1.13.1

Known Issues

OpenTelemetry.Api security advisory (fixed in 1.14.0+)

GHSA-g94r-2vxg-569j reports a vulnerability in OpenTelemetry.Api versions earlier than 1.15.3. The required dependency bump introduces source-incompatible changes in Temporalio.Extensions.OpenTelemetry, so it was shipped in 1.14.0 and intentionally not backported to 1.13.1 in order to preserve source compatibility within the 1.13.x line. Customers needing the mitigation should upgrade to 1.14.0 or later.

Highlights

Fix for worker shutdown ordering

There was an issue with worker shutdown when the frontend.enableCancelWorkerPollsOnShutdown dynamic config flag is enabled on server. The issue was causing shutdown to stall until the full 30s worker shutdown timeout was hit, as server was waiting for a message that the SDK was not sending. This fixes the SDK to send the proper message, allowing shutdown to occur normally.

What's Changed

• [backport 1.13.1] Update core to pickup shutdown fix by @yuandrew in #696
• chore(release): update to 1.13.1 by @jmaeagle99 in #703

SDK Core Update

Updated from temporalio/sdk-rust@24703da to temporalio/sdk-rust@5a0de4d

• Back port for 24703da: Shutdown rpc initiate shutdown in temporalio/sdk-rust#1238

Full Changelog: 1.13.0...1.13.1