Signed-off-by: Javier Aliaga <[email protected]>

… completion (#1769) (#1771)

When an orchestrator returns without calling ctx.complete(), the executor
auto-completes only if no pending actions remain. Since #1733 every
waitForExternalEvent emits a CreateTimer action, so when the final event
arrives in the same work item as the completion that resumed the
orchestrator, the re-armed wait's timer is still pending when the function
returns — blocking the implicit completion. The workflow stayed RUNNING
until that timer fired: forever, for indefinite waits.

Treat pending timers of already-resolved event waits as obsolete in the
implicit-completion check. All other pending actions block completion as
before.

The regression test reconstructs the failing production history
field-for-field.


(cherry picked from commit 625d0f8)

Signed-off-by: Javier Aliaga <[email protected]>
Co-authored-by: Javier Aliaga <[email protected]>

#1776)

newRequestBuilder resolves relativePath raw and now rethrows
IllegalArgumentException on illegal chars (e.g. spaces), pointing at
encodePath. encodePath percent-encodes each path segment, preserving
separators and a leading slash and appending any query unchanged,
mirroring DaprHttp/invokeMethod.


(cherry picked from commit f42e0d2)

Signed-off-by: Javier Aliaga <[email protected]>
Co-authored-by: Javier Aliaga <[email protected]>

Signed-off-by: Dapr Bot <[email protected]>

* fix: update Jackson to address security vulnerabilities

Signed-off-by: Javier Aliaga <[email protected]>

* fix: update dependencies to address security vulnerabilities

Signed-off-by: Javier Aliaga <[email protected]>

---------

Signed-off-by: Javier Aliaga <[email protected]>

Signed-off-by: Dapr Bot <[email protected]>

Signed-off-by: Dapr Bot <[email protected]>