Skip to content

chore(deps)(deps): update temporalio requirement from >=1.7.0 to >=1.26.0 in /workspace - #2227

Closed
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/pip/workspace/temporalio-gte-1.26.0
Closed

chore(deps)(deps): update temporalio requirement from >=1.7.0 to >=1.26.0 in /workspace#2227
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/pip/workspace/temporalio-gte-1.26.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on temporalio to permit the latest version.

Release notes

Sourced from temporalio's releases.

1.26.0

OpenAI Agents SDK Sandbox Support

This release adds support for the OpenAI Agents SDK's SandboxAgent in Temporal workflows. All sandbox lifecycle and I/O operations (create, exec, read, write, PTY, etc.) are automatically routed through Temporal activities, making them durable and replayable. If an agent fails mid-execution, Temporal ensures it picks up right where it left off in its sandbox. To use it, pass sandbox clients (e.g. DaytonaSandboxClient) to OpenAIAgentsPlugin(sandbox_clients=...). This release also updates compatibility with the latest OpenAI Agents SDK.

Breaking Changes

2026-04-09 - 4f05fc58 - 💥 Record task latency even for WFT failures that were dropped (temporalio/sdk-core#1207) - The temporal_workflow_task_execution_latency metric is slightly more inclusive than it was in the past, and it can now include some WFT failures that may previously have been omitted

What's Changed

Core Changes

2026-04-06 - a4fc7933 - feat(sdk): env config (temporalio/sdk-core#1195) 2026-04-06 - ef57d63f - Correctly convert default_versioning_behavior in C bridge (temporalio/sdk-core#1199) 2026-04-08 - 1f6cfb6c - fix(core): add in scheme port if none present (temporalio/sdk-core#1205) 2026-04-08 - 723c2836 - feat(sdk): add samples (temporalio/sdk-core#1190) 2026-04-08 - d96a8d2f - Move CODEOWNERS under .github/ (temporalio/sdk-core#1198) 2026-04-09 - 630e7795 - Make sure legacy queries are failed if gRPC message too large (temporalio/sdk-core#1206) 2026-04-10 - b544f95d - Expose Nexus Endpoint in a Nexus Operation Handler (temporalio/sdk-core#1211)

New Contributors

Full Changelog: temporalio/sdk-python@1.25.0...1.26.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [temporalio](https://github.com/temporalio/sdk-python) to permit the latest version.
- [Release notes](https://github.com/temporalio/sdk-python/releases)
- [Commits](temporalio/sdk-python@1.7.0...1.26.0)

---
updated-dependencies:
- dependency-name: temporalio
  dependency-version: 1.26.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

HongmingWang-Rabbit pushed a commit that referenced this pull request Apr 28, 2026
…dabot wave

Consolidates 11 of the 17 open Dependabot PRs (#2215, #2217, #2219-#2225,
#2227, #2229) into one PR. Every entry is a patch / minor / floor bump
where the impact surface is small and CI carries the proof.

Same pattern as the 2026-04-15 batch.

Go (workspace-server/go.mod + go.sum, regenerated via `go mod tidy`):
  - golang.org/x/crypto                    0.49.0  → 0.50.0   (#2225)
  - github.com/golang-jwt/jwt/v5           5.2.2   → 5.3.1    (#2222)
  - github.com/gin-contrib/cors            1.7.2   → 1.7.7    (#2220)
  - github.com/docker/go-connections       0.6.0   → 0.7.0    (#2223)
  - github.com/redis/go-redis/v9           9.7.3   → 9.19.0   (#2217)

Python floor bumps (workspace/requirements.txt; current pip-resolved
versions don't change unless they happen to be below the new floor):
  - httpx                                  >=0.27  → >=0.28.1 (#2221)
  - uvicorn                                >=0.30  → >=0.46   (#2229)
  - temporalio                             >=1.7   → >=1.26   (#2227)
  - websockets                             >=12    → >=16     (#2224)
  - opentelemetry-sdk                      >=1.24  → >=1.41.1 (#2219)

GitHub Actions (SHA-pinned per existing convention):
  - dorny/paths-filter@d1c1ffe (v3) → @fbd0ab8 (v4.0.1)        (#2215)

REMOVED from this batch (lockfile platform mismatch):
  - #2231 @types/node ^22 → ^25.6   (npm install on macOS strips
    Linux-only @emnapi/* entries from package-lock.json that CI's
    `npm ci` then refuses; needs a Linux-side install to land cleanly)
  - #2230 jsdom ^25 → ^29.1          (same)

NOT included in this batch (deferred to per-PR human review):
  - #2228 github/codeql-action     v3 → v4   (CodeQL CLI alignment risk)
  - #2218 actions/setup-node       v4 → v6   (default Node version drift)
  - #2216 actions/upload-artifact  v4 → v7   (3 major versions)
  - #2214 actions/setup-python     v5 → v6   (action major)

NOT merged (CI failing on dependabot's own PR):
  - #2233 next 15 → 16
  - #2232 tailwindcss 3 → 4
  - #2226 typescript 5 → 6

Verified:
  - workspace-server: `go mod tidy && go build ./... && go test ./...` — green
  - workspace requirements.txt: floor bumps only
@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like temporalio is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 28, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/workspace/temporalio-gte-1.26.0 branch April 28, 2026 23:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants