Re-wire auth to use a provider pattern. Lots of tests remove cloud references by GiantRobots · Pull Request #3230 · temporalio/ui

GiantRobots · 2026-03-18T16:44:10Z

Description

This PR updates the auth code in request-from-api to use dependency injection and middleware instead of the current if based approach for injecting different authentication strategies for other providers specifically temporal cloud.

This allows auth to be swapped wholesale without implementation leakage around the project and consolidating request/response wrappers also ensuring a single implementation is being used throughout (there were previously some edge cases where two sets of authnz code would be executed)

…weirdness in control flow.

…ve single points of access

vercel · 2026-03-18T16:44:17Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
holocene	Ready	Preview, Comment	Mar 23, 2026 10:04pm

temporal-cicd · 2026-03-18T16:46:02Z

    settings,
-    accessToken,
  });



⚠️ Argument of type 'EventAttribute | IFailure | PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent | EventAttribute | PotentiallyDecodable>'.

temporal-cicd · 2026-03-18T16:46:02Z

-    accessToken,
  });

  const decodedAttributes = decodeAttributes(


⚠️ Argument of type 'EventAttribute | IFailure | PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent | EventAttribute | PotentiallyDecodable>'.

temporal-cicd · 2026-03-18T16:46:02Z

      settings,
-      accessToken,
    );



⚠️ Object is possibly 'null' or 'undefined'.

⚠️ Object is possibly 'null' or 'undefined'.

temporal-cicd · 2026-03-18T16:46:02Z

-      accessToken,
    );

    expect(decodedHeartbeatDetails[0].heartbeatDetails.payloads[0]).toBe(2);


⚠️ Object is possibly 'null' or 'undefined'.

⚠️ Object is possibly 'null' or 'undefined'.

temporal-cicd · 2026-03-18T16:46:02Z

-        headers['Authorization-Extras'] = accessTokenExtras;
+      const accessToken = await getAccessToken();
+      const idToken = await getIdToken();
+      if (accessToken) {


⚠️ Element implicitly has an 'any' type because expression of type '"Authorization"' can't be used to index type '{ 'Content-Type': string; 'X-Namespace': string; }'.

temporal-cicd · 2026-03-18T16:46:02Z

+      if (accessToken) {
+        headers['Authorization'] = `Bearer ${accessToken}`;
+      }
+      if (idToken) {


⚠️ Element implicitly has an 'any' type because expression of type '"Authorization-Extras"' can't be used to index type '{ 'Content-Type': string; 'X-Namespace': string; }'.

