releases.shpreview
Inngest/JS SDK/inngest@4.2.5

inngest@4.2.5

$npx @buildinternet/releases get rel_mYqxeU1mTBttrHn5lKUrJ

Patch Changes

  • #1479 6b9769ca Thanks @scottnuma! - Fix step.sendSignal() return type to match runtime: Promise<InngestApi.SendSignalResponse> ({ runId: string | undefined }) instead of Promise<null>

  • #1483 d0a59629 Thanks @Linell! - Fix run IDs not URL encoded in Durable Endpoints

  • #1481 970ded9b Thanks @Linell! - Improves HMAC signature verification by using a constant-time comparison, which mitigates a potential timing-based signature-recovery attack against the request signature. Also improves handling of timestamps in signatures, including malformed or future-dated values.

  • #1472 9df36dee Thanks @Linell! - Fix empty body on Vercel serverless Node handlers

  • #1482 e34972d3 Thanks @Linell! - Hash the signing key used when exporting OTel traces

Fetched April 28, 2026