v1.19.0

What's Changed

• feat: New v2 sqlserver state component with support to workflows by @javier-aliaga in #4027
• sync: release-1.16 -> main by @nelson-parente in #4040
• Feat: Support client JWT auth method for kafka oidc by @acroca in #4057
• Fix token renewal for pulsar oauth2 by @acroca in #4079
• Enable dynamodb state store tests by @javier-aliaga in #4069
• State: KeysLike by @JoshVanL in #4087
• chore(ci): add ravendb secrets to gh workflow by @mikeee in #4058
• chore: Handle sftp reconnections by @javier-aliaga in #4075
• postgres v2: fix migration column name by @JoshVanL in #4100
• Add kid header to kafka jwt auth by @acroca in #4099
• Send audience as a single string in the JWT by @acroca in #4111
• sec: fix critical nats vulnerability by @sicoyle in #4114
• chore(deps): add dependency scanning with dependabot for git actions and gomod ecosystems by @CasperGN in #4118
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #4120
• chore(deps): bump actions/upload-artifact from 4 to 6 by @dependabot[bot] in #4122
• chore(deps): bump fossas/fossa-action from 1.3.1 to 1.7.0 by @dependabot[bot] in #4121
• chore(deps): bump actions/setup-node from 3 to 6 by @dependabot[bot] in #4123
• chore(deps): bump supercharge/mongodb-github-action from 1.8.0 to 1.12.1 by @dependabot[bot] in #4119
• Chore(deps): dependabot modtidy by @CasperGN in #4131
• fix(ci): enhance dependabot tidy workflow to detect changes by @mikeee in #4146
• Cherrypick pulsar secret filepath by @cicoyle in #4116
• fix(ci): change permissions from read to write for contents by @mikeee in #4152
• Enhance DAPR Pulsar pub/sub component to enable message compression by @jslatten in #4148
• ASB Concurrent Session FIFO by @jjcollinge in #4092
• fix(ci): change deps source and remove duplication by @mikeee in #4155
• Bump github.com/cloudwego/kitex to v0.15.4 by @lrascao in #4158
• chore(deps): bump helm/kind-action from 1.5.0 to 1.13.0 by @dependabot[bot] in #4133
• chore(deps): bump actions/stale from 7.0.0 to 10.1.1 by @dependabot[bot] in #4134
• chore(deps): bump aws-actions/configure-aws-credentials from 1 to 5 by @dependabot[bot] in #4137
• chore(deps): bump google-github-actions/auth from 1 to 3 by @dependabot[bot] in #4136
• chore(deps): bump dawidd6/action-download-artifact from 2.24.3 to 6 in /.github/workflows by @dependabot[bot] in #4164
• chore: Propagate message metadata in pubsub by @javier-aliaga in #4171
• FIX Pulsar pubsub component initialization when using oauth2ClientSecretPath by @MyMirelHub in #4161
• feat(conversation): add prompt cache + usage metrics to test caching by @sicoyle in #4154
• feat(dynamodb): upgrade binding to AWS SDK v2 by @mikeee in #4172
• feat(kinesis): upgrade binding to AWS SDK v2 by @mikeee in #4173
• feat: add resp format and timeout to conversation api by @sicoyle in #4129
• sec: fix high vulnerability on cloudflare worker by @sicoyle in #4184
• fix(test): correct mysql cert test failure check by @sicoyle in #4185
• Remove in-memory pubsub retires by @JoshVanL in #4191
• Fix race condition in rabbitmq by @yaron2 in #4190
• feat(configuration.postgres): update AWS authentication to use new credential provider by @mikeee in #4181
• feat(binding.sns): upgrade to v2 by @mikeee in #4169
• feat(bindings.sqs): upgrade to AWS SDK V2 by @mikeee in #4170
• fix(ollama): use openai client instead to support tool calling by @sicoyle in #4192
• fix(ci): enhance dependabot workflow to trigger on new commits by @mikeee in #4182
• chore(deps-dev): bump wrangler from 3.48.0 to 3.114.17 in /common/component/cloudflare/worker-src by @dependabot[bot] in #4199
• chore(deps): bump jose from 4.14.4 to 4.15.5 in /common/component/cloudflare/worker-src by @dependabot[bot] in #4200
• chore(deps-dev): bump esbuild and wrangler in /common/component/cloudflare/worker-src by @dependabot[bot] in #4201
• bug: Mysql regression by @javier-aliaga in #4202
