Sipke Schoorstra
2e712d367a
Add OpenTelemetry workflow instrumentation ( #7514 )
...
* Add OpenTelemetry workflow instrumentation
* Fix workflow telemetry metric tags
* Tighten telemetry test listeners
* Refine workflow telemetry boundaries
* Address telemetry review feedback
* Complete workflow telemetry coverage
* Address telemetry instrumentation review feedback
* Handle cancelled workflow telemetry
* Refine workflow activity telemetry tags
* Address telemetry review feedback
* Document OpenTelemetry extension coexistence
Agent-Logs-Url: https://github.com/elsa-workflows/elsa-core/sessions/33211c71-c3c9-424c-b7eb-a13ebd4713a3
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
* Address telemetry PR review comments
* Address telemetry review follow-ups
* Preserve workflow executing status transition order
* Address telemetry review feedback
* Refine workflow telemetry review fixes
* Address telemetry review feedback
* Address workflow instrumentation review feedback
* Fix faulted workflow telemetry tags
* Restrict workflow exception mutation
* Fix canceled activity telemetry status
* Clarify workflow exception access
* Cover HTTP trace context propagation
* Report cancelled workflow telemetry consistently
* Refine telemetry cancellation classification
* Record thrown workflow exceptions on context
* Tighten workflow telemetry exception handling
* Preserve first workflow exception
* Handle workflow cancellation separately
* Clarify workflow telemetry enum references
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
2026-05-22 01:17:05 +02:00
Sipke Schoorstra
d09a1b7cb4
Add workflow dispatch transactional outbox ( #7517 )
...
* Add workflow dispatch transactional outbox
* Address workflow dispatch outbox review
* Make outbox state lookup null-safe
* Generate stable outbox dispatch instance ids
* Limit eager outbox processing to marked commits
* Avoid blocking eager outbox processing on lock contention
* Expire uncommitted outbox items after retention
* Harden eager workflow outbox processing
* Prune delivered workflow outbox markers
* Batch workflow dispatch outbox processing
* Bound workflow dispatch outbox processing batches
* Harden workflow dispatch outbox processing
* Address transactional outbox review feedback
* Address transactional outbox follow-up review
* Address outbox recovery review feedback
* Address outbox key-value review fixes
* Address outbox cleanup review feedback
* Address workflow outbox review feedback
* Address outbox key-value review feedback
* Preserve outbox key-value tenant ids
* Address workflow outbox marker cleanup review
* Ensure key value store factory registrations override
* Address workflow outbox review follow-ups
2026-05-22 00:13:16 +02:00
Sipke Schoorstra
541218a37f
Add ingress rate limiting hooks ( #7512 )
...
* Add ingress rate limiting hooks
* Fix ingress rate limiting middleware setup
* Harden rate limiter policy validation
* Preserve routed endpoints during rate limiting
* Address rate limiting review feedback
* Address rate limiting Copilot feedback
* Register rate limiter services for external policies
* Address rate limiting review comments
* Keep rate limiter service detection best effort
* Address rate limiting review comments
* Remove brittle rate limiter validation
* Address rate limiting review feedback
* Address rate limiting nullable review
* Address rate limiting review feedback
* Assign ingress rate limit policies when enabled
* Refine ingress rate limiting middleware cleanup
* Address rate limiting review feedback
* Align rate limiting review feedback
* Clarify rate limiting policy semantics
* Stabilize rate limiting exception tests
* Fix rate limiting endpoint matching default
2026-05-22 00:13:11 +02:00
Sipke Schoorstra
96b5ee80b5
Add bookmark queue dead-letter store ( #7516 )
...
* Add bookmark queue dead-letter store
* Make bookmark dead-letter replay atomic
* Address bookmark dead-letter review feedback
* Restore dead-letter replay state on enqueue failure
* Preserve replay rollback during cancellation
* Address bookmark dead-letter review threads
* Fix Oracle runtime migration snapshot drift
* Address bookmark dead-letter review feedback
* Make bookmark dead-lettering idempotent
* Detach memory dead-letter store snapshots
* Address bookmark dead-letter review fixes
* Harden bookmark dead-letter replay responses
* Preserve failed dead-letter replay during purge
* Clarify workflow runtime store list
* Address bookmark dead-letter review feedback
* Refine bookmark dead-letter purge races
2026-05-21 23:43:36 +02:00
Sipke Schoorstra
9496c29a47
[codex] Validate distributed runtime lock provider ( #7515 )
...
* Validate distributed runtime lock provider
* Harden distributed lock validator registration
* Address distributed lock validation review comments
* Refine distributed lock validator registration
* Harden distributed lock provider discovery
* Address distributed lock validation review feedback
* Address distributed lock validation review comments
* Handle nullable distributed lock provider collections
* Address distributed lock validation follow-up
* Address distributed lock validator code-quality comments
* Refine distributed lock validation feedback
* Address distributed lock validator review
2026-05-21 23:29:14 +02:00
Sipke Schoorstra
6979ab4506
Merge pull request #7513 from elsa-workflows/codex/security-health-checks
...
Add Elsa runtime readiness health checks
2026-05-21 22:43:48 +02:00
Sipke Schoorstra
b7076fd0cf
Address health check review feedback
2026-05-21 02:13:19 +02:00
Sipke Schoorstra
33d94ab384
Document health check extension namespace
2026-05-21 01:52:05 +02:00
copilot-swe-agent[bot]
8c1618b5d4
Address latest health check review feedback
...
Agent-Logs-Url: https://github.com/elsa-workflows/elsa-core/sessions/6a652ca4-f0c8-4284-938d-6de0eb7a2bea
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
2026-05-20 23:39:21 +00:00
Sipke Schoorstra
09641c1fab
Keep root health check as liveness probe
2026-05-21 01:32:03 +02:00
Sipke Schoorstra
2fa1a9ef8e
[codex] Harden C# expression host-code execution ( #7519 )
...
* Harden C# expression host-code execution
* Address script authorization review feedback
* Harden script authorization failure responses
* Address code quality review feedback
* Use explicit failure filter in script authorization
* Centralize script activity type names
* Address script authorization review feedback
2026-05-21 00:50:25 +02:00
Sipke Schoorstra
f149c27ab0
Address health check review feedback
2026-05-21 00:09:46 +02:00
Sipke Schoorstra
d6903fdb76
docs: clarify readiness probe timeout
2026-05-20 23:33:13 +02:00
Sipke Schoorstra
125ab7fbd8
Merge origin/main into codex/security-health-checks
2026-05-20 22:33:42 +02:00
Sipke Schoorstra
e9d59bc5b1
[codex] Fail fast on default JWT signing keys ( #7496 )
...
* Fail fast on default JWT signing keys
* Address JWT signing key review feedback
* Refine JWT signing key validation feedback
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
* Reject JWT signing keys with surrounding whitespace
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
2026-05-20 22:30:49 +02:00
Sipke Schoorstra
746ba96a1f
[codex] Remove production-usable default admin credentials ( #7500 )
...
* Remove default admin credentials
* Fix shell admin API key configuration
2026-05-20 20:58:03 +02:00
Sipke Schoorstra
0856d79093
Harden Python expression execution ( #7507 )
...
* Secure Python workflow expressions
* Preflight Python authorization for bulk publish
* Preflight Python auth for import files
* Name Python expression descriptor type
2026-05-20 14:19:47 +02:00
Sipke Schoorstra
1da8709e2c
Distinguish refresh tokens from API access tokens ( #7509 )
...
* Separate access and refresh token use
* Address Greptile identity token feedback
2026-05-20 14:04:28 +02:00
Sipke Schoorstra
a8390d8d64
Address health check review feedback
2026-05-20 13:47:39 +02:00
Sipke Schoorstra
1e41f6fdf8
Add Elsa runtime readiness health checks
2026-05-20 13:34:25 +02:00
github-actions[bot]
cd1748bf35
Refresh codebase wiki ( #7466 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-19 09:03:59 +02:00
github-actions[bot]
e6b4719fb1
Refresh codebase wiki ( #7464 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-19 00:49:27 +02:00
Sipke Schoorstra
b9664a954d
[codex] Add codebase wiki ( #7453 )
...
* Add codebase wiki
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
* Document resilient restore workflow
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-05-16 11:54:27 +02:00
