@temporalio/core-bridge 1.11.6 → 1.11.8

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/namespace/v1/message.proto

@@ -9,7 +9,9 @@ option java_outer_classname = "MessageProto";
 option ruby_package = "Temporalio::Api::Cloud::Namespace::V1";
 option csharp_namespace = "Temporalio.Api.Cloud.Namespace.V1";
 
+import "temporal/api/cloud/resource/v1/message.proto";
 import "google/protobuf/timestamp.proto";
+import "temporal/api/cloud/sink/v1/message.proto";
 
 message CertificateFilterSpec {
     // The common_name in the certificate.
@@ -31,7 +33,13 @@ message MtlsAuthSpec {
     // This must only be one value, but the CA can have a chain.
     //
     // (-- api-linter: core::0140::base64=disabled --)
-    string accepted_client_ca = 1;
+    // Deprecated: Not supported after 2024-05-13-00 api version. Use accepted_client_ca instead.
+    // temporal:versioning:max_version=2024-05-13-00
+    string accepted_client_ca_deprecated = 1;
+    // The ca cert(s) in PEM format that the clients can use for authentication and authorization.
+    // This must only be one value, but the CA can have a chain.
+    // temporal:versioning:min_version=2024-05-13-00
+    bytes accepted_client_ca = 4;
     // Certificate filters which, if specified, only allow connections from client certificates whose distinguished name properties match at least one of the filters.
     // This allows limiting access to specific end-entity certificates.
     // Optional, default is empty.
@@ -87,10 +95,30 @@ message NamespaceSpec {
     // Supported attribute types: text, keyword, int, double, bool, datetime, keyword_list.
     // NOTE: currently deleting a search attribute is not supported.
     // Optional, default is empty.
-    map<string, string> custom_search_attributes = 5;
+    // Deprecated: Not supported after 2024-10-01-00 api version. Use search_attributes instead.
+    // temporal:versioning:max_version=2024-10-01-00
+    map<string, string> custom_search_attributes = 5 [deprecated = true];
+    // The custom search attributes to use for the namespace.
+    // The name of the attribute is the key and the type is the value.
+    // Note: currently deleting a search attribute is not supported.
+    // Optional, default is empty.
+    // temporal:versioning:min_version=2024-10-01-00
+    // temporal:enums:replaces=custom_search_attributes
+    map<string, SearchAttributeType> search_attributes = 8;
     // Codec server spec used by UI to decode payloads for all users interacting with this namespace.
     // Optional, default is unset.
     CodecServerSpec codec_server = 6;
+
+    enum SearchAttributeType {
+        SEARCH_ATTRIBUTE_TYPE_UNSPECIFIED = 0;
+        SEARCH_ATTRIBUTE_TYPE_TEXT = 1;
+        SEARCH_ATTRIBUTE_TYPE_KEYWORD = 2;
+        SEARCH_ATTRIBUTE_TYPE_INT = 3;
+        SEARCH_ATTRIBUTE_TYPE_DOUBLE = 4;
+        SEARCH_ATTRIBUTE_TYPE_BOOL = 5;
+        SEARCH_ATTRIBUTE_TYPE_DATETIME = 6;
+        SEARCH_ATTRIBUTE_TYPE_KEYWORD_LIST = 7;
+    }
 }
 
