[rmcdaniel]

Moves the Unreleased entries under ## 2.27.0 - 2026-11-13 and sets product-train to 2.27.0, the same as for 2.26.0 (#1111).

Contents:

• Keep embedded task repair and execution within the app's namespaces #889 (Keep embedded task repair and execution within the app's namespaces (#889) #1108): embedded task repair and execution stay inside the app's namespaces, set by the new workflows.v2.namespaces allowlist (DW_V2_NAMESPACES). Upgrade note: an app that starts work in namespaces other than DW_V2_NAMESPACE must list them. A process that serves every namespace must set DW_V2_ALL_NAMESPACES=true. This is a new configuration surface, which is why this is a minor release.
• Count namespace-scope refusals so a misconfigured upgrade doesn't silently stall tasks #1112 (Count namespace-scope refusals in operator metrics and health (#1112) #1114): refusals at the namespace scope are counted.
• Close a child without reloading every sibling's history under the parent lock #892 (Close a child without reloading every sibling's history (#892) #1115, Close a child without re-fetching every sibling run (#892) #1118): a child close no longer reads sibling histories, and costs a constant number of queries however many siblings the parent has.

Downstream: server#1170 is closed as not planned. The PHP Server is frozen on Workflow 2.15.12, and native doesn't use the package's watchdog, repair pass or schedule tick, so no Server opt-in gates this release. waterline#298 can adopt it.

After merge, a GitHub release 2.27.0 on the merge commit triggers release verification. Then the docs move stable-releases to 2.27.0.

🤖 Generated with Claude Code

[rmcdaniel]

Security: PASS (head 14a0c86a). This is release metadata only: the ## 2.27.0 - 2026-11-13 CHANGELOG heading and composer.json product-train 2.26.0 → 2.27.0.

What 2.27.0 ships (first-parent merges since tag 2.26.0):

• Keep embedded task repair and execution within the app's namespaces (#889) #1108, the embedded namespace allowlist: Security-reviewed.
• Use the re-pinned Linux PHP setup (411a14ac) #1113, the re-pinned Linux PHP setup 411a14ac: verified under .github#359/BadMethodCallException: Call to undefined method Workflow\Models\StoredWorkflowLog::index() in ChildWorkflowStub #360.
• Close a child without re-fetching every sibling run (#892) #1118, reusing loaded child runs: passed (it still goes through ImportedLineageReferences::allows).
• Count namespace-scope refusals in operator metrics and health (#1112) #1114 and Close a child without reloading every sibling's history (#892) #1115, which had no Security review on record, so I reviewed them now:
  • Count namespace-scope refusals in operator metrics and health (#1112) #1114 (counting namespace-scope refusals): the TaskWatchdog/timeout sampling queries across namespaces only to count refused work. Every action path still uses the app's own NamespaceScope, and admitsTask/admitsServiceCall keep their semantics through refused…Namespace() === null, with missing rows still admitted so the claim settles them. The counts live in cache with a TTL and are bounded: 60 s buckets × 15, at most 100 tracked namespaces per bucket, then truncated. The health check's namespaces/by_path detail lists refused namespace names. That's operator-facing data from the same shared database, so it's acceptable, but keep that health payload on operator-authenticated surfaces only.
  • Close a child without reloading every sibling's history (#892) #1115 (sibling history): a performance change. ImportedLineageReferences::resolve is still used, with the same relation set minus the eager-loaded historyEvents, so authorization is unchanged.

OK to merge with a merge commit, tag 2.27.0 on it, and run release verification. I'll check the tag target once it's published.

[rmcdaniel]

Security: PASS on 1c71a95a.

Since my 14a0c86a PASS, the only new commits are the update-branch merge from main (1c71a95a) and #1120 (7881d703, merged as ce8908d2), which I passed. The PR's own diff against main is still the two release lines: the ## 2.27.0 - 2026-11-13 heading and product-train 2.27.0. 2.27.0 now also ships #1120's .claude/settings.local.json guard. Merge, then tag 2.27.0 on the merge commit.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud