0.9.0 Release

Temporal Proxy 0.9.0

A gRPC proxy that sits between Temporal SDK Clients, Workers, and the Temporal UI on one side and one
or more upstream Temporal Services on the other. It handles Namespace translation, TLS termination,
and payload encryption so applications can target a single local endpoint while the proxy fans
requests out to the right upstream (a local dev Temporal Service, a self-hosted deployment, Temporal
Cloud, or some mix).

Installation

Go

go install github.com/temporalio/temporal-proxy/cmd/proxy@v0.9.0

Container image

docker pull temporalio/temporal-proxy:v0.9.0

Helm

See https://github.com/temporalio/helm-charts/tree/main/charts/temporal-proxy for more information.

helm install temporal-proxy temporal-proxy \
  --repo https://go.temporal.io/helm-charts \
  --set image.tag=v0.9.0

Prebuilt binaries for each platform are attached as assets below. See the README for full installation and
configuration details.

Changelog

Changes

• db6c1cd: Bump github.com/prometheus/client_golang in / (#229) (@dependabot[bot])
• 4e38239: Bump github.com/urfave/cli/v3 from 3.13.0 to 3.14.0 (#208) (@dependabot[bot])
• 17ae11c: Bump go.temporal.io/cloud-sdk from 0.19.0 to 0.20.0 (#207) (@dependabot[bot])
• 0102833: Bump golang.org/x/crypto in / (#230) (@dependabot[bot])
• 55df9ec: Bump golang.org/x/sync in / (#231) (@dependabot[bot])
• 869c1e9: [Forwarder]: Remove allowlist check (#206) (@Vaughan-Temporal)
• 7eff2b2: [auth]: Share HTTP route-group authentication through one middleware (#217) (@pseudomuto)
• 508991c: [codecserver]: Bind payloads by the namespace the caller names (#222) (@pseudomuto)
• d3054ae: [config]: Add per-upstream connection settings (#193) (@pseudomuto)
• 01e0d7e: [config]: Default maxConnections to 32, or 4 for templated upstreams (#202) (@Vaughan-Temporal)
• 2f5bbc8: [config]: Make Prepare the single place a config is validated and compiled (#216) (@pseudomuto)
• dc7bc23: [connect]: Spread upstream calls across maxConnections connections (#194) (@pseudomuto)
• 6843a2c: [crypto]: Bind sealed payloads to their namespace (#221) (@pseudomuto)
• a65e459: [dataplane]: Remove the per-upstream unix socket (#205) (@pseudomuto)
• cc59068: [dataplane]: Serve upstreams in process from the gateway (#198) (@Vaughan-Temporal)
• b179f93: [deps]: Bump Temporal API to v1.63.5 and SDK to v1.49.0 (#199) (@pseudomuto)
• a203fcf: [deps]: Keep examples/go.mod in step with Dependabot bumps (#228) (@pseudomuto)
• e8880ef: [e2e]: Give the liveness loopback test room for slow probes (#232) (@pseudomuto)
• ed5e590: [encryption]: Add skipEncodings to avoid double-encrypting payloads (#201) (@pseudomuto)
• f143995: [examples]: Add a codec server walkthrough (#192) (@pseudomuto)
• 7dd6f6a: [httpserver]: Extract a shared HTTP server for route groups (#214) (@pseudomuto)
• a0c8810: [pprof]: Add config-gated profile routes with a flame-graph visualizer (#220) (@rainman456)
• c8f8a88: [proxy]: Encrypt failure messages and stack traces (#209) (@pseudomuto)
• d37c998: [resolve]: Balance upstreams across SRV records (#196) (@pseudomuto)
• 633b1b8: [rpc]: Remove unused rpc.Method (#204) (@Vaughan-Temporal)
• d7c53bc: [server]: Recover panics in the gateway and proxy servers (#200) (@Vaughan-Temporal)
• d819c7a: [server]: Remove unused WithUnaryInterceptor and WithService (#203) (@Vaughan-Temporal)

Full Changelog: v0.8.0...v0.9.0