What's Changed
- Fix System.Dynamic registration for C# variable accessors by @RalfvandenBurg in #7415
- fix(csharp): register System.Dynamic for generated Variables wrapper by @Copilot in #7416
- fix: restore HashSet-backed Fork completion state on resumed workflows by @Copilot in #7431
- Graceful shutdown for the workflow runtime (drain, pause, recover) by @sfmskywalker in #7424
- [codex] Add live server log streaming diagnostics by @sfmskywalker in #7438
- [codex] Add structured log SQLite persistence by @sfmskywalker in #7445
- [codex] Expose structured log storage diagnostics by @sfmskywalker in #7446
- [codex] Add structured log provider tests by @sfmskywalker in #7449
- [codex] Increase structured log persistence test coverage by @sfmskywalker in #7450
- [codex] Increase structured log relational test coverage by @sfmskywalker in #7451
- [codex] Add codebase wiki by @sfmskywalker in #7453
- [codex] Add Elsa README video assets by @sfmskywalker in #7455
- [codex] Avoid duplicate structured log storage diagnostics by @sfmskywalker in #7456
- Add missing Obsolete attribute to IWorkflowBuilder by @heku in #7448
- [codex] Resolve build warnings by @sfmskywalker in #7458
- Update safe dependency patch versions by @sfmskywalker in #7459
- [codex] Add wiki update workflow by @sfmskywalker in #7454
- Fix structured log write buffer shutdown flush by @sfmskywalker in #7460
- Fix SQLite structured log shell lifecycle by @sfmskywalker in #7461
- Add state machine activity by @sfmskywalker in #7457
- Add diagnostics console logs by @sfmskywalker in #7462
- [codex] Add package manifest feature metadata by @sfmskywalker in #7463
- fix: do not resume interrupted workflows that are already finished by @jwdb in #7435
- [codex] Update package manifest generator preview by @sfmskywalker in #7465
- [codex] Refresh codebase wiki by @github-actions[bot] in #7464
- [codex] Refresh codebase wiki by @github-actions[bot] in #7466
- Add secrets module by @sfmskywalker in #7468
- [codex] Fix tenant coordinator test options reference by @sfmskywalker in #7503
- [codex] Enforce role assignment authorization by @sfmskywalker in #7501
- Scope HTTP bookmark lookup to tenant by @sfmskywalker in #7508
- Distinguish refresh tokens from API access tokens by @sfmskywalker in #7509
- [codex] Treat Python expressions as privileged host code by @sfmskywalker in #7507
- [codex] Enforce HTTP workflow request body limits while reading by @sfmskywalker in #7497
- [codex] Remove production-usable default admin credentials by @sfmskywalker in #7500
- [codex] Fail fast on default JWT signing keys by @sfmskywalker in #7496
- [codex] Authorize workflow imports before persistence by @sfmskywalker in #7510
- Stabilize bulk dispatch fire-and-forget component test by @sfmskywalker in #7520
- [codex] Require opt-in for localhost authorization grants by @sfmskywalker in #7498
- [codex] Harden C# expression host-code execution by @sfmskywalker in #7519
- Optimize workflow definition sync lookups by @sfmskywalker in #7521
- [codex] Whitelist workflow timestamp filter columns by @sfmskywalker in #7506
- Use cryptographic randomness and adaptive identity secret hashing by @sfmskywalker in #7511
- Add Elsa runtime readiness health checks by @sfmskywalker in #7513
- [codex] Validate distributed runtime lock provider by @sfmskywalker in #7515
- Add bookmark queue dead-letter store by @sfmskywalker in #7516
- Add ingress rate limiting hooks by @sfmskywalker in #7512
- Add workflow dispatch transactional outbox by @sfmskywalker in #7517
- [codex] Harden initial security remediation slice by @sfmskywalker in #7495
- Add OpenTelemetry workflow instrumentation by @sfmskywalker in #7514
- [codex] Harden workflow JSON type resolution by @sfmskywalker in #7499
- [codex] Authorize workflow instance SignalR observation by @sfmskywalker in #7504
- [codex] Secure Resilience simulate response endpoint by @sfmskywalker in #7505
- [codex] Add operational dashboard API PRD by @sfmskywalker in #7529
- [codex] Align console logs hub authorization by @sfmskywalker in #7531
- [codex] Clarify dashboard widget integration contract by @sfmskywalker in #7532
- [codex] Increase Elsa Secrets test coverage by @sfmskywalker in #7530
- [codex] Enforce console logs hub read permission by @sfmskywalker in #7533
- [codex] Refresh codebase wiki by @github-actions[bot] in #7467
- [codex] Scope console logs to workflow instances by @sfmskywalker in #7535
- Enhance console logging with improved context and lifecycle by @sfmskywalker in #7536
- [codex] Increase secrets unit coverage by @sfmskywalker in #7545
- [codex] Fix console log metadata and type resolution by @sfmskywalker in #7542
- [codex] Resolve OpenTelemetry package warnings by @sfmskywalker in #7546
- [codex] Bump dependency security patches by @sfmskywalker in #7547
- [codex] Fix diagnostics live feed regressions by @sfmskywalker in #7548
- Refactor: Overhauls workflow JSON type serialization by @sfmskywalker in #7549
- Optimize activity registry descriptor lookup by @sfmskywalker in #7538
- Preserve activity descriptors on empty refresh by @sfmskywalker in #7550
- [codex] Protect sensitive workflow input descriptors and state by @sfmskywalker in #7573
- [codex] Validate workflow secret references adoption by @sfmskywalker in #7576
- [S2] Add Secret expression runtime by @sfmskywalker in #7574
- [S4] Add JavaScript secret functions by @sfmskywalker in #7575
- [codex] Refresh codebase wiki by @github-actions[bot] in #7534
- [codex] Add EF Core secrets persistence by @sfmskywalker in #7572
New Contributors
- @jwdb made their first contribution in #7435
- @github-actions[bot] made their first contribution in #7464
Full Changelog: 3.7.0...3.8.0-preview1