releases.shpreview
Inngest/JS SDK

JS SDK

Mon
Wed
Fri
JunJulAugSepOctNovDecJanFebMarAprMay
Less
More
Releases29Avg9/moVersionsinngest@3.52.4 to inngest@4.5.0
Minor Changes
  • #1522 ebeb4516 Thanks @Linell! - Bump minimum @opentelemetry/auto-instrumentations-node to 0.75.0 to address GHSA-q7rr-3cgh-j5r3 in the transitive @opentelemetry/sdk-node / @opentelemetry/exporter-prometheus packages.

    Note that upstream auto-instrumentations-node@0.72.0 dropped bundled Fastify, instrumentation, so if you relied on it for tracing your Fastify routes, add @opentelemetry/instrumentation-fastify directly.

Patch Changes
  • #1540 10dad398 Thanks @amh4r! - Fix attempt count not resetting during checkpointing

  • #1544 f1ee6f34 Thanks @jacobheric! - Allow useRealtime to accept direct client subscription tokens from getClientSubscriptionToken() when channel and topics are provided as hook options, and avoid reconnecting solely because an inline token factory or token object gets a new render identity.

  • #1506 342a7369 Thanks @amh4r! - Add option to disable unauthed PUT requests

  • #1518 fd71a95b Thanks @Linell! - Fix RetryAfterError not respected

Minor Changes
  • #1504 5c8f50e1 Thanks @scottnuma! - Accept Temporal.Duration, Temporal.Instant, and Temporal.ZonedDateTime (and their *Like variants) wherever a timeout or sleep duration is taken: step.sleep(), step.waitForEvent(), step.waitForSignal(), step.invoke(), and function-level cancelOn timeouts. Durations are treated as relative waits; instants and zoned date-times as absolute deadlines.
Patch Changes
  • #1480 60cda73f Thanks @mar-inngest! - Fix Connect shutdown getting stuck when a late lease-extension ACK recreates a stale in-flight lease entry after request completion or lease loss
Patch Changes
  • #1479 6b9769ca Thanks @scottnuma! - Fix step.sendSignal() return type to match runtime: Promise<InngestApi.SendSignalResponse> ({ runId: string | undefined }) instead of Promise<null>

  • #1483 d0a59629 Thanks @Linell! - Fix run IDs not URL encoded in Durable Endpoints

  • #1481 970ded9b Thanks @Linell! - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • #1472 9df36dee Thanks @Linell! - Fix empty body on Vercel serverless Node handlers

  • #1482 e34972d3 Thanks @Linell! - Hash the signing key used when exporting OTel traces

Patch Changes
  • Contains changes that address CVE-2026-42047

  • #1470 1a5b63a8 Thanks @amh4r! - Fix checkpointing maxRuntime causing duplicate execution

  • cb20b4aa6250689cb3abe762a2aa18a483ce816e - Ensure runIds are properly URI encoded in Durable Endpoints

  • cb20b4aa6250689cb3abe762a2aa18a483ce816e - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • cb20b4aa6250689cb3abe762a2aa18a483ce816e - Hash the signing key used when exporting OTel traces

Patch Changes
  • #1366 aca72f88 Thanks @Linell! - Fix extendProvider() for OTel SDK v2 where addSpanProcessor() was removed.

    Move @opentelemetry/auto-instrumentations-node and related imports from static top-level to dynamic await import() inside createProvider(). This prevents module-level monkey-patching side effects that broke inngest.send() when combined with host app OTel setups (e.g. Sentry). See #1324.

  • #1457 d151b404 Thanks @amh4r! - Fix using CountQueuingStrategy when not available

  • #1455 15495e03 Thanks @amh4r! - Fix dependencyInjection not working statically at function level

Patch Changes
Last Checked
3h ago
Latest
inngest@4.5.0
Tracking since Mar 12, 2025