• Adding mysql certification tests by @salaboy in #4204
• chore(deps): bump actions/github-script from 6 to 8 by @dependabot[bot] in #4168
• chore(deps): bump dawidd6/action-download-artifact from 6 to 12 by @dependabot[bot] in #4167
• Cherry pick goavro bugfix to main by @passuied in #4071
• Make Redis Streams PubSub honor resiliency policy by @cicoyle in #4208
• feat: strict sftp operations by @javier-aliaga in #4211
• chore: Sftp binding check for error message by @javier-aliaga in #4214
• feat: upgrade bedrock to v2 by @mikeee in #3909
• fix: upgrade ses binding to use awsv2 by @mikeee in #3911
• feat: upgrade aws secrets manager to v2 by @mikeee in #3901
• feat: upgrade paramstore to v2 by @mikeee in #3908
• chore(deps): update main and test dependencies by @mikeee in #4205
• chore(endgame): ensure all components properly registered by @sicoyle in #4215
• fix(nr): update to actually match docs on aws auth support by @sicoyle in #4216
• fix(pulsar): update subscription options to use metadata values by @MyMirelHub in #4218
• Fix state redis nil by @cicoyle in #4217
• Adds backport github workflow by @acroca in #4223
• Fix OAuth2 middleware sending empty scope parameter by @lindner in #4222
• feat: Add optional redisPort metadata field for Redis components by @lindner in #4213
• pulsar make issuer file credential optional by @MyMirelHub in #4194
• Fix kafka certification flaky test by @acroca in #4225
• fix(pubsub.snssqs): remove aws v1 by implementing a custom partition … by @mikeee in #4227
• state: add RavenDB support by @nmalocic in #3702
• refactor(cert.pubsub.snssqs): migrate helper to use AWS SDK v2 by @mikeee in #4228
• test(cert.binding.s3): upgrade to aws v2 by @mikeee in #4230
• feat: migrate s3 binding to aws v2 by @mikeee in #4229
• feat: remove last remnants of aws-sdk-go by @mikeee in #4231
• ci: add create release wf by @nelson-parente in #4105
• Component Metadata Bundle GHA Tweaking by @cicoyle in #4234
• fix(nameresolution.aws.cloudmap): quote numeric example in metadata.yaml by @nelson-parente in #4233
• feat(pubsub/azure/servicebus/queues): add certification tests by @jmfloreszazo in #4150
• fix: Fix dynamodb state store stable test by @javier-aliaga in #4242
• fix(state/oracledatabase): return per-key errors in BulkGet instead of HTTP 500 by @nelson-parente in #4243
• chore: Use dapr-bot to create backport PRs by @acroca in #4237
• ci: Workflows running twice on merge to master by @javier-aliaga in #4240
• fix(pubsub/pulsar): validate JSON messages against Avro schema before publishing by @nelson-parente in #4244
• feat: warn when multiple redis stream trim strategies are specified by @erj826 in #4252
• fix(conversation): nil pointer dereference in langchaingokit LLM logger by @JoshVanL in #4268
• Fix MongoDB state store to implement KeysLiker by @JoshVanL in #4278
• fix(state/cockroachdb): update image from v21.2.3 to v23.2.29 by @javier-aliaga in #4291
• return err if tool calls were not called when required by @cicoyle in #4277
• Azure Blob Storage binding: add bulk operations by @JoshVanL in #4295
• Bulk file transfer operations to AWS S3 binding by @JoshVanL in #4292
• fix(pubsub/pulsar): decode Avro binary payload on subscribe path by @nelson-parente in #4266
• bindings/azure/blobstorage: Adds presign by @JoshVanL in #4299
• pubsub/kafka: per message partition support by @JoshVanL in #4298
• feat(pubsub/pulsar): register CloudEvents envelope Avro schema with Pulsar Schema Registry by @javier-aliaga in #4302
• ci: Allow reruns of failing jobs in master by @javier-aliaga in #4260
• fwd port: ollama: add missing endpoint metadata field to spec (#4287) by @cicoyle in #4314
• Use shared workflows by @acroca in #4315
• fix(pubsub/pulsar): read processMode from component metadata and add async backpressure by @nelson-parente in #4309
• fix(pubsub/pulsar): validate JSON schema payloads against schema definition using goavro codec by @javier-aliaga in #4305
