updated the version numbers for the Temporal SDK and all project depe…#5
Merged
tomwheeler merged 1 commit intomainfrom Nov 5, 2025
Merged
updated the version numbers for the Temporal SDK and all project depe…#5tomwheeler merged 1 commit intomainfrom
tomwheeler merged 1 commit intomainfrom
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What was changed?
I updated the version numbers for the Temporal SDK and all project dependencies (junit, slf4j, commons-lang, etc.) to the latest stable versions.
Why?
The Temporal SDK referenced in this tutorial was several versions behind what's current, as were other libraries it uses. I updated them to what is now the latest stable release. This eliminates security vulnerabilities in older versions of project dependencies (such as JUnit or Apache Commons Lang) and also conveys to our learners that our tutorials are maintained and worth their time to complete.
I tested this by running
gradle compileJava compileTestJava teston a clean checkout to ensure that the code compiled with the new versions and that all automated tests were successful.Note that this PR updates the code, but the prose for the tutorial is in a different repo and I've submitted a PR there to handle that. Both PRs should be merged with minimal delay between them as possible.