[One Workflow] Update liquidjs to version 10.26.0 and add sha256 and hmac_sha256 filters (#269989) (#271967)

Author: VladimirFilonov

package.json

@@ -1415,7 +1415,7 @@
     "langchain": "1.2.30",
     "langsmith": "0.7.1",
     "launchdarkly-js-client-sdk": "3.9.0",
-    "liquidjs": "10.25.6",
+    "liquidjs": "10.26.0",
     "lodash": "4.18.1",
     "lru-cache": "11.3.5",
     "lz-string": "1.5.0",

src/platform/plugins/shared/workflows_execution_engine/server/templating_engine.test.ts

@@ -155,6 +155,41 @@ describe('WorkflowTemplatingEngine', () => {
     });
   });
 
+  describe('sha256 filter', () => {
+    it('should return the SHA-256 hex digest (Shopify reference vector)', () => {
+      const template = '{{ text | sha256 }}';
+      const context = { text: 'Polyjuice' };
+      const result = templatingEngine.render(template, context);
+      expect(result).toBe('44ac1d7a2936e30a5de07082fd65d6fe9b1fb658a1a98bfe65bc5959beac5dd0');
+    });
+
+    it('should coerce null and undefined to empty string', () => {
+      const template = '{{ value | sha256 }}';
+      expect(templatingEngine.render(template, { value: null })).toBe(
+        'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
+      );
+      expect(templatingEngine.render(template, { value: undefined })).toBe(
+        'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
+      );
+    });
+  });
+
+  describe('hmac_sha256 filter', () => {
+    it('should return the HMAC-SHA256 hex digest (Shopify reference vector)', () => {
+      const template = '{{ text | hmac_sha256: key }}';
+      const context = { text: 'Polyjuice', key: 'Polina' };
+      const result = templatingEngine.render(template, context);
+      expect(result).toBe('8e0d5d65cff1242a4af66c8f4a32854fd5fb80edcc8aabe9b302b29c7c71dc20');
+    });
+
+    it('should stringify numeric secret keys', () => {
+      const template = '{{ text | hmac_sha256: key }}';
+      const context = { text: 'test', key: 12345 };
+      const result = templatingEngine.render(template, context);
+      expect(result).toMatch(/^[0-9a-f]{64}$/);
+    });
+  });
+
   describe('base64_encode filter with Buffer support', () => {
     it('should base64 encode a plain string', () => {
       const template = '{{ text | base64_encode }}';

src/platform/plugins/shared/workflows_management/common/lib/liquid_parse_cache.test.ts

@@ -32,6 +32,19 @@ describe('getLiquidInstance', () => {
     expect(result).toBeDefined();
   });
 
+  it('parses templates using built-in sha256 and hmac_sha256 filters', () => {
+    const engine = getLiquidInstance();
+    const shaTemplate = engine.parse('{{ val | sha256 }}');
+    expect(engine.renderSync(shaTemplate, { val: 'Polyjuice' })).toBe(
+      '44ac1d7a2936e30a5de07082fd65d6fe9b1fb658a1a98bfe65bc5959beac5dd0'
+    );
+
+    const hmacTemplate = engine.parse('{{ val | hmac_sha256: key }}');
+    expect(engine.renderSync(hmacTemplate, { val: 'Polyjuice', key: 'Polina' })).toBe(
+      '8e0d5d65cff1242a4af66c8f4a32854fd5fb80edcc8aabe9b302b29c7c71dc20'
+    );
+  });
+
   describe('json_parse filter behavior', () => {
     it('parses valid JSON strings', () => {
       const engine = getLiquidInstance();

src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/lib/autocomplete/suggestions/liquid/liquid_completions.test.ts

@@ -40,6 +40,8 @@ describe('liquid_completions', () => {
       expect(filterNames).toContain('minus');
       expect(filterNames).toContain('base64_encode');
       expect(filterNames).toContain('base64_decode');
+      expect(filterNames).toContain('sha256');
+      expect(filterNames).toContain('hmac_sha256');
     });
 
     it('should have proper structure for each filter', () => {

src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/lib/autocomplete/suggestions/liquid/liquid_completions.ts

@@ -193,6 +193,13 @@ export const LIQUID_FILTERS = [
     example:
       '{{ products | has_exp: "item", "item.price > 100" }} => true if any product has price > 100',
   },
+  {
+    name: 'hmac_sha256',
+    description: 'Returns the HMAC-SHA256 hex digest of a string using the given secret key',
+    insertText: 'hmac_sha256: "${1:secret}"',
+    example:
+      '{{ "Polyjuice" | hmac_sha256: "Polina" }} => "8e0d5d65cff1242a4af66c8f4a32854fd5fb80edcc8aabe9b302b29c7c71dc20"',
+  },
   {
     name: 'join',
     description: 'Combines the items in an array into a single string',
@@ -347,6 +354,13 @@ export const LIQUID_FILTERS = [
     insertText: 'rstrip',
     example: '{{ "hello   " | rstrip }} => "hello"',
   },
+  {
+    name: 'sha256',
+    description: 'Returns the SHA-256 hex digest of a string',
+    insertText: 'sha256',
+    example:
+      '{{ "Polyjuice" | sha256 }} => "44ac1d7a2936e30a5de07082fd65d6fe9b1fb658a1a98bfe65bc5959beac5dd0"',
+  },
   {
     name: 'shift',
     description: 'Removes the first item from an array',

src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/lib/monaco_providers/unified_hover_provider.ts

@@ -555,13 +555,13 @@ export class UnifiedHoverProvider implements monaco.languages.HoverProvider {
 
       if (templateInfo.filters.length > 0 && templateInfo.isOnFilter) {
         evaluatedPath = templateInfo.expression;
-        value = evaluateExpression({
+        value = await evaluateExpression({
           expression: templateInfo.expression,
           context: evalContext,
         });
       } else {
         evaluatedPath = templateInfo.pathUpToCursor.join('.');
-        value = evaluateExpression({
+        value = await evaluateExpression({
           expression: evaluatedPath,
           context: evalContext,
         });