From a23f14cff5b101b885901b7c8ae0e4c5a2955153 Mon Sep 17 00:00:00 2001 From: Tim Conley Date: Fri, 16 Oct 2026 10:19:02 -0700 Subject: [PATCH 1/2] Update sdk-core for zip 9.0 --- changelog/added/perkier-pamila.md | 1 + changelog/fixed/perkier-pamila.md | 1 + changelog/security/perkier-pamila.md | 1 + temporalio/bridge/Cargo.lock | 33 +++++++++++++++++++--------- temporalio/bridge/sdk-core | 2 +- 5 files changed, 27 insertions(+), 11 deletions(-) create mode 100644 changelog/added/perkier-pamila.md create mode 100644 changelog/fixed/perkier-pamila.md create mode 100644 changelog/security/perkier-pamila.md diff --git a/changelog/added/perkier-pamila.md b/changelog/added/perkier-pamila.md new file mode 100644 index 0000000000..8f8ab6bfc4 --- /dev/null +++ b/changelog/added/perkier-pamila.md @@ -0,0 +1 @@ +Core: The OTLP metrics exporter can export histograms as OpenTelemetry exponential histograms, which Prometheus-compatible backends store as native histograms, when an SDK enables the option, including through the C bridge. It applies to every histogram, including custom ones, and names each series with a suffix, `_native` by default, so it never shares a name with the fixed-bucket series it replaces. It cannot be combined with histogram bucket overrides. Explicit buckets remain the default. diff --git a/changelog/fixed/perkier-pamila.md b/changelog/fixed/perkier-pamila.md new file mode 100644 index 0000000000..2bbf2a1b6d --- /dev/null +++ b/changelog/fixed/perkier-pamila.md @@ -0,0 +1 @@ +Core: Workers now replay workflows paused before a scheduled task starts, allowing those workflows to make progress after unpause. diff --git a/changelog/security/perkier-pamila.md b/changelog/security/perkier-pamila.md new file mode 100644 index 0000000000..cb5119b0f3 --- /dev/null +++ b/changelog/security/perkier-pamila.md @@ -0,0 +1 @@ +Core: Ephemeral server downloads now use `zip` 9.0 for ZIP extraction, replacing the 8.x dependency [yanked upstream for security issues](https://github.com/zip-rs/zip2/issues/1075#issuecomment-6209381974). diff --git a/temporalio/bridge/Cargo.lock b/temporalio/bridge/Cargo.lock index e61e990850..f777b3aee4 100644 --- a/temporalio/bridge/Cargo.lock +++ b/temporalio/bridge/Cargo.lock @@ -427,9 +427,9 @@ dependencies = [ [[package]] name = "dirs" -version = "6.0.0" +version = "7.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e" +checksum = "8d57d423b3c82e89b9a24ca3091fee61f456a26edbd28d26c65906f4bc1dcd8f" dependencies = [ "dirs-sys", ] @@ -1331,6 +1331,18 @@ version = "0.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1d87ecb2933e8aeadb3e3a02b828fed80a7528047e68b4f424523a0981a3a084" +[[package]] +name = "nix" +version = "0.31.3" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d" +dependencies = [ + "bitflags", + "cfg-if", + "cfg_aliases", + "libc", +] + [[package]] name = "nom" version = "7.1.3" @@ -3713,15 +3725,16 @@ dependencies = [ [[package]] name = "zip" -version = "8.6.0" +version = "9.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "2d04a6b5381502aa6087c94c669499eb1602eb9c5e8198e534de571f7154809b" +checksum = "a954114b47a54df49f83d2722814e86b23d4bb1b54a1b90fb7d92b41619ddc22" dependencies = [ "bzip2", "crc32fast", "flate2", "indexmap", "memchr", + "nix", "typed-path", "zopfli", "zstd", @@ -3753,27 +3766,27 @@ dependencies = [ [[package]] name = "zstd" -version = "0.13.3" +version = "0.14.3" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "e91ee311a569c327171651566e07972200e76fcfe2242a4fa446149a3881c08a" +checksum = "db3ae9bf90af6e40197bef767eeefc46ad6397420fe873830bd85e5fbbfb3c70" dependencies = [ "zstd-safe", ] [[package]] name = "zstd-safe" -version = "7.3.0" +version = "8.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "64d80649ab6db9d9f6f9c80a40becd948eda4714a0a5ac8c4d157a32231c7882" +checksum = "ded520f16b29e1a9b771c722221b2b0a0398c2316d9bb3c42b458a5414d7434b" dependencies = [ "zstd-sys", ] [[package]] name = "zstd-sys" -version = "2.1.0+zstd.1.5.7" +version = "2.1.2+zstd.1.5.7" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "0ef0a8027ec3ee71300ab3bcbcd0393f434aa72b91ca6d635a39941deae8eea0" +checksum = "481ada9c543b2323cbb7bbdbb5249177fbf0188ed959ed2c15e4b22421c84ed3" dependencies = [ "cc", "pkg-config", diff --git a/temporalio/bridge/sdk-core b/temporalio/bridge/sdk-core index 212e815006..2c1ee2debb 160000 --- a/temporalio/bridge/sdk-core +++ b/temporalio/bridge/sdk-core @@ -1 +1 @@ -Subproject commit 212e8150066527b57e792b80626fe0d14e7f1da1 +Subproject commit 2c1ee2debb851a0183d46764ce1eee73a96b35b3 From 134873337a98e9e1401ba1a62e2390f41fe7cfeb Mon Sep 17 00:00:00 2001 From: Tim Conley Date: Mon, 19 Oct 2026 08:52:36 -0700 Subject: [PATCH 2/2] Remove unavailable OTLP histogram release note --- changelog/added/perkier-pamila.md | 1 - 1 file changed, 1 deletion(-) delete mode 100644 changelog/added/perkier-pamila.md diff --git a/changelog/added/perkier-pamila.md b/changelog/added/perkier-pamila.md deleted file mode 100644 index 8f8ab6bfc4..0000000000 --- a/changelog/added/perkier-pamila.md +++ /dev/null @@ -1 +0,0 @@ -Core: The OTLP metrics exporter can export histograms as OpenTelemetry exponential histograms, which Prometheus-compatible backends store as native histograms, when an SDK enables the option, including through the C bridge. It applies to every histogram, including custom ones, and names each series with a suffix, `_native` by default, so it never shares a name with the fixed-bucket series it replaces. It cannot be combined with histogram bucket overrides. Explicit buckets remain the default.