build(deps): bump temporalio-sdk from 0.4.0 to 0.6.0

[dependabot]

Bumps temporalio-sdk from 0.4.0 to 0.6.0.

Release notes

Sourced from temporalio-sdk's releases.

v0.6.0

What's Changed

⚠️ THIS IS AN EARLY RELEASE AND COMPATIBILITY WILL NOT BE MAINTAINED

Added

• UntypedActivity for invoking activities by a runtime activity type name with raw input and output payloads.
• Typed search attributes through SearchAttributeKey, SearchAttributeUpdate, SearchAttributes, and Timestamp. Workflow starts, child workflows, continue-as-new, workflow reads, and upserts now share this type-safe API.
• ClientInterceptor for observing, transforming, or short-circuiting high-level workflow, schedule, and async-activity client operations. Per-call RpcOptions can set gRPC metadata, timeouts, and retry behavior.
• CoreRuntime is now re-exported from temporalio_sdk as Runtime, with the remaining Core runtime and worker configuration types under temporalio_sdk::runtime, so workers no longer need a direct temporalio-sdk-core dependency. Url is also re-exported from temporalio_client.
• Workers can configure the maximum number of activity slots reserved for eager execution per workflow task with WorkerOptions::max_eager_activity_reservations_per_workflow_task.
• WorkflowInterceptor for observing, transforming, or short-circuiting inbound workflow calls and outbound operations.
• Schedule descriptions now expose their configured action via ScheduleDescription::action(), including start-workflow accessors for workflow type, task queue, workflow ID, raw argument payloads, and typed argument decoding through the client's data converter.
• Added the experimental WorkerOptions::patch_activation_callback option for controlling whether newly introduced patches activate during rolling deployments.
• WorkflowContext::random and WorkflowContext::uuid4 for deterministic randomness in workflow.
• ChildWorkflowOptions::builder and ChildWorkflowOptions::workflow_id for constructing child workflow options.
• Added connect_timeout: Option<Duration> to ConnectionOptions.
• ResourceController and ResourceBasedTunerConfig allow resource controllers to be shared across multiple resource-based tuners.
• Workers are now automatically enrolled into poller autoscaling when the namespace advertises the poller_autoscaling_auto_enroll capability. This only applies to poller types left at their default (the worker set neither a fixed poller count nor a poller behavior); explicitly configured pollers are left unchanged.
• Updated the bundled Temporal API definitions through API 1.63.4

Changed

• Renamed start_activity and start_local_activity to execute_activity and execute_local_activity to better explain semantics. Original methods remain as deprecated aliases for the new execute variants.
• #[workflow(name = ...)] is now rejected at compile time because it did not override the workflow type name. Use #[run(name = ...)] instead.

Breaking Changes 💥

• ActivityDefinition::name is now an instance method returning &str instead of an associated function returning &'static str. Manual implementations must update their method signature.
• WorkflowStartOptions::search_attributes, ChildWorkflowOptions::search_attributes, and ContinueAsNewOptions::search_attributes now use typed SearchAttributes instead of raw maps or

... (truncated)

Changelog

Sourced from temporalio-sdk's changelog.

[0.6.0] - 2026-08-04

[0.5.0]

Added

• Workers are now automatically enrolled into poller autoscaling when the namespace advertises the poller_autoscaling_auto_enroll capability. This only applies to poller types left at their default (the worker set neither a fixed poller count nor a poller behavior); explicitly configured pollers are left unchanged.
• Support for dynamic client certificate resolution via TlsOptions::client_cert_resolver, which accepts an Arc<dyn ResolvesClientCert> for per-handshake mTLS certificate selection. This enables transparent certificate rotation without process restarts — useful for short-lived certificates managed by Vault, cert-manager, or HSM-backed signers. ResolvesClientCert, CertifiedKey, and SignatureScheme are re-exported from the crate root for convenience.
• client() and workflow_handle() helpers to ActivityContext for easily obtaining a Temporal client
• Exposed backoff_start_interval when continuing as new, which will delay the first task of the continued workflow by the configured interval.
• The tls-ring / tls-aws-lc features now also select the TLS crypto backend for the OTLP metric exporter (in addition to the gRPC service client). Previously the OTLP exporter hardcoded the ring backend regardless of the selected feature, which prevented producing a ring-free, aws-lc-rs-only (FIPS-capable) build. Building with --no-default-features --features tls-aws-lc,otel now yields a dependency tree free of ring.

Fixed

• GetSystemInfo connection initialization now only falls back to empty server capabilities when UNIMPLEMENTED indicates the RPC method is missing. Other UNIMPLEMENTED responses are reported as connection errors.
• Connection initialization now retries once with gRPC compression disabled if the eager GetSystemInfo call fails because the server cannot decompress gzip.
• Awaiting a Nexus operation's result (StartedNexusOperation::result()) no longer trips nondeterminism detection ("a waker was invoked by a non-SDK source", TMPRL1100) on replay. The result future is a Shared, whose internal waker machinery must be polled inside an SdkWakeGuard (as join_all already is); it now is. Previously, a workflow that awaited a Nexus operation result and then kept running (e.g. parked on a wait_condition) would fail its workflow task whenever it was replayed — breaking queries and durable recovery for that execution.

Security

• Replaced the unmaintained backoff dependency with backon for exponential retry and poll backoff, clearing RUSTSEC-2025-0012 from downstream security audits. Retry timing is preserved: exponential growth, randomization_factor jitter, and the total retry-time budget behave as before.

Breaking Changes

• The ActivityContext constructor now requires ClientOptions.
• WorkerConfig::{workflow,activity,nexus}_task_poller_behavior and the corresponding Rust SDK WorkerOptions fields are now Option<PollerBehavior>. None means the poller was not explicitly configured and is eligible for automatic enrollment into poller autoscaling.

Breaking Changes

• Rust SDK ApplicationFailure and WorkflowError APIs now use boxed std::error::Error values instead of anyhow::Error.

... (truncated)

Commits

• 93f5de8 chore(sdk): release 0.6.0 (#1447)
• 21fcc29 Updating Temporal API Protos (#1441)
• 450da3b feat(sdk): reexport core runtime from sdk (#1437)
• a48640a Flake fix investigation (#1430)
• fe9f753 feat(sdk): workflow interceptors (#1401)
• 3b121af fix(sdk): make payload codec failable (#1431)
• b9dedfa feat(sdk): client interceptor (#1426)
• bb27c52 Add connect_timeout option to ConnectionOptions (#1422)
• 11820cd Gate ResourceBasedTuner on anonymous memory instead of cgroup memory.current ...
• 3133db0 feat(sdk): auto-enroll default pollers into autoscaling (#1425)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)