Skip to content

chore(deps): bump the backend-minor group across 1 directory with 9 updates - #108

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/services/backend/backend-minor-3ec9f02959
Open

chore(deps): bump the backend-minor group across 1 directory with 9 updates#108
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/services/backend/backend-minor-3ec9f02959

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the backend-minor group with 9 updates in the /services/backend directory:

Package From To
@restatedev/restate-sdk 1.11.1 1.16.2
@temporalio/activity 1.15.0 1.20.3
@temporalio/client 1.15.0 1.20.3
@temporalio/worker 1.15.0 1.20.3
@temporalio/workflow 1.15.0 1.20.3
express-rate-limit 8.3.1 8.6.0
helmet 8.1.0 8.3.0
joi 18.1.1 18.2.3
node-mocks-http 1.17.2 1.18.1

Updates @restatedev/restate-sdk from 1.11.1 to 1.16.2

Release notes

Sourced from @​restatedev/restate-sdk's releases.

Release v1.16.2

What's Changed

Full Changelog: restatedev/sdk-typescript@v1.16.1...v1.16.2

Release v1.16.1

What's Changed

Full Changelog: restatedev/sdk-typescript@v1.16.0...v1.16.1

Release v1.16.0

New Features

In case you've missed it, check out the new features in 1.15!

Auto-retry for ingress calls

The ingress client (@restatedev/restate-sdk-clients, re-exported from @restatedev/restate-sdk-gen) can now retry ambiguous failures automatically: network errors, HTTP 429, and HTTP 5xx — with exponential backoff and full jitter.

Retries are opt-in and gated on an idempotency key: a retry only fires when the call carries an idempotencyKey. Restate dedupes on the key, so the retry safely attaches to the in-flight/completed invocation instead of starting a duplicate. Without a key, no retry is attempted.

import { connect } from "@restatedev/restate-sdk-clients";
// true enables the built-in policy (network errors, HTTP 429, HTTP 5xx).
const ingress = connect({ url: "http://localhost:8080", retry: true });
// A retry fires only because the call carries an idempotency key.
await ingress
.serviceClient(MyService)
.process(payload, rpc.opts({ idempotencyKey: "req-1" }));

Pass an object instead of true to tune the policy, and use shouldRetry to fully replace the built-in network/429/5xx rule (compose with the exported defaultShouldRetry rather than reimplementing it):

import { connect, defaultShouldRetry } from "@restatedev/restate-sdk-clients";
const ingress = connect({
url: "http://localhost:8080",
retry: {
maxAttempts: 4,                 // initial attempt + up to 3 retries (default 6)
initialInterval: 200,           // Duration or milliseconds (default 100ms)
maxInterval: { seconds: 5 },    // Duration or milliseconds (default 2000ms)
exponentiationFactor: 2,        // default 2
// Response failures carry status, headers, and the body text (when non-empty).
</tr></table>

... (truncated)

Commits

Updates @temporalio/activity from 1.15.0 to 1.20.3

Release notes

Sourced from @​temporalio/activity's releases.

v1.20.3

What's Changed

Fixed

  • Workflow Bundler: further strengthening of the webpack_module_cache replacement logic, addressing regressions introduced by the fix in 1.20.1.
  • @​temporalio/langsmith: install Workflow-bundle rewrites via compiler.webpack so they work under non-hoisting node_modules layouts (e.g. pnpm hoist=false).
  • @​temporalio/langsmith: emit the LangSmith run fire-and-forget rather than awaiting it, removing a yield point that reordered commands under signalWithStart.

v1.20.2

What's Changed

Full Changelog: temporalio/sdk-typescript@v1.20.1...v1.20.2

v1.20.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.20.0

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

Full Changelog: temporalio/sdk-typescript@v1.19.0...v1.20.0

v1.19.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.19.0

What's Changed

Added

... (truncated)

Changelog

Sourced from @​temporalio/activity's changelog.

[1.20.3] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.20.1.

[1.20.2] - 2026-07-08

Fixed

  • langsmith: resolve workflow interceptor module by absolute path

[1.20.1] - 2026-07-07

Fixed

  • Workflow Bundler: fix a bug in our replacement of __webpack_module_cache__ logic introduced by webpack 5.108.0, resulting in breaking workflow context isolation (fix #2170).

[1.20.0] - 2026-07-07

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

[1.19.2] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.19.1.

[1.19.1] - 2026-07-07

Fixed

... (truncated)

Commits

Updates @temporalio/client from 1.15.0 to 1.20.3

Release notes

Sourced from @​temporalio/client's releases.

v1.20.3

What's Changed

Fixed

  • Workflow Bundler: further strengthening of the webpack_module_cache replacement logic, addressing regressions introduced by the fix in 1.20.1.
  • @​temporalio/langsmith: install Workflow-bundle rewrites via compiler.webpack so they work under non-hoisting node_modules layouts (e.g. pnpm hoist=false).
  • @​temporalio/langsmith: emit the LangSmith run fire-and-forget rather than awaiting it, removing a yield point that reordered commands under signalWithStart.

v1.20.2

What's Changed

Full Changelog: temporalio/sdk-typescript@v1.20.1...v1.20.2

v1.20.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.20.0

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

Full Changelog: temporalio/sdk-typescript@v1.19.0...v1.20.0

v1.19.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.19.0

What's Changed

Added

... (truncated)

Changelog

Sourced from @​temporalio/client's changelog.

[1.20.3] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.20.1.

[1.20.2] - 2026-07-08

Fixed

  • langsmith: resolve workflow interceptor module by absolute path

[1.20.1] - 2026-07-07

Fixed

  • Workflow Bundler: fix a bug in our replacement of __webpack_module_cache__ logic introduced by webpack 5.108.0, resulting in breaking workflow context isolation (fix #2170).

[1.20.0] - 2026-07-07

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

[1.19.2] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.19.1.

[1.19.1] - 2026-07-07

Fixed

... (truncated)

Commits

Updates @temporalio/worker from 1.15.0 to 1.20.3

Release notes

Sourced from @​temporalio/worker's releases.

v1.20.3

What's Changed

Fixed

  • Workflow Bundler: further strengthening of the webpack_module_cache replacement logic, addressing regressions introduced by the fix in 1.20.1.
  • @​temporalio/langsmith: install Workflow-bundle rewrites via compiler.webpack so they work under non-hoisting node_modules layouts (e.g. pnpm hoist=false).
  • @​temporalio/langsmith: emit the LangSmith run fire-and-forget rather than awaiting it, removing a yield point that reordered commands under signalWithStart.

v1.20.2

What's Changed

Full Changelog: temporalio/sdk-typescript@v1.20.1...v1.20.2

v1.20.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.20.0

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

Full Changelog: temporalio/sdk-typescript@v1.19.0...v1.20.0

v1.19.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.19.0

What's Changed

Added

... (truncated)

Changelog

Sourced from @​temporalio/worker's changelog.

[1.20.3] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.20.1.

[1.20.2] - 2026-07-08

Fixed

  • langsmith: resolve workflow interceptor module by absolute path

[1.20.1] - 2026-07-07

Fixed

  • Workflow Bundler: fix a bug in our replacement of __webpack_module_cache__ logic introduced by webpack 5.108.0, resulting in breaking workflow context isolation (fix #2170).

[1.20.0] - 2026-07-07

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

[1.19.2] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.19.1.

[1.19.1] - 2026-07-07

Fixed

... (truncated)

Commits

Updates @temporalio/workflow from 1.15.0 to 1.20.3

Release notes

Sourced from @​temporalio/workflow's releases.

v1.20.3

What's Changed

Fixed

  • Workflow Bundler: further strengthening of the webpack_module_cache replacement logic, addressing regressions introduced by the fix in 1.20.1.
  • @​temporalio/langsmith: install Workflow-bundle rewrites via compiler.webpack so they work under non-hoisting node_modules layouts (e.g. pnpm hoist=false).
  • @​temporalio/langsmith: emit the LangSmith run fire-and-forget rather than awaiting it, removing a yield point that reordered commands under signalWithStart.

v1.20.2

What's Changed

Full Changelog: temporalio/sdk-typescript@v1.20.1...v1.20.2

v1.20.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.20.0

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

Full Changelog: temporalio/sdk-typescript@v1.19.0...v1.20.0

v1.19.1

Backport temporalio/sdk-typescript#2169 to address temporalio/sdk-typescript#2170

v1.19.0

What's Changed

Added

... (truncated)

Changelog

Sourced from @​temporalio/workflow's changelog.

