fix(deps): update dependency taskcluster to v96 #1330
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
|
Pinned per 13aa62c. This should be fairly easy to get unpinned again though. Leaving open for now. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
<91→<97Release Notes
taskcluster/taskcluster (taskcluster)
v96.1.0Compare Source
WORKER-DEPLOYERS
▶ [minor] #8012
Generic Worker (windows): adds
task.payload.features.hideCmdWindow[default:false] to hide thecmd.exewindow that appears during task execution. This may be useful if thecmd.exewindow gets in the way of GUI applications while running tasks. Please note: if your task needs to allocate new consoles (withAllocConsole(), for example), it will not be able to if you set this totrue.USERS
▶ [patch]
Client (shell):
taskcluster task logcommand falls back to uselive_backing.logiflive.logis unavailable.Automated Package Updates
7 Dependabot updates
178cc46)56509e4)e86e099)5f4235c)10f36b5)63310ea)28c3f1e)v96.0.0Compare Source
GENERAL
▶ [patch]
Upgrades to go1.25.6 [SECURITY].
Read release notes here.
DEPLOYERS
▶ [patch]
Include session storage cleanup script in web server.
▶ [patch] bug 2006698
Worker manager incorrectly identified zombie workers even when they were active.
WORKER-DEPLOYERS
▶ [MAJOR] #7147
Breaking changes:
deploymentIdandcheckForNewDeploymentEverySecsare no longer supported and must not be usedNew features:
shouldWorkerTerminateAPI endpoint in Worker Manager allows workers running with worker runner (--with-worker-runner) to query whether they should terminateworker-manager:should-worker-terminate:<workerPoolId>/<workerGroup>/<workerId>required to call this endpointAutomated Package Updates
4 Dependabot updates
24a9c62)17215f9)ec7695a)f6f20eb)v95.1.4Compare Source
GENERAL
▶ [patch]
Upgrades to Node.js v24.13.0 [SECURITY].
Can read more about this release here.
USERS
▶ [patch]
Fixes TypeError in web-server when no oauth2 clients are configured.
v95.1.3Compare Source
GENERAL
▶ [patch]
Upgrades goreleaser tool to latest version to fix broken release. Release v95.1.2 did not publish, so its changelog will be effective for v95.1.3.
v95.1.1Compare Source
WORKER-DEPLOYERS
▶ [patch] bug 2006698
Fixes worker-manager killing zombie workers when queue data is missing.
For long running tasks that took longer than queueInactivityTimeout to finish was a high risk of getting claim-expired
because w-m incorrectly assumed worker is not doing anything (missing queue information)
v95.1.0Compare Source
USERS
▶ [minor]
Queue service allows changing the priority of unresolved tasks.
Two new endpoints are being introduced:
This is the implementation of the RFC190
v95.0.3Compare Source
GENERAL
▶ [patch]
Notify Service: upgrades to use
@aws-sdk/client-sesv2with the latest version ofnodemailerto resolve some security vulnerabilities.▶ [patch]
Upgrades CI Decision task to use Taskgraph v18.0.3.
▶ [patch]
Upgrades to Node.js v24.12.0.
WORKER-DEPLOYERS
▶ [patch] #8176
Worker-manager ensures workers are spawned for single launch config worker pools when adjusted weight might drop below zero with remaining capacity.
▶ [patch]
Changed the garbage collector to clean caches after docker resources when d2g is enabled
USERS
▶ [patch]
Switch back web-server queues to classic, as those are only used for short-lived task group updates in the UI
and don't require same durability and Raft consensus algorithm.
Automated Package Updates
9 Dependabot updates
c44db5b)4be90d4)4b063d4)f5764e2)1277638)bc30026)25de41b)09b7c0b)7eb3683)v95.0.2Compare Source
WORKER-DEPLOYERS
▶ [patch] #8083
Generic Worker (windows): adds retries to the win32
LoadUserProfilecall to help preventThe device is not readyworker errors.▶ [patch]
Generic Worker (with worker-runner): properly unregisters a worker when it exits due to internal error or non-current deployment ID. Followup to #8165.
▶ [patch] #8023
Generic Worker: limits concurrent artifact uploads to 10 at a time. Followup to #8032.
v95.0.1Compare Source
WORKER-DEPLOYERS
▶ [patch] #8153
Generic Worker (d2g): anonymous volumes from the task container are no longer removed at the end of a task run in order to resolve the task sooner. The garbage collector was updated to take care of these instead.
▶ [patch]
Generic Worker: moves the
AbortFeatureto be the first to initialize and start up for each task. This change allows the worker to be ready for spot terminations as early as possible, so that it doesn't get preempted while it's setting up other task features, not knowing the cloud provider wants the worker to shutdown.This will help tasks resolve properly as worker shutdown in the case where a spot termination request comes in as soon as the worker starts up. Beforehand, when this situation would happen, the task would commonly resolve as claim expired because the worker didn't have enough time to react to the preemption notice.
▶ [patch]
Worker-runner will now properly unregister a worker when it exits because of an idle timeout
v95.0.0Compare Source
DEPLOYERS
▶ [MAJOR] #8074
Pulse consumer expects core Taskcluster classic RabbitMQ queues to be deleted before being auto-recreated as quorum queues.
v94.3.0Compare Source
GENERAL
▶ [minor] #8049
API Documentation Now Includes Code Examples
The API reference documentation now includes code examples for every endpoint in multiple languages:
Each example demonstrates how to:
Examples are generated dynamically in the browser from API metadata, keeping the documentation lean while providing comprehensive, up-to-date code samples. Examples include syntax highlighting and can be copied to clipboard directly from the documentation.
DEPLOYERS
▶ [patch] #8074
Fixes pulse consumer issue where services would assert the queue exists as a quorum queue and wouldn't fall back to classic type as a backwards compatibility followup solution to #8156.
v94.2.0Compare Source
DEPLOYERS
▶ [minor] #8074
Pulse library declares non-ephemeral core Taskcluster queues as quorum queues to prepare for upgrading to RabbitMQ v4+.
edit: This should've been a breaking change due to the fact that old, classic queues cannot be converted to quorum type in place. You must delete the old classic queue and let the pulse consumer recreate it as a quorum queue. Please upgrade to at least v95.0.0.
v94.1.1Compare Source
Automated Package Updates
1 Dependabot updates
da9d202)v94.1.0Compare Source
GENERAL
▶ [patch]
Client (python): upgrades many dependencies to latest minor/patch releases using
uv lock --upgrade.▶ [patch]
Upgrades to Node.js v24.11.1 and rust v1.91.1. Additionally upgrades yarn to 4.12.0.
Replaces
backoffcrate withbackondue to https://rustsec.org/advisories/RUSTSEC-2025-0012▶ [patch]
Upgrades to go1.25.5 [SECURITY].
See more here.
WORKER-DEPLOYERS
▶ [patch] #8115
Generic Worker (windows): reverts #8030 to use
CREATE_NEW_CONSOLEoverCREATE_NO_WINDOWso that child processes can callAllocConsole()to create new consoles.DEVELOPERS
▶ [minor] #8093
Github webhook endpoint returns 200 instead of 400 for unsupported events. 200 means we received and processed webhook,
even if we don't actually support such event at the moment. 400 is only for validation issues.
Automated Package Updates
8 Dependabot updates
a50efca)c70a6f6)c39ca3d)e1a85b8)4d2553a)d638d58)7de97b4)63ffe5d)v94.0.1Compare Source
WORKER-DEPLOYERS
▶ [patch]
Fixes errors handling for upgraded googleapis packages. Instance creation errors were sent differently,
which didn't allow to log some provision exceptions.
v94.0.0Compare Source
WORKER-DEPLOYERS
▶ [patch]
Azure provider logs additional error details for failed ARM deployments.
USERS
▶ [MAJOR] #7765
Spaces in artifact names are now correctly preserved instead of being replaced with
+▶ [MAJOR]
Increase the buffer size of websocktunnel on the worker side to make livelogs a lot faster.
This is a breaking change, since the pre-v94 Websock Tunnel service will no longer work with newer (v94+) clients (workers). However, older clients (pre-v94 workers) will continue to work with the new Websock Tunnel service.
IMPORTANT: Therefore, it is imperative, that the Websock Tunnel service should be updated to v94+ before any clients (workers) are updated to v94+.
▶ [patch] #7829
Fix a bug that prevented all-resolved tasks from getting scheduled if they
depended on a task that was also part of an all-completed dependency and that
all-completed task was processed before the all-resolved one
▶ [patch] #8121
The taskcluster CLI now encodes URL path parameters as path parametes rather than as query string parameters.
Automated Package Updates
2 Dependabot updates
2e13388)3192cf9)v93.1.5Compare Source
GENERAL
▶ [patch] #8102
Don't try to chown caches when using d2g as this is a long no-op anyway
USERS
▶ [patch]
Make livelogs faster when passing through websocktunnel by increasing the buffer size on the proxy
v93.1.4Compare Source
WORKER-DEPLOYERS
▶ [patch]
Worker-manager improves handling of workers created for ARM deployment that failed validation step
▶ [patch] #8083
Generic Worker (windows): adds retry logic around
CreateUserProfilemethod to ensure the task user's profile path is created successfully before continuing on toLoadUserProfile.Automated Package Updates
2 Dependabot updates
afd0340)3bcf9fe)v93.1.3Compare Source
DEPLOYERS
▶ [patch]
Worker registration metrics exposed from all relevant pods.
Automated Package Updates
2 Dependabot updates
38a6032)b5eed40)v93.1.2Compare Source
DEPLOYERS
▶ [patch] #8086
Worker-manager Azure ARM deployment fix for stuck worker in removal/stopping loop, better descriptions in reported errors.
WORKER-DEPLOYERS
▶ [patch] #8083
Generic Worker (windows): fixes intermittent issue calling
LoadUserProfilewin32 API when the device isn't ready.USERS
▶ [patch] #8082
Relax GitHub webhook identifier regex to accept [bot] senders.
v93.1.1Compare Source
DEPLOYERS
▶ [patch]
Worker-manager web services exposes metrics now.
WORKER-DEPLOYERS
▶ [patch] #8079
Generic Worker: logs artifact upload status to worker logs instead of the task log, unless there was an error uploading.
v93.1.0Compare Source
WORKER-DEPLOYERS
▶ [minor]
Worker-manager adds extra Prometheus metrics for worker registration timing:
worker_manager_worker_registration_seconds- time from being requested to registered (running)worker_manager_worker_lifetime_seconds- total lifetime of a worker (until stopped or removed)worker_manager_worker_registration_failures_total- count of workers that were removed before register▶ [patch] #8077
Azure provider reports ARM template deployments errors on the worker pool level.
When deployment fails and one or more resources were not created, errors were hidden in operations list,
which made it difficult to debug.
USERS
▶ [patch] #8075
Web-server improves graphql validation
v93.0.0Compare Source
GENERAL
▶ [MAJOR] #7965
GitHub service now validates webhook payloads against a schema to prevent TypeErrors from missing or malformed fields. This ensures that webhook handlers receive properly structured data, the webhook now returns a 400 status and does not create an unprocessable event.
The
githubWebHookConsumerendpoint has been removed from client libraries as it was not intended for client use (only for GitHub webhook integrations).▶ [minor] #8068
Client (python): adds python 3.9 support back due to Taskgraph still needing to support it.
▶ [patch]
Upgrades to go1.25.4
v92.0.2Compare Source
OTHER
▶ Additional change not described here: #8065.
v92.0.1Compare Source
GENERAL
▶ [patch] #8061
Updates the python client's
uv.lockfile to properly bump thetaskclusterversion onyarn release.OTHER
▶ Additional change not described here: #8061.
v91.1.2Compare Source
GENERAL
▶ [patch]
Upgrades to Node.js v24.11.0
DEPLOYERS
▶ [patch]
Worker-scanner azure now exposes metrics to prometheus too.
DEVELOPERS
▶ [patch] #8042
DB adds primary key to the tcversion table
▶ [patch] #7376
Check-in the initial code for generating Firefox Profiler profiles for task logs and
task groups.
Automated Package Updates
1 Dependabot updates
6b40347)v91.1.1Compare Source
GENERAL
▶ [patch]
Upgrades to Node.js latest LTS, v24.10.0
WORKER-DEPLOYERS
▶ [patch] #8012
Generic Worker (windows): creates no
cmd.exewindow that appeared during task execution.▶ [patch]
Worker Runner now doesn't allow workers to be bootstrapped with zip files containing the Zip Slip vulnerability.
USERS
▶ [patch]
Fixes documentation typos and links
DEVELOPERS
▶ [patch]
Replace minio with localstack for local development
v91.1.0Compare Source
WORKER-DEPLOYERS
▶ [minor] #7979
Azure worker pools can now provision via ARM templates in launch configs,
reducing provisioning latency and letting Azure cascade resource creation/cleanup automatically.
▶ [patch] #7979
Azure ARM template deployments allow keeping history for debug purposes by using
workerManager.keepDeployment: true▶ [patch] #8023
Generic Worker: limits concurrent artifact uploads to 100 at a time.
USERS
▶ [patch] #8031
GitHub service handles missing users (404 from getByUsername) when processing webhooks.
▶ [patch] bug 1990567
Python client exceptions are now picklable.
v91.0.4Compare Source
DEVELOPERS
▶ [patch]
Client (python): fixes release of client. v91.0.3 did not work in fixing.
v91.0.1Compare Source
GENERAL
▶ [patch]
Switches CI tasks to use
uvtool and to the latest stable Debian release (trixie).▶ [patch]
Upgrades to taskgraph v16.2.1
WORKER-DEPLOYERS
▶ [patch]
Improves Azure resource deprovisioning by skipping checks on already deleted resources.
Previously implemented logic was flawed in a way that same resources would be queried over and over.
Which led to an increased number of cloud api calls and was likely causing some minor delays per each worker being deprovisioned
v91.0.0Compare Source
GENERAL
▶ [patch]
Upgrades to go1.25.3
DEVELOPERS
▶ [MAJOR] #8010
Python client follows redirects in artifact download for both async and sync code.
This was partially fixed in the past in #4057
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 06:59 AM, only on Thursday ( * 0-6 * * 4 ) in timezone UTC, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.