[rmcdaniel]

Repins the qualified tuple's Server to 3.0.4 (durableworkflow/server:3.0.4@sha256:013010476b78f37038ac09d9498a95cdbf5ae7896111c321b2d4a2aac2f81f6b, Security-accepted publication, server#991), and updates the README. Everything else stays as in #300 (Workflow 2.17.1, Waterline 2.13.2, PHP SDK 3.8.1, Python 2.13.0, Rust 4.10.3, CLI 2.3.3). The full CI, including all nine activity-recovery directions, requalifies the tuple on 3.0.4.

🤖 Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[rmcdaniel]

The activity-recovery and external-effects failures on 47d519d were not a Server 3.0.4 runtime regression or a flake. Both jobs stopped at the Server image check in scripts/sdk-activity-recovery.sh, before any scenario ran: every container reached Healthy, then the script exited 1 under set -e with no message. The check required the label dev.durable-workflow.release.tag to be native-<version>. The 3.0.2 image carries native-3.0.2; 3.0.4 carries 3.0.4, because native releases use plain X.Y.Z tags from 3.0.3 (durable-workflow/server#972, a deliberate release-tooling change).

b3eb8b6 makes the check accept either form and print a mismatch. With it, external-effects passes, activity-recovery passes all 45 cases (nine directions × five scenarios), and all 36 checks on the PR pass.