[1.20.3] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.20.1.

[1.20.2] - 2026-07-08

Fixed

  • langsmith: resolve workflow interceptor module by absolute path

[1.20.1] - 2026-07-07

Fixed

  • Workflow Bundler: fix a bug in our replacement of __webpack_module_cache__ logic introduced by webpack 5.108.0, resulting in breaking workflow context isolation (fix #2170).

[1.20.0] - 2026-07-07

Added

  • New @temporalio/langsmith package for tracing Temporal apps to LangSmith. It hooks the client, Workflow, and Activity interceptors so a Workflow and the Activities it runs show up as a single LangSmith run tree.

Changed

  • protobufjs bumped to ^7.6.4
  • Updated Core to 5df57f6d. Package-visible changes from this update include:
    • NativeConnection initialization now retries without gRPC gzip compression if the server cannot decompress the eager GetSystemInfo call.
    • Workflow replay now honors SDK flags already recorded in history even when the server does not advertise SDK metadata support.
    • OTLP metric export failures from Core's periodic metric reader are now logged through Core telemetry.
  • @temporalio/openai-agents: Query handlers and update validators now derive trace span IDs from the SDK's replay-safe random source instead of a private seeded PRNG. This removes the old seed-collision workaround and gives read-only handlers distinct, well-formed span IDs.

[1.19.2] - 2026-07-13

Fixed

  • Workflow Bundler: further strengthening of the __webpack_module_cache__ replacement logic, addressing regressions introduced by the fix in 1.19.1.

[1.19.1] - 2026-07-07

Fixed

... (truncated)

Commits

Updates express-rate-limit from 8.3.1 to 8.6.0

Release notes

Sourced from express-rate-limit's releases.

v8.6.0

You can view the changelog here.

v8.5.2

You can view the changelog here.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

Commits
  • fffb3c4 8.6.0
  • f366b2d docs: debugging guide, time constants, & v8.6.0 changelog (#652)
  • 593ddd2 fix: make debug output easier to read (#653)
  • ef8c129 fix: Pin safe version of @​asyncapi/specs dev dep (#659)
  • 7b05e0d feat: add time constants to support more readable values for windowMs (#655)
  • 863e730 chore(deps-dev): bump the development-dependencies group with 3 updates (#657)
  • e0e711e fix: correct wording in usage documentation for express-rate-limit (#656)
  • fcd3aa7 chore(deps-dev): bump the development-dependencies group with 3 updates (#651)
  • 99d4298 feat: use debug for debug logging (#641)
  • 23e4dde feat: Run validations once each (#650)
  • Additional commits viewable in compare view

Updates helmet from 8.1.0 to 8.3.0

Changelog

Sourced from helmet's changelog.

8.3.0 - 2026-07-11

Changed

  • Content-Security-Policy: improved performance by ~7% when there are no dynamic directives
  • Content-Security-Policy: improved error handling for invalid directive names

Fixed

  • Content-Security-Policy: useDefaults: false with no directives is no longer valid, both at runtime and the type level
  • Content-Security-Policy: dynamically-computed directive values would throw, not call next, when invalid
  • Content-Security-Policy: dynamically-computed directive value entries would throw, not call next, when function threw

8.2.0 - 2026-05-21

  • Cross-Origin-Opener-Policy: support noopener-allow-popups. See #522
  • Improve error message when passing duplicate options
Commits
  • 75f1a98 8.3.0
  • f03f70d Update changelog for 8.3.0 release
  • a307fce Fix capitalization in CSP package changelog
  • 5347b43 Format default CSP in README for readability
  • 9afc570 CSP: fix middleware-specific README missing link
  • 266c95c Minor speedups to project setups test
  • 7a4196c CSP: update package-specific changelog
  • 02716b4 CSP: improve performance when there are no dynamic directives
  • 3f511ed CSP: move utility functions to separate file
  • 80338af CSP: disabling defaults with no directives is now an error
  • Additional commits viewable in compare view