temporal-cicd · 2026-03-18T16:46:05Z

	Warnings
⚠️	📊 Strict Mode: 114 errors in 19 files (10.6% of 1080 total) src/lib/services/data-encoder.ts (2) L46:8: Element implicitly has an 'any' type because expression of type '"Authorization"' can't be used to index type '{ 'Content-Type': string; 'X-Namespace': string; }'. L49:8: Element implicitly has an 'any' type because expression of type '"Authorization-Extras"' can't be used to index type '{ 'Content-Type': string; 'X-Namespace': string; }'. src/lib/utilities/request-from-api.ts (1) L65:3: Function lacks ending return statement and return type does not include 'undefined'. src/lib/utilities/decode-payload.ts (29) L78:36: Argument of type '{ [k: string]: string; } \| undefined' is not assignable to parameter of type 'Record<string, unknown>'. L91:36: Argument of type '{ [k: string]: string; } \| undefined' is not assignable to parameter of type 'Record<string, unknown>'. L116:19: No overload matches this call. L117:6: 'searchAttributes' is of type 'unknown'. L117:44: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L123:19: No overload matches this call. L124:6: 'searchAttributes' is of type 'unknown'. L124:44: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L132:19: No overload matches this call. L133:6: 'memo' is of type 'unknown'. L133:32: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L141:19: No overload matches this call. L142:6: 'header' is of type 'unknown'. L142:34: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L151:19: No overload matches this call. L152:6: 'queryResult' is of type 'unknown'. L152:39: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L172:22: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L175:47: Argument of type 'unknown' is not assignable to parameter of type 'Payload'. L224:57: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L225:29: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L227:8: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L231:21: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L233:10: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L284:57: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{ id: string; attributes: EventAttribute; timestamp: string; classification: "Scheduled" \| "Unspecified" \| "Open" \| "New" \| "Started" \| "Initiated" \| "Running" \| ... 7 more ... \| "CancelRequested"; ... 69 more ...; eventId: string; } \| ... 62 more ... \| { ...; }'. L285:29: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{ id: string; attributes: EventAttribute; timestamp: string; classification: "Scheduled" \| "Unspecified" \| "Open" \| "New" \| "Started" \| "Initiated" \| "Running" \| ... 7 more ... \| "CancelRequested"; ... 69 more ...; eventId: string; } \| ... 62 more ... \| { ...; }'. L287:8: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{ id: string; attributes: EventAttribute; timestamp: string; classification: "Scheduled" \| "Unspecified" \| "Open" \| "New" \| "Started" \| "Initiated" \| "Running" \| ... 7 more ... \| "CancelRequested"; ... 69 more ...; eventId: string; } \| ... 62 more ... \| { ...; }'. L289:21: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{ id: string; attributes: EventAttribute; timestamp: string; classification: "Scheduled" \| "Unspecified" \| "Open" \| "New" \| "Started" \| "Initiated" \| "Running" \| ... 7 more ... \| "CancelRequested"; ... 69 more ...; eventId: string; } \| ... 62 more ... \| { ...; }'. L291:10: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{ id: string; attributes: EventAttribute; timestamp: string; classification: "Scheduled" \| "Unspecified" \| "Open" \| "New" \| "Started" \| "Initiated" \| "Running" \| ... 7 more ... \| "CancelRequested"; ... 69 more ...; eventId: string; } \| ... 62 more ... \| { ...; }'. src/lib/models/event-history/index.ts (6) L42:45: Argument of type 'EventAttribute \| IFailure \| PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>'. L131:9: The operand of a 'delete' operator must be optional. L132:9: The operand of a 'delete' operator must be optional. L133:9: The operand of a 'delete' operator must be optional. L134:9: The operand of a 'delete' operator must be optional. L135:9: The operand of a 'delete' operator must be optional. src/lib/models/event-history/get-event-attributes.test.ts (1) L187:13: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'WorkflowEvent'. src/lib/models/event-history/to-event-history.test.ts (2) L187:13: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'WorkflowEvent'. L211:13: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'HistoryEvent'. src/lib/models/pending-activities/index.ts (1) L30:4: Argument of type 'EventAttribute \| IFailure \| PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>'. src/lib/models/pending-activities/to-decoded-pending-activities.test.ts (4) L22:11: Object is possibly 'null' or 'undefined'. L22:11: Object is possibly 'null' or 'undefined'. L23:11: Object is possibly 'null' or 'undefined'. L23:11: Object is possibly 'null' or 'undefined'. src/lib/services/query-service.ts (3) L99:8: 'e' is of type 'unknown'. L100:54: 'e' is of type 'unknown'. L109:8: Type 'unknown' is not assignable to type 'Error \| undefined'. src/lib/services/workflow-service.ts (23) L195:6: Type 'ErrorCallback' is not assignable to type '(error: unknown, toasts?: Toaster, errors?: Writable<NetworkError \| null>, isBrowser?: boolean) => void'. L257:4: Type 'ErrorCallback' is not assignable to type '(error: unknown, toasts?: Toaster, errors?: Writable<NetworkError \| null>, isBrowser?: boolean) => void'. L296:45: Argument of type 'unknown' is not assignable to parameter of type 'WorkflowExecutionAPIResponse \| undefined'. L429:28: No overload matches this call. L645:4: Type 'ErrorCallback' is not assignable to type '(error: unknown, toasts?: Toaster, errors?: Writable<NetworkError \| null>, isBrowser?: boolean) => void'. L646:10: Argument of type '(response?: WorkflowExecutionAPIResponse) => WorkflowExecution' is not assignable to parameter of type '(value: unknown) => WorkflowExecution \| PromiseLike'. L676:4: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'ISearchAttributes'. L752:37: Argument of type 