• fix(common/redis): stop unconditionally skipping TLS certificate verification by @JoshVanL in #4261
• Expose LLM model on converse response by @jjcollinge in #4331
• fix(pubsub/rabbitmq): use unique consumer tags to prevent subscription disruption on restart by @javier-aliaga in #4326
• fix(configuration): ensure postgresql configuration reads pgNotifyChannel from component spec instead of requiring client code passing it by @CasperGN in #4241
• feat(config): add config map as configuration by @CasperGN in #4275
• fix(ci): create GitHub release with metadata bundle in create-release workflow by @nelson-parente in #4333
• feat(state/oracledatabase): add BulkGet chunking to avoid Oracle IN-list limit by @javier-aliaga in #4341
• feat(state/oracledatabase): add BulkGet chunking to avoid Oracle IN-list limit by @javier-aliaga in #4351
• [1.18] Azure appconfig - include contentType and label in metadata by @MyMirelHub in #4338
• Adds immediate bulk subscriptions to the Pulsar pubsub component by @acroca in #4364
• feat(pubsub/kafka): add PausableSubscriber + harden graceful shutdown by @javier-aliaga in #4366
• Enable anthropic in microsoft foundry by @yaron2 in #4374
• fix(pubsub/kafka): reset await ticker after count-based bulk flush by @javier-aliaga in #4378
• fix(ci): update artifact transformations by @mikeee in #4381
• feat(state/sqlserver): native batched BulkGet for v2 by @javier-aliaga in #4365
• feat(pulsar): support listenerName metadata for advertisedListeners by @nelson-parente in #4386
• fix(tests): scope influxdb to v2.9 by @mikeee in #4382
• bump to go1.26 by @mikeee in #4372
• chore: bump sarama to 1.48.0 by @mikeee in #4373
• [1.18] zeebe oauth support by @MyMirelHub in #4330
• CI: fix tests by @JoshVanL in #4389
• test(cassandra): fix port collision in certification tests by @stywzn in #4284
• version bumps: kit/dapr/go-sdk by @cicoyle in #4391
• Remove dashboard version step from release checklist by @nelson-parente in #4390
• add retriable/terminal error classification for pubsub publish by @cicoyle in #4395
• Update dapr v1.18.0 by @cicoyle in #4402
• feat(redis): add OIDC private_key_jwt authentication by @nelson-parente in #4408
• test(redis): add Valkey 8.0.2 and 9.0.0 to the Redis component conformance matrix by @nelson-parente in #4414
• feat: add connection pool options to Oracle state store by @nelson-parente in #4411
• Add topicsPattern regex subscriptions to Pulsar pub/sub by @jslatten in #4422
• fix: harden IAM Roles Anywhere X.509 auth (chain, refresh, panics) by @lrascao in #4429
• build(redis): bump go-redis/v9 to v9.21.0 by @lrascao in #4430
• (rabbitmq): list all supported exchangeKind values in metadata by @MyMirelHub in #4428
• auto open issue on ci failure during release by @cicoyle in #4440
• chore(deps): bump github.com/go-sql-driver/mysql from 1.8.1 to 1.10.0 in /tests/certification by @dependabot[bot] in #4438
• chore(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in #4348
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts from 1.42.1 to 1.43.3 in /tests/certification by @dependabot[bot] in #4439
• feat: support intra-bucket copy/move in GCP Storage Bucket binding by @nelson-parente in #4410
• fix(kafka): add connection timeouts, broker health check, and tunable producer config by @nelson-parente in #4413
• fix: improve error messages for invalid payloads in Zeebe command binding by @nelson-parente in #4412
• fix: bump mongo-driver to v1.17.7 for CVE-2026-2303 by @nelson-parente in #4453
• chore(deps): bump github.com/go-chi/chi/v5 from 5.2.2 to 5.3.0 in /tests/certification by @dependabot[bot] in #4447
• chore(deps): bump github.com/dapr/go-sdk from 1.15.0-rc.2 to 1.15.0 in /tests/certification by @dependabot[bot] in #4437
• fix(pubsub/rabbitmq): skip NACK on context cancellation in handleMessage by @kayvonkhosrowpour in #4450
• chore(deps): bump cloud.google.com/go/pubsub from 1.49.0 to 1.50.4 in /tests/certification by @dependabot[bot] in #4459
• fix(configuration/azure/appconfig): use retryDelay for initial retry delay by @pujitha24 in #4461
• fix: harmonise go.mod versions by @mikeee in #4463
• chore(deps): bump modernc.org/sqlite from 1.34.5 to 1.54.0 in /tests/certification by @dependabot[bot] in #4458
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.3.2 to 1.8.0 in /tests/certification by @dependabot[bot] in #4457
• fix(ci): add grants for nested release actions by @mikeee in #4462
• chore(deps): bump actions/cache from 3 to 6 by @dependabot[bot] in #4443
• chore(deps): bump golangci/golangci-lint-action from 6.0.1 to 9.3.0 by @dependabot[bot] in #4442
• chore(deps): bump github.com/IBM/sarama from 1.48.1 to 1.60.0 in /tests/certification by @dependabot[bot] in #4435
• chore(deps): bump github.com/influxdata/influxdb-client-go/v2 from 2.12.3 to 2.14.0 by @dependabot[bot] in #4421
• chore(deps): bump dorny/paths-filter from 3 to 4 by @dependabot[bot] in #4444
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs from 1.38.8 to 1.45.1 by @dependabot[bot] in #4417
• chore(deps): bump github.com/oracle/coherence-go-client/v2 from 2.2.0 to 2.3.1 by @dependabot[bot] in #4419
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.43.4 to 1.60.1 by @dependabot[bot] in #4420
• sec: bump grpc dep by @mikeee in #4466
• chore(deps): bump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.12.0 in /tests/certification by @dependabot[bot] in #4436
• chore(deps): bump github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssm from 1.0.732 to 1.3.128 by @dependabot[bot] in #4476
• chore(deps): bump codecov/codecov-action from 3 to 7 by @dependabot[bot] in #4415
• chore(deps): bump github.com/IBM/sarama from 1.48.1 to 1.60.0 by @dependabot[bot] in #4472
• fix(ci): dapr-bot runs by @mikeee in #4479
• fix(ci): adds a global concurrency lock for workflow runs by @mikeee in #4480
• chore(deps): bump modernc.org/sqlite from 1.54.0 to 1.55.0 in /tests/certification by @dependabot[bot] in #4487
• chore(deps): bump cloud.google.com/go/pubsub from 1.50.4 to 1.51.0 in /tests/certification by @dependabot[bot] in #4489
• chore(deps): bump actions/setup-node from 6 to 7 by @dependabot[bot] in #4484
• chore(deps): bump github.com/matoous/go-nanoid/v2 from 2.0.0 to 2.1.0 by @dependabot[bot] in #4483
• chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #4493
• chore(deps): bump aws-actions/configure-aws-credentials from 5 to 6.2.2 by @dependabot[bot] in #4474
• chore(deps): bump fossas/fossa-action from 1.7.0 to 2.0.0 by @dependabot[bot] in #4500
• Azure auth: report SPIFFE credential as unavailable without a JWT SVID source by @MyMirelHub in #4491
• chore(deps): bump actions/setup-go from 4 to 7 by @dependabot[bot] in #4471
• chore(deps): bump hashicorp/setup-terraform from 2.0.3 to 4.0.1 by @dependabot[bot] in #4473
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #4499
• chore(deps): bump dawidd6/action-download-artifact from 12 to 21 by @dependabot[bot] in #4475
• Remove the workflows component abstraction by @JoshVanL in #4478
• chore(deps): bump github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0 in /tests/certification by @dependabot[bot] in #4511
• chore(deps): bump Azure/login from 1 to 3.0.0 by @dependabot[bot] in #4510
• fix(ravendb): fix TTL conformance test by filtering expired items on read by @sicoyle in #4520
• fix(conversation): send tool_choice to anthropic as obj not str by @sicoyle in #4531
• feat(pubsub/solace-amqp): make the topic and queue address prefixes configurable by @nelson-parente in #4539
• test(wasm): fix e2e test state leakage across multiple requests by @stywzn in #4283
• chore(deps): bump github.com/jackc/pgx/v5 from 5.7.4 to 5.9.2 by @dependabot[bot] in #4515
• fix(tests): fix flaky mysql cert tests by @mikeee in #4547
• fix(deps): bump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.14.0 by @nelson-parente in #4565
