chore(deps-dev): bump @temporalio/activity from 1.14.1 to 1.16.0

[dependabot]

Bumps @temporalio/activity from 1.14.1 to 1.16.0.

Release notes

Sourced from @​temporalio/activity's releases.

1.16.0

Notable Changes

• 💥 The Nexus API has several breaking changes in this release; see items marked 💥 in the sections below. Of particular note: NexusClient has been renamed to NexusServiceClient (#1993), and NexusInboundCallsInterceptor now requires executeStartOperation and executeCancelOperation instead of the old generic execute method (#1979).

Features

• [worker] Extend bundler to support pre-loading modules into the reusable V8 context via a new preloadModules option on BundleOptions/WorkerOptions.bundleOptions; pre-loaded modules are shared across workflow executions, reducing per-workflow memory and startup overhead (#1999)
• [nexus] 💥 Add Nexus Inbound Interceptors — NexusInboundCallsInterceptor now exposes executeStartOperation and executeCancelOperation, replacing the previous generic execute interceptor (#1979)
• [opentelemetry] 💥 Nexus OpenTelemetry support — adds inbound interceptors and distributed trace context propagation across Nexus service boundaries; renames interceptor I/O types from ExecuteNexusOperation* to NexusStartOperation*/NexusCancelOperation*, and adds RunStartNexusOperation and RunCancelNexusOperation span names (#1998)
• [nexus] 💥 Nexus error serialization now uses Temporal ProtoFailure end-to-end, aligning with other SDKs; also fixes a JS bug where comma-separated case values in gRPC status code mapping silently matched only the last value (#1973)
• [nexus] 💥 Rename NexusClient to NexusServiceClient in preparation for upcoming Nexus Standalone Operations (#1993)
• [nexus] Add scheduleToStartTimeout and startToCloseTimeout options to the workflow Nexus client API (#1942)
• [nexus] Standardize Nexus operation input deserialization error handling: payload codec decode failures are now surfaced as retryable INTERNAL handler errors, while payload converter failures remain non-retryable BAD_REQUEST; ApplicationFailure is passed through directly (#1949)
• [nexus] Infer workflow result type from WorkflowRunOperationHandler — startWorkflow now returns WorkflowHandle<WorkflowResultType<T>>, removing the need to explicitly type the handler (#1968)
• [worker] Allow WorkerDeploymentOptions to omit defaultVersioningBehavior when useWorkerVersioning is false, enabling workers to report a build ID to the Temporal UI without opting into full worker versioning (#1963)
• [worker] Propagate targetWorkerDeploymentVersionChanged and Continue-As-New suggested reasons for worker deployment versioning trampolining (#1972)

Bug Fixes

• [client] Suppress spurious unhandled rejection from WithStartWorkflowOperation when executeUpdateWithStart fails before a response is received (#1990)
• [opentelemetry] Do not mark CompleteAsyncError as a span error (#1989)
• [opentelemetry] Avoid TypeError when user code throws a non-Error value (#1984)
• [worker] Tolerate empty rootWorkflowExecution/parentWorkflowExecution objects from pre-v1.24 servers, preventing IllegalStateError on resumed workflows (#1969)
• [ai] Use activityOptions in callTool proxy (#1954)

Dependencies

• [core] Update sdk-core (#1959)
• [deps] Bump vulnerable dependencies (#1957, #1988)
• [deps] Bump rustls-webpki from 0.103.9 to 0.103.10 (#1978)
• [deps] Bump quinn-proto from 0.11.13 to 0.11.14 (#1961)
• [deps] Bump tar (#1976, #1946)

Breaking changes are marked with 💥

Full Changelog: temporalio/sdk-typescript@v1.15.0...v1.16.0

1.15.0

Notable Changes

• ⚠️ Fixed potential request storms when worker is configured with poller autoscaling, due to missing exponential backoff on ResourceExhausted and other gRPC errors. See PRs temporalio/sdk-core#1110 and temporalio/sdk-core#1111 for more details.
• 💥 Node.js 18 is no longer supported (#1930)
• 🧪 Added experimental support for Bun runtime (#1906)

Features

• [opentelemetry] Expose functionality as plugin (#1884)
• [worker] Worker Connection Replacement (#1902)
• [workflow] Nexus Cancellation Types (#1894)

... (truncated)

Commits

• 54eb0c8 chore: Publish release v1.16.0 (#2006)
• b782f91 docs: replace snipsync with inlined code examples, remove dependency (#2004)
• 91f72d2 fix(opentelemetry): do not mark CompleteAsyncError as error (#1989)
• 6148da0 chore: Publish release v1.15.0 (#1945)
• ceebf78 chore: upgrade eslint (#1933)
• 42b1664 chore: drop node 18 support (#1930)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@​15.5.15 ⏵ 14.2.34	+20	-30	+4	-46
	@​ai-sdk/​openai@​3.0.52 ⏵ 1.3.24	-1		-3
	@​ai-sdk/​openai@​3.0.52 ⏵ 2.0.53	-1		-3
	@​opentelemetry/​exporter-trace-otlp-http@​0.53.0 ⏵ 0.200.0
	@​opentelemetry/​exporter-trace-otlp-http@​0.53.0 ⏵ 0.205.0
	@​opentelemetry/​context-async-hooks@​1.26.0 ⏵ 2.6.1			-4
	openai@​5.23.2
	@​vercel/​otel@​0.1.0
	@​types/​react-dom@​18.3.7
	@​braintrust/​otel@​0.1.2
	@​opentelemetry/​sdk-trace-base@​1.26.0 ⏵ 2.0.0	+1
	@​ai-sdk/​openai@​3.0.52 ⏵ 0.0.62	+28		-5	-1
	@​opentelemetry/​otlp-exporter-base@​0.53.0 ⏵ 0.205.0	+1		-1
	react@​19.2.5 ⏵ 18.3.1			+1
	@​opentelemetry/​otlp-exporter-base@​0.53.0 ⏵ 0.35.0	+1			-3
	@​ai-sdk/​openai@​3.0.52 ⏵ 2.0.57	+28		-3
	@​ai-sdk/​openai@​3.0.52 ⏵ 3.0.7	+27		-2
	@​opentelemetry/​otlp-transformer@​0.53.0 ⏵ 0.35.0	+1		-3	-3
	@​vercel/​otel@​2.1.0
	@​opentelemetry/​context-async-hooks@​1.26.0 ⏵ 1.9.0	+27		+1	-5
	@​opentelemetry/​sdk-trace-base@​1.26.0 ⏵ 1.9.0	+22			-5
	ai@​6.0.158 ⏵ 5.0.76	-3
	typescript@​5.4.4
	braintrust@​2.2.2 ⏵ 2.2.1-rc.0	+1
	@​opentelemetry/​exporter-trace-otlp-http@​0.53.0 ⏵ 0.35.0	+26			-3
	react-dom@​19.2.5 ⏵ 18.3.1	-7
	ai@​6.0.158 ⏵ 6.0.1
	ai@​6.0.158 ⏵ 3.4.33	+6
	ai@​6.0.158 ⏵ 4.3.19	+7
	@​opentelemetry/​core@​1.26.0 ⏵ 2.0.0
	@​opentelemetry/​core@​1.26.0 ⏵ 1.9.0
	@​opentelemetry/​sdk-node@​0.53.0 ⏵ 0.35.0	+1
See 5 more rows in the dashboard

View full report

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.