'SearchAttributeInput[]' is not assignable to parameter of type '{ type: "Unspecified" \| "Keyword" \| "Text" \| "Int" \| "Double" \| "Bool" \| "KeywordList" \| "Datetime"; label: string; value?: any; }[]'. L815:8: Type 'ErrorCallback' is not assignable to type '(error: unknown, toasts?: Toaster, errors?: Writable<NetworkError \| null>, isBrowser?: boolean) => void'. L839:8: 'workflow' is possibly 'undefined'. L841:8: 'workflow' is possibly 'undefined'. L849:8: 'workflow' is possibly 'undefined'. L851:8: 'workflow' is possibly 'undefined'. L858:28: Element implicitly has an 'any' type because expression of type '0' can't be used to index type '{}'. L863:8: Element implicitly has an 'any' type because expression of type '0' can't be used to index type '{}'. L865:10: Element implicitly has an 'any' type because expression of type '0' can't be used to index type '{}'. L868:8: Element implicitly has an 'any' type because expression of type '0' can't be used to index type '{}'. L1015:20: Argument of type 'WorkflowExecution \| undefined' is not assignable to parameter of type 'WorkflowExecution'. L1054:28: Argument of type 'string \| undefined' is not assignable to parameter of type 'string'. L1082:10: Property 'executions' does not exist on type 'WithoutNextPageToken'. L1082:41: Argument of type '(token: string) => Promise' is not assignable to parameter of type '(token?: NextPageToken \| undefined) => Promise'. L1126:6: Type 'ErrorCallback' is not assignable to type '(error: unknown, toasts?: Toaster, errors?: Writable<NetworkError \| null>, isBrowser?: boolean) => void'. L1155:6: Type 'ErrorCallback' is not assignable to type '(error: unknown, toasts?: Toaster, errors?: Writable<NetworkError \| null>, isBrowser?: boolean) => void'. src/lib/svelte-mocks/app/state.ts (1) L5:4: Type 'null' is not assignable to type 'string[]'. src/lib/utilities/decode-local-activity.ts (2) L71:6: Argument of type 'WorkflowEvent \| EventAttribute \| IMemo \| PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>'. L76:41: Argument of type 'Payload \| undefined' is not assignable to parameter of type 'Payload'. src/lib/utilities/export-history.ts (3) L49:35: Argument of type 'WorkflowEvent \| EventAttribute \| IMemo \| PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>'. L60:50: Argument of type 'null' is not assignable to parameter of type '((key: string, value: { events: HistoryEvent[]; }) => { events: HistoryEvent[]; }) \| undefined'. L101:15: Argument of type 'Replace<Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>, Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>>[]' is not assignable to parameter of type 'HistoryEvent[]'. src/lib/components/event/payload-decoder.svelte (5) L28:26: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'WorkflowEvent \| IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L28:41: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type 'WorkflowEvent \| IUserMetadata \| IWorkflowExecutionStartedEventAttributes \| IWorkflowExecutionCompletedEventAttributes \| ... 59 more ... \| Record<...>'. L54:8: Argument of type 'WorkflowEvent \| EventAttribute \| IMemo \| PotentiallyDecodable' is not assignable to parameter of type 'Optional<WorkflowEvent \| EventAttribute \| PotentiallyDecodable>'. L56:31: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{}'. L57:35: Element implicitly has an 'any' type because expression of type 'string' can't be used to index type '{}'. src/lib/components/event/event-summary-row.svelte (5) L130:6: Argument of type 'string \| undefined' is not assignable to parameter of type 'string'. L167:23: Parameter 'event' implicitly has an 'any' type. L179:30: Parameter 'group' implicitly has an 'any' type. L179:37: Parameter 'hoveredEventId' implicitly has an 'any' type. L310:16: Type 'ITimestamp \| null \| undefined' is not assignable to type 'ITimestamp'. src/lib/components/lines-and-dots/svg/timeline-graph-row.svelte (7) L98:20: 'distance' is possibly 'null'. L98:31: 'workflowDistance' is possibly 'null'. L109:20: 'distance' is possibly 'null'. L109:31: 'workflowDistance' is possibly 'null'. L149:29: 'activityTaskScheduled.attributes.attempt' is possibly 'null' or 'undefined'. L242:12: 'pendingActivity.attempt' is possibly 'null' or 'undefined'. L285:13: 'activityTaskScheduled' is possibly 'undefined'. src/lib/layouts/workflow-run-layout.svelte (7) L102:39: Type 'string \| undefined' is not assignable to type 'string'. L152:6: Type 'WorkflowExecution \| undefined' is not assignable to type 'WorkflowExecution \| null'. L166:4: Type 'undefined' is not assignable to type 'NetworkError \| null'. L169:18: No overload matches this call. L178:28: Parameter 'fullHistory' implicitly has an 'any' type. L178:41: Parameter 'pause' implicitly has an 'any' type. L210:35: Argument of type 'null' is not assignable to parameter of type '((key: string, value: { eventHistory: WorkflowEvents; workflow: WorkflowExecution \| null; workers: IDescribeTaskQueueResponse; workersLoaded: boolean; metadata: WorkflowMetadata \| null; userMetadata: { ...; }; }) => { ...; }) \| undefined'. src/lib/pages/workflow-call-stack.svelte (3) L28:8: Type 'WorkflowExecution \| null' is not assignable to type 'Eventual<{ id: string; runId: string; }>'. L42:30: 'workers.pollers.length' is possibly 'undefined'. L96:12: Type 'string \| undefined' is not assignable to type 'string \| number'. src/lib/pages/workflow-query.svelte (9) L49:5: Type 'string \| undefined' is not assignable to type 'string'. L58:32: 'a.name' is possibly 'undefined'. L59:32: 'b.name' is possibly 'undefined'. L64:13: 'a.name' is possibly 'undefined'. L64:34: No overload matches this call. L100:6: Type 'Promise \| Promise<IPayload[]>' is not assignable to type 'Promise'. L118:8: Type '{ payloads: IPayloads; } \| null' is not assignable to type 'IPayloads \| undefined'. L162:12: Type '"retry" \| null' is not assignable to type '"action" \| "activity" \| "add-square" \| "add" \| "apple" \| "archives" \| "arrow-down" \| "arrow-left" \| "arrow-up" \| "arrow-right" \| "ascending" \| "astronaut" \| "batch-operation" \| ... 134 more ... \| undefined'. L190:12: Type 'false \| "opacity-50"' is not assignable to type 'string \| undefined'.

Generated by 🚫 dangerJS against 8376b0b

temporal-cicd · 2026-03-20T19:44:46Z

        settings,
-        $authUser.accessToken,
      );
      const decodedAttributes = decodePayloadAttributes(


…Re-wire with-access-token to use pre/post hooks so code paths can be determined by the caller. Lots of tests

…tions as well as a few others

temporal-cicd · 2026-03-23T22:05:04Z

+
+const settings: Settings = {
+  auth: {
+    enabled: false,


⚠️ Type 'null' is not assignable to type 'string[]'.

andrewzamojc

Code looks good. The new way makes sense and cleans up the calling code nicely. Tons of tests 👍 I can manually test next.

andrewzamojc · 2026-03-24T17:21:24Z

+}
+
+export async function getAccessToken(): Promise<string> {
+  if (!BROWSER || !provider) return '';


silent, but seems fine.

andrewzamojc · 2026-03-24T17:24:35Z

+): Promise<string> {
+  const settings = page.data?.settings;
+  return getCodecEndpoint(settings);
+}


wizardry...

This is approximately how we do it now. I very much dislike how we use a store and push it down by setting it in the page it's VERY VERY side effecty so this is step1 in changing it.

andrewzamojc · 2026-03-24T17:26:08Z

+    let response = await executeRequest(context);
+
+    if (isBrowser) {
+      response = await runPostResponse(response, {


rossnelson

LGTM! I tested using the local oidc server and all looks good.

Side Note: I've got a follow-up draft PR (#3248) that adds redirect-to-login when refreshTokens returns false in ossPostResponse — that behavior was missing for requests that bypass handleError (e.g. background workflow count polls).

