1.12.1
Known Issues
OpenTelemetry.Api security advisory (fixed in 1.14.0+)
GHSA-g94r-2vxg-569j reports a vulnerability in OpenTelemetry.Api versions earlier than 1.15.3. The required dependency bump introduces source-incompatible changes in Temporalio.Extensions.OpenTelemetry, so it was shipped in 1.14.0 and intentionally not backported to 1.12.1 in order to preserve source compatibility within the 1.12.x line. Customers needing the mitigation should upgrade to 1.14.0 or later.
Highlights
Fix for worker shutdown ordering
There was an issue with worker shutdown when the frontend.enableCancelWorkerPollsOnShutdown dynamic config flag is enabled on server. The issue was causing shutdown to stall until the full 30s worker shutdown timeout was hit, as server was waiting for a message that the SDK was not sending. This fixes the SDK to send the proper message, allowing shutdown to occur normally.
What's Changed
- [backport 1.12.1] Update core to pickup shutdown fix by @yuandrew in #702
- chore(release): update to 1.12.1 by @jmaeagle99 in #704
SDK Core Update
Updated from temporalio/sdk-rust@c6b601d to temporalio/sdk-rust@7c8df5b
- Backport poller c6b601d in temporalio/sdk-rust#1255
Full Changelog: 1.12.0...1.12.1