---
collection: workflow-orchestration
collection_name: Background Jobs & Orchestration
week_start: 2026-10-05
title: Sandboxes, CI pipelines, and stronger workflow guarantees
release_count: 23
generated: 2026-10-12
canonical: https://releases.sh/collections/workflow-orchestration/digest/2026-10-05
---

# Sandboxes, CI pipelines, and stronger workflow guarantees

Inngest opened up a TypeScript CI pipeline runner and richer sandbox secret handling, while n8n locked down deprecated nodes and Temporal's storage drivers jumped to a new Go baseline.

Inngest had the busiest week of the collection, splitting its attention between a brand-new product line and polish on its core SDK. The headline is [the first release of @inngest/ci](https://github.com/inngest/inngest-js/releases/tag/%40inngest/ci%400.1.0), a Labs project that lets you define CI pipelines in TypeScript and run them with Inngest on Sandboxes. It was followed quickly by [a stability pass that pins pipeline runs to the same plan on every attempt](https://github.com/inngest/inngest-js/releases/tag/%40inngest/ci%400.2.0), so runs end with fixed steps whether they pass or fail, jobs settled with `Promise.allSettled` no longer fail the pipeline, and machines stop being paused mid-run. Supporting that story, the Inngest server itself [gained sandbox secret name arrays and a dashboard sidebar for managing them](https://github.com/inngest/inngest/releases/tag/v1.46.0) — you can now create a sandbox with `secrets: ["OPENAI_API_KEY"]` and import `.env` files into editable rows rather than hand-wiring credentials. On the SDK side, [the metadata builders moved to a `set()` call that replaces all values for a kind](https://github.com/inngest/inngest-js/releases/tag/inngest%404.23.0), deprecating the repeat-call `update()` pattern, and [runWithAsyncCtx is now exported from the experimental entrypoint](https://github.com/inngest/inngest-js/releases/tag/inngest%404.22.0) for anyone wiring their own async context.

### n8n tightens up its workflow surface

n8n shipped a wide spread of releases, but two themes dominate. First, safety: the 2.43 and 2.42 lines both [block creating or updating workflows that contain deprecated nodes](https://github.com/n8n-io/n8n/releases/tag/n8n%402.43.3), a guardrail that keeps aging definitions from being reintroduced. Second, the Assistant experience got meaningful attention — [self-hosted Assistant installations regained support for Kimi K3 and other OpenAI-compatible model providers](https://github.com/n8n-io/n8n/releases/tag/n8n%402.43.2), the [Agent artifact now appears while the builder is still creating it](https://github.com/n8n-io/n8n/releases/tag/n8n%402.42.5), and the agent builder's system prompt was made static specifically to preserve prompt caching. Alongside that, [the 2.43.0 line pulled together a batch of Agent Node and AI-builder fixes](https://github.com/n8n-io/n8n/releases/tag/n8n%402.43.0), including treating a blank folder path as no folder, and task runners were fixed to survive an unhandled promise rejection instead of dying mid-workflow. The Google Gemini node also picked up Nano Banana 2.1 and 2 Lite in its image model list across the 2.43 and 2.42 branches, and [older 2.41.x users got the model-list refresh plus Gateway credit promotions on community nodes](https://github.com/n8n-io/n8n/releases/tag/n8n%402.41.7).

### Temporal's storage layer and checker move forward

Temporal's Go ecosystem spent the week on foundational housekeeping. Four storage drivers — [the GCS storage driver](https://github.com/temporalio/sdk-go/releases/tag/contrib/gcp/gcsdriver/v0.2.0) and [its gcssdk counterpart](https://github.com/temporalio/sdk-go/releases/tag/contrib/gcp/gcsdriver/gcssdk/v0.2.0), plus [the S3 driver](https://github.com/temporalio/sdk-go/releases/tag/contrib/aws/s3driver/v0.3.0) and [its awssdkv2 variant](https://github.com/temporalio/sdk-go/releases/tag/contrib/aws/s3driver/awssdkv2/v0.3.0) — moved in lockstep to a minimum Go 1.26.0 and a minimum Go SDK of v1.49.0, which passes drivers a dedicated select context rather than the store context. The S3 driver additionally identifies stored objects by `object_name` while still writing and reading the legacy `key` field, so mixed-version deployments resolve claims in both directions. Separately, [workflowcheck now catches non-deterministic code hidden behind same-package call cycles](https://github.com/temporalio/sdk-go/releases/tag/contrib/tools/workflowcheck/v0.6.0), such as logic reached through `encoding/json`, and reports reasons in stable source order — intermittent failures may become consistent, which is the point. The server itself [routed SAA activity task validation correctly and lets task queue user data be preserved and observed](https://github.com/temporalio/temporal/releases/tag/v1.32.1).

### Trigger.dev keeps pace

Trigger.dev put out [a patch release covering its CLI and Docker image](https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.7.3), with the matching [Helm chart bump for self-hosted deployments](https://github.com/triggerdotdev/trigger.dev/releases/tag/helm-v4.7.3) so Kubernetes installs track the same version.

## Releases covered

### Inngest

- [@inngest/ci@0.1.0](https://github.com/inngest/inngest-js/releases/tag/%40inngest/ci%400.1.0)
- [@inngest/ci@0.2.0](https://github.com/inngest/inngest-js/releases/tag/%40inngest/ci%400.2.0)
- [v1.46.0](https://github.com/inngest/inngest/releases/tag/v1.46.0)
- [inngest@4.23.0](https://github.com/inngest/inngest-js/releases/tag/inngest%404.23.0)
- [inngest@4.22.0](https://github.com/inngest/inngest-js/releases/tag/inngest%404.22.0)

### n8n

- [n8n@2.43.3](https://github.com/n8n-io/n8n/releases/tag/n8n%402.43.3)
- [n8n@2.43.2](https://github.com/n8n-io/n8n/releases/tag/n8n%402.43.2)
- [n8n@2.42.5](https://github.com/n8n-io/n8n/releases/tag/n8n%402.42.5)
- [n8n@2.43.0](https://github.com/n8n-io/n8n/releases/tag/n8n%402.43.0)
- [n8n@2.41.7](https://github.com/n8n-io/n8n/releases/tag/n8n%402.41.7)

### Temporal

- [contrib/gcp/gcsdriver/v0.2.0](https://github.com/temporalio/sdk-go/releases/tag/contrib/gcp/gcsdriver/v0.2.0)
- [contrib/gcp/gcsdriver/gcssdk/v0.2.0](https://github.com/temporalio/sdk-go/releases/tag/contrib/gcp/gcsdriver/gcssdk/v0.2.0)
- [contrib/aws/s3driver/v0.3.0](https://github.com/temporalio/sdk-go/releases/tag/contrib/aws/s3driver/v0.3.0)
- [contrib/aws/s3driver/awssdkv2/v0.3.0](https://github.com/temporalio/sdk-go/releases/tag/contrib/aws/s3driver/awssdkv2/v0.3.0)
- [contrib/tools/workflowcheck/v0.6.0](https://github.com/temporalio/sdk-go/releases/tag/contrib/tools/workflowcheck/v0.6.0)
- [v1.32.1](https://github.com/temporalio/temporal/releases/tag/v1.32.1)

### Trigger.dev

- [trigger.dev v4.7.3](https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.7.3)
- [Helm Chart 4.7.3](https://github.com/triggerdotdev/trigger.dev/releases/tag/helm-v4.7.3)