Auto-generated version bump from 2.48.1 to 2.48.2 Specific version: 2.48.2 Changes included: - [`92cd681e`](92cd681) Re-wire auth to use a provider pattern. Lots of tests remove cloud references (#3230) - [`3d92202b`](3d92202) Use --top-nav-height CSS variable for sticky element positioning (#3250) - [`16295986`](1629598) Bump saved view limits from 20 to 50 (#3254) - [`a9fa0e91`](a9fa0e9) Display cron string instead of calendar spec when schedule has a cron string in comment field (#3241) - [`f1811715`](f181171) use full for 100% instead of 100vh (#3256) - [`0dfadd74`](0dfadd7) Add samples-ruby to workflows table empty state (#3259) - [`d85d61a3`](d85d61a) Display human-readable schedule spec labels (#3261) - [`b63049c5`](b63049c) Add invite icon to Holocene design system (#3262) - [`00c6418c`](00c6418) Bump google.golang.org/grpc from 1.66.1 to 1.79.3 in /server (#3232) - [`b04a3676`](b04a367) Add back animation (#3251) - [`7b651524`](7b65152) Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /server (#3268) - [`45f4fdea`](45f4fde) use snippets for nexus CTAs (#3266) - [`420f5c9d`](420f5c9) min-h-full instead of screen (#3270) - [`f5b2fab6`](f5b2fab) feat(navigation): add NavSection Holocene component (#3263) - [`657b2728`](657b272) Adds requested design changes to breadcrumb items (#3267) - [`6763cc4d`](6763cc4) Remove serena (#3273) - [`dfff353e`](dfff353) Display Principal fields in Event History (#3272) - [`2d289bce`](2d289bc) Update CODEOWNERS to wildcard for temporalio/frontend-engineering (#3275) - [`a2eaf16e`](a2eaf16) Persist workflow view and sort order preferences across navigation (#3260) - [`c5d4c996`](c5d4c99) Add link from Event Card to jump to event id page from Timeline. Remove unnecessary padding (#3277) - [`e5b3ea55`](e5b3ea5) fix(deps): upgrade lodash, svelte, kit, storybook, tar-fs for security (#3269) - [`b44afbe6`](b44afbe) fix(deps): upgrade vite and add picomatch/svgo overrides for security (#3279) - [`4e8cb4e9`](4e8cb4e) Fix unpause confirmation modal title (#3280) - [`740b3529`](740b352) Add Slack notification when DESIGN FEEDBACK REQUESTED label is added to a PR (#3282) - [`7e8170e4`](7e8170e) Add check for COLLABORATOR (#3283) - [`dc27109d`](dc27109) fix: update nav item margin from mb-1 to mb-2 (#3290) - [`3e6416d2`](3e6416d) Pass execution runId in workflow request for schedule recent run (#3289) - [`ae3a1844`](ae3a184) Fix schedule edit double-encoding header fields (#3287) - [`09c083e0`](09c083e) fix: prevent reset modal from closing on authorization error (#3291) - [`0aa3b72b`](0aa3b72) Sort namespace picker alphabetically (#3286) - [`4c3d0057`](4c3d005) Sort alphabetically utility (#3293) - [`67a988b9`](67a988b) Bump @sveltejs/kit from 2.55.0 to 2.57.1 (#3294)

Auto-generated version bump from 2.48.1 to 2.48.2 Specific version: 2.48.2 Changes included: - [`92cd681e`](92cd681) Re-wire auth to use a provider pattern. Lots of tests remove cloud references (#3230) - [`3d92202b`](3d92202) Use --top-nav-height CSS variable for sticky element positioning (#3250) - [`16295986`](1629598) Bump saved view limits from 20 to 50 (#3254) - [`a9fa0e91`](a9fa0e9) Display cron string instead of calendar spec when schedule has a cron string in comment field (#3241) - [`f1811715`](f181171) use full for 100% instead of 100vh (#3256) - [`0dfadd74`](0dfadd7) Add samples-ruby to workflows table empty state (#3259) - [`d85d61a3`](d85d61a) Display human-readable schedule spec labels (#3261) - [`b63049c5`](b63049c) Add invite icon to Holocene design system (#3262) - [`00c6418c`](00c6418) Bump google.golang.org/grpc from 1.66.1 to 1.79.3 in /server (#3232) - [`b04a3676`](b04a367) Add back animation (#3251) - [`7b651524`](7b65152) Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /server (#3268) - [`45f4fdea`](45f4fde) use snippets for nexus CTAs (#3266) - [`420f5c9d`](420f5c9) min-h-full instead of screen (#3270) - [`f5b2fab6`](f5b2fab) feat(navigation): add NavSection Holocene component (#3263) - [`657b2728`](657b272) Adds requested design changes to breadcrumb items (#3267) - [`6763cc4d`](6763cc4) Remove serena (#3273) - [`dfff353e`](dfff353) Display Principal fields in Event History (#3272) - [`2d289bce`](2d289bc) Update CODEOWNERS to wildcard for temporalio/frontend-engineering (#3275) - [`a2eaf16e`](a2eaf16) Persist workflow view and sort order preferences across navigation (#3260) - [`c5d4c996`](c5d4c99) Add link from Event Card to jump to event id page from Timeline. Remove unnecessary padding (#3277) - [`e5b3ea55`](e5b3ea5) fix(deps): upgrade lodash, svelte, kit, storybook, tar-fs for security (#3269) - [`b44afbe6`](b44afbe) fix(deps): upgrade vite and add picomatch/svgo overrides for security (#3279) - [`4e8cb4e9`](4e8cb4e) Fix unpause confirmation modal title (#3280) - [`740b3529`](740b352) Add Slack notification when DESIGN FEEDBACK REQUESTED label is added to a PR (#3282) - [`7e8170e4`](7e8170e) Add check for COLLABORATOR (#3283) - [`dc27109d`](dc27109) fix: update nav item margin from mb-1 to mb-2 (#3290) - [`3e6416d2`](3e6416d) Pass execution runId in workflow request for schedule recent run (#3289) - [`ae3a1844`](ae3a184) Fix schedule edit double-encoding header fields (#3287) - [`09c083e0`](09c083e) fix: prevent reset modal from closing on authorization error (#3291) - [`0aa3b72b`](0aa3b72) Sort namespace picker alphabetically (#3286) - [`4c3d0057`](4c3d005) Sort alphabetically utility (#3293) - [`67a988b9`](67a988b) Bump @sveltejs/kit from 2.55.0 to 2.57.1 (#3294) Co-authored-by: laurakwhit <15069288+laurakwhit@users.noreply.github.com>

