GENERAL
▶ [patch]
Upgrades to go1.26.4.
Release notes here.
DEPLOYERS
▶ [minor] #8347
HTTP responses from Taskcluster API services are now gzip-compressed when the client sends Accept-Encoding: gzip. Compression is applied at the @taskcluster/lib-api router level with a 1 KB threshold, so small payloads are sent uncompressed.
▶ [minor] #8716
Removed the sift dependency from the web-server. The GraphQL filter: JSON argument was only ever used for simple case-insensitive substring search, so it has been replaced with a typed searchTerm: String argument on the list queries that support search (clients, roles, secrets, worker pools, denylist addresses). Task-action filtering is now applied server-side, and the unused filter argument has been removed from the remaining GraphQL queries.
USERS
▶ [minor] bug 2045069
Generic-worker: skip gzip compression for artifacts with extensions matching .aab, .apk, .jar, .xpi.
▶ [patch] bug 2042324
Enforce oauth2 access token lifetimes when issuing Taskcluster credentials
▶ [patch] #8688
Fix the changelog page so it doesn't ignore URL parameters anymore
▶ [patch] #8689
Fixed on-defined route notifications not firing
DEVELOPERS
▶ [patch]
Bump node version to 24.16.0
Automated Package Updates
9 Dependabot updates
- build(deps-dev): bump cross-env from 7.0.3 to 10.1.0 (8c1e820)
- build(deps-dev): bump ws from 7.5.10 to 7.5.11 (0527b3b)
- build(deps-dev): bump webpack-cli in /clients/client-web (38302b5)
- build(deps-dev): bump ruff (d8976db)
- build(deps): bump the gh-actions-deps group with 2 updates (63b8632)
- build(deps): bump the client-rust-deps group (8076548)
- build(deps): bump the go-deps group with 2 updates (c138c12)
- build(deps-dev): bump @babel/core (b4b057e)
- build(deps-dev): bump mocha (2acb267)