Skip to content

inngest@3.54.1

Choose a tag to compare

@jpwilliams jpwilliams released this 27 Apr 17:54
· 4 commits to v3 since this release

Patch Changes

  • Contains changes that address CVE-2026-42047

  • #1470 1a5b63a8 Thanks @amh4r! - Fix checkpointing maxRuntime causing duplicate execution

  • cb20b4a - Ensure runIds are properly URI encoded in Durable Endpoints

  • cb20b4a - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • cb20b4a - Hash the signing key used when exporting OTel traces