GiantRobots added 3 commits March 13, 2026 12:46

Allow accessToken to throw to allow it to stop execution and prevent …

eeffceb

…weirdness in control flow.

Merge branch 'main' into Fix401AuthWeirdness

c7bdcc4

Potential fix for cookie weirdness consolidate to a provider so we ha…

418d37a

…ve single points of access

GiantRobots requested review from a team, Alex-Tideman and rossedfort as code owners March 18, 2026 16:44

vercel bot deployed to Preview March 18, 2026 16:45 View deployment

temporal-cicd bot reviewed Mar 18, 2026

View reviewed changes

Merge branch 'main' into FixAuthWeirdNessCookieVersion

a77aae7

vercel bot deployed to Preview March 20, 2026 19:43 View deployment

Lets test some auth paths

71e149b

vercel bot deployed to Preview March 20, 2026 19:44 View deployment

temporal-cicd bot reviewed Mar 20, 2026

View reviewed changes

Add jwtPass and credentials tests

0b38551

vercel bot deployed to Preview March 20, 2026 20:08 View deployment

Update to use a provider pattern instead of checking for globalThis. …

f0c4708

…Re-wire with-access-token to use pre/post hooks so code paths can be determined by the caller. Lots of tests

GiantRobots changed the title ~~Fix auth weird ness cookie version~~ Re-wire auth to use a provider pattern. Lots of tests remove cloud references Mar 20, 2026

vercel bot deployed to Preview March 20, 2026 21:37 View deployment

Merge branch 'main' into FixAuthWeirdNessCookieVersion

9a2bb37

vercel bot deployed to Preview March 23, 2026 16:09 View deployment

Give retryContext better types other than Record<string,string>

4fd8740

vercel bot deployed to Preview March 23, 2026 16:30 View deployment

Merge branch 'main' into FixAuthWeirdNessCookieVersion

c1762ab

vercel bot deployed to Preview March 23, 2026 19:46 View deployment

move to initCore stuff and namespaceSearch and dataEncoderEndpoint op…

8376b0b

…tions as well as a few others

vercel bot deployed to Preview March 23, 2026 22:04 View deployment

temporal-cicd bot reviewed Mar 23, 2026

View reviewed changes

andrewzamojc approved these changes Mar 24, 2026

View reviewed changes

rossnelson approved these changes Mar 24, 2026

View reviewed changes

GiantRobots merged commit 92cd681 into main Mar 25, 2026
25 checks passed

GiantRobots deleted the FixAuthWeirdNessCookieVersion branch March 25, 2026 00:09

temporal-cicd bot mentioned this pull request Apr 10, 2026

chore: bump version to 2.48.2 #3295

Merged

Conversation

GiantRobots commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Uh oh!

vercel bot commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

temporal-cicd bot Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot Mar 18, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

temporal-cicd bot Mar 20, 2026

Choose a reason for hiding this comment

Uh oh!

temporal-cicd bot Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

andrewzamojc left a comment

Choose a reason for hiding this comment

Uh oh!

andrewzamojc Mar 24, 2026

Choose a reason for hiding this comment

Uh oh!

andrewzamojc Mar 24, 2026

Choose a reason for hiding this comment

Uh oh!

GiantRobots Mar 24, 2026

Choose a reason for hiding this comment

Uh oh!

andrewzamojc Mar 24, 2026

Choose a reason for hiding this comment

Uh oh!

rossnelson left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

GiantRobots commented Mar 18, 2026 •

edited

Loading

vercel bot commented Mar 18, 2026 •

edited

Loading

temporal-cicd bot commented Mar 18, 2026 •

edited

Loading