chore(deps)(deps): bump @temporalio/worker from 1.20.3 to 1.22.0 in /lanai-portal

[dependabot]

Bumps @temporalio/worker from 1.20.3 to 1.22.0.

Release notes

Sourced from @​temporalio/worker's releases.

v1.22.0

What's Changed

Added

• Experimental: Added TypeInfo and TransferTypeConverter to @temporalio/common for converting application values to and from serialization-friendly transfer types and supplying converter-specific hints.
• Workers can now configure the number of activity slots reserved for eager execution per workflow task with maxEagerActivityReservationsPerWorkflowTask. Setting it to zero disables eager activity execution.
• UpdateWorkflow-backed Nexus operations. A Temporal Nexus operation can now be backed by a Workflow Update via TemporalNexusClient.getWorkflowHandle(...).update(...), in addition to a Workflow run. The Update request carries the Nexus request ID (for deduplication), the request links, and a completion callback bearing the operation token, so the Update's completion is delivered back to the Nexus caller. Only asynchronous, ACCEPTED-stage updates are supported (a callback URL is required); an update that has already completed is returned synchronously, and a completed-with-error update (e.g. a validation rejection) surfaces as a failed Nexus operation. Cancellation is customizable via the cancelWorkflowUpdate handler option; the default rejects with a NOT_IMPLEMENTED handler error.
• @temporalio/ai-sdk: listToolsActivity/callToolActivity now reuse a single MCP client connection across repeated invocations for the same server instead of creating and closing one on every call. Configure the idle window via the new mcpConnectionIdleTimeout option on createActivities and AiSdkPluginOptions (defaults to 5 minutes); pass mcpConnectionIdleTimeout: 0 to opt out and restore the original behavior for MCP servers/transports that don't tolerate a reused or concurrent session.

Changed

• Updated Core to 65b25ada (temporal-core 0.6.0)

Fixed

• strands: Declare zod as a peer dependency.
• workflow-streams: WorkflowStream.onPoll no longer serves a stale log index for a poll that was parked across a truncate() call, which could silently skip events.
• Workflows no longer retain completion state when a child Workflow fails or is cancelled before starting.
• Local Activity tests now use makeTestFunction to manage their test environment.

Security

• Bumped the vendored quinn-proto in @temporalio/core-bridge's Cargo.lock from 0.11.14 to 0.11.15, clearing GHSA-4w2j-m93h-cj5j / RUSTSEC-2026-0185 (unbounded out-of-order stream reassembly DoS) for downstream image scanners.

New Contributors

• @​Bathula-Adiseshu made their first contribution in temporalio/sdk-typescript#2267
• @​aayushbaluni made their first contribution in temporalio/sdk-typescript#2036
• @​wankhede04 made their first contribution in temporalio/sdk-typescript#2223
• @​becho2 made their first contribution in temporalio/sdk-typescript#2293

Full Changelog: temporalio/sdk-typescript@v1.21.1...v1.22.0

... (truncated)

Changelog

Sourced from @​temporalio/worker's changelog.

[1.22.0] - 2026-08-05

Added

• Experimental: Added TypeInfo and TransferTypeConverter to @temporalio/common for converting application values to and from serialization-friendly transfer types and supplying converter-specific hints.
• Workers can now configure the number of activity slots reserved for eager execution per workflow task with maxEagerActivityReservationsPerWorkflowTask. Setting it to zero disables eager activity execution.
• UpdateWorkflow-backed Nexus operations. A Temporal Nexus operation can now be backed by a Workflow Update via TemporalNexusClient.getWorkflowHandle(...).update(...), in addition to a Workflow run. The Update request carries the Nexus request ID (for deduplication), the request links, and a completion callback bearing the operation token, so the Update's completion is delivered back to the Nexus caller. Only asynchronous, ACCEPTED-stage updates are supported (a callback URL is required); an update that has already completed is returned synchronously, and a completed-with-error update (e.g. a validation rejection) surfaces as a failed Nexus operation. Cancellation is customizable via the cancelWorkflowUpdate handler option; the default rejects with a NOT_IMPLEMENTED handler error.
• @temporalio/ai-sdk: listToolsActivity/callToolActivity now reuse a single MCP client connection across repeated invocations for the same server instead of creating and closing one on every call. Configure the idle window via the new mcpConnectionIdleTimeout option on createActivities and AiSdkPluginOptions (defaults to 5 minutes); pass mcpConnectionIdleTimeout: 0 to opt out and restore the original behavior for MCP servers/transports that don't tolerate a reused or concurrent session.

Changed

• Updated Core to 65b25ada (temporal-core 0.6.0)

Fixed

• strands: Declare zod as a peer dependency.
• strands: MCP connections are no longer disconnected while being used by a callTool or listTools activity.
• workflow-streams: WorkflowStream.onPoll no longer serves a stale log index for a poll that was parked across a truncate() call, which could silently skip events.
• Workflows no longer retain completion state when a child Workflow fails or is cancelled before starting.
• Local Activity tests now use makeTestFunction to manage their test environment.

Security

• Bumped the vendored quinn-proto in @temporalio/core-bridge's Cargo.lock from 0.11.14 to 0.11.15, clearing GHSA-4w2j-m93h-cj5j / RUSTSEC-2026-0185 (unbounded out-of-order stream reassembly DoS) for downstream image scanners.

[1.21.1] - 2026-07-23

Fixed

• strands: Add @aws-sdk/client-s3 to the workflow bundler ignore list, fixing bundler errors when using the S3-backed context-offloader vended plugin. The package is dynamically imported worker-side and is never reached from workflow code.

... (truncated)

Commits

• 55287d2 chore: release 1.22.0 (#2295)
• b5b6591 Rename master to main for API deps (#2097)
• 182dcbe Make eager activity reservation limit configurable (#2257)
• 2503d4b chore: Release 1.21.1 (#2255)
• 2fd61e9 chore: Release 1.21.0 and update changelog (#2247)
• 37a8f83 fix(extstore): set workflow type in workflow-owned store targets (#2245)
• d536267 feat(exstore): add tmprl1105 error handling for when reference payloads are e...
• 4bd993a fix(extstore): handle Nexus storage errors and add integration tests (#2243)
• ceda78d fix(worker): set external storage target for activity heartbeats (#2242)
• fa385a8 fix(worker): fail activity task retryably on external storage driver errors (...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.