Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump github.com/dapr/dapr from 1.15.0-rc.17 to 1.15.3 #708

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 6, 2025

Bumps github.com/dapr/dapr from 1.15.0-rc.17 to 1.15.3.

Release notes

Sourced from github.com/dapr/dapr's releases.

Dapr Runtime v1.15.3

Dapr 1.15.3

This update includes bug fixes:

Fix Timers Deactivating after timer invocation fails

Problem

Fixes this issue. An app returning a non-2xx status code from a timer invocation would cause a periodic timer to no longer trigger.

Impact

An Actor app which restarted/crashed, or was otherwise busy, would cause a timer to no longer trigger. This breaks backwards compatibility where a periodic Actor timer would continue to trigger at the defined period, even if the actor was busy or had an error.

Root cause

The Actor timer handle logic deactivates the timer if any timer invocation failed. Regardless of whether the timer had further ticks defined in it's period schedule.

Solution

As did before v1.15.0, treat any successful or failed timer invocation as the same, and tick the Actor timer forward allowing for future invocations.

Fix Daprd continuously growing in memory

Problem

Fixes an issue where Daprd would continually grow in memory when using Workflows.

Impact

Daprd would eventually use all available memory on the node or cgroup, causing an OOM crash.

Root cause

An internal Actor lock object was not being released from Workflow Activities.

Solution

Release lock memory during Workflow Activity completion.

Fix Scheduler continuously growing in memory

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested review from a team as code owners March 6, 2025 16:20
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 6, 2025
mikeee
mikeee previously approved these changes Mar 10, 2025
Bumps [github.com/dapr/dapr](https://github.com/dapr/dapr) from 1.15.0-rc.17 to 1.15.3.
- [Release notes](https://github.com/dapr/dapr/releases)
- [Changelog](https://github.com/dapr/dapr/blob/master/RELEASE.md)
- [Commits](dapr/dapr@v1.15.0-rc.17...v1.15.3)

---
updated-dependencies:
- dependency-name: github.com/dapr/dapr
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/dapr/dapr-1.15.3 branch from fb69f3e to ced2d9a Compare March 13, 2025 02:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant