JD Davis
01161fe019
test(openclaw): match inherited PATH shell check ( #2821 )
...
## Description
Fix the OpenClaw test failure on `main` by aligning its PATH-launcher
expectation with the intentionally shipped `sh -c` behavior from #1459 .
The non-login shell preserves the PATH inherited from the OpenClaw
process. Changing production code back to `sh -lc` would risk a login
shell resetting that PATH and would undo the compatibility fix. This PR
therefore corrects only the stale assertion; runtime behavior and
defaults do not change.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- Expect `sh -c` for the non-Windows lightweight `command -v headroom`
check.
- Preserve the existing Windows `where.exe` behavior and all launcher
behavior.
## Testing
- [x] Unit tests pass (`npm test`)
- [x] Linting passes (`npm run typecheck`)
- [x] Type checking passes (`npm run typecheck`)
- [ ] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
$ npm test
Test Files 6 passed (6)
Tests 75 passed (75)
$ npm run typecheck
> tsc --noEmit
$ npm run build
ESM Build success
DTS Build success
$ npm ci
found 0 vulnerabilities
```
## Real Behavior Proof
- Environment: macOS, Node/npm, clean install from `origin/main` at
`2954e37048#1459 deliberately changed `sh -lc` to `sh -c` while
adding explicit uv-tool path detection. Reverting the implementation
would change runtime discovery semantics; updating the stale test
preserves the accepted behavior.
Co-authored-by: JD Davis <jd@jds-macbook-air.tail2a279.ts.net>
2026-08-06 19:21:52 -07:00
dependabot[bot]
cd60ee9ae8
deps: bump postcss from 8.5.19 to 8.5.25 in /plugins/openclaw ( #2749 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.19 to
8.5.25.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.25</h2>
<ul>
<li>Fixed 8.5.17 visitor regression.</li>
<li>Fixed <code>list.split()</code> for non-string values (by <a
href="https://github.com/amir-rezaei "><code>@amir-rezaei</code></a>).</li>
</ul>
<h2>8.5.24</h2>
<ul>
<li>Preserve the BOM after the processing (by <a
href="https://github.com/hdimer "><code>@hdimer</code></a>).</li>
</ul>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker "><code>@isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.25</h2>
<ul>
<li>Fixed 8.5.17 visitor regression.</li>
<li>Fixed <code>list.split()</code> for non-string values (by <a
href="https://github.com/amir-rezaei "><code>@amir-rezaei</code></a>).</li>
</ul>
<h2>8.5.24</h2>
<ul>
<li>Preserve the BOM after the processing (by <a
href="https://github.com/hdimer "><code>@hdimer</code></a>).</li>
</ul>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker "><code>@isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="08c989c43c24f6814716f2fa53f11d10edf0b060https://redirect.github.com/postcss/postcss/issues/2121 ">#2121</a>)</li>
<li><a
href="0ebe8ad59173218c64249a114f62b0https://redirect.github.com/postcss/postcss/issues/2119 ">#2119</a>)</li>
<li><a
href="9069261912eb9e1fe7939d19c78ac9https://github.com/postcss/postcss/compare/8.5.19...8.5.25 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/headroomlabs-ai/headroom/network/alerts ).