• ci(tests): disable aws by @mikeee in #4579
• fix(ci): start RavenDB without the expired license by @nelson-parente in #4591
• fix(redis): scale OIDC token refresh grace period to token lifetime by @MyMirelHub in #4585
• Fix Azure Event Hubs checkpoint safety by @gargsajal9 in #4598
• Revert "fix(ci): start RavenDB without the expired license" by @mikeee in #4597
• fix(pubsub/redis): keep held pending entries alive, honour redeliverInterval durations by @MyMirelHub in #4601
• fix(ci): ravendb ci by @mikeee in #4582
• Kafka pubsub: transactions and exactly-once consume-transform-produce by @javier-aliaga in #4508
• fix(rabbitmq): cancel the consumer on every exit from the subscribe loop by @SaiPisey2 in #4573
• fix(redis): scale Entra ID token refresh grace period to token lifetime by @MyMirelHub in #4586
• feat(ci/tests): add Floci support for AWS components by @mikeee in #4578
• bump wazero to v1.12.0 — fixes wasm middleware crashes on amd64 with Go >= 1.24 by @LiBaoxuan-Neil in #4611
• Added sql server binding by @adam6878 in #4485
• fix(conversation): replace retired anthropic default model by @sicoyle in #4532
• chore(ci): enable aws tests by @mikeee in #4626
• fix(sql): release the migration lock on shutdown instead of exiting by @CasperGN in #4627
• test(wasm): stop asserting a 10ms wall-clock bound in strict sandbox mode by @CasperGN in #4628
• [1.19] feat(pubsub/rabbitmq): support externally managed and consistent hash exchanges by @MyMirelHub in #4552
• Adding binary state store support + providers by @WhitWaldo in #4559
• fix(kafka): prevent mTLS panic when caCert is omitted by @pujitha24 in #4584
• fix(bindings/rabbitmq): preserve 64-bit queue TTL by @gargsajal9 in #4615
• Feat/conversation max tokens by @CasperGN in #4501
• chore(deps): bump dawidd6/action-download-artifact from 21 to 25 by @dependabot[bot] in #4631
• feat(pubsub/amqp): make the AMQP 1.0 component generic, and fix its failure paths by @nelson-parente in #4602
• fix(pubsub/kafka): commit the offset when a message exhausts its retries by @JoshVanL in #4592
• feat(secretstores/hashicorp/vault): add native Kubernetes auth by @icmp0x8 in #4448
• fix(pubsub/pulsar): create one producer per topic under concurrent publish by @javier-aliaga in #4639
• conversation/anthropic: keep every tool call in an assistant message by @JoshVanL in #4644
• Preventing OOM from binary store via endless chunked PUT by @WhitWaldo in #4637
• fix(common/redis): authenticate every new connection with a fresh token by @JoshVanL in #4647
• conversation/openai: add opt-in Responses API support by @famarting in #4670
• feat: search vector with meilisearch (search-vector PR1/4) by @mikeee in #4613
• pubsub.amqp: durable, shared, named and filtered subscriptions by @nelson-parente in #4668
• pubsub.amqp: copy publish metadata onto the message by @nelson-parente in #4669
• search, vector: add in-memory components by @JoshVanL in #4680
• postgresql: retry every error a concurrent metadata table create raises by @JoshVanL in #4664
• sec: bump deps by @mikeee in #4681

New Contributors

• @CasperGN made their first contribution in #4118
• @jslatten made their first contribution in #4148
• @salaboy made their first contribution in #4204
• @lindner made their first contribution in #4222
• @nmalocic made their first contribution in #3702
• @jmfloreszazo made their first contribution in #4150
• @erj826 made their first contribution in #4252
• @stywzn made their first contribution in #4284
• @kayvonkhosrowpour made their first contribution in #4450
• @pujitha24 made their first contribution in #4461
• @gargsajal9 made their first contribution in #4598
• @SaiPisey2 made their first contribution in #4573
• @LiBaoxuan-Neil made their first contribution in #4611
• @WhitWaldo made their first contribution in #4559
• @icmp0x8 made their first contribution in #4448

Full Changelog: v1.16.1...v1.19.0