build(deps): bump the minor group with 2 updates

[dependabot]

Bumps the minor group with 2 updates: go.temporal.io/api and go.temporal.io/sdk.

Updates go.temporal.io/api from 1.63.5 to 1.63.6

Release notes

Sourced from go.temporal.io/api's releases.

v1.63.6

What's Changed

• Add EmitDefaultValues field to CustomJSONMarshalOptions by @​khisakuni in temporalio/api-go#306
• Update Makefile to copy WIT files from temporal-api by @​dplyukhin in temporalio/api-go#305
• Add comment to explain broken codegen by @​chrsmith in temporalio/api-go#307
• Update visitor function to visit temporal system nexus payloads by @​spkane31 in temporalio/api-go#297
• Update gRPC and x/net dependencies by @​yuandrew in temporalio/api-go#313
• Pickup API proto support for NexusHandler callbacks by @​chrsmith in temporalio/api-go#317

New Contributors

• @​khisakuni made their first contribution in temporalio/api-go#306

Full Changelog: temporalio/api-go@v1.63.5...v1.63.6

Commits

• 20151aa Pickup API proto support for NexusHandler callbacks (#317)
• 8968e88 docs: complete System Nexus WIT annotations (#865)
• 33919a2 Update gRPC and x/net dependencies (#313)
• 79f9bb0 Adding field for gradual ramp requests (#854)
• f1ab20a Update visitor function to visit temporal system nexus payloads (#297)
• e1e0f19 Document defaults in workflow-service.wit (#861)
• 7c15049 Make SDK sole owner of WIT files (#862)
• 1146837 Add activity task failure cause (#816)
• f2c1e35 Add .NET system Nexus serialization context (#860)
• bd1da98 buf v2 config (#859)
• Additional commits viewable in compare view

Updates go.temporal.io/sdk from 1.48.0 to 1.49.0

Release notes

Sourced from go.temporal.io/sdk's releases.

v1.49.0

Highlights

Standalone Activities are now GA

With the following updates, Standalone Activities are now generally available (GA)!

• Renamed the standalone activity client.StartActivityOptions.Details option to StaticDetails, and client.ActivityExecutionDescription.GetDetails to GetStaticDetails.
• Added missing description fields: ExecutionTime and TotalHeartbeatCount.
• Corrected stand-alone activity API documentation to use activity terminology, document that GetActivityHandleOptions.RunID may be empty to target the latest run, and describe TerminateActivityOptions.Reason as a termination reason.
• Added opt-in payload fields to client.DescribeActivityOptions: IncludeInput, IncludeOutcome, IncludeHeartbeatDetails and IncludeLastFailure.
• Standalone activity client calls now supply converter.ActivitySerializationContext when encoding and decoding activity payloads: ExecuteActivity (input and static summary/details), ActivityHandle.Describe (heartbeat details, last failure, and static summary/details), and ActivityHandle.Get (result and failure).
• Standalone activities started from a redelivered Nexus operation handler now reuse the Nexus request ID, preventing duplicate Nexus links when an idempotent start resolves to the original run.
• client.ActivityHandle now supports operator commands for standalone activities: Pause, Unpause, UpdateOptions and RestoreOriginalOptions. Operator commands remain experimental.
• Standalone Activities as Nexus operations remain experimental.

Local Activity memory savings

Local activity scheduling no longer uses a fixed 100,000-entry task queue. The queue now grows with demand, avoiding both the up-front allocation and a possible worker deadlock when the queue and all local activity execution slots were full.

