Temporal Server

Temporal Server v1.31.4 bumps dependencies to address CVEs and makes fair task garbage collection conditional on range ID. Also configures CHASM internal callback namespace binding with validation of both token readings, and bumps the default CLI to 1.9.1 on the release branch.

What's Changed

• Update defaultCliVersion to 1.9.0 by @simvlad in https://github.com/temporalio/temporal/pull/12038
• Fix SAA activity task validation routing by @fretz12 in https://github.com/temporalio/temporal/pull/12206
• Release/v1.32.x: Preserve and observe task queue…

What's Changed

• Cherry-pick #11090: Add panic handlers to matching handler APIs by @rkannan82 in https://github.com/temporalio/temporal/pull/11106
• [v1.31] Add Nexus callback source header inspection toggle by @bergundy in…

What's Changed

• Bring in latest manual docker build action to v1.30.x by @lina-temporal in https://github.com/temporalio/temporal/pull/10976
• Also update docker-bake.hcl by @lina-temporal in https://github.com/temporalio/temporal/pull/10977
• Cherry-pick #11090: Add…

Standalone Activities GA

Standalone Activities and start delay are now enabled by default via activity.enableStandalone and activity.startDelayEnabled. This release adds delayed starts, operator APIs, and batch operations.

Operator APIs can pause or resume an…

Addresses CVE-2026-5724 (MEDIUM severity). Deployments using authorization with replication should set system.disableStreamingAuthorizer dynamic config to true to opt out from the security changes in this release and avoid replication traffic connection errors.

Replication streaming endpoint is now covered by authorization, addressing CVE-2026-5724 (MEDIUM). If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out and avoid replication traffic connection errors.

What's Changed

• Cherry-pick: Combine PostgreSQL Visibility schema upgrades from v1.10 through v1.13 (#10371) by @fretz12 in https://github.com/temporalio/temporal/pull/10681
• Cherry-pick: PGX SimpleProtocol test suite (#10198) by @fretz12 in…

What's Changed

• Bump x/crypto v0.52.0, x/net v0.55.0, Go 1.25.11, thrift v0.23.0 (security patch) by @fretz12 in https://github.com/temporalio/temporal/pull/10645
• Cherry-pick: Encode duration as bigint for pgx simple protocol (#10529) by @simvlad in…

What's Changed

• Bump defaultCliVersion to 1.7.0 by @prathyushpv in https://github.com/temporalio/temporal/pull/10126
• Bump Go toolchain to 1.26.3, thrift to 0.23.0, cli to 1.7.1 (security patch) (#10395) by @fretz12 in https://github.com/temporalio/temporal/pull/10470 *…

What's Changed

• Update dependencies in v1.29.x branch by @rodrigozhou in https://github.com/temporalio/temporal/pull/10031

Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.6...v1.29.6.1

What's Changed

• Update dependencies in v1.30.x branch by @rodrigozhou in https://github.com/temporalio/temporal/pull/10030
• Update alpine to v3.23.4 by @rodrigozhou in https://github.com/temporalio/temporal/pull/10068

Full Changelog:…

Schema changes

• Core:
  • MySQL schema v1.19
  • PostgreSQL schema v1.19
  • SQLite schema v1.11
• Visibility:
  • Elasticsearch…

What's Changed

Potential Breaking Change

If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out from changes in this release and avoid replication traffic connection errors. Check the linked CVE for…

What's Changed

Potential Breaking Change

If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out from changes in this release and avoid replication traffic connection errors. Check the linked CVE for…

What's Changed

Potential Breaking Change

If using authorization with replication setup, set system.disableStreamingAuthorizer dynamic config to true to opt out from changes in this release and avoid replication traffic connection errors. Check the linked CVE for…

What's Changed

Security

• Check namespaces in batch workflow (CVE-2026-5199, LOW)

Full Changelog: https://github.com/temporalio/temporal/compare/v1.30.2...v1.30.3

**Helpful links to get you started…

What's Changed

Security

• Check namespaces in batch workflow (CVE-2026-5199, LOW)

Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.4.1...v1.29.5

**Helpful links to get you…

What's Changed

• Bump dependencies to address security CVEs for v1.28.3.1 by @rkannan82 in https://github.com/temporalio/temporal/pull/9662

Full Changelog: https://github.com/temporalio/temporal/compare/v1.28.3...v1.28.3.1

What's Changed

• Bump dependencies to address security CVEs for v1.29.4.1 by @rkannan82 in https://github.com/temporalio/temporal/pull/9629

Full Changelog: https://github.com/temporalio/temporal/compare/v1.29.4...v1.29.4.1