inngest@3.54.1
Patch Changes
-
Contains changes that address CVE-2026-42047
-
#1470
1a5b63a8Thanks @amh4r! - Fix checkpointing maxRuntime causing duplicate execution -
cb20b4a - Ensure runIds are properly URI encoded in Durable Endpoints
-
cb20b4a - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.
-
cb20b4a - Hash the signing key used when exporting OTel traces