Updates joi from 18.1.1 to 18.2.3

Commits
  • c86ddc0 18.2.3
  • 8077125 Merge pull request #3125 from hapijs/fix/json-schema-multiple-patterns
  • 223217a fix: expose multiple string patterns in json schemas
  • 85947a8 Merge pull request #3124 from hapijs/chore/object-proto
  • fe41c4f chore: deny prototype pollution in objects by restoring prototype
  • 87d3a62 18.2.2
  • 1c7d34e Merge pull request #3120 from hapijs/fix/json-schema-bugfixes
  • 515a8f0 test(json-schema): drop runtime validation from json-schema tests
  • 6574f75 fix(json-schema): register id'd child schemas in $defs
  • 770a2cf fix(json-schema): skip rule handlers with ref arguments
  • Additional commits viewable in compare view

Updates node-mocks-http from 1.17.2 to 1.18.1

Changelog

Sourced from node-mocks-http's changelog.

v 1.18.1

v 1.18.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the backend-minor group across 1 directory with 9 u…
514ba45 
…pdates

Bumps the backend-minor group with 9 updates in the /services/backend directory:

| Package | From | To |
| --- | --- | --- |
| [@restatedev/restate-sdk](https://github.com/restatedev/sdk-typescript) | `1.11.1` | `1.16.2` |
| [@temporalio/activity](https://github.com/temporalio/sdk-typescript/tree/HEAD/packages/activity) | `1.15.0` | `1.20.3` |
| [@temporalio/client](https://github.com/temporalio/sdk-typescript/tree/HEAD/packages/client) | `1.15.0` | `1.20.3` |
| [@temporalio/worker](https://github.com/temporalio/sdk-typescript/tree/HEAD/packages/worker) | `1.15.0` | `1.20.3` |
| [@temporalio/workflow](https://github.com/temporalio/sdk-typescript/tree/HEAD/packages/workflow) | `1.15.0` | `1.20.3` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.1` | `8.6.0` |
| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.3.0` |
| [joi](https://github.com/hapijs/joi) | `18.1.1` | `18.2.3` |
| [node-mocks-http](https://github.com/eugef/node-mocks-http) | `1.17.2` | `1.18.1` |



Updates `@restatedev/restate-sdk` from 1.11.1 to 1.16.2
- [Release notes](https://github.com/restatedev/sdk-typescript/releases)
- [Commits](restatedev/sdk-typescript@v1.11.1...v1.16.2)

Updates `@temporalio/activity` from 1.15.0 to 1.20.3
- [Release notes](https://github.com/temporalio/sdk-typescript/releases)
- [Changelog](https://github.com/temporalio/sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/temporalio/sdk-typescript/commits/v1.20.3/packages/activity)

Updates `@temporalio/client` from 1.15.0 to 1.20.3
- [Release notes](https://github.com/temporalio/sdk-typescript/releases)
- [Changelog](https://github.com/temporalio/sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/temporalio/sdk-typescript/commits/v1.20.3/packages/client)

Updates `@temporalio/worker` from 1.15.0 to 1.20.3
- [Release notes](https://github.com/temporalio/sdk-typescript/releases)
- [Changelog](https://github.com/temporalio/sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/temporalio/sdk-typescript/commits/v1.20.3/packages/worker)

Updates `@temporalio/workflow` from 1.15.0 to 1.20.3
- [Release notes](https://github.com/temporalio/sdk-typescript/releases)
- [Changelog](https://github.com/temporalio/sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](https://github.com/temporalio/sdk-typescript/commits/v1.20.3/packages/workflow)

Updates `express-rate-limit` from 8.3.1 to 8.6.0
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.3.1...v8.6.0)

Updates `helmet` from 8.1.0 to 8.3.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.1.0...v8.3.0)

Updates `joi` from 18.1.1 to 18.2.3
- [Commits](hapijs/joi@v18.1.1...v18.2.3)

Updates `node-mocks-http` from 1.17.2 to 1.18.1
- [Release notes](https://github.com/eugef/node-mocks-http/releases)
- [Changelog](https://github.com/eugef/node-mocks-http/blob/master/HISTORY.md)
- [Commits](eugef/node-mocks-http@v1.17.2...v1.18.1)

---
updated-dependencies:
- dependency-name: "@restatedev/restate-sdk"
  dependency-version: 1.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: "@temporalio/activity"
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: "@temporalio/client"
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: "@temporalio/worker"
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: "@temporalio/workflow"
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: express-rate-limit
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: helmet
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: joi
  dependency-version: 18.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor
- dependency-name: node-mocks-http
  dependency-version: 1.18.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: backend-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies service: backend

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants