Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency @temporalio/worker to v1.7.0 (main) - autoclosed #340

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Sep 13, 2023

This PR contains the following updates:

Package Type Update Change
@temporalio/worker (source) dependencies minor 1.5.2 -> 1.7.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.5 CVE-2022-25883

Release Notes

temporalio/sdk-typescript (@​temporalio/worker)

v1.7.0: 1.7.0

Compare Source

Features
  • 💥 [worker] The experimental Worker.runReplayHistories method, which allows efficient replay of a large number
    of workflow histories, now returns an AsyncIterableIterator (#​1067)

    EXAMPLE USAGE

    const histories = client.workflow.list({ query: 'WorkflowType="MyWorkflow"' }).intoHistories({ concurrency: 10 });
    const replayResults = Worker.runReplayHistories(
      {
        workflowsPath: require.resolve('./workflows'),
        // ...
      },
      histories
    );
    for await (const result of replayResults) {
      const { workflowId, runId, error } = result;
      // error is either undefined, a ReplayError, or a DeterminismViolationError
    }
  • 💥 [worker] WorkerOptions.shutdownGraceTime no longer forcefully shuts the worker down. Now, when shutdownGraceTime passes, the worker just sends Cancellation to running Activities.
    Set WorkerOptions.shutdownForceTime to force shutdown. (#​1072)

  • 💥 [testing] Use Temporal CLI to power local test environment (#​1077)

Bug Fixes
  • Fail Workflow on WorkflowExecutionAlreadyStartedError (#​1068)

  • [create-project] While fixing dependencies on a newly instantiated project, we now recursively search for
    package.json and tsconfig.json (#​1089 thanks to @jhubbardsf 🙏)

  • [create-project] Remove the .post-create file (if it exists), before committing to git (#​1018)

  • 💥 Completetly removed support for Node versions <= 14.17. Lot of our dependencies were already
    requiring Node 14.18+ anyway. (#​1070)

  • Load package abort-controller as a polyfill rather than a complete substitution.
    This will ensure using native implementation of that class in Node 16+ (#​1070)

    💥 This change might cause TypeScript to warn about incompatible types when working with libraries that are using
    custom type definitions for the AbortSignal interface.

    import type { AbortSignal as FetchAbortSignal } from 'node-fetch/externals';
    // ...
    const response = await fetch(url, { signal: Context.current().cancellationSignal as FetchAbortSignal });
  • [client] Get rid of experimental AsyncLocalStorage.enterWith call (#​1080)

  • [core] Fix slot metrics appearing to be off-by-one because of reservation (#​479)

  • [core] Fix misnamed metric workflow_task_execution_failed (#​481)

  • [core] Added an internal patching mechanism for adjusting SDK behavior based on what version of the SDK has previously processed the workflow. Note that this new mechanism requires server Temporal 1.20.0 or above. Any change that depends on such an internal patch will not be effective with older servers. (#​482)

  • 💥 [core] Make activity (and child workflow) type / id mismatches will results in a non-deterministic change. That means that renaming an activity or a child workflow will now require a patch. Note that this change has been gated with an internal patch to avoid suddently failing with nondeterminism errors on older activity rename (see details above) (#​475, #​482)

  • [core] Auto-fail new workflow tasks which encounter a problem upon their application, but before any activation has been issued to lang. This may fix some scenarios where previously a WFT would simply time out. (#​482)

Documentation
  • Add install protocal buffers step to CONTRIBUTING.md doc (#​1086, thanks to @jhubbardsf 🙏)

v1.6.0: 1.6.0

Compare Source

Features
  • [workflow] (Experimental) Introduced a major optimization to the workflow runtime (#​951).

    This optimization allows the worker to reuse execution context across workflows, without compromising the safety of the deterministic sandbox. Some initial performance tests have demonstrated reduction of RAM usage by as much as 66%, and reduction of CPU usage by up to 50%.

    To enable this feature, add reuseV8Context: true to your WorkerOptions.

  • [workflow] Added workflowInfo().startTime and workflowInfo().runStartTime. (#​1031)

  • [workflow] Added support for default workflow handlers (#​1038).

    A workflow bundle may opt-in to receive requests for non-registered workflow types by exporting a default function:

    export default async function (...args: unknown[]): Promise<unknown> {
      const { workflowType } = workflowInfo();
      // ...
    }
  • [workflow] Added support for default signal handlers (#​1038).

    A workflow function may opt-in to receive requests for non-registered signals with:

    setDefaultSignalHandler((signalName: string, ...args: unknown[]) => {
      // ...
    });
  • [worker] It is now possible to launch workers in debug mode by setting environment variable TEMPORAL_DEBUG=true (#​1031).

Bug Fixes
  • A recent release of @grpc/grpc-js has been causing multiple issues:

    We pinned our dependencies on @grpc/grpc-js to 1.7.3 (#​1025). This pin will be removed once we confirm that the upstream project is stable again for our usage.

  • [client] Multiple small changes to the experimental Schedules API. (#​1028, #​1032, #​1009)

  • [workflow] instanceof on WorkflowInfo fields now works as expected (#​1031, #​659)

  • [create-project] create-project now works correctly on Node 18 (#​995)

  • [core] Fixed incorrect calculation of schedule-to-start timeouts on local activities (#​450).

  • [core] Fixed some rare case where sdk-core would panic on unexpected history fetching responses from the server (#​468).

  • [core] Fixed some rare case where an activation completion might get blocked if fetching history pages failed (#​478).


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Sep 13, 2023
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

1 similar comment
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from 47e04cf to df8dcd0 Compare October 11, 2023 16:17
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 4 times, most recently from 81a7a72 to 8196a71 Compare October 27, 2023 03:32
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from 8196a71 to 976ac18 Compare November 1, 2023 16:17
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 3 times, most recently from f0ff398 to f3e6ad6 Compare November 14, 2023 22:46
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 4 times, most recently from d29a38b to ab3cf1a Compare November 22, 2023 00:41
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 2 times, most recently from ca69482 to eaf63b0 Compare December 5, 2023 04:13
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch 3 times, most recently from b9342f9 to 2b17320 Compare December 19, 2023 04:04
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from 2b17320 to 611ba96 Compare December 22, 2023 03:19
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch from 611ba96 to 60bf5ee Compare January 11, 2024 22:26
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @temporalio/worker to v1.7.0 (main) Update dependency @temporalio/worker to v1.7.0 (main) - autoclosed Jan 12, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/main-temporalio-worker-1.x-lockfile branch January 12, 2024 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant