Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump go.temporal.io/server from 1.21.4 to 1.21.5 #320

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 28, 2023

Bumps go.temporal.io/server from 1.21.4 to 1.21.5.

Release notes

Sourced from go.temporal.io/server's releases.

v1.21.5

Important

Temporal Server v1.21.0 introduced a security bug in the Cassandra tool (aka temporal-cassandra-tool) that can expose the credentials in debug level logs. The issue is fixed with this release in #4738.

All Changes

2023-08-14 - 1eaaaf8da - Increaes RecordHeartbeat frequency in VerifyReplicationTask (#4771) 2023-08-14 - 194a8938d - Skip verifying workflow which has already passed retention time (#4770) 2023-08-14 - 8e56612d5 - Turn ErrWorkflowClosing into a retryable error (#4765) 2023-08-14 - cadd9337b - Remove debug logging from Cassandra schema update tool (#4738) 2023-08-07 - 7e216c3bb - Bump server version to 1.21.5 2023-08-07 - 524bda390 - Fix bug causing duplicates when listing s3-archived workflows (#4712) 2023-08-07 - 5722c2332 - Continue replication verification by skipping workflow which should be or soon to be deleted (#4734) 2023-08-07 - a8ff17f49 - Change schedule jitter to depend on schedule + namespace ids (#4685) 2023-08-07 - 5f1455fac - Collapse duplicate visibility tasks (#4727) 2023-08-07 - 8bda654e6 - Return ResourceExhaustedError for consistent query buffer full (#4731) 2023-08-07 - 95a76efbd - Add worker versioning calls to read-only namespace APIs for authorizer (#4721) 2023-08-07 - 9970ea504 - Reduce the heartbeat size of VerifyReplicationTasks activity (#4705) 2023-08-07 - 9d59be327 - Finish idle schedule when a timer fires (#4602) 2023-08-07 - 120b8be8d - enable shard linger with time limit config (#4696) 2023-08-07 - 4448efacd - Put user data replication tasks in DLQ (#4609) 2023-08-07 - b8e7b2837 - support delaying shard close for membership change (#4659) 2023-08-07 - 12c95ddf0 - Return nil instead of task discarded error if namespace is invalid locally (#4678) 2023-08-07 - a7832c76b - add configurable ownership caching to history client (#4652) 2023-08-07 - 37a70494f - Minor fixes in force replication verification (#4675) 2023-08-07 - ed5aded36 - Fix flaky TestForceReplicationWorkflow_VerifyReplicationTaskNonRetryableError (#4669) 2023-08-07 - eb0ee5ed1 - restructure history client for alternate ownership handling (#4636) 2023-08-07 - b105e5b78 - move controller shard membership handling (#4607) 2023-08-07 - 23135a350 - use a factory to create shard contexts (#4586) 2023-08-07 - aeb47aab0 - add stop reason for context (#4601) 2023-08-07 - 6c80ff6e0 - wait for drain duration before stopping shard controller (#4587) 2023-08-07 - 35f6670c2 - support delay before history joins membership (#4582) 2023-08-07 - a6dfbc6ea - move ringpop start call to service start (#4510)

Commits
  • 1eaaaf8 Increaes RecordHeartbeat frequency in VerifyReplicationTask (#4771)
  • 194a893 Skip verifying workflow which has already passed retention time (#4770)
  • 8e56612 Turn ErrWorkflowClosing into a retryable error (#4765)
  • cadd933 Remove debug logging from Cassandra schema update tool (#4738)
  • 7e216c3 Bump server version to 1.21.5
  • 524bda3 Fix bug causing duplicates when listing s3-archived workflows (#4712)
  • 5722c23 Continue replication verification by skipping workflow which should be or soo...
  • a8ff17f Change schedule jitter to depend on schedule + namespace ids (#4685)
  • 5f1455f Collapse duplicate visibility tasks (#4727)
  • 8bda654 Return ResourceExhaustedError for consistent query buffer full (#4731)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [go.temporal.io/server](https://github.com/temporalio/temporal) from 1.21.4 to 1.21.5.
- [Release notes](https://github.com/temporalio/temporal/releases)
- [Changelog](https://github.com/temporalio/temporal/blob/main/.goreleaser.yml)
- [Commits](temporalio/temporal@v1.21.4...v1.21.5)

---
updated-dependencies:
- dependency-name: go.temporal.io/server
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 28, 2023
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 6, 2023

Superseded by #325.

@dependabot dependabot bot closed this Sep 6, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/go.temporal.io/server-1.21.5 branch September 6, 2023 05:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants