Fix --tls=false being ignored when --api-key is present

The SDK (v1.39.0+) auto-enables TLS when API-key credentials are set,
unless ConnectionOptions.TLSDisabled is true. The envconfig package
(v0.1.0) predates this field and does not set it when TLS is explicitly
disabled, so the SDK re-enables TLS despite the user's --tls=false.

Bridge the gap by setting TLSDisabled in the CLI after
profile.ToClientOptions() when the profile has TLS explicitly disabled.

Bump cliext SDK dependency to v1.40.0

The cliext module was on go.temporal.io/sdk v1.32.1 while the root
module uses v1.40.0. This caused the ConnectionOptions.TLSDisabled
field (added in v1.39.0) to be unresolved when editing cliext.

Author: dandavison

cliext/client.go

@@ -200,6 +200,10 @@ func (b *ClientOptionsBuilder) Build(ctx context.Context) (client.Options, error
 		return client.Options{}, fmt.Errorf("failed to build client options: %w", err)
 	}
 
+	if profile.TLS != nil && profile.TLS.Disabled {
+		clientOpts.ConnectionOptions.TLSDisabled = true
+	}
+
 	// Set client authority if provided.
 	if cfg.ClientAuthority != "" {
 		clientOpts.ConnectionOptions.Authority = cfg.ClientAuthority

cliext/go.mod

@@ -7,10 +7,10 @@ require (
 	github.com/mattn/go-isatty v0.0.20
 	github.com/spf13/pflag v1.0.10
 	github.com/stretchr/testify v1.10.0
-	go.temporal.io/sdk v1.32.1
+	go.temporal.io/sdk v1.40.0
 	go.temporal.io/sdk/contrib/envconfig v0.1.0
 	golang.org/x/oauth2 v0.33.0
-	google.golang.org/grpc v1.66.0
+	google.golang.org/grpc v1.67.1
 )
 
 require (
@@ -19,22 +19,20 @@ require (
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang/mock v1.6.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 // indirect
+	github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.22.0 // indirect
-	github.com/nexus-rpc/sdk-go v0.3.0 // indirect
-	github.com/pborman/uuid v1.2.1 // indirect
+	github.com/nexus-rpc/sdk-go v0.5.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/robfig/cron v1.2.0 // indirect
 	github.com/stretchr/objx v0.5.2 // indirect
-	go.temporal.io/api v1.44.1 // indirect
-	golang.org/x/exp v0.0.0-20231127185646-65229373498e // indirect
-	golang.org/x/net v0.38.0 // indirect
-	golang.org/x/sync v0.12.0 // indirect
-	golang.org/x/sys v0.31.0 // indirect
-	golang.org/x/text v0.23.0 // indirect
+	go.temporal.io/api v1.62.1 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/sync v0.13.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20240827150818-7e3bb234dfed // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240827150818-7e3bb234dfed // indirect
-	google.golang.org/protobuf v1.34.2 // indirect
+	google.golang.org/protobuf v1.36.6 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )