Bump taskcluster from 96.4.0 to 96.5.2

[dependabot]

Bumps taskcluster from 96.4.0 to 96.5.2.

Release notes

Sourced from taskcluster's releases.

v96.5.2

WORKER-DEPLOYERS

▶ [patch] #8083 Generic Worker (windows): waits for the User Profile Service (ProfSvc) to be running before performing profile operations on first boot, and fixes a bug where LoadUserProfile retry logic for "device not ready" errors never actually retried due to an incorrect error type assertion.

v96.5.1

DEPLOYERS

▶ [patch] #8292 Claim-resolver and deadline-resolver expose metrics.

v96.5.0

GENERAL

▶ [patch] Upgrades to go1.26.0

Release notes here.

WORKER-DEPLOYERS

▶ [minor] #7147 Worker-manager now decides which workers should be kept during the worker-scanner loop, surfaced via the shouldWorkerTerminate API. Decision is being made based on several policies:

• if launch config is archived - worker would be marked as "shouldTerminate=true"
• if workers exceed the desired capacity (more workers than pending tasks) - the oldest workers would be marked as "shouldTerminate=true" (newest workers are kept)

▶ [patch] #8289 Generic Worker: fixes credential expiration during high-volume artifact uploads by narrowing the scope of the queue client lock so that credential refresh is no longer blocked by in-flight HTTP calls.

▶ [patch] #8291 Generic Worker: handles SIGTERM during task execution by triggering graceful termination, ensuring preempted tasks are properly resolved as exception/worker-shutdown instead of exception/claim-expired.

USERS

▶ [minor] #8035 The index service no longer adds a bewit (time-limited auth token) to redirect URLs for public artifacts. Artifacts are considered public if the anonymous role has the necessary scopes to get them. The index service caches the scopes associated to the anonymous role and refreshes them from the auth service every 5 minutes. Additionally, for public artifacts, the index service now resolves the final artifact URL server-side by calling the queue's latestArtifact endpoint, reducing the redirect chain from two hops (Index → Queue → storage) to one (Index → storage).

▶ [patch] #8070 Show a warning banner in the UI when live updates are disabled due to missing web:read-pulse scope, instead of silently showing stale data.

DEVELOPERS

▶ [patch] #8292 Add missing queue_exception_tasks metric to the claim-resolver and deadline-resolver.

▶ [patch] #8261 Fix webpack-dev-server crash (ECONNRESET) when proxying WebSocket /subscription endpoint during local UI development.

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v96.5.2

WORKER-DEPLOYERS

▶ [patch] #8083 Generic Worker (windows): waits for the User Profile Service (ProfSvc) to be running before performing profile operations on first boot, and fixes a bug where LoadUserProfile retry logic for "device not ready" errors never actually retried due to an incorrect error type assertion.

v96.5.1

DEPLOYERS

▶ [patch] #8292 Claim-resolver and deadline-resolver expose metrics.

v96.5.0

GENERAL

▶ [patch] Upgrades to go1.26.0

Release notes here.

WORKER-DEPLOYERS

▶ [minor] #7147 Worker-manager now decides which workers should be kept during the worker-scanner loop, surfaced via the shouldWorkerTerminate API. Decision is being made based on several policies:

• if launch config is archived - worker would be marked as "shouldTerminate=true"
• if workers exceed the desired capacity (more workers than pending tasks) - the oldest workers would be marked as "shouldTerminate=true" (newest workers are kept)

▶ [patch] #8289 Generic Worker: fixes credential expiration during high-volume artifact uploads by narrowing the scope of the queue client lock so that credential refresh is no longer blocked by in-flight HTTP calls.

▶ [patch] #8291 Generic Worker: handles SIGTERM during task execution by triggering graceful termination, ensuring preempted tasks are properly resolved as exception/worker-shutdown instead of exception/claim-expired.

USERS

▶ [minor] #8035 The index service no longer adds a bewit (time-limited auth token) to redirect URLs for public artifacts. Artifacts are considered public if the anonymous role has the necessary scopes to get them. The index service caches the scopes associated to the anonymous role and refreshes them from the auth service every 5 minutes. Additionally, for public artifacts, the index service now resolves the final artifact URL server-side by calling the queue's latestArtifact endpoint, reducing the redirect chain from two hops (Index → Queue → storage) to one (Index → storage).

▶ [patch] #8070 Show a warning banner in the UI when live updates are disabled due to missing web:read-pulse scope, instead of silently showing stale data.

DEVELOPERS

▶ [patch] #8292 Add missing queue_exception_tasks metric to the claim-resolver and deadline-resolver.

... (truncated)

Commits

• 9892d6e v96.5.2
• 5cd0d8e Merge pull request #8299 from taskcluster/matt-boris/gwWinLoadUserProfile
• 0ed68a0 fix(generic-worker): ensure ProfSvc is running before profile ops
• 3d94c0f v96.5.1
• ca13ba9 Merge pull request #8297 from taskcluster/feat/8292-expose-metrics-bg
• a9ac806 feat(queue): Fix metrics exposure in resolvers
• 7111fbc v96.5.0
• 998cc32 Merge pull request #8290 from taskcluster/matt-boris/fixReclaimDeadlock
• c52e4bc Merge pull request #8296 from taskcluster/feat/8292-claim-expired-not-reported
• 25ac3df Merge pull request #8293 from taskcluster/matt-boris/gwHandleSigterm
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)