workflow@5.2.0

@workflow/core@5.2.0

• #4727 de8d985 @pranaygp - Start the queued branches of a wide Promise.all fan-out sooner. The batched fan-out now commits its writes in createBatch calls of at most 16 events instead of 32. Each queued branch's message waits on its chunk's commit and then its chunk's batched publish, and both are faster for smaller chunks. In production sweeps, the last branch of a 64-branch fan-out started about 90 ms sooner at p50, and of a 128-branch fan-out about 200 ms sooner, with no change to the first branch at those widths.
• #4324 306a40f @VaguelySerious - Deliver a hook payload to the pending await when an earlier Promise.race over the same hook was lost
• #4438 515dc9f @TooTallNate - Reject lifecycle registration inside steps, preserve reporting diagnostics for unreadable errors, and document executor registration and stream-lifetime constraints.
• #4690 878979b @TooTallNate - Enable VM-memory snapshotting by default for the QuickJS engine, with a threshold of 1000 events. Set WORKFLOW_SNAPSHOT_THRESHOLD=0 to opt out. Runs without an encryption key (for example on world-local and world-postgres) are still not snapshotted unless WORKFLOW_SNAPSHOT_ALLOW_UNENCRYPTED=1 is set.
• #4683 3949c07 @VaguelySerious - Record on the invocation trace whether out-of-band events could affect each inline step boundary
• #4685 5589df7 @pranaygp - Hold a turbo step's awaited step_started until the backgrounded run_started lands, so an explicit WORKFLOW_OPTIMISTIC_INLINE_START=0 no longer gets its first step rejected for a run that has not started yet.

@workflow/cli@5.0.3

• #4376 2036247 @withkarann - Ship an oclif command manifest so the CLI loads only the command being run, and skip loading the runtime on exit when no World was created. workflow --version starts in about 50 ms instead of 650 ms.

@workflow/world@5.0.3

• #4712 46b3bfb @karthikscale3 - Reduce redundant schema compilation by compiling final event schemas only and reusing compiled v4 event-response and paginated response schemas.

@workflow/world-local@5.1.0

• #4718 0139561 @ruiconti - Store event and step files in one directory per run for faster reads. Local run data written by earlier releases is deleted on upgrade.
• #4742 b38360d @pranaygp - Make a tagged clear() delete only its own tag's lock files, so it no longer reopens another tag's disposed hooks mid-run.

@workflow/world-vercel@5.2.0

• #4722 d0f6b91 @alangenfeld - Stream writes now upgrade to WebSocket by default; set WORKFLOW_STREAMS_TRANSPORT=http to opt out.
• #4712 46b3bfb @karthikscale3 - Reduce redundant schema compilation by compiling final event schemas only and reusing compiled v4 event-response and paginated response schemas.

@workflow/web@5.0.3

• #4736 28cb70d @TooTallNate - Upgrade react-router and @react-router/* to 7.18.4 to address CVE-2026-34077 and GHSA-qwww-vcr4-c8h2

@workflow/swc-plugin@5.0.1

• #4615 1acc0ba @karthikscale3 - Stabilize nested step IDs across scopes and SWC transform modes. Self-hosted runs that already recorded one of the previously colliding IDs may report a replay divergence if they continue on upgraded code; restart those in-flight runs after upgrading.