[One Workflow] Update liquidjs to version 10.26.0 and add sha256 and hmac_sha256 filters (#269989)

## Summary

Adopts Shopify-compatible `sha256` and `hmac_sha256` Liquid filters for
Workflows by upgrading [liquidjs to
10.26.0](https://github.com/harttle/liquidjs/releases/tag/v10.26.0)
([harttle/liquidjs#889](harttle/liquidjs#889)).
Filter behavior comes from liquidjs core—no custom server-side
implementations.

- **Execution (server):** Built-in filters work via
`createWorkflowLiquidEngine()` with existing `renderSync` /
`evalValueSync` (Node `crypto`).
- **Editor autocomplete:** Added `sha256` and `hmac_sha256` entries with
Shopify reference examples.
- **Hover preview (browser):** Switched `evaluateExpression` to async
`evalValue` so crypto filters resolve correctly in the browser bundle
(Web Crypto is async-only). Hover only shows evaluated filter output
when viewing an execution on the **Executions** tab and hovering on the
filter segment inside `{{ }}`.

## Changes

| Area | Change |
|------|--------|
| `package.json` / `yarn.lock` | `liquidjs` `10.25.7` → `10.26.0` |
| `liquid_completions.ts` | Autocomplete for `sha256`, `hmac_sha256` |
| `templating_engine.test.ts` | Server tests (Shopify reference vectors)
|
| `liquid_parse_cache.test.ts` | Parse/validation tests for built-in
crypto filters |
| `evaluate_expression.ts` | `evalValueSync` → `await evalValue` for
browser crypto |
| `unified_hover_provider.ts` | `await evaluateExpression(...)` |
| `evaluate_expression.test.ts` | Async tests + crypto filter coverage |

**Not changed:** `templating_engine.ts`, `liquid_parse_cache.ts` — no
`registerFilter` stubs needed for built-in filters.

## Examples:

```yaml
name: Crypto filters
enabled: true
triggers:
  - type: manual
    inputs:
      - name: message
        type: string
        default: "hello world"

consts:
  secret: "secret"

steps:
  - name: hmac_sha256
    type: console
    with:
      message: "{{ inputs.message | hmac_sha256: consts.secret }}"

  - name: sha256
    type: console
    with:
      message: "{{ inputs.message | sha256 }}"

```

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
(cherry picked from commit 79909d5)

# Conflicts:
#	package.json
#	src/platform/plugins/shared/workflows_execution_engine/server/templating_engine.test.ts
#	yarn.lock

Author: VladimirFilonov

package.json

@@ -1415,7 +1415,7 @@
     "langchain": "1.2.30",
     "langsmith": "0.7.1",
     "launchdarkly-js-client-sdk": "3.9.0",
-    "liquidjs": "10.25.6",
+    "liquidjs": "10.26.0",
     "lodash": "4.18.1",
     "lru-cache": "11.3.5",
     "lz-string": "1.5.0",

src/platform/plugins/shared/workflows_execution_engine/server/templating_engine.test.ts

@@ -155,6 +155,41 @@ describe('WorkflowTemplatingEngine', () => {
     });
   });
 
+  describe('sha256 filter', () => {
+    it('should return the SHA-256 hex digest (Shopify reference vector)', () => {
+      const template = '{{ text | sha256 }}';
+      const context = { text: 'Polyjuice' };
+      const result = templatingEngine.render(template, context);
+      expect(result).toBe('44ac1d7a2936e30a5de07082fd65d6fe9b1fb658a1a98bfe65bc5959beac5dd0');
+    });
+
+    it('should coerce null and undefined to empty string', () => {
+      const template = '{{ value | sha256 }}';
+      expect(templatingEngine.render(template, { value: null })).toBe(
+        'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
+      );
+      expect(templatingEngine.render(template, { value: undefined })).toBe(
+        'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
+      );
+    });
+  });
+
+  describe('hmac_sha256 filter', () => {
+    it('should return the HMAC-SHA256 hex digest (Shopify reference vector)', () => {
+      const template = '{{ text | hmac_sha256: key }}';
+      const context = { text: 'Polyjuice', key: 'Polina' };
+      const result = templatingEngine.render(template, context);
+      expect(result).toBe('8e0d5d65cff1242a4af66c8f4a32854fd5fb80edcc8aabe9b302b29c7c71dc20');
+    });
+
+    it('should stringify numeric secret keys', () => {
+      const template = '{{ text | hmac_sha256: key }}';
+      const context = { text: 'test', key: 12345 };
+      const result = templatingEngine.render(template, context);
+      expect(result).toMatch(/^[0-9a-f]{64}$/);
+    });
+  });
+
   describe('base64_encode filter with Buffer support', () => {
     it('should base64 encode a plain string', () => {
       const template = '{{ text | base64_encode }}';

src/platform/plugins/shared/workflows_management/common/lib/liquid_parse_cache.test.ts

@@ -32,6 +32,19 @@ describe('getLiquidInstance', () => {
     expect(result).toBeDefined();
   });
 
+  it('parses templates using built-in sha256 and hmac_sha256 filters', () => {
+    const engine = getLiquidInstance();
+    const shaTemplate = engine.parse('{{ val | sha256 }}');
+    expect(engine.renderSync(shaTemplate, { val: 'Polyjuice' })).toBe(
+      '44ac1d7a2936e30a5de07082fd65d6fe9b1fb658a1a98bfe65bc5959beac5dd0'
+    );
+
+    const hmacTemplate = engine.parse('{{ val | hmac_sha256: key }}');
+    expect(engine.renderSync(hmacTemplate, { val: 'Polyjuice', key: 'Polina' })).toBe(
+      '8e0d5d65cff1242a4af66c8f4a32854fd5fb80edcc8aabe9b302b29c7c71dc20'
+    );
+  });
+
   describe('json_parse filter behavior', () => {
     it('parses valid JSON strings', () => {
       const engine = getLiquidInstance();

src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/lib/autocomplete/suggestions/liquid/liquid_completions.test.ts

@@ -40,6 +40,8 @@ describe('liquid_completions', () => {
       expect(filterNames).toContain('minus');
       expect(filterNames).toContain('base64_encode');
       expect(filterNames).toContain('base64_decode');
+      expect(filterNames).toContain('sha256');
+      expect(filterNames).toContain('hmac_sha256');
     });
 
     it('should have proper structure for each filter', () => {

src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/lib/autocomplete/suggestions/liquid/liquid_completions.ts

@@ -193,6 +193,13 @@ export const LIQUID_FILTERS = [
     example:
       '{{ products | has_exp: "item", "item.price > 100" }} => true if any product has price > 100',
   },
+  {
+    name: 'hmac_sha256',
+    description: 'Returns the HMAC-SHA256 hex digest of a string using the given secret key',
+    insertText: 'hmac_sha256: "${1:secret}"',
+    example:
+      '{{ "Polyjuice" | hmac_sha256: "Polina" }} => "8e0d5d65cff1242a4af66c8f4a32854fd5fb80edcc8aabe9b302b29c7c71dc20"',
+  },
   {
     name: 'join',
     description: 'Combines the items in an array into a single string',
@@ -347,6 +354,13 @@ export const LIQUID_FILTERS = [
     insertText: 'rstrip',
     example: '{{ "hello   " | rstrip }} => "hello"',
   },
+  {
+    name: 'sha256',
+    description: 'Returns the SHA-256 hex digest of a string',
+    insertText: 'sha256',
+    example:
+      '{{ "Polyjuice" | sha256 }} => "44ac1d7a2936e30a5de07082fd65d6fe9b1fb658a1a98bfe65bc5959beac5dd0"',
+  },
   {
     name: 'shift',
     description: 'Removes the first item from an array',

src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/lib/monaco_providers/unified_hover_provider.ts

@@ -555,13 +555,13 @@ export class UnifiedHoverProvider implements monaco.languages.HoverProvider {
 
       if (templateInfo.filters.length > 0 && templateInfo.isOnFilter) {
         evaluatedPath = templateInfo.expression;
-        value = evaluateExpression({
+        value = await evaluateExpression({
           expression: templateInfo.expression,
           context: evalContext,
         });
       } else {
         evaluatedPath = templateInfo.pathUpToCursor.join('.');
-        value = evaluateExpression({
+        value = await evaluateExpression({
           expression: evaluatedPath,
           context: evalContext,
         });