Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency @temporalio/worker to v1.7.0 (main) - autoclosed #263

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Apr 17, 2023

This PR contains the following updates:

Package Type Update Change
@temporalio/worker (source) dependencies minor 1.5.2 -> 1.7.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.5 CVE-2022-25883

Release Notes

temporalio/sdk-typescript

v1.7.0

Compare Source

Features
  • 💥 [worker] The experimental Worker.runReplayHistories method, which allows efficient replay of a large number
    of workflow histories, now returns an AsyncIterableIterator (#​1067)

    EXAMPLE USAGE

    const histories = client.workflow.list({ query: 'WorkflowType="MyWorkflow"' }).intoHistories({ concurrency: 10 });
    const replayResults = Worker.runReplayHistories(
      {
        workflowsPath: require.resolve('./workflows'),
        // ...
      },
      histories
    );
    for await (const result of replayResults) {
      const { workflowId, runId, error } = result;
      // error is either undefined, a ReplayError, or a DeterminismViolationError
    }
  • 💥 [worker] WorkerOptions.shutdownGraceTime no longer forcefully shuts the worker down. Now, when shutdownGraceTime passes, the worker just sends Cancellation to running Activities.
    Set WorkerOptions.shutdownForceTime to force shutdown. (#​1072)

  • 💥 [testing] Use Temporal CLI to power local test environment (#​1077)

Bug Fixes
  • Fail Workflow on WorkflowExecutionAlreadyStartedError (#​1068)

  • [create-project] While fixing dependencies on a newly instantiated project, we now recursively search for
    package.json and tsconfig.json (#​1089 thanks to @jhubbardsf 🙏)

  • [create-project] Remove the .post-create file (if it exists), before committing to git (#​1018)

  • 💥 Completetly removed support for Node versions <= 14.17. Lot of our dependencies were already
    requiring Node 14.18+ anyway. (#​1070)

  • Load package abort-controller as a polyfill rather than a complete substitution.
    This will ensure using native implementation of that class in Node 16+ (#​1070)

    💥 This change might cause TypeScript to warn about incompatible types when working with libraries that are using
    custom type definitions for the AbortSignal interface.

    import type { AbortSignal as FetchAbortSignal } from 'node-fetch/externals';
    // ...
    const response = await fetch(url, { signal: Context.current().cancellationSignal as FetchAbortSignal });
  • [client] Get rid of experimental AsyncLocalStorage.enterWith call (#​1080)

  • [core] Fix slot metrics appearing to be off-by-one because of reservation (#​479)

  • [core] Fix misnamed metric workflow_task_execution_failed (#​481)

  • [core] Added an internal patching mechanism for adjusting SDK behavior based on what version of the SDK has previously processed the workflow. Note that this new mechanism requires server Temporal 1.20.0 or above. Any change that depends on such an internal patch will not be effective with older servers. (#​482)

  • 💥 [core] Make activity (and child workflow) type / id mismatches will results in a non-deterministic change. That means that renaming an activity or a child workflow will now require a patch. Note that this change has been gated with an internal patch to avoid suddently failing with nondeterminism errors on older activity rename (see details above) (#​475, #​482)

  • [core] Auto-fail new workflow tasks which encounter a problem upon their application, but before any activation has been issued to lang. This may fix some scenarios where previously a WFT would simply time out. (#​482)

Documentation
  • Add install protocal buffers step to CONTRIBUTING.md doc (#​1086, thanks to @jhubbardsf 🙏)

v1.6.0

Compare Source

Features
  • [workflow] (Experimental) Introduced a major optimization to the workflow runtime (#​951).

    This optimization allows the worker to reuse execution context across workflows, without compromising the safety of the deterministic sandbox. Some initial performance tests have demonstrated reduction of RAM usage by as much as 66%, and reduction of CPU usage by up to 50%.

    To enable this feature, add reuseV8Context: true to your WorkerOptions.

  • [workflow] Added workflowInfo().startTime and workflowInfo().runStartTime. (#​1031)

  • [workflow] Added support for default workflow handlers (#​1038).

    A workflow bundle may opt-in to receive requests for non-registered workflow types by exporting a default function:

    export default async function (...args: unknown[]): Promise<unknown> {
      const { workflowType } = workflowInfo();
      // ...
    }
  • [workflow] Added support for default signal handlers (#​1038).

    A workflow function may opt-in to receive requests for non-registered signals with:

    setDefaultSignalHandler((signalName: string, ...args: unknown[]) => {
      // ...
    });
  • [worker] It is now possible to launch workers in debug mode by setting environment variable TEMPORAL_DEBUG=true (#​1031).

Bug Fixes
  • A recent release of @grpc/grpc-js has been causing multiple issues:

    We pinned our dependencies on @grpc/grpc-js to 1.7.3 (#​1025). This pin will be removed once we confirm that the upstream project is stable again for our usage.

  • [client] Multiple small changes to the experimental Schedules API. (#​1028, #​1032, #​1009)

  • [workflow] instanceof on WorkflowInfo fields now works as expected (#​1031, #​659)

  • [create-project] create-project now works correctly on Node 18 (#​995)

  • [core] Fixed incorrect calculation of schedule-to-start timeouts on local activities (#​450).

  • [core] Fixed some rare case where sdk-core would panic on unexpected history fetching responses from the server (#​468).

  • [core] Fixed some rare case where an activation completion might get blocked if fetching history pages failed (#​478).


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 17, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 4 times, most recently from e575d2b to 58184d0 Compare April 24, 2023 09:17
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @temporalio/worker to v1.7.0 (main) Update dependency @temporalio/worker to v1.6.0 (main) Apr 24, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 2 times, most recently from ca12daa to e084002 Compare May 5, 2023 23:20
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 2 times, most recently from 63364bd to 6dab609 Compare May 17, 2023 21:58
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 4 times, most recently from 2cbce5f to 32e0318 Compare May 30, 2023 23:52
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from 32e0318 to dd73fd7 Compare June 8, 2023 17:41
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @temporalio/worker to v1.6.0 (main) Update dependency @temporalio/worker to v1.6.0 (main) - autoclosed Jun 14, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch June 14, 2023 14:43
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @temporalio/worker to v1.6.0 (main) - autoclosed Update dependency @temporalio/worker to v1.6.0 (main) Jun 19, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 19, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch June 19, 2023 00:39
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 5 times, most recently from 98df5ab to 06a95a6 Compare June 25, 2023 01:45
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @temporalio/worker to v1.6.0 (main) Update dependency @temporalio/worker to v1.7.0 (main) Jun 25, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 2 times, most recently from 8f3c4cc to 8413415 Compare July 5, 2023 17:39
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from 8413415 to ca5b39e Compare July 10, 2023 17:39
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 5 times, most recently from 5671c8b to b519dc0 Compare July 17, 2023 15:21
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from b519dc0 to e3d5625 Compare July 28, 2023 20:31
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @temporalio/worker to v1.7.0 (main) Update dependency @temporalio/worker to v1.7.0 (main) - autoclosed Aug 1, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch August 1, 2023 17:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant