Bump taskcluster from 100.2.0 to 103.0.0

[dependabot]

Bumps taskcluster from 100.2.0 to 103.0.0.

Release notes

Sourced from taskcluster's releases.

v103.0.0

DEPLOYERS

▶ [minor] The Helm chart now supports annotations on Taskcluster workload pods. Use the global podAnnotations map for every Deployment and CronJob pod. A service process's podAnnotations map is merged with the global map for that workload, with process values taking precedence for matching keys.

▶ [patch] Fixed a potential panic in websocktunnel when a worker sent a malformed ACK

▶ [patch] Websocktunnel will now close sessions when a client sends an invalid packet instead of silently ignoring it

ADMINS

▶ [patch] bug 2057491 Fixed a bug in the auth service's scope resolver where the scopes :*, ::*, :a*, :as*, :ass*, :assu*, :assum* and :assume* were expanded as if they were *

USERS

▶ [MAJOR] #8869 The client-rust AsyncWriterFactory now needs to be Send and the get_writer method now takes an optional content_length parameter that indicates what size the writer should expect. The get_writer method is also now only called when the initial request succeeded and the response stream is about to be pulled.

▶ [patch] #7590 Add UI to view audit history for client, roles, hooks, secrets

▶ [patch] Fix a potential panic in the interactive feature when a window resize was sent with fewer bytes than expected

▶ [patch] bug 2056592 Fixed a bug in the auth service where a concurrent modification conflict while creating, updating, or deleting a role was silently reported as success

▶ [patch] Fixed a bug in the auth service where purging an expired client recorded the deletion in the audit history as created instead of expired

▶ [patch] bug 2056597 Fixed a worker panic when declaring a directory artifact as an absolute path

▶ [patch] The github YAML debug route now properly reports templating issues as a 400 instead of a 500

DEVELOPERS

▶ [patch] #8533 Refreshed the Azure IMDS attested-data test fixture (services/worker-manager/test/fixtures/azure_signature_good.json), whose leaf certificate expired on 2026-07-28. The new document is signed under the post-2025 Microsoft TLS RSA Root G2 hierarchy, so the Microsoft TLS G2 RSA CA OCSP 02 and 04 intermediates are now bundled in the worker-manager Azure CA store.

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v103.0.0

DEPLOYERS

▶ [minor] The Helm chart now supports annotations on Taskcluster workload pods. Use the global podAnnotations map for every Deployment and CronJob pod. A service process's podAnnotations map is merged with the global map for that workload, with process values taking precedence for matching keys.

▶ [patch] Fixed a potential panic in websocktunnel when a worker sent a malformed ACK

▶ [patch] Websocktunnel will now close sessions when a client sends an invalid packet instead of silently ignoring it

ADMINS

▶ [patch] bug 2057491 Fixed a bug in the auth service's scope resolver where the scopes :*, ::*, :a*, :as*, :ass*, :assu*, :assum* and :assume* were expanded as if they were *

USERS

▶ [MAJOR] #8869 The client-rust AsyncWriterFactory now needs to be Send and the get_writer method now takes an optional content_length parameter that indicates what size the writer should expect. The get_writer method is also now only called when the initial request succeeded and the response stream is about to be pulled.

▶ [patch] #7590 Add UI to view audit history for client, roles, hooks, secrets

▶ [patch] Fix a potential panic in the interactive feature when a window resize was sent with fewer bytes than expected

▶ [patch] bug 2056592 Fixed a bug in the auth service where a concurrent modification conflict while creating, updating, or deleting a role was silently reported as success

▶ [patch] Fixed a bug in the auth service where purging an expired client recorded the deletion in the audit history as created instead of expired

▶ [patch] bug 2056597 Fixed a worker panic when declaring a directory artifact as an absolute path

▶ [patch] The github YAML debug route now properly reports templating issues as a 400 instead of a 500

DEVELOPERS

▶ [patch] #8533 Refreshed the Azure IMDS attested-data test fixture (services/worker-manager/test/fixtures/azure_signature_good.json), whose leaf certificate expired on 2026-07-28. The new document is signed under the post-2025 Microsoft TLS RSA Root G2 hierarchy, so the Microsoft TLS G2 RSA CA OCSP 02 and 04 intermediates are now bundled in the worker-manager Azure CA store.

... (truncated)

Commits

• 438145d v103.0.0
• 54f2a9f Merge pull request #8934 from Eijebong/fix-generic-worker-config-docker-compose
• 37dbd59 Merge pull request #8939 from taskcluster/dependabot/npm_and_yarn/postcss-8.5.24
• cb8f583 Merge pull request #8940 from taskcluster/dependabot/npm_and_yarn/tar-7.5.22
• 00fb4cc Merge pull request #8938 from taskcluster/dependabot/npm_and_yarn/clients/cli...
• 672aefe Merge pull request #8937 from taskcluster/dependabot/npm_and_yarn/ui/postcss-...
• eb56b9c Merge pull request #8936 from taskcluster/dependabot/npm_and_yarn/clients/cli...
• 975ca85 build(deps): bump tar from 7.5.20 to 7.5.22
• 36dafa3 build(deps): bump postcss from 8.5.10 to 8.5.24
• c1a7b69 build(deps): bump tar from 7.5.20 to 7.5.22 in /clients/client-web
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)