[andrewn6]

🤖 I have created a release beep boop

0.43.0

0.43.0 (2026-11-15)

Features

• deliver hitl webhooks as the restate Webhooks.Deliver service, retrying by delayed self-sends within a 24h window (7b14335)
• hitl decision, decider and run latency metrics (f1d55d3)
• hitl webhook attempts, failures, backlog, last status and dead letter metrics by endpoint host (17f7ee4)
• intervention object on restate runs approved hitl actions once and fires deadline timers (de09521)
• meter host-to-host artifact copies by bytes, duration, hosts and failures (5d54a4a)
• plan artifact moves as journal-safe jobs with retry-safe steps and a durable mover hook (932ba41)
• run approved hitl actions and deadlines as fleet steps restate can drive (6e25cca)
• run artifact moves and pull pins as restate Artifacts and ArtifactPin objects (cae984a)
• run snapshot, restore, the checkpoint chain and snapshot gc on the restate environment object (fb2f217)
• run token rotation as the restate Environment RotateToken handler (94cf618)
• split hitl webhook delivery into journal-safe steps with the endpoint sealed, a durable hook and a dead letter (8fbf8e2)
• split token rotation into journal-safe steps that carry only ciphertext, with a durable rotator hook and rotate_token op metric (2a5b3ff)

Bug Fixes

• keep partial copies and checkpoint files while a durable move may still be running (472976c)
• make chain holds exclusive and owned, retry a dropped chain's cleanup, and re-check pins before snapshot gc deletes (29db969)
• publish the webhook backlog under its lock so a stale count never lands after a newer one (f15de8c)
• refuse to pull a move source that snapshot gc is deleting (dbfa130)
• release a webhook send slot before the in-process fallback so its retries do not hold up other notifications (042139d)
• retry a rotation's persist without an attempt bound once the guest holds the new token (4eeb996)
• settle exec retries past the agent key window, queue one run send per approval, time expiry at send and meter approved lifecycle ops (4716e94)
• tell a failed move from an abandoned wait and hold move pins until the move releases them (f3e8fbd)
• upload rotated credentials one at a time in path order so a retried step keys each file as before (dc27792)
• wait on a durable token rotation without the ingress request timeout and keep server-side refusals unexported (1196b8f)

---

This PR was generated with Release Please. See documentation.

Confidence Score: 5/5

This release PR appears safe to merge.

Summary

Prepares release 0.43.0.

• Fuse and its three SDK packages now carry version 0.43.0.

_{Reviews (1) · Last reviewed commit: "chore: release main" · Reviewed by Greptile}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	fuse	5d310ed	Commit Preview URL Branch Preview URL	Nov 15 2026, 07:39 AM