Other Notable Changes

Added

• Worker heartbeats now report the Go runtime version (plus RoadRunner, when the SDK is embedded in a RoadRunner binary), detected hosting environments (Docker, Kubernetes, and common cloud platforms), and the operating system and architecture. This is sent once per worker with the first heartbeat accepted by the server and can be turned off with client.Options.DisableWorkerEnvironmentInfo.
• Added converter.NexusSerializationContext support for Nexus callers and handlers. Callers use it for inputs, results, and failures; handlers use it for inputs, synchronous results, and failures. Asynchronous handler results and detached standalone handles are not yet supported. Standalone USE_EXISTING handles use their start request's context.
• Added temporal.NewPayloadValidationError to create non-retryable application errors with optional structured details for payload validation failures. Passing nil omits details.
• Added Go 1.27+ generic methods on the experimental temporalnexus.NexusClient for starting workflow-, activity-, and workflow-update-backed Nexus operations.
• Workflow task completions larger than the gRPC request size limit are now paginated automatically when the namespace supports it. Paginated workflow task completions require Temporal Server 1.32.0 or later.

... (truncated)

Changelog

Sourced from go.temporal.io/sdk's changelog.

[1.49.0] - 2026-09-14

Added

• Worker heartbeats now report the Go runtime version (plus RoadRunner, when the SDK is embedded in a RoadRunner binary), detected hosting environments (Docker, Kubernetes, and common cloud platforms), and the operating system and architecture. This is sent once per worker with the first heartbeat accepted by the server and can be turned off with client.Options.DisableWorkerEnvironmentInfo.
• Standalone activity client calls now supply converter.ActivitySerializationContext when encoding and decoding activity payloads: ExecuteActivity (input and static summary/details), ActivityHandle.Describe (heartbeat details, last failure, and static summary/details), and ActivityHandle.Get (result and failure).
• Added converter.NexusSerializationContext support for Nexus callers and handlers. Callers use it for inputs, results, and failures; handlers use it for inputs, synchronous results, and failures. Asynchronous handler results and detached standalone handles are not yet supported. Standalone USE_EXISTING handles use their start request's context.
• Added temporal.NewPayloadValidationError to create non-retryable application errors with optional structured details for payload validation failures. Passing nil omits details.
• Added Go 1.27+ generic methods on the experimental temporalnexus.NexusClient for starting workflow-, activity-, and workflow-update-backed Nexus operations.
• Workflow task completions larger than the gRPC request size limit are now paginated automatically when the namespace supports it. Paginated workflow task completions require Temporal Server 1.32.0 or later.
• The temporal_activity_execution_failed and temporal_local_activity_execution_failed worker metrics now carry a failure_reason attribute. Each is now split into one time series per reason, which may affect existing dashboards.
• Added support for Workflow Queries as Nexus Operations.

Standalone Activity operator commands

• client.ActivityHandle now supports operator commands for standalone activities: Pause, Unpause, UpdateOptions and RestoreOriginalOptions.
• Added opt-in payload fields to client.DescribeActivityOptions: IncludeInput, IncludeOutcome, IncludeHeartbeatDetails and IncludeLastFailure.
• Added missing description fields: ExecutionTime and TotalHeartbeatCount.

Changed

• Standalone Activities are now generally available (GA). (Standalone Activities as Nexus operations and Standalone Activities operator commands remain experimental. Operator commands are pause, unpause, updateOptions, restoreOriginal.)

💥 Breaking Changes

• Description payload fields that previously came back unconditionally are now opt-in and must be requested via client.DescribeActivityOptions: GetHeartbeatDetails (IncludeHeartbeatDetails) and GetLastFailure (IncludeLastFailure).
• Renamed the standalone activity client.StartActivityOptions.Details option to StaticDetails, and client.ActivityExecutionDescription.GetDetails to GetStaticDetails.

... (truncated)

Commits

• 58115b5 Prepare release 1.49.0 (#2691)
• 628f610 Remove Experimental tag from Standalone Activities (#2690)
• 7ac9167 add back comment (#2687)
• 77dce1c Fix/2547 random stream interleaving (#2666)
• 3a7139f Fix task handler cache teardown (#2638)
• b9f176d Synchronize local activity cancellation test (#2682)
• 902937a Standalone Activities operator commands and optional payloads (#2646)
• fee1a45 Use ActivitySerializationContext for standalone activities (#2680)
• bbe58bd 💥 Rename Standalone Activity Details to StaticDetails (#2681)
• 1cc2c92 chore: bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#2679)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions