Bump temporalio from 1.9.0 to 1.31.0 in /apps/worker

[dependabot]

Bumps temporalio from 1.9.0 to 1.31.0.

Release notes

Sourced from temporalio's releases.

1.31.0

Notable Changes

Added

• Added the Worker max_eager_activity_reservations_per_workflow_task option for configuring the number of activity slots reserved for eager execution per workflow task. Configured values must be positive; use disable_eager_activity_execution to disable eager activity execution.

• Added experimental SDK payload converter support for values and type hints decorated with @transfer_type_convertible(...) using a TransferTypeConverter class. This lets types with transfer type converters delegate their wire representation to the configured payload converter, preserving SDK behavior such as serialization contexts.

• Added TLSConfig.verification_server_name to verify the server certificate against a fixed name instead of the connection's server name. Unlike domain, it does not change the TLS SNI or HTTP/2 authority values, which keep following the connected host, so it can be used when the server's certificate does not carry the dialed name but on-path infrastructure (e.g. an SNI-inspecting egress proxy) needs the SNI to remain resolvable. Requires server_root_ca_cert.

• Added the experimental Worker patch_activation_callback option, allowing workers to decide whether a first non-replay workflow.patched call should activate a patch during rolling deployments.

Changed

• Prepared replay-safe workflow activation scheduling that prevents cancellation from being lost when another event becomes ready in the same workflow task. The behavior is guarded by internal workflow logic flag 2 and remains disabled by default during its compatibility rollout. Maintainer reminder: keep flag 2 default-disabled for the first two published SDK releases that recognize it; enable it in the third release, remove the explicit overrides for this flag from tests/worker/test_workflow.py, and replace this rollout note with a Fixed entry announcing the behavior change.

💥 Breaking Changes

• Custom workflow runners that construct WorkflowInstanceDetails must now pass payload_converter_factory instead of payload_converter_class. The factory returns the already wrapped payload converter that workflow instances should use.
• System Nexus payload converter helpers added for generated bindings are now private implementation details, and the remaining public temporalio.nexus.system APIs are marked experimental and subject to change.
• Payload size limits have moved from DataConverter to Client.connect. Pass payload_limits=PayloadLimitsConfig(...) (now exported from temporalio.client) instead of setting payload_limits on DataConverter. Config fields were renamed to payloads_warn_size and memo_warn_size, and the deprecated PayloadSizeWarning was removed.

... (truncated)

Changelog

Sourced from temporalio's changelog.

[1.31.0] - 2026-07-29

Added

• Added the Worker max_eager_activity_reservations_per_workflow_task option for configuring the number of activity slots reserved for eager execution per workflow task. Configured values must be positive; use disable_eager_activity_execution to disable eager activity execution.

• Added experimental SDK payload converter support for values and type hints decorated with @transfer_type_convertible(...) using a TransferTypeConverter class. This lets types with transfer type converters delegate their wire representation to the configured payload converter, preserving SDK behavior such as serialization contexts.

• Added TLSConfig.verification_server_name to verify the server certificate against a fixed name instead of the connection's server name. Unlike domain, it does not change the TLS SNI or HTTP/2 authority values, which keep following the connected host, so it can be used when the server's certificate does not carry the dialed name but on-path infrastructure (e.g. an SNI-inspecting egress proxy) needs the SNI to remain resolvable. Requires server_root_ca_cert.

• Added the experimental Worker patch_activation_callback option, allowing workers to decide whether a first non-replay workflow.patched call should activate a patch during rolling deployments.

• Added external storage support to Nexus task handling.

Changed

• Prepared replay-safe workflow activation scheduling that prevents cancellation from being lost when another event becomes ready in the same workflow task. The behavior is guarded by internal workflow logic flag 2 and remains disabled by default during its compatibility rollout. Maintainer reminder: keep flag 2 default-disabled for the first two published SDK releases that recognize it; enable it in the third release, remove the explicit overrides for this flag from tests/worker/test_workflow.py, and replace this rollout note with a Fixed entry announcing the behavior change.

💥 Breaking Changes

• Custom workflow runners that construct WorkflowInstanceDetails must now pass payload_converter_factory instead of payload_converter_class. The factory returns the already wrapped payload converter that workflow instances should use.
• System Nexus payload converter helpers added for generated bindings are now private implementation details, and the remaining public temporalio.nexus.system APIs are marked experimental and subject to change.
• Payload size limits have moved from DataConverter to Client.connect. Pass payload_limits=PayloadLimitsConfig(...) (now exported from temporalio.client) instead of setting payload_limits on DataConverter. Config fields were renamed to payloads_warn_size and memo_warn_size, and the deprecated PayloadSizeWarning was removed.

... (truncated)

Commits

• 84b519e Prepare release 1.31.0 (#1693)
• 7d52c78 AI-374: Warn against passing secrets through MCP factory_argument (#1688)
• 44511c5 Mark system Nexus envelope payloads (#1667)
• a66bca1 Fix cancellations being swallowed in some circumstances (#1671)
• 5df7192 Add type_hint to TransferTypeConverter.from_transfer_type (#1685)
• 70ef047 Unify payload visitation into a single implementation by combining explicit r...
• 43f5919 Make eager activity reservation limit configurable (#1674)
• 60e3b73 Fix type checking for openai 2.45.0 (#1673)
• 759876e 💥 Add transfer type payload conversion hooks (#1655)
• f942f2c fix: exclude sdk-core gitfile from wheels (#1669)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)