chore(deps): bump github.com/dapr/dapr from 1.15.0-rc.17 to 1.15.5-rc.1

[dependabot]

Bumps github.com/dapr/dapr from 1.15.0-rc.17 to 1.15.5-rc.1.

Release notes

Sourced from github.com/dapr/dapr's releases.

Dapr Runtime v1.15.5-rc.1

This is the release candidate 1.15.5-rc.1

Dapr Runtime v1.15.4

Dapr 1.15.4

This update includes bug fixes:

• Fix degradation of Workflow runtime performance over time
• Fix remote Actor invocation 500 retry
• Fix Global Actors Enabled Configuration
• Prevent panic of reminder operations on slow Actor Startup
• Remove client-side rate limiter from Sentry
• Allow Service Account for MetalBear mirrord operator in sidecar injector
• Fix Scheduler Client connection pruning

Fix degradation of Workflow runtime performance over time

Problem

Running a Workflow app multiple times would cause the performance of the Workflow runtime to degrade significantly over multiple runs.

Impact

Workflow applications would not complete in a timely manner.

Root cause

There was an issue whereby Scheduler client (daprd) connections where not properly pruned from the connection pool for a given Namespace's appID/actorTypes set. This would lead to jobs/actor reminders being sent to stale client connections that were no longer active. This caused Jobs to fail, and enter failure policy retry loops.

Solution

Refactor the Scheduler connection pool logic to properly prune stale connections to prevent job execution occurring on stale connections and causing failure policy loops.

Fix remote Actor invocation 500 retry

Problem

An actor invocation across hosts which result in a 500 HTTP header response code would result in the request being retried 5 times.

Impact

Services which return a 500 HTTP header response code would result in requests under normal operation to return slowly, and request the service on the same request multiple times.

Root cause

The Actor engine considered a 500 HTTP header response code to be a retriable error, rather than a successful request which returned a non-200 status code.

... (truncated)

Commits

• f9e2f8a Merge pull request #8687 from JoshVanL/kit-cron-upgrade-1.15
• d0f0c36 Set only-new-issues to golangci-lint action config
• 3d77152 Update dapr/kit & diagridio/go-etcd-cron
• eb94584 Merge pull request #8640 from JoshVanL/fix-scheduler-client-close-1.15
• 8719f12 Remove inflight
• e91ce71 Make closing scheduler client connections concurrent
• fe303dd Close send on incoming scheduler client
• ae69eeb Exit loop on context cancel
• d5ec700 Ensure scheduler client jobs are drained
• 8b4d8a2 Fix return error type
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #726.