Skip to content

inngest@4.2.5

Choose a tag to compare

View all tags
@inngest-release-bot inngest-release-bot released this 27 Apr 18:01
· 41 commits to main since this release
inngest@4.2.5
31d1720
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • #1479 6b9769ca Thanks @scottnuma! - Fix step.sendSignal() return type to match runtime: Promise<InngestApi.SendSignalResponse> ({ runId: string | undefined }) instead of Promise<null>

  • #1483 d0a59629 Thanks @Linell! - Fix run IDs not URL encoded in Durable Endpoints

  • #1481 970ded9b Thanks @Linell! - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • #1472 9df36dee Thanks @Linell! - Fix empty body on Vercel serverless Node handlers

  • #1482 e34972d3 Thanks @Linell! - Hash the signing key used when exporting OTel traces

Assets 2
Loading