Addresses CVE-2026-5724 (MEDIUM severity). Deployments using authorization with replication should set system.disableStreamingAuthorizer dynamic config to true to opt out from the security changes in this release and avoid replication traffic connection errors.
Replication streaming endpoint is now covered by authorization, addressing CVE-2026-5724 (MEDIUM). If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out and avoid replication traffic connection errors.
Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.6...v1.29.6.1
Full Changelog:…
Warning
Before upgrading your Temporal Cluster to v1.31.0, you must upgrade core and visibility schema to the following:
v1.19v1.19v1.11If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out from changes in this release and avoid replication traffic connection errors. Check the linked CVE for…
If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out from changes in this release and avoid replication traffic connection errors. Check the linked CVE for…
If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out from changes in this release and avoid replication traffic connection errors. Check the linked CVE for…
Full Changelog: https://github.com/temporalio/temporal/compare/v1.30.2...v1.30.3
Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.4.1...v1.29.5
Full Changelog: https://github.com/temporalio/temporal/compare/v1.28.3...v1.28.3.1
Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.4...v1.29.4.1
Dependency Updates and Ignore Unknown Predefined Search Attributes After Rollback from v1.30.1
Temporal Docs Server [Samples…
Starting in this release, for security reasons, Temporal Docker images have been slimmed down, and we have removed binaries and packages that do not strictly need to be included. This includes:
###…
Ignore unknown fields when decoding Worker Deployment memo for backwards compatibility after rolling back from v1.30
Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.2...v1.29.3
