[dependabot]

Bumps taskcluster from 97.0.1 to 113.1.0.

Release notes

Sourced from taskcluster's releases.

v113.1.0

WORKER-DEPLOYERS

▶ [minor] bug 2070518 Reregister worker refuses to renew credentials for workers whose launch config has been archived. This can happen when the worker pool definition changes or the worker pool is deleted. Such workers fail to renew their credentials, so tasks they are still running may be aborted rather than drained.

USERS

▶ [minor] bug 2072155 auth.updateClient now fails with RequestConflict if the client was modified between being read and written, instead of silently overwriting concurrent changes.

▶ [minor] Generic Worker now downloads the content of a task's file and read-only directory mounts in parallel (up to 8 at a time) before mounting them, rather than one after another. Mounts are still mounted sequentially in the order they are listed in the payload. Content of preloaded writable directory caches is still only downloaded if no existing cache can be reused.

▶ [patch] bug 2076126 Generic worker now confirms with the queue that a task may download an artifact before mounting a copy from its download cache. Each cached artifact mount makes one extra queue request.

v113.0.0

DEPLOYERS

▶ [MAJOR] #8874 The UI subscription endpoint setting has been renamed: use SUBSCRIPTION_ENDPOINT instead of GRAPHQL_SUBSCRIPTION_ENDPOINT, and ui.subscription_endpoint instead of ui.graphql_subscription_endpoint. Update deployment configuration before upgrading.

▶ [patch] The public deployment scope list in the anonymous role docs now includes queue:list-task-queues, which the dashboard needs to show counts for task queues that worker-manager does not own. The worker pools page now only blames missing scopes when task queue counts fail with InsufficientScopes, and shows the actual error otherwise.

▶ [patch] #9206 Worker Manager now computes a worker pool's worker counts and capacities only when it actually returns them, in the workerPool and createWorkerPool endpoints. Previously every worker pool lookup computed them, including each registerWorker call, the worker scanner, and provider error reporting. That query reads every worker row in the pool, so a large pool scaling up quickly could drive database CPU to 100% as each newly booted worker registered.

WORKER-DEPLOYERS

▶ [patch] bug 2071833 Generic Worker on Windows multiuser now replaces (instead of merging) DACLs when granting a task user control of task and writable-directory-cache trees, and protects those DACLs from inheritance so leftover BUILTIN\Users / Everyone ACEs cannot follow the cache. cachesDir and downloadsDir are given a protected worker-only DACL at startup so they no longer inherit those ACEs from a drive root.

▶ [patch] On Windows, generic-worker now checks free space on the configured task volume. Previously, it checked the process working directory even when tasksDir was on a different volume, which could cause incorrect cache cleanup decisions.

DEVELOPERS

▶ [MAJOR] #9190 The web-server service no longer serves a GraphQL API. The /graphql endpoint and the /playground page have been removed.

Automated Package Updates

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v113.1.0

WORKER-DEPLOYERS

▶ [minor] bug 2070518 Reregister worker refuses to renew credentials for workers whose launch config has been archived. This can happen when the worker pool definition changes or the worker pool is deleted. Such workers fail to renew their credentials, so tasks they are still running may be aborted rather than drained.

USERS

▶ [minor] bug 2072155 auth.updateClient now fails with RequestConflict if the client was modified between being read and written, instead of silently overwriting concurrent changes.

▶ [minor] Generic Worker now downloads the content of a task's file and read-only directory mounts in parallel (up to 8 at a time) before mounting them, rather than one after another. Mounts are still mounted sequentially in the order they are listed in the payload. Content of preloaded writable directory caches is still only downloaded if no existing cache can be reused.

▶ [patch] bug 2076126 Generic worker now confirms with the queue that a task may download an artifact before mounting a copy from its download cache. Each cached artifact mount makes one extra queue request.

v113.0.0

DEPLOYERS

▶ [MAJOR] #8874 The UI subscription endpoint setting has been renamed: use SUBSCRIPTION_ENDPOINT instead of GRAPHQL_SUBSCRIPTION_ENDPOINT, and ui.subscription_endpoint instead of ui.graphql_subscription_endpoint. Update deployment configuration before upgrading.

▶ [patch] The public deployment scope list in the anonymous role docs now includes queue:list-task-queues, which the dashboard needs to show counts for task queues that worker-manager does not own. The worker pools page now only blames missing scopes when task queue counts fail with InsufficientScopes, and shows the actual error otherwise.

▶ [patch] #9206 Worker Manager now computes a worker pool's worker counts and capacities only when it actually returns them, in the workerPool and createWorkerPool endpoints. Previously every worker pool lookup computed them, including each registerWorker call, the worker scanner, and provider error reporting. That query reads every worker row in the pool, so a large pool scaling up quickly could drive database CPU to 100% as each newly booted worker registered.

WORKER-DEPLOYERS

▶ [patch] bug 2071833 Generic Worker on Windows multiuser now replaces (instead of merging) DACLs when granting a task user control of task and writable-directory-cache trees, and protects those DACLs from inheritance so leftover BUILTIN\Users / Everyone ACEs cannot follow the cache. cachesDir and downloadsDir are given a protected worker-only DACL at startup so they no longer inherit those ACEs from a drive root.

▶ [patch] On Windows, generic-worker now checks free space on the configured task volume. Previously, it checked the process working directory even when tasksDir was on a different volume, which could cause incorrect cache cleanup decisions.

DEVELOPERS

▶ [MAJOR] #9190 The web-server service no longer serves a GraphQL API. The /graphql endpoint and the /playground page have been removed.

Automated Package Updates

... (truncated)

Commits

• eea1f6f v113.1.0
• 1da561d feat(w-m): Refuse reregister when launch config was archived (#9266)
• 3b55d5a Merge pull request #9253 from taskcluster/matt-boris/gwAuthorizeCachedArtifact
• d0b385d feat(auth): Fix updateClient concurrent writes (#9263)
• 8f0068c fix(generic-worker): authorize cached artifact mounts
• fbd332a feat(auth): Fix updateClient concurrent writes
• 45bb4f9 Dependabot/npm and yarn/UI/UI vitest 3b8f40c4d3 (#9262)
• 5ec2d32 Merge pull request #9243 from jcristau/generic-worker-parallel-mount-downloads
• 61749db generic-worker: download mount content in parallel
• d75cfe5 v113.0.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #214.