[dependabot]

Bumps @temporalio/client from 1.14.1 to 1.25.0.

Release notes

Sourced from @​temporalio/client's releases.

v1.25.0

Added

• Nexus links of type Link.Callback are converted to and from their Nexus wire form, so they are carried through Nexus requests and responses instead of being dropped.
• @temporalio/interceptors-opentelemetry and @temporalio/interceptors-opentelemetry-v2 now expose Workflow-only /workflow entrypoints. Existing root exports and lib/* imports remain available.
• Experimental: External storage failures now surface as dedicated error types exported from @temporalio/common: ExternalStorageDriverError, ExternalStorageUnregisteredDriverError, and ExternalStorageReferenceError, all extending the new ExternalStorageError base type.
• Experimental: WorkflowClient.getHandle, ActivityClient.getHandleWithOptions, and NexusClient.getHandle can infer detached handle result types and read output TypeInfo from supplied Workflow, Activity, and Nexus Operation definitions. Explicit output TypeInfo is checked against the declared handle result type.
• Experimental: ExternalStorage now accepts cooperative concurrency limits: maxDriverOperations caps operations across its registered drivers, and maxOperationsPerMessage caps operations per top-level input or output. Drivers must acquire permits through context.limiter; the bundled S3 and GCS drivers use it.
• Experimental: ChildWorkflowOptions.versioningOverride can pin, auto-upgrade, or one-time route a Child Workflow independently of its parent. One-time routing is also available for client-started Workflows through { oneTimeTo: WorkerDeploymentVersion }. Both require Temporal Server 1.32.0 or later. Invalid child overrides reject with InvalidVersioningOverrideError.
• Experimental: Added list and fetchHistory interception to WorkflowClientInterceptor. list interception spans one lazy iterable consumption across pagination and early termination.
• Experimental: NexusSerializationContext is now passed to payload converters, payload codecs, and failure converters for Nexus operation payloads, identifying the operation's endpoint, service, and operation name. Callers use it for inputs, summaries, results, and failures; handlers use it for inputs, synchronous results, and failures. A standalone handle obtained from NexusClient.getHandle has none of that information and therefore decodes without Nexus context, so contextual encodings must be self-describing and decoders must keep accepting payloads encoded without context. GetNexusOperationResultInput now carries the operation's endpoint, service, and operation when known.
• The Workflow sandbox now exposes URLPattern, both as a global and from the url module, when the Worker runs on Node.js 23.8 or later. On older Node.js versions, URLPattern remains undefined inside Workflows.
• Experimental: Nexus workers decode Temporal System Nexus inputs sent by the server with the System Nexus converter.
• SearchAttributeKey is now exported from the @temporalio/common package root.
• Experimental: Added opt-in payload caching for External Storage. Pass a PayloadCache, such as InMemoryPayloadCache, as the payloadCache option of a Client or Worker to cache External Storage payloads.
• Experimental: Workflows can signal another Workflow and start it when absent with signalWithStartWorkflow.
• Experimental: Workflow outbound interceptors can intercept Temporal System Nexus calls generically with startSystemNexusOperation or specifically with signalWithStartWorkflow.
• The Workflow sandbox now exposes atob and btoa.

Changed

• Experimental: createEventGroup(...) now takes the Event Group's ID as its first and only required argument; user-provided IDs are used verbatim and should not contain sensitive information. The optional label is a codec-encoded Payload on the second argument, the type is now EventGroup (previously EventGroupMarker), and direct Event Group attachment is supported on more APIs.
• RetryPolicy.maximumAttempts accepts 0 as another way to specify unlimited attempts, alongside Infinity.
• Updated unionfs from 4.5.1 to 4.6.0, @grpc/grpc-js from 1.12.4 to 1.12.7, smol-toml from 1.6.1 to 1.7.1, and tar from 7.5.11 to 7.5.21.
• Updated ms, adding month units and fixing duration type declarations under modern Node.js module resolution.
• @temporalio/create checks for updates in the background and displays cached notifications on subsequent interactive runs.
• AI integrations are now maintained and released independently in temporalio/ai-integrations. @temporalio/ai-sdk and @temporalio/google-adk-agents remain as compatibility wrappers forwarding their public entrypoints to @temporalio/vercel-ai-sdk and @temporalio/google-adk. Existing import paths can be retained; new applications should use the standalone names. @temporalio/langsmith, @temporalio/openai-agents, and @temporalio/strands-agents retain their package names. The integrations' implementations, tests, and API documentation are no longer built in this repository; the two wrappers have separate forwarding tests.
• Workers now refuse to load and execute Workflow bundles produced with a different SDK version. This unsupported practice previously resulted in subtle, hard-to-diagnose issues.

Deprecated

• Undocumented imports through @temporalio/*/lib/* are deprecated. Where present, the wildcard remains temporarily as a compatibility fallback. @temporalio/common explicitly supports @temporalio/common/encoding, @temporalio/common/protobufs, @temporalio/common/proto-utils, and @temporalio/common/time

💥 Breaking Changes

• Experimental: Nexus Workflow Updates now require waitForStage to be explicitly set to ACCEPTED.
• The @temporalio/google-adk-agents compatibility wrapper now requires Node.js 22.12.0 or later and Google ADK 2.0, matching @temporalio/google-adk. The wrapper preserves import paths, but the ADK upgrade and renamed workflow random stream still require draining affected in-flight Workflows or using separate task queues for the cutover.
• Undocumented package subpaths that are not covered by a package's explicit export map no longer resolve.
• SDK and contrib packages now declare protobufjs (^8.7.1) and long (^5.3.2) as peer dependencies rather than relying on separately installed copies. Package managers that do not automatically install peers require applications to add these dependencies explicitly. @temporalio/proto retains its regular runtime dependencies.

Fixed

• Workflow code that blocks the sandbox past its time limit now fails with the [TMPRL1101] deadlock diagnostic (#2426).
• Corrected the Schedule catchupWindow documentation to state that omitted values use the Temporal Server's configured default.
• Experimental: A Standalone Activity started from a Nexus operation handler directly through ActivityClient, rather than through TemporalNexusClient.startActivity()'s guarded call, now inherits the handler's Nexus request ID and inbound links.
• temporalio/sdk-rust#1640
• WorkflowExecutionAlreadyStartedError now exposes the runId of the already-running Workflow Execution when the server provides it in the error details (#1838).
• Corrected the protobufjs dependency declarations to prevent historyFromJSON failing with type must be a Type when npm installs separate protobufjs copies alongside a dependency on an older protobufjs major (#2514).
• Fixed a race where finishing a Worker could shut down the shared Runtime while another Worker or replay was being prepared, causing replay creation to fail with a native handle type error.
• Core: Replay now preserves which local activity results were delivered together for newly recorded histories. This prevents local activity scheduling which was conditional on local activity resolution order from assigning recorded results to different handles. Older markers keep their existing behavior.

... (truncated)

Changelog

Sourced from @​temporalio/client's changelog.

[1.25.0] - 2026-10-27

Added

• Nexus links of type Link.Callback are converted to and from their Nexus wire form, so they are carried through Nexus requests and responses instead of being dropped.
• @temporalio/interceptors-opentelemetry and @temporalio/interceptors-opentelemetry-v2 now expose Workflow-only /workflow entrypoints. Existing root exports and lib/* imports remain available.
• Experimental: External storage failures now surface as dedicated error types exported from @temporalio/common: ExternalStorageDriverError, ExternalStorageUnregisteredDriverError, and ExternalStorageReferenceError, all extending the new ExternalStorageError base type.
• Experimental: WorkflowClient.getHandle, ActivityClient.getHandleWithOptions, and NexusClient.getHandle can infer detached handle result types and read output TypeInfo from supplied Workflow, Activity, and Nexus Operation definitions. Explicit output TypeInfo is checked against the declared handle result type.
• Experimental: ExternalStorage now accepts cooperative concurrency limits: maxDriverOperations caps operations across its registered drivers, and maxOperationsPerMessage caps operations per top-level input or output. Drivers must acquire permits through context.limiter; the bundled S3 and GCS drivers use it.
• Experimental: ChildWorkflowOptions.versioningOverride can pin, auto-upgrade, or one-time route a Child Workflow independently of its parent. One-time routing is also available for client-started Workflows through { oneTimeTo: WorkerDeploymentVersion }. Both require Temporal Server 1.32.0 or later. Invalid child overrides reject with InvalidVersioningOverrideError.
• Experimental: Added list and fetchHistory interception to WorkflowClientInterceptor. list interception spans one lazy iterable consumption across pagination and early termination.
• Experimental: NexusSerializationContext is now passed to payload converters, payload codecs, and failure converters for Nexus operation payloads, identifying the operation's endpoint, service, and operation name. Callers use it for inputs, summaries, results, and failures; handlers use it for inputs, synchronous results, and failures. A standalone handle obtained from NexusClient.getHandle has none of that information and therefore decodes without Nexus context, so contextual encodings must be self-describing and decoders must keep accepting payloads encoded without context. GetNexusOperationResultInput now carries the operation's endpoint, service, and operation when known.
• The Workflow sandbox now exposes URLPattern, both as a global and from the url module, when the Worker runs on Node.js 23.8 or later. On older Node.js versions, URLPattern remains undefined inside Workflows.
• Experimental: Nexus workers decode Temporal System Nexus inputs sent by the server with the System Nexus converter.
• SearchAttributeKey is now exported from the @temporalio/common package root.
• Experimental: Added opt-in payload caching for External Storage. Pass a PayloadCache, such as InMemoryPayloadCache, as the payloadCache option of a Client or Worker to cache External Storage payloads.
• Experimental: Workflows can signal another Workflow and start it when absent with signalWithStartWorkflow.
• Experimental: Workflow outbound interceptors can intercept Temporal System Nexus calls generically with startSystemNexusOperation or specifically with signalWithStartWorkflow.
• The Workflow sandbox now exposes atob and btoa.

Changed

• Experimental: createEventGroup(...) now takes the Event Group's ID as its first and only required argument; user-provided IDs are used verbatim and should not contain sensitive information. The optional label is a codec-encoded Payload on the second argument, the type is now EventGroup (previously EventGroupMarker), and direct Event Group attachment is supported on more APIs.
• RetryPolicy.maximumAttempts accepts 0 as another way to specify unlimited attempts, alongside Infinity.
• Updated unionfs from 4.5.1 to 4.6.0, @grpc/grpc-js from 1.12.4 to 1.12.7, smol-toml from 1.6.1 to 1.7.1, and tar from 7.5.11 to 7.5.21.
• Updated ms, adding month units and fixing duration type declarations under modern Node.js module resolution.
• @temporalio/create checks for updates in the background and displays cached notifications on subsequent interactive runs.
• AI integrations are now maintained and released independently in temporalio/ai-integrations. @temporalio/ai-sdk and @temporalio/google-adk-agents remain as compatibility wrappers forwarding their public entrypoints to @temporalio/vercel-ai-sdk and @temporalio/google-adk. Existing import paths can be retained; new applications should use the standalone names. @temporalio/langsmith, @temporalio/openai-agents, and @temporalio/strands-agents retain their package names. The integrations' implementations, tests, and API documentation are no longer built in this repository; the two wrappers have separate forwarding tests.
• Workers now refuse to load and execute Workflow bundles produced with a different SDK version. This unsupported practice previously resulted in subtle, hard-to-diagnose issues.

Deprecated

• Undocumented imports through @temporalio/*/lib/* are deprecated. Where present, the wildcard remains temporarily as a compatibility fallback. @temporalio/common explicitly supports @temporalio/common/encoding, @temporalio/common/protobufs, @temporalio/common/proto-utils, and @temporalio/common/time

💥 Breaking Changes

• Experimental: Nexus Workflow Updates now require waitForStage to be explicitly set to ACCEPTED.
• The @temporalio/google-adk-agents compatibility wrapper now requires Node.js 22.12.0 or later and Google ADK 2.0, matching @temporalio/google-adk. The wrapper preserves import paths, but the ADK upgrade and renamed workflow random stream still require draining affected in-flight Workflows or using separate task queues for the cutover.
• Undocumented package subpaths that are not covered by a package's explicit export map no longer resolve.
• SDK and contrib packages now declare protobufjs (^8.7.1) and long (^5.3.2) as peer dependencies rather than relying on separately installed copies. Package managers that do not automatically install peers require applications to add these dependencies explicitly. @temporalio/proto retains its regular runtime dependencies.

Fixed

• Workflow code that blocks the sandbox past its time limit now fails with the [TMPRL1101] deadlock diagnostic (#2426).
• Corrected the Schedule catchupWindow documentation to state that omitted values use the Temporal Server's configured default.
• Experimental: A Standalone Activity started from a Nexus operation handler directly through ActivityClient, rather than through TemporalNexusClient.startActivity()'s guarded call, now inherits the handler's Nexus request ID and inbound links.
• temporalio/sdk-rust#1640
• WorkflowExecutionAlreadyStartedError now exposes the runId of the already-running Workflow Execution when the server provides it in the error details (#1838).
• Corrected the protobufjs dependency declarations to prevent historyFromJSON failing with type must be a Type when npm installs separate protobufjs copies alongside a dependency on an older protobufjs major (#2514).
• Fixed a race where finishing a Worker could shut down the shared Runtime while another Worker or replay was being prepared, causing replay creation to fail with a native handle type error.

... (truncated)

Commits

• efafd16 chore: prepare for 1.25.0 release (#2592)
• 3d662c1 chore: remove some unused deps (#2577)
• 676529d feat(payload-caching): add configurable payload cache (#2478)
• e8d29af feat(client): add WorkflowClient interceptors for list and fetchHistory (#2215)
• d3b5f6b feat(client): infer detached handle TypeInfo from definitions (#2366)
• 6a188ee Fix Update-with-Start error stack messages (#2379)
• dd05c44 feat(nexus): Add NexusSerializationContext for data/failure converters (#2495)
• 6cdc1ba refactor(client): consolidate explicit internal entrypoints (#2502)
• 9b766c9 chore(common): create explicit entrypoints (#2498)
• 046dcef fix: share protobufjs and long through peer dependencies (#2533)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.