chore(deps): bump go.temporal.io/sdk from 1.48.0 to 1.49.0

[dependabot]

Bumps go.temporal.io/sdk from 1.48.0 to 1.49.0.

Release notes

Sourced from go.temporal.io/sdk's releases.

v1.49.0

Highlights

Standalone Activities are now GA

With the following updates, Standalone Activities are now generally available (GA)!

• Renamed the standalone activity client.StartActivityOptions.Details option to StaticDetails, and client.ActivityExecutionDescription.GetDetails to GetStaticDetails.
• Added missing description fields: ExecutionTime and TotalHeartbeatCount.
• Corrected stand-alone activity API documentation to use activity terminology, document that GetActivityHandleOptions.RunID may be empty to target the latest run, and describe TerminateActivityOptions.Reason as a termination reason.
• Added opt-in payload fields to client.DescribeActivityOptions: IncludeInput, IncludeOutcome, IncludeHeartbeatDetails and IncludeLastFailure.
• Standalone activity client calls now supply converter.ActivitySerializationContext when encoding and decoding activity payloads: ExecuteActivity (input and static summary/details), ActivityHandle.Describe (heartbeat details, last failure, and static summary/details), and ActivityHandle.Get (result and failure).
• Standalone activities started from a redelivered Nexus operation handler now reuse the Nexus request ID, preventing duplicate Nexus links when an idempotent start resolves to the original run.
• client.ActivityHandle now supports operator commands for standalone activities: Pause, Unpause, UpdateOptions and RestoreOriginalOptions. Operator commands remain experimental.
• Standalone Activities as Nexus operations remain experimental.

Local Activity memory savings

Local activity scheduling no longer uses a fixed 100,000-entry task queue. The queue now grows with demand, avoiding both the up-front allocation and a possible worker deadlock when the queue and all local activity execution slots were full.

Other Notable Changes

Added

• Worker heartbeats now report the Go runtime version (plus RoadRunner, when the SDK is embedded in a RoadRunner binary), detected hosting environments (Docker, Kubernetes, and common cloud platforms), and the operating system and architecture. This is sent once per worker with the first heartbeat accepted by the server and can be turned off with client.Options.DisableWorkerEnvironmentInfo.
• Added converter.NexusSerializationContext support for Nexus callers and handlers. Callers use it for inputs, results, and failures; handlers use it for inputs, synchronous results, and failures. Asynchronous handler results and detached standalone handles are not yet supported. Standalone USE_EXISTING handles use their start request's context.
• Added temporal.NewPayloadValidationError to create non-retryable application errors with optional structured details for payload validation failures. Passing nil omits details.
• Added Go 1.27+ generic methods on the experimental temporalnexus.NexusClient for starting workflow-, activity-, and workflow-update-backed Nexus operations.
• Workflow task completions larger than the gRPC request size limit are now paginated automatically when the namespace supports it. Paginated workflow task completions require Temporal Server 1.32.0 or later.

... (truncated)

Changelog

Sourced from go.temporal.io/sdk's changelog.

[1.49.0] - 2026-09-14

Added

• Worker heartbeats now report the Go runtime version (plus RoadRunner, when the SDK is embedded in a RoadRunner binary), detected hosting environments (Docker, Kubernetes, and common cloud platforms), and the operating system and architecture. This is sent once per worker with the first heartbeat accepted by the server and can be turned off with client.Options.DisableWorkerEnvironmentInfo.
• Standalone activity client calls now supply converter.ActivitySerializationContext when encoding and decoding activity payloads: ExecuteActivity (input and static summary/details), ActivityHandle.Describe (heartbeat details, last failure, and static summary/details), and ActivityHandle.Get (result and failure).
• Added converter.NexusSerializationContext support for Nexus callers and handlers. Callers use it for inputs, results, and failures; handlers use it for inputs, synchronous results, and failures. Asynchronous handler results and detached standalone handles are not yet supported. Standalone USE_EXISTING handles use their start request's context.
• Added temporal.NewPayloadValidationError to create non-retryable application errors with optional structured details for payload validation failures. Passing nil omits details.
• Added Go 1.27+ generic methods on the experimental temporalnexus.NexusClient for starting workflow-, activity-, and workflow-update-backed Nexus operations.
• Workflow task completions larger than the gRPC request size limit are now paginated automatically when the namespace supports it. Paginated workflow task completions require Temporal Server 1.32.0 or later.
• The temporal_activity_execution_failed and temporal_local_activity_execution_failed worker metrics now carry a failure_reason attribute. Each is now split into one time series per reason, which may affect existing dashboards.
• Added support for Workflow Queries as Nexus Operations.

Standalone Activity operator commands

• client.ActivityHandle now supports operator commands for standalone activities: Pause, Unpause, UpdateOptions and RestoreOriginalOptions.
• Added opt-in payload fields to client.DescribeActivityOptions: IncludeInput, IncludeOutcome, IncludeHeartbeatDetails and IncludeLastFailure.
• Added missing description fields: ExecutionTime and TotalHeartbeatCount.

Changed

• Standalone Activities are now generally available (GA). (Standalone Activities as Nexus operations and Standalone Activities operator commands remain experimental. Operator commands are pause, unpause, updateOptions, restoreOriginal.)

💥 Breaking Changes

• Description payload fields that previously came back unconditionally are now opt-in and must be requested via client.DescribeActivityOptions: GetHeartbeatDetails (IncludeHeartbeatDetails) and GetLastFailure (IncludeLastFailure).
• Renamed the standalone activity client.StartActivityOptions.Details option to StaticDetails, and client.ActivityExecutionDescription.GetDetails to GetStaticDetails.

... (truncated)

Commits

• 58115b5 Prepare release 1.49.0 (#2691)
• 628f610 Remove Experimental tag from Standalone Activities (#2690)
• 7ac9167 add back comment (#2687)
• 77dce1c Fix/2547 random stream interleaving (#2666)
• 3a7139f Fix task handler cache teardown (#2638)
• b9f176d Synchronize local activity cancellation test (#2682)
• 902937a Standalone Activities operator commands and optional payloads (#2646)
• fee1a45 Use ActivitySerializationContext for standalone activities (#2680)
• bbe58bd 💥 Rename Standalone Activity Details to StaticDetails (#2681)
• 1cc2c92 chore: bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#2679)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[duynhne]

Hold — not merged in the 2026-09-28 bot-PR sweep. Temporal Go SDK v1.49.0 has a Breaking Changes section: minimum Go 1.26.0, and description payload fields that used to come back unconditionally are now opt-in. Workflow replay caching also changes. Retest: saga + cancellation + worker versioning drill (local-stack A12/A14/A15, k6 saga) before merging.

[duynhne]

Pre-merge check for SDK 1.49.0 (G3/G4 in duynhlab/homelab#1107):

• GOTOOLCHAIN=go1.27.1 go test -race ./... on this branch passes in all 7 packages.
• TestReplayRecordedHistories replays the gen1 corpus.
• None of the 1.49 breaking changes reach this repo. It never calls DescribeActivity, has no context-aware converter or codec, runs no local activities and does not use WorkflowRandomStream.

Merge after duynhlab/homelab#1191 (server 1.32.0).

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud