filtering capabilities
Step duration display in the sidebar for quick performance insights

Team and Role Management for Invitations

Invitations are now more flexible and powerful:

Assign roles to invitations: Instead of a single static role, you can now assign multiple roles to invitations, just like with users and teams. When the invitation is accepted, those roles are automatically transferred to the new user account.
Add invitations to teams: Invitations can now be added to teams directly. Once accepted, the user automatically becomes a member of the assigned team, streamlining the onboarding process.

Generic OAuth2/OIDC Integration

ZenML Pro now supports generic OAuth2/OIDC authentication for on-premises deployments, allowing integration with any OAuth2/OIDC-compliant identity provider such as Google, GitHub, Azure AD, or Keycloak. This provides greater flexibility in authentication options beyond Auth0, which remains available as an optional integration when configured.

0.12.22 (2026-01-14)

See what's new and improved in version 0.12.22.

Stack Management

You can now update existing stacks directly from the UI without needing to delete and recreate them. A new dedicated stack update page allows you to modify stack configurations, add new components, or replace existing ones (orchestrators, artifact stores, container registries, etc.). Access the update functionality from the stack detail sheet or the stacks dropdown menu.

Artifact Version View

The artifact version experience has been completely revamped with a new unified detail view:

Three-panel layout: Navigate through a searchable, paginated list of versions in the left panel, view detailed version information in the center, and access related metadata on the right
Improved tag management: Better tag display and management across all artifact-related screens
Seamless navigation: Existing deep links continue to work through automatic redirects

Logs Viewer

Pipeline run logs are now easier to navigate and debug:

Dedicated logs page: Each pipeline run has a standalone logs page with a direct URL for easy sharing and bookmarking
Sidebar navigation: Quickly switch between run-level logs and individual step logs, with step duration information displayed for each step
Enhanced performance: Virtualized rendering handles large log outputs smoothly
Search and filter: Find specific log entries quickly with built-in search and filtering capabilities

0.12.19 (2025-11-19)

See what's new and improved in version 0.12.19.

General Updates

Maintenance and release preparation
Continued improvements to platform stability

What's Changed

General maintenance and release preparation (#462)

0.12.18 (2025-11-12)

See what's new and improved in version 0.12.18.

General Updates

Maintenance and release preparation
Continued improvements to platform stability

What's Changed

General maintenance and release preparation (#460)

0.12.17 (2025-11-05)

See what's new and improved in version 0.12.17.

Lambda Function Updates

Updated Python version for Lambda functions
Improved performance and compatibility

Authentication Enhancements

API keys and PATs can be used as bearer tokens
Configurable expiration for API keys

Vault Secret Store

Support for new Hashicorp Vault secret store auth method settings
Enhanced security options

Codespaces

JupyterLab support added to Codespaces
Enhanced development environment

Improved

Lambda function Python version updates (#450)
Enhanced authentication flexibility (#453, #454)
Better Codespace development experience (#455)

0.12.16 (2025-10-27)

See what's new and improved in version 0.12.16.

General Updates

Maintenance and release preparation
Continued improvements to platform stability

What's Changed

General maintenance and release preparation (#449)

0.12.15 (2025-10-16)

See what's new and improved in version 0.12.15.

Bug Fixes

Filter long user avatar URLs at source for older workspace versions
Improved compatibility with legacy workspace versions

Fixed

Filter long user avatar URLs at source for older workspace versions (<= 0.90.0) (#447)

0.12.14 (2025-10-02)

See what's new and improved in version 0.12.14.

General Updates

Maintenance and release preparation
Continued improvements to platform stability

What's Changed

General maintenance and release preparation (#446)

0.12.12 (2025-09-16)

See what's new and improved in version 0.12.12.

Service Account Enhancements

Service accounts can now invite users
Improved automation capabilities

0.12.11 (2025-09-15)

See what's new and improved in version 0.12.11.

Service Account Features

Service accounts can invite users
Enhanced collaboration capabilities

0.12.10 (2025-08-28)

See what's new and improved in version 0.12.10.

Service Account Authentication

Service accounts can authenticate to workspaces
Better team resource management

Improved

Service account authentication to workspaces (#433)
Team resource member testing (#430)
Default workspace version updates (#434)
Run template resource improvements (#435)

0.12.9

See what's new and improved in version 0.12.9.

General Updates

Maintenance and release preparation
Continued improvements to platform stability

What's Changed

General maintenance and release preparation (#431)

0.12.8

See what's new and improved in version 0.12.8.

Workspace Features

Workspaces can now be renamed
Improved workspace management

0.12.7

See what's new and improved in version 0.12.7.

RBAC Enhancements

Schedule RBAC enabled
Team viewer default role added

0.12.6

See what's new and improved in version 0.12.6.

Service Account Improvements

Specify initial service account role
New fields in service account schema and models

Workspace Controls

Prevent users from creating/updating workspaces to older ZenML releases
Prevent users from updating the onboarded flag

Improved

Service account role configuration (#416)
Enhanced service account schema (#419)
Better workspace version control (#421, #422)

Fixed

Service account fixes and membership filtering (#424)

0.12.5

See what's new and improved in version 0.12.5.

Onboarding

User onboarded flag implementation
Better user experience tracking

Improved

User onboarding tracking (#414)
Dependency updates (#418)

0.12.3

See what's new and improved in version 0.12.3.

Codespaces

Delete codespaces when cleaning up expired tenants
Improved resource management

Improved

Codespace cleanup automation (#403)
Workspace default version updates (#407)

0.12.2

See what's new and improved in version 0.12.2.

Codespaces

Add zenml_active_project_id to CodespaceCreate model
Delete Codespaces on Workspace Delete

Workspace Storage

Workspace storage usage count, limiting, and cleanup
Better resource management

0.12.0

See what's new and improved in version 0.12.0.

Codespaces

Introducing Codespaces to Cloud API
Enhanced development environment support

Workspace Storage

Workspace storage usage count, limiting, and cleanup
Better resource management

Infrastructure

Provision shared workspace bucket with Terraform
Improved infrastructure as code support

RBAC

More permissions handling for internal users
Enhanced access control

Improved

Codespaces integration (#380)
Workspace storage management (#402)
Terraform infrastructure support (#396)
RBAC improvements (#392)
Team member management (#397)

Breaking Changes

Kubernetes Orchestrator Compatibility: Client and orchestrator pod versions must match exactly

PreviousServer & SDK

Last updated 4 days ago

Was this helpful?

Good afternoon

0.13.21 (2026-07-09)

0.13.18 (2026-06-18)

0.13.15 (2026-06-01)

Organization Member Management Improvements

0.13.14 (2026-05-13)

Improved Secret and Service Connector Sharing

Organization Trusted Domains

0.13.13 (2026-05-12)

Secret Sharing Improvements

Helm Chart Enhancements

Workspace Filtering

0.13.12 (2026-04-27)

Secret Sharing Improvements

0.13.9 (2026-04-07)

Enhanced Access Control for Resource Pools

0.13.7 (2026-03-26)

Performance Improvements

0.13.6 (2026-03-20)

Visualization Improvements

0.13.5 (2026-03-11)

Visualization Improvements

0.13.4 (2026-03-05)

UI Enhancements

0.13.3 (2026-02-20)

Dashboard Customization

Artifact Management

0.13.2 (2026-02-10)

Authentication Enhancements

Workspace Management

0.13.0 (2026-01-30)

Stack Management Improvements

Enhanced Artifact Version Experience

Dedicated Logs Viewer

Team and Role Management for Invitations

Generic OAuth2/OIDC Integration

0.12.22 (2026-01-14)

Stack Management

Artifact Version View

Logs Viewer

0.12.19 (2025-11-19)

What's Changed

0.12.18 (2025-11-12)

What's Changed

0.12.17 (2025-11-05)

Improved

0.12.16 (2025-10-27)

What's Changed

0.12.15 (2025-10-16)

Fixed

0.12.14 (2025-10-02)

What's Changed

0.12.12 (2025-09-16)

0.12.11 (2025-09-15)

0.12.10 (2025-08-28)

Improved

0.12.9

What's Changed

0.12.8

0.12.7

0.12.6

Improved

Fixed

0.12.5

Improved

0.12.3

Improved

0.12.2

0.12.0

Improved

Breaking Changes