 message Endpoints {
@@ -133,7 +161,14 @@ message Namespace {
     // The namespace specification.
     NamespaceSpec spec = 3;
     // The current state of the namespace.
-    string state = 4;
+    // Deprecated: Not supported after 2024-10-01-00 api version. Use state instead.
+    // temporal:versioning:max_version=2024-10-01-00
+    string state_deprecated = 4 [deprecated = true];
+    // The current state of the namespace.
+    // For any failed state, reach out to Temporal Cloud support for remediation.
+    // temporal:versioning:min_version=2024-10-01-00
+    // temporal:enums:replaces=state_deprecated
+    temporal.api.cloud.resource.v1.ResourceState state = 13;
     // The id of the async operation that is creating/updating/deleting the namespace, if any.
     string async_operation_id = 5;
     // The endpoints for the namespace.
@@ -158,7 +193,70 @@ message NamespaceRegionStatus {
     // The current state of the namespace region.
     // Possible values: adding, active, passive, removing, failed.
     // For any failed state, reach out to Temporal Cloud support for remediation.
-    string state = 1;
+    // Deprecated: Not supported after 2024-10-01-00 api version. Use state instead.
+    // temporal:versioning:max_version=2024-10-01-00
+    string state_deprecated = 1 [deprecated = true];
+    // The current state of the namespace region.
+    // temporal:versioning:min_version=2024-10-01-00
+    // temporal:enums:replaces=state_deprecated
+    State state = 3;
     // The id of the async operation that is making changes to where the namespace is available, if any.
     string async_operation_id = 2;
+
+    enum State {
+        STATE_UNSPECIFIED = 0;
+        STATE_ADDING= 1;     	// The region is being added to the namespace.
+        STATE_ACTIVE= 2;        // The namespace is active in this region.
+        STATE_PASSIVE = 3;      // The namespace is passive in this region.
+        STATE_REMOVING = 4;     // The region is being removed from the namespace.
+        STATE_FAILED = 5;       // The region failed to be added/removed, check failure_reason in the last async_operation status for more details.
+    }
+}
+
+message ExportSinkSpec {
+    // The unique name of the export sink, it can't be changed once set. 
+    string name = 1;
+
+    // A flag indicating whether the export sink is enabled or not.
+    bool enabled = 2;
+    
+    // The S3 configuration details when destination_type is S3.
+    temporal.api.cloud.sink.v1.S3Spec s3 = 3;
+
+    // This is a feature under development. We will allow GCS sink support for GCP Namespaces.
+    // The GCS configuration details when destination_type is GCS. 
+    temporal.api.cloud.sink.v1.GCSSpec gcs = 4;
+}
+
+message ExportSink {
+    // The unique name of the export sink.
+    string name = 1;
+
+    // The version of the export sink resource.
+    string resource_version = 2;
+
+    // The current state of the export sink.
+    temporal.api.cloud.resource.v1.ResourceState state = 3;
+
+    // The specification details of the export sink.
+    ExportSinkSpec spec = 4;
+
+    // The health status of the export sink.
+    Health health = 5;
+
+    // An error message describing any issues with the export sink, if applicable.
+    string error_message = 6;
+
+    // The timestamp of the latest successful data export.
+    google.protobuf.Timestamp latest_data_export_time = 7;
+
+    // The timestamp of the last health check performed on the export sink.
+    google.protobuf.Timestamp last_health_check_time = 8;
+
+    enum Health {
+        HEALTH_UNSPECIFIED = 0;
+        HEALTH_OK = 1;
+        HEALTH_ERROR_INTERNAL = 2;
+        HEALTH_ERROR_USER_CONFIGURATION = 3;
+    }
 }

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/nexus/v1/message.proto

@@ -0,0 +1,84 @@
+syntax = "proto3";
+
+package temporal.api.cloud.nexus.v1;
+
+option go_package = "go.temporal.io/api/cloud/nexus/v1;nexus";
+option java_package = "io.temporal.api.cloud.nexus.v1";
+option java_multiple_files = true;
+option java_outer_classname = "MessageProto";
+option ruby_package = "Temporalio::Api::Cloud::Nexus::V1";
+option csharp_namespace = "Temporalio.Api.Cloud.Nexus.V1";
+
+import "temporal/api/cloud/resource/v1/message.proto";
+import "google/protobuf/timestamp.proto";
+
+message EndpointSpec {
+    // The name of the endpoint. Must be unique within an account.
+    // The name must match `^[a-zA-Z][a-zA-Z0-9\-]*[a-zA-Z0-9]$`.
+    // This field is mutable.
+    string name = 1;
+
+    // Indicates where the endpoint should forward received nexus requests to. 
+    EndpointTargetSpec target_spec = 2;
+
+    // The set of policies (e.g. authorization) for the endpoint. Each request's caller
+    // must match with at least one of the specs to be accepted by the endpoint.
+    // This field is mutable.
+    repeated EndpointPolicySpec policy_specs = 3;
+
+    // The markdown description of the endpoint - optional.
+    string description = 4;
+}
+
+message EndpointTargetSpec {
+    oneof variant {
+        // A target spec for routing nexus requests to a specific cloud namespace worker.
+        WorkerTargetSpec worker_target_spec = 1;
+    }
+}
+
+message WorkerTargetSpec {
+    // The target cloud namespace to route requests to. Namespace must be in same account as the endpoint. This field is mutable.
+    string namespace_id = 1;
+
+    // The task queue on the cloud namespace to route requests to. This field is mutable.
+    string task_queue = 2;
+}
+
+message EndpointPolicySpec {
+    oneof variant {
+        // A policy spec that allows one caller namespace to access the endpoint.
+        AllowedCloudNamespacePolicySpec allowed_cloud_namespace_policy_spec = 1;
+    }
+}
+
+message AllowedCloudNamespacePolicySpec {
+    // The namespace that is allowed to call into this endpoint. Calling namespace must be in same account as the endpoint.
+    string namespace_id = 1;
+}
+
+// An endpoint that receives and then routes Nexus requests
+message Endpoint {
+    // The id of the endpoint. This is generated by the server and is immutable.
+    string id = 1;
+
+    // The current version of the endpoint specification.
+    // The next update operation must include this version.
+    string resource_version = 2;
+
+    // The endpoint specification.
+    EndpointSpec spec = 3;
+
+    // The current state of the endpoint.
+    // For any failed state, reach out to Temporal Cloud support for remediation.
+    temporal.api.cloud.resource.v1.ResourceState state = 4;
+
+    // The id of any ongoing async operation that is creating, updating, or deleting the endpoint, if any.
+    string async_operation_id = 5;
+
+    // The date and time when the endpoint was created.
+    google.protobuf.Timestamp created_time = 6;
+
+    // The date and time when the endpoint was last modified.
+    google.protobuf.Timestamp last_modified_time = 7;
+}

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/operation/v1/message.proto

@@ -14,23 +14,38 @@ import "google/protobuf/timestamp.proto";
 import "google/protobuf/any.proto";
 
 message AsyncOperation {
-    // The operation id
+    // The operation id.
     string id = 1;
-    // The current state of this operation
-    // Possible values are: pending, in_progress, failed, cancelled, fulfilled
-    string state = 2;
-    // The recommended duration to check back for an update in the operation's state
+    // The current state of this operation.
+    // Possible values are: pending, in_progress, failed, cancelled, fulfilled.
+    // Deprecated: Not supported after 2024-10-01-00 api version. Use state instead.
+    // temporal:versioning:max_version=2024-10-01-00
+    string state_deprecated = 2 [deprecated = true];
+    // The current state of this operation.
+    // temporal:versioning:min_version=2024-10-01-00
+    // temporal:enums:replaces=state_deprecated
+    State state = 9;
+    // The recommended duration to check back for an update in the operation's state.
     google.protobuf.Duration check_duration = 3;
-    // The type of operation being performed
+    // The type of operation being performed.
     string operation_type = 4;
-    // The input to the operation being performed
+    // The input to the operation being performed.
     //
     // (-- api-linter: core::0146::any=disabled --)
     google.protobuf.Any operation_input = 5;
-    // If the operation failed, the reason for the failure
+    // If the operation failed, the reason for the failure.
     string failure_reason = 6;
-    // The date and time when the operation initiated
+    // The date and time when the operation initiated.
     google.protobuf.Timestamp started_time = 7;
-    // The date and time when the operation completed
+    // The date and time when the operation completed.
     google.protobuf.Timestamp finished_time = 8;
+
+    enum State {
+	STATE_UNSPECIFIED = 0;
+	STATE_PENDING = 1;     // The operation is pending.
+	STATE_IN_PROGRESS = 2; // The operation is in progress.
+	STATE_FAILED = 3;      // The operation failed, check failure_reason for more details.
+	STATE_CANCELLED = 4;   // The operation was cancelled.
+	STATE_FULFILLED = 5;   // The operation was fulfilled.
+    }
 }

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/region/v1/message.proto

@@ -14,9 +14,22 @@ message Region {
     string id = 1;
     // The name of the cloud provider that's hosting the region.
     // Currently only "aws" is supported.
-    string cloud_provider = 2;
+    // Deprecated: Not supported after 2024-10-01-00 api version. Use cloud_provider instead. 
+    // temporal:versioning:max_version=2024-10-01-00
+    string cloud_provider_deprecated = 2 [deprecated = true];
+    // The cloud provider that's hosting the region.
+    // temporal:versioning:min_version=2024-10-01-00
+    // temporal:enums:replaces=cloud_provider_deprecated
+    CloudProvider cloud_provider = 5;
     // The region identifier as defined by the cloud provider.
     string cloud_provider_region = 3;
     // The human readable location of the region.
     string location = 4;
+
+    // The cloud provider that's hosting the region.
+    enum CloudProvider {
+        CLOUD_PROVIDER_UNSPECIFIED = 0;
+        CLOUD_PROVIDER_AWS = 1;
+	CLOUD_PROVIDER_GCP = 2;
+    }
 }

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/resource/v1/message.proto

@@ -0,0 +1,25 @@
+syntax = "proto3";
+
+package temporal.api.cloud.resource.v1;
+
+option go_package = "go.temporal.io/api/cloud/resource/v1;resource";
+option java_package = "io.temporal.api.cloud.resource.v1";
+option java_multiple_files = true;
+option java_outer_classname = "MessageProto";
+option ruby_package = "Temporalio::Api::Cloud::Resource::V1";
+option csharp_namespace = "Temporalio.Api.Cloud.Resource.V1";
+
+
+enum ResourceState {
+    RESOURCE_STATE_UNSPECIFIED = 0;
+    RESOURCE_STATE_ACTIVATING = 1;         // The resource is being activated.
+    RESOURCE_STATE_ACTIVATION_FAILED = 2;  // The resource failed to activate. This is an error state. Reach out to support for remediation.
+    RESOURCE_STATE_ACTIVE = 3;             // The resource is active and ready to use.
+    RESOURCE_STATE_UPDATING = 4;           // The resource is being updated.
+    RESOURCE_STATE_UPDATE_FAILED = 5;      // The resource failed to update. This is an error state. Reach out to support for remediation.
+    RESOURCE_STATE_DELETING = 6;           // The resource is being deleted.
+    RESOURCE_STATE_DELETE_FAILED = 7;      // The resource failed to delete. This is an error state. Reach out to support for remediation.
+    RESOURCE_STATE_DELETED = 8;            // The resource has been deleted.
+    RESOURCE_STATE_SUSPENDED = 9;          // The resource is suspended and not available for use. Reach out to support for remediation.
+    RESOURCE_STATE_EXPIRED = 10;           // The resource has expired and is no longer available for use.
+}

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/sink/v1/message.proto

@@ -0,0 +1,41 @@
+syntax = "proto3";
+
+package temporal.api.cloud.sink.v1;
+
+option go_package = "go.temporal.io/api/cloud/sink/v1;sink";
+option java_package = "io.temporal.api.cloud.sink.v1";
+option java_multiple_files = true;
+option java_outer_classname = "MessageProto";
+option ruby_package = "Temporalio::Api::Cloud::Sink::V1";
+option csharp_namespace = "Temporalio.Api.Cloud.Sink.V1";
+
+message S3Spec {
+    // The IAM role that Temporal Cloud assumes for writing records to the customer's S3 bucket.
+    string role_name = 1;
+
+    // The name of the destination S3 bucket where Temporal will send data.
+    string bucket_name = 2;
+    
+    // The region where the S3 bucket is located.
+    string region = 3;
+
+    // The AWS Key Management Service (KMS) ARN used for encryption.
+    string kms_arn = 4;
+
+    // The AWS account ID associated with the S3 bucket and the assumed role.
+    string aws_account_id = 5;
+}
+
+message GCSSpec {
+    // The customer service account ID that Temporal Cloud impersonates for writing records to the customer's GCS bucket.
+    string sa_id = 1;
+
+    // The name of the destination GCS bucket where Temporal will send data.
+    string bucket_name = 2;
+
+    // The GCP project ID associated with the GCS bucket and service account.
+    string gcp_project_id = 3;
+
+    // The region of the gcs bucket
+    string region = 4;
+}

package/sdk-core/sdk-core-protos/protos/api_cloud_upstream/temporal/api/cloud/usage/v1/message.proto

@@ -0,0 +1,59 @@
+syntax = "proto3";
+
+package temporal.api.cloud.usage.v1;
+
+option go_package = "go.temporal.io/api/cloud/usage/v1;usage";
+option java_package = "io.temporal.api.cloud.usage.v1";
+option java_multiple_files = true;
+option java_outer_classname = "MessageProto";
+option ruby_package = "Temporalio::Api::Cloud::Usage::V1";
+option csharp_namespace = "Temporalio.Api.Cloud.Usage.V1";
+
+import "google/protobuf/timestamp.proto";
+
+message Summary {
+    // Start of UTC day for now (inclusive)
+    google.protobuf.Timestamp start_time = 1;
+    // End of UTC day for now (exclusive)
+    google.protobuf.Timestamp end_time = 2;
+    // Records grouped by namespace
+    repeated RecordGroup record_groups = 3;
+    // True if data for given time window is not fully available yet (e.g. delays)
+    // When true, records for the given time range could still be added/updated in the future (until false) 
+    bool incomplete = 4;
+}
+
+message RecordGroup {
+    // GroupBy keys and their values for this record group. Multiple fields are combined with logical AND.
+    repeated GroupBy group_bys = 1;
+    repeated Record records = 2;
+}
+
+message GroupBy {
+    GroupByKey key = 1;
+    string value = 2;
+}
+
+message Record {
+    RecordType type = 1;
+    RecordUnit unit = 2;
+    double value = 3;
+}
+
+enum RecordType {
+    RECORD_TYPE_UNSPECIFIED = 0;
+    RECORD_TYPE_ACTIONS = 1;
+    RECORD_TYPE_ACTIVE_STORAGE = 2;
+    RECORD_TYPE_RETAINED_STORAGE = 3;
+}
+
+enum RecordUnit {
+    RECORD_UNIT_UNSPECIFIED = 0;
+    RECORD_UNIT_NUMBER = 1;
+    RECORD_UNIT_BYTE_SECONDS = 2;
+}
+
+enum GroupByKey {
+    GROUP_BY_KEY_UNSPECIFIED = 0;
+    GROUP_BY_KEY_NAMESPACE = 1;
+}

package/sdk-core/sdk-core-protos/protos/api_upstream/.github/PULL_REQUEST_TEMPLATE.md

@@ -1,3 +1,5 @@
+_**READ BEFORE MERGING:** All PRs require approval by both Server AND SDK teams before merging! This is why the number of required approvals is "2" and not "1"--two reviewers from the same team is NOT sufficient. If your PR is not approved by someone in BOTH teams, it may be summarily reverted._
+
 <!-- Describe what has changed in this PR -->
 **What changed?**
 

package/sdk-core/sdk-core-protos/protos/api_upstream/.github/workflows/create-release.yml

@@ -0,0 +1,135 @@
+name: "Create release"
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: "Branch to be tagged"
+        required: true
+        default: master
+      tag:
+        description: "Tag for new version (v1.23.4)"
+        required: true
+      base_tag:
+        description: "Base tag to generate commit list for release notes"
+        required: true
+      skip_sdk_check:
+        description: "Skip sdk-go compatibility check"
+        type: boolean
+
+jobs:
+  prepare-inputs:
+    name: "Prepare inputs"
+    runs-on: ubuntu-latest
+    outputs:
+      api_commit_sha: ${{ steps.pin_commits.outputs.api_commit_sha }}
+      api_go_commit_sha: ${{ steps.pin_commits.outputs.api_go_commit_sha }}
+    steps:
+      - name: Checkout api
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.inputs.branch }}
+          fetch-depth: 0
+          fetch-tags: true
+          path: api
+
+      - name: Checkout api-go
+        uses: actions/checkout@v4
+        with:
+          repository: temporalio/api-go
+          ref: ${{ github.event.inputs.branch }}
+          submodules: true
+          path: api-go
+
+      - name: Validate inputs
+        env:
+          BRANCH: ${{ github.event.inputs.branch }}
+          TAG: ${{ github.event.inputs.tag }}
+          BASE_TAG: ${{ github.event.inputs.base_tag }}
+        working-directory: ./api
+        run: |
+          if ! [[ "${TAG}" =~ ^v.* ]]; then
+            echo "::error::Tag is not prefixed with 'v'"
+            exit 1
+          fi
+
+          if [[ -n "$(git tag -l "$TAG")" ]]; then
+            echo "::error::Tag already exists"
+            exit 1
+          fi
+
+          if [[ -z "$BASE_TAG" || -z "$(git tag -l "$BASE_TAG")" ]]; then
+            echo "::error::Base tag not specified or does not exist"
+            exit 1
+          fi
+
+      - name: Pin commits sha
+        id: pin_commits
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          BRANCH: ${{ github.event.inputs.branch }}
+        run: |
+          API_COMMIT_SHA=$(git -C ./api rev-parse HEAD)
+          API_GO_COMMIT_SHA=$(git -C ./api-go rev-parse HEAD)
+          API_GO_API_COMMIT_SHA=$(git -C ./api-go rev-parse HEAD:proto/api)
+          if [[ "${API_GO_API_COMMIT_SHA}" != "${API_COMMIT_SHA}" ]]; then
+            echo "::error::api-go ref ${API_GO_COMMIT_SHA} does not reference api ref ${API_COMMIT_SHA}, api-go repo might not be up-to-date."
+            exit 1
+          fi
+          echo "api_commit_sha=$API_COMMIT_SHA" >> "$GITHUB_OUTPUT"
+          echo "api_go_commit_sha=$API_GO_COMMIT_SHA" >> "$GITHUB_OUTPUT"
+
+  check-compatibility-sdk-go:
+    needs: prepare-inputs
+    if: ${{ github.event.inputs.skip_sdk_check == false || github.event.inputs.skip_sdk_check == 'false' }}
+    uses: temporalio/api-go/.github/workflows/check-sdk-compat.yml@master
+    with:
+      sdk_ref: latest
+      api_ref: ${{ needs.prepare-inputs.outputs.api_go_commit_sha }}
+
+  create-release:
+    name: "Create release"
+    needs: [prepare-inputs, check-compatibility-sdk-go]
+    if: |
+      !cancelled() &&
+      needs.prepare-inputs.result == 'success' &&
+      contains(fromJSON('["success", "skipped"]'), needs.check-compatibility-sdk-go.result)
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Generate token
+        id: generate_token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.TEMPORAL_CICD_APP_ID }}
+          private-key: ${{ secrets.TEMPORAL_CICD_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.prepare-inputs.outputs.api_commit_sha }}
+          token: ${{ steps.generate_token.outputs.token }}
+
+      - name: Create release
+        env:
+          GH_TOKEN: ${{ steps.generate_token.outputs.token }}
+          REF: ${{ needs.prepare-inputs.outputs.api_commit_sha }}
+          TAG: ${{ github.event.inputs.tag }}
+          BASE_TAG: ${{ github.event.inputs.base_tag }}
+        run: |
+          gh repo set-default ${{ github.repository }}
+          gh release create "$TAG" --target "$REF" --latest --generate-notes --notes-start-tag "$BASE_TAG" --draft
+
+  release-api-go:
+    needs: [prepare-inputs, create-release]
+    if: |
+      !cancelled() &&
+      needs.create-release.result == 'success'
+    uses: temporalio/api-go/.github/workflows/create-release.yml@master
+    with:
+      ref: ${{ needs.prepare-inputs.outputs.api_go_commit_sha }}
+      tag: ${{ github.event.inputs.tag }}
+      api_commit_sha: ${{ needs.prepare-inputs.outputs.api_commit_sha }}
+      base_tag: ${{ github.event.inputs.base_tag }}
+    secrets: inherit

package/sdk-core/sdk-core-protos/protos/api_upstream/.github/workflows/push-to-buf.yml

@@ -0,0 +1,20 @@
+name: Push to Buf Registry
+
+on:
+  push:
+    tags:
+      - 'v**'
+    branches:
+      - master
+permissions:
+  contents: read
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+      - uses: bufbuild/buf-action@v1
+        with:
+          version: 1.49.0
+          token: ${{ secrets.BUF_TEMPORALIO_TOKEN }}

package/sdk-core/sdk-core-protos/protos/api_upstream/.github/workflows/trigger-api-go-delete-release.yml

@@ -0,0 +1,13 @@
+name: "Trigger api-go delete release"
+
+on:
+  release:
+    types: [deleted]
+
+jobs:
+  trigger-api-go-delete-release:
+    uses: temporalio/api-go/.github/workflows/delete-release.yml@master
+    with:
+      tag: ${{ github.event.release.tag_name }}
+      api_commit_sha: ${{ github.event.release.target_commitish }}
+    secrets: inherit

package/sdk-core/sdk-core-protos/protos/api_upstream/.github/workflows/trigger-api-go-publish-release.yml

@@ -0,0 +1,13 @@
+name: "Trigger api-go publish release"
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  trigger-api-go-publish-release:
+    uses: temporalio/api-go/.github/workflows/publish-release.yml@master
+    with:
+      tag: ${{ github.event.release.tag_name }}
+      api_commit_sha: ${{ github.event.release.target_commitish }}
+    secrets: inherit