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:58:42 -05:00
Tejas Chopra
9fd5ae3d53
chore: release main ( #2679 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.34.0</summary>
##
[0.34.0](https://github.com/headroomlabs-ai/headroom/compare/v0.33.0...v0.34.0 )
(2026-08-05)
### Features
* **claude:** support Claude Code in VS Code
([#2752 ](https://github.com/headroomlabs-ai/headroom/issues/2752 ))
([13a310a13a310a00d#2423 ](https://github.com/headroomlabs-ai/headroom/issues/2423 ))
([6d5516d6d5516dcb8#2718 ](https://github.com/headroomlabs-ai/headroom/issues/2718 ))
([27970992797099bec#2691 ](https://github.com/headroomlabs-ai/headroom/issues/2691 ))
([f2c48e2f2c48e26c6#2687 ](https://github.com/headroomlabs-ai/headroom/issues/2687 ))
([007446c007446c73a#2694 ](https://github.com/headroomlabs-ai/headroom/issues/2694 ))
([#2703 ](https://github.com/headroomlabs-ai/headroom/issues/2703 ))
([3e348f33e348f327f#2745 ](https://github.com/headroomlabs-ai/headroom/issues/2745 ))
([3f2ca993f2ca99fe1#2698 ](https://github.com/headroomlabs-ai/headroom/issues/2698 ))
([dcb674bdcb674b5e4#2743 ](https://github.com/headroomlabs-ai/headroom/issues/2743 ))
([6422a806422a80a58#2757 ](https://github.com/headroomlabs-ai/headroom/issues/2757 ))
([a033ac4a033ac4176#2753 ](https://github.com/headroomlabs-ai/headroom/issues/2753 ))
([0221e7f0221e7f240#2736 ](https://github.com/headroomlabs-ai/headroom/issues/2736 ))
([3d23d763d23d76248#2716 ](https://github.com/headroomlabs-ai/headroom/issues/2716 ))
([46da91b46da91b2f1#2740 ](https://github.com/headroomlabs-ai/headroom/issues/2740 ))
([224578e224578e80b#2275 ](https://github.com/headroomlabs-ai/headroom/issues/2275 ))
([3eb01223eb0122068#2731 ](https://github.com/headroomlabs-ai/headroom/issues/2731 ))
([a70e5ffa70e5ff78d#2379 ](https://github.com/headroomlabs-ai/headroom/issues/2379 ))
([789a4f3789a4f3060#2761 ](https://github.com/headroomlabs-ai/headroom/issues/2761 ))
([cd92ed5cd92ed52ff#2762 ](https://github.com/headroomlabs-ai/headroom/issues/2762 ))
([0cb72f40cb72f45b2#2760 ](https://github.com/headroomlabs-ai/headroom/issues/2760 ))
([06add9e06add9e9d8#2713 ](https://github.com/headroomlabs-ai/headroom/issues/2713 ))
([#2725 ](https://github.com/headroomlabs-ai/headroom/issues/2725 ))
([01df24501df245252#2711 ](https://github.com/headroomlabs-ai/headroom/issues/2711 ))
([3a27c4d3a27c4dacb#2741 ](https://github.com/headroomlabs-ai/headroom/issues/2741 ))
([f9db5b5f9db5b5060#2709 ](https://github.com/headroomlabs-ai/headroom/issues/2709 ))
([232fb49232fb49c73#2729 ](https://github.com/headroomlabs-ai/headroom/issues/2729 ))
([56b3e4c56b3e4c1b1#2672 ](https://github.com/headroomlabs-ai/headroom/issues/2672 ))
([08fce2908fce29b47#2677 ](https://github.com/headroomlabs-ai/headroom/issues/2677 ))
([e0ce4b1e0ce4b1d48#2778 ](https://github.com/headroomlabs-ai/headroom/issues/2778 ))
([f03cc6df03cc6d88b#2708 ](https://github.com/headroomlabs-ai/headroom/issues/2708 ))
([184146b184146b688#2737 ](https://github.com/headroomlabs-ai/headroom/issues/2737 ))
([8262a4a8262a4a321#2728 ](https://github.com/headroomlabs-ai/headroom/issues/2728 ))
([9cfb0089cfb00838a#2756 ](https://github.com/headroomlabs-ai/headroom/issues/2756 ))
([04e151704e1517ede#2758 ](https://github.com/headroomlabs-ai/headroom/issues/2758 ))
([0ed306b0ed306b22b#2776 ](https://github.com/headroomlabs-ai/headroom/issues/2776 ))
([fc4680bfc4680b37a#2654 ](https://github.com/headroomlabs-ai/headroom/issues/2654 ))
([677e097677e09735a#2676 ](https://github.com/headroomlabs-ai/headroom/issues/2676 ))
([759209c759209cff3#2779 ](https://github.com/headroomlabs-ai/headroom/issues/2779 ))
([0e1d6bf0e1d6bfa79#2692 ](https://github.com/headroomlabs-ai/headroom/issues/2692 ))
([b7a79acb7a79ac31ahttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-04 19:39:34 -07:00
Tejas Chopra
28aa53dc7c
chore: release main ( #2339 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.33.0</summary>
##
[0.33.0](https://github.com/headroomlabs-ai/headroom/compare/v0.32.0...v0.33.0 )
(2026-07-29)
### Features
* **lossless:** factor shared directory prefix in the grep search fold
([#2547 ](https://github.com/headroomlabs-ai/headroom/issues/2547 ))
([7dc9a977dc9a978ca#2371 ](https://github.com/headroomlabs-ai/headroom/issues/2371 ))
([02eb90f02eb90f243#2601 ](https://github.com/headroomlabs-ai/headroom/issues/2601 ))
([f54f04ff54f04f5bf#2441 ](https://github.com/headroomlabs-ai/headroom/issues/2441 ))
([#2445 ](https://github.com/headroomlabs-ai/headroom/issues/2445 ))
([9089e7f9089e7f7d3#2549 ](https://github.com/headroomlabs-ai/headroom/issues/2549 ))
([a6d4921a6d4921e82#2546 ](https://github.com/headroomlabs-ai/headroom/issues/2546 ))
([9f1ffef9f1ffefe83#2377 ](https://github.com/headroomlabs-ai/headroom/issues/2377 ))
([d7a8cdbd7a8cdbee1#2458 ](https://github.com/headroomlabs-ai/headroom/issues/2458 ))
([1329ed71329ed7f1a#2555 ](https://github.com/headroomlabs-ai/headroom/issues/2555 ))
([cb8f4b6cb8f4b6436#2388 ](https://github.com/headroomlabs-ai/headroom/issues/2388 ))
([e3c7964e3c7964038#2373 ](https://github.com/headroomlabs-ai/headroom/issues/2373 ))
([56c7d4a56c7d4a59e#334 ](https://github.com/headroomlabs-ai/headroom/issues/334 ))
([#2378 ](https://github.com/headroomlabs-ai/headroom/issues/2378 ))
([9e077859e0778553f#1154 ](https://github.com/headroomlabs-ai/headroom/issues/1154 ))
([e530de5e530de5ad2#1153 ](https://github.com/headroomlabs-ai/headroom/issues/1153 ))
([83e27e583e27e5036#2450 ](https://github.com/headroomlabs-ai/headroom/issues/2450 ))
([bec4ccebec4cce8a9#2400 ](https://github.com/headroomlabs-ai/headroom/issues/2400 ))
([7ebda677ebda67ef6#2370 ](https://github.com/headroomlabs-ai/headroom/issues/2370 ))
([a02073ea02073e332#2411 ](https://github.com/headroomlabs-ai/headroom/issues/2411 ))
([446ec26446ec26003#2404 ](https://github.com/headroomlabs-ai/headroom/issues/2404 ))
([7c7bf437c7bf43057#2391 ](https://github.com/headroomlabs-ai/headroom/issues/2391 ))
([981616c981616c60e#2425 ](https://github.com/headroomlabs-ai/headroom/issues/2425 ))
([fd0e1a8fd0e1a8afe#2413 ](https://github.com/headroomlabs-ai/headroom/issues/2413 ))
([6e4425a6e4425a6bd#2548 ](https://github.com/headroomlabs-ai/headroom/issues/2548 ))
([c990cfbc990cfb803#2322 ](https://github.com/headroomlabs-ai/headroom/issues/2322 ))
([44a174f44a174fef4#2484 ](https://github.com/headroomlabs-ai/headroom/issues/2484 ))
([43a7b5743a7b578a1#2651 ](https://github.com/headroomlabs-ai/headroom/issues/2651 ))
([e0d2cd0e0d2cd0c5a#2382 ](https://github.com/headroomlabs-ai/headroom/issues/2382 ))
([8906d3a8906d3a676#2389 ](https://github.com/headroomlabs-ai/headroom/issues/2389 ))
([89319fb89319fbcad#2604 ](https://github.com/headroomlabs-ai/headroom/issues/2604 ))
([#2631 ](https://github.com/headroomlabs-ai/headroom/issues/2631 ))
([e825588e825588bfb#2406 ](https://github.com/headroomlabs-ai/headroom/issues/2406 ))
([2bb14d12bb14d1ab2#2238 ](https://github.com/headroomlabs-ai/headroom/issues/2238 ))
([#2571 ](https://github.com/headroomlabs-ai/headroom/issues/2571 ))
([904bc67904bc675b3#2478 ](https://github.com/headroomlabs-ai/headroom/issues/2478 ))
([46293f446293f4daf#2597 ](https://github.com/headroomlabs-ai/headroom/issues/2597 ))
([18e1c3c18e1c3c9ba#800 ](https://github.com/headroomlabs-ai/headroom/issues/800 ))
([#2511 ](https://github.com/headroomlabs-ai/headroom/issues/2511 ))
([4a8157f4a8157fa0a#2441 ](https://github.com/headroomlabs-ai/headroom/issues/2441 ))
([#2455 ](https://github.com/headroomlabs-ai/headroom/issues/2455 ))
([2eca5ee2eca5ee114#2409 ](https://github.com/headroomlabs-ai/headroom/issues/2409 ))
([#2414 ](https://github.com/headroomlabs-ai/headroom/issues/2414 ))
([c400f90c400f90810#2348 ](https://github.com/headroomlabs-ai/headroom/issues/2348 ))
([a90be94a90be94e32#2514 ](https://github.com/headroomlabs-ai/headroom/issues/2514 ))
([e4076bbe4076bbe99#2513 ](https://github.com/headroomlabs-ai/headroom/issues/2513 ))
([#2536 ](https://github.com/headroomlabs-ai/headroom/issues/2536 ))
([2a63ec72a63ec70b6#2429 ](https://github.com/headroomlabs-ai/headroom/issues/2429 ))
([170b04a170b04a74d#1893 ](https://github.com/headroomlabs-ai/headroom/issues/1893 )
follow-up)
([#2563 ](https://github.com/headroomlabs-ai/headroom/issues/2563 ))
([b121223b121223ec9#2427 ](https://github.com/headroomlabs-ai/headroom/issues/2427 ))
([17ff13c17ff13ccbe#2527 ](https://github.com/headroomlabs-ai/headroom/issues/2527 ))
([045f3df045f3dfe6f#2456 ](https://github.com/headroomlabs-ai/headroom/issues/2456 ))
([5bd22665bd2266f16#2587 ](https://github.com/headroomlabs-ai/headroom/issues/2587 ))
([f74d874f74d874777#2596 ](https://github.com/headroomlabs-ai/headroom/issues/2596 ))
([85e869985e8699451#2446 ](https://github.com/headroomlabs-ai/headroom/issues/2446 ))
([a09ba6ca09ba6c087#2642 ](https://github.com/headroomlabs-ai/headroom/issues/2642 ))
([b3f016bb3f016b866#2639 ](https://github.com/headroomlabs-ai/headroom/issues/2639 ))
([22b707f22b707fd31#2545 ](https://github.com/headroomlabs-ai/headroom/issues/2545 ))
([0845b260845b26ee6#2504 ](https://github.com/headroomlabs-ai/headroom/issues/2504 ))
([#2535 ](https://github.com/headroomlabs-ai/headroom/issues/2535 ))
([fa47637fa4763761b#2347 ](https://github.com/headroomlabs-ai/headroom/issues/2347 ))
([f64aac9f64aac9733#2486 ](https://github.com/headroomlabs-ai/headroom/issues/2486 ))
([07cf54707cf547607#2439 ](https://github.com/headroomlabs-ai/headroom/issues/2439 ))
([4aac0684aac068814#2420 ](https://github.com/headroomlabs-ai/headroom/issues/2420 ))
([7052d527052d52dcb#2493 ](https://github.com/headroomlabs-ai/headroom/issues/2493 ))
([2195ba72195ba7d91#2333 ](https://github.com/headroomlabs-ai/headroom/issues/2333 ))
([6cdfd3f6cdfd3f64d#2431 ](https://github.com/headroomlabs-ai/headroom/issues/2431 ))
([313c290313c290df9#2410 ](https://github.com/headroomlabs-ai/headroom/issues/2410 ))
([#2415 ](https://github.com/headroomlabs-ai/headroom/issues/2415 ))
([0cbc0e80cbc0e8e54#2435 ](https://github.com/headroomlabs-ai/headroom/issues/2435 ))
([3e976713e976712e7#2520 ](https://github.com/headroomlabs-ai/headroom/issues/2520 ))
([c371d5ac371d5ad60#2542 ](https://github.com/headroomlabs-ai/headroom/issues/2542 ))
([1cc53c91cc53c9c92#2481 ](https://github.com/headroomlabs-ai/headroom/issues/2481 ))
([77b26c077b26c093c#2479 ](https://github.com/headroomlabs-ai/headroom/issues/2479 ))
([a2e42fba2e42fb877#2647 ](https://github.com/headroomlabs-ai/headroom/issues/2647 ))
([1d297381d29738818#2498 ](https://github.com/headroomlabs-ai/headroom/issues/2498 ))
([806d2e4806d2e468a#2402 ](https://github.com/headroomlabs-ai/headroom/issues/2402 ))
([54526bc54526bc858#2449 ](https://github.com/headroomlabs-ai/headroom/issues/2449 ))
([8c8fae08c8fae0d0b#2564 ](https://github.com/headroomlabs-ai/headroom/issues/2564 ))
([d50cfabd50cfabedc#2401 ](https://github.com/headroomlabs-ai/headroom/issues/2401 ))
([d6a1af4d6a1af40d5#112 ](https://github.com/headroomlabs-ai/headroom/issues/112 ))
([#2405 ](https://github.com/headroomlabs-ai/headroom/issues/2405 ))
([f9cbdd6f9cbdd6e39#2659 ](https://github.com/headroomlabs-ai/headroom/issues/2659 ))
([5383c6b5383c6bf2f#2634 ](https://github.com/headroomlabs-ai/headroom/issues/2634 ))
([e86c639e86c6390ce#2342 ](https://github.com/headroomlabs-ai/headroom/issues/2342 ))
([494fb5a494fb5a60e#2543 ](https://github.com/headroomlabs-ai/headroom/issues/2543 ))
([285176b285176be54#2369 ](https://github.com/headroomlabs-ai/headroom/issues/2369 ))
([f4070c4f4070c44cb#2320 ](https://github.com/headroomlabs-ai/headroom/issues/2320 ))
([b759990b75999017f#2383 ](https://github.com/headroomlabs-ai/headroom/issues/2383 ))
([f57e959f57e959a50#2344 ](https://github.com/headroomlabs-ai/headroom/issues/2344 ))
([44136ed44136ed042#2574 ](https://github.com/headroomlabs-ai/headroom/issues/2574 ))
([0994ea00994ea04c8#2340 ](https://github.com/headroomlabs-ai/headroom/issues/2340 ))
([#2350 ](https://github.com/headroomlabs-ai/headroom/issues/2350 ))
([cf5fa64cf5fa644b6#2419 ](https://github.com/headroomlabs-ai/headroom/issues/2419 ))
([9b016f29b016f2b64#2284 ](https://github.com/headroomlabs-ai/headroom/issues/2284 ))
([3266ed73266ed7641#2276 ](https://github.com/headroomlabs-ai/headroom/issues/2276 ))
([961866b961866ba7c#2399 ](https://github.com/headroomlabs-ai/headroom/issues/2399 ))
([fc9c63ffc9c63f18c#2499 ](https://github.com/headroomlabs-ai/headroom/issues/2499 ))
([5d23a0a5d23a0aec2https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-29 15:54:23 -07:00
dependabot[bot]
961866ba7c
deps: bump the npm-minor-patch group across 3 directories with 7 updates ( #2276 )
...
Bumps the npm-minor-patch group with 6 updates in the /docs directory:
| Package | From | To |
| --- | --- | --- |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs ) | `16.11.1` |
`16.11.5` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs ) | `15.1.0` |
`15.2.0` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs ) | `16.11.1` |
`16.11.5` |
|
[@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript )
| `0.106.0` | `0.111.0` |
| [openai](https://github.com/openai/openai-node ) | `6.33.0` | `6.47.0`
|
| [postcss](https://github.com/postcss/postcss ) | `8.5.16` | `8.5.19` |
Bumps the npm-minor-patch group with 1 update in the /plugins/opencode
directory: @opencode-ai/plugin.
Bumps the npm-minor-patch group with 1 update in the /sdk/typescript
directory:
[@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript ).
Updates `fumadocs-core` from 16.11.1 to 16.11.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52af6cf292https://redirect.github.com/fuma-nama/fumadocs/issues/3416 ">#3416</a>
from fuma-nama/tegami/version-packages</li>
<li><a
href="efc9d18402368a92e3a213dfdbc22463623320b5126a74d995430254caab1862822aa5d3710a9614ba78b0177bhttps://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.1...fumadocs@16.11.5 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-mdx` from 15.1.0 to 15.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fuma-nama/fumadocs/releases ">fumadocs-mdx's
releases</a>.</em></p>
<blockquote>
<h2>fumadocs-mdx@15.2.0</h2>
<h3>Support Macro API</h3>
<p>Use <code>fumadocs-mdx/macro</code> to define collections, and enable
the macro-style API from bundler plugin (e.g. <code>createMDX</code>)
using the <code>include</code> option.</p>
<h2>fumadocs-mdx@15.1.1</h2>
<h3>Migrate from <code>js-yaml</code> to <code>yaml</code></h3>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52af6cf292https://redirect.github.com/fuma-nama/fumadocs/issues/3416 ">#3416</a>
from fuma-nama/tegami/version-packages</li>
<li><a
href="efc9d18402368a92e3a213dfdbc22463623320b5126a74d995430254caab1862822aa5d3710a9614ba78b0177bhttps://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.1.0...fumadocs-mdx@15.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-ui` from 16.11.1 to 16.11.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52af6cf292https://redirect.github.com/fuma-nama/fumadocs/issues/3416 ">#3416</a>
from fuma-nama/tegami/version-packages</li>
<li><a
href="efc9d18402368a92e3a213dfdbc22463623320b5126a74d995430254caab1862822aa5d3710a9614ba78b0177bhttps://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.1...fumadocs@16.11.5 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@anthropic-ai/sdk` from 0.106.0 to 0.111.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/releases ">@anthropic-ai/sdk's
releases</a>.</em></p>
<blockquote>
<h2>sdk: v0.111.0</h2>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md ">@anthropic-ai/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for claude-sonnet-5 (<a
href="4588db01ec9e467606888d461ea9629436e291590aec1e748bac2fc6779dc8af65d6af2a3a9042ab57c56c91724f2eb80719https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1107 ">#1107</a>)</li>
<li><a
href="96d1a991b6https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1106 ">#1106</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.106.0...sdk-v0.111.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `openai` from 6.33.0 to 6.47.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/openai/openai-node/releases ">openai's
releases</a>.</em></p>
<blockquote>
<h2>v6.47.0</h2>
<h2>6.47.0 (2026-07-14)</h2>
<p>Full Changelog: <a
href="https://github.com/openai/openai-node/compare/v6.46.0...v6.47.0 ">v6.46.0...v6.47.0</a></p>
<h3>Features</h3>
<ul>
<li>add async event iterators (<a
href="https://redirect.github.com/openai/openai-node/issues/1977 ">#1977</a>)
(<a
href="2ece8aa848https://redirect.github.com/openai/openai-node/issues/1987 ">#1987</a>)
(<a
href="5984f442e07bfce973a1https://redirect.github.com/openai/openai-node/issues/1973 ">#1973</a>)
(<a
href="a6f01e53dehttps://redirect.github.com/openai/openai-node/issues/1970 ">#1970</a>)
(<a
href="a86f1fde30https://redirect.github.com/openai/openai-node/issues/1994 ">#1994</a>)
(<a
href="1cdc0196b4https://redirect.github.com/openai/openai-node/issues/1980 ">#1980</a>)
(<a
href="ae17127effhttps://redirect.github.com/openai/openai-node/issues/984 ">#984</a></li>
<li><strong>ci:</strong> bump <code>@arethetypeswrong/cli</code> to
^0.18.0 and run CI workflows on Node 24 (<a
href="baa0b2ad90https://redirect.github.com/openai/openai-node/issues/1972 ">#1972</a>)
(<a
href="9555b71ab8https://redirect.github.com/openai/openai-node/issues/1982 ">#1982</a>)
(<a
href="c1c5c28267https://redirect.github.com/openai/openai-node/issues/1015 ">#1015</a></li>
<li><strong>zod:</strong> support zod v4 mini schemas (<a
href="https://redirect.github.com/openai/openai-node/issues/1985 ">#1985</a>)
(<a
href="2df10fc19ahttps://redirect.github.com/openai/openai-node/issues/1988 ">#1988</a>)
(<a
href="373b08ac3bhttps://github.com/openai/openai-node/compare/v6.45.0...v6.46.0 ">v6.45.0...v6.46.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> gpt-5.6-sol updates (<a
href="6c397d5d28https://redirect.github.com/openai/openai-node/issues/1963 ">#1963</a>)
(<a
href="0e18d30a31https://redirect.github.com/openai/openai-node/issues/1958 ">#1958</a>)
(<a
href="6371623aadhttps://redirect.github.com/openai/openai-node/issues/1967 ">#1967</a>)
(<a
href="95b54e5894https://redirect.github.com/openai/openai-node/issues/1975 ">#1975</a>)
(<a
href="90a72e5345https://redirect.github.com/openai/openai-node/issues/701 ">#701</a></li>
<li>document assistant stream failures (<a
href="https://redirect.github.com/openai/openai-node/issues/1979 ">#1979</a>)
(<a
href="d93fbe5bc5https://redirect.github.com/openai/openai-node/issues/959 ">#959</a></li>
<li>document file search result limits (<a
href="https://redirect.github.com/openai/openai-node/issues/1981 ">#1981</a>)
(<a
href="e9dc283dcehttps://redirect.github.com/openai/openai-node/issues/1004 ">#1004</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/openai/openai-node/blob/main/CHANGELOG.md ">openai's
changelog</a>.</em></p>
<blockquote>
<h2>6.47.0 (2026-07-14)</h2>
<p>Full Changelog: <a
href="https://github.com/openai/openai-node/compare/v6.46.0...v6.47.0 ">v6.46.0...v6.47.0</a></p>
<h3>Features</h3>
<ul>
<li>add async event iterators (<a
href="https://redirect.github.com/openai/openai-node/issues/1977 ">#1977</a>)
(<a
href="2ece8aa848https://redirect.github.com/openai/openai-node/issues/1987 ">#1987</a>)
(<a
href="5984f442e07bfce973a1https://redirect.github.com/openai/openai-node/issues/1973 ">#1973</a>)
(<a
href="a6f01e53dehttps://redirect.github.com/openai/openai-node/issues/1970 ">#1970</a>)
(<a
href="a86f1fde30https://redirect.github.com/openai/openai-node/issues/1994 ">#1994</a>)
(<a
href="1cdc0196b4https://redirect.github.com/openai/openai-node/issues/1980 ">#1980</a>)
(<a
href="ae17127effhttps://redirect.github.com/openai/openai-node/issues/984 ">#984</a></li>
<li><strong>ci:</strong> bump <code>@arethetypeswrong/cli</code> to
^0.18.0 and run CI workflows on Node 24 (<a
href="baa0b2ad90https://redirect.github.com/openai/openai-node/issues/1972 ">#1972</a>)
(<a
href="9555b71ab8https://redirect.github.com/openai/openai-node/issues/1982 ">#1982</a>)
(<a
href="c1c5c28267https://redirect.github.com/openai/openai-node/issues/1015 ">#1015</a></li>
<li><strong>zod:</strong> support zod v4 mini schemas (<a
href="https://redirect.github.com/openai/openai-node/issues/1985 ">#1985</a>)
(<a
href="2df10fc19ahttps://redirect.github.com/openai/openai-node/issues/1988 ">#1988</a>)
(<a
href="373b08ac3bhttps://github.com/openai/openai-node/compare/v6.45.0...v6.46.0 ">v6.45.0...v6.46.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> gpt-5.6-sol updates (<a
href="6c397d5d28https://redirect.github.com/openai/openai-node/issues/1963 ">#1963</a>)
(<a
href="0e18d30a31https://redirect.github.com/openai/openai-node/issues/1958 ">#1958</a>)
(<a
href="6371623aadhttps://redirect.github.com/openai/openai-node/issues/1967 ">#1967</a>)
(<a
href="95b54e5894https://redirect.github.com/openai/openai-node/issues/1975 ">#1975</a>)
(<a
href="90a72e5345https://redirect.github.com/openai/openai-node/issues/701 ">#701</a></li>
<li>document assistant stream failures (<a
href="https://redirect.github.com/openai/openai-node/issues/1979 ">#1979</a>)
(<a
href="d93fbe5bc5https://redirect.github.com/openai/openai-node/issues/959 ">#959</a></li>
<li>document file search result limits (<a
href="https://redirect.github.com/openai/openai-node/issues/1981 ">#1981</a>)
(<a
href="e9dc283dcehttps://redirect.github.com/openai/openai-node/issues/1004 ">#1004</a></li>
</ul>
<h2>6.45.0 (2026-06-24)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6255405380https://redirect.github.com/openai/openai-node/issues/1989 ">#1989</a>)</li>
<li><a
href="1cdc0196b4https://redirect.github.com/openai/openai-node/issues/1994 ">#1994</a>)</li>
<li><a
href="ec2f57fd0dhttps://redirect.github.com/openai/openai-node/issues/1984 ">#1984</a>)</li>
<li><a
href="2df10fc19ahttps://redirect.github.com/openai/openai-node/issues/1985 ">#1985</a>)</li>
<li><a
href="ebb649811dhttps://redirect.github.com/openai/openai-node/issues/1986 ">#1986</a>)</li>
<li><a
href="5984f442e0https://redirect.github.com/openai/openai-node/issues/1987 ">#1987</a>)</li>
<li><a
href="373b08ac3bhttps://redirect.github.com/openai/openai-node/issues/1988 ">#1988</a>)</li>
<li><a
href="a6f01e53dehttps://redirect.github.com/openai/openai-node/issues/1973 ">#1973</a>)</li>
<li><a
href="53e580efb6https://redirect.github.com/openai/openai-node/issues/1976 ">#1976</a>)</li>
<li><a
href="a86f1fde30https://redirect.github.com/openai/openai-node/issues/1970 ">#1970</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/openai/openai-node/compare/v6.33.0...v6.47.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `postcss` from 8.5.16 to 8.5.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media "><code>@chatman-media</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media "><code>@chatman-media</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9543b227693d13bf936000d0dd2322https://redirect.github.com/postcss/postcss/issues/2111 ">#2111</a>)</li>
<li><a
href="7a05b33e7a4c0d194c1392b4e7891e95663d3eb774e25ae9f4d1518afd5a2421312ffehttps://github.com/postcss/postcss/compare/8.5.16...8.5.19 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@opencode-ai/plugin` from 1.17.16 to 1.18.2
Updates `@anthropic-ai/sdk` from 0.110.0 to 0.111.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/releases ">@anthropic-ai/sdk's
releases</a>.</em></p>
<blockquote>
<h2>sdk: v0.111.0</h2>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md ">@anthropic-ai/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for claude-sonnet-5 (<a
href="4588db01ec9e467606888d461ea9629436e291590aec1e748bac2fc6779dc8af65d6af2a3a9042ab57c56c91724f2eb80719https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1107 ">#1107</a>)</li>
<li><a
href="96d1a991b6https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1106 ">#1106</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.106.0...sdk-v0.111.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 11:21:14 -05:00
Tejas Chopra
4381388d56
chore: release main ( #1923 )
...
## Description
Release Please generated the 0.33.0 release PR for main. This updates
release metadata, package versions, and the generated changelog for the
0.33.0 release.
I also aligned the agent-hook plugin manifests, marketplace metadata,
editable lockfile package version, and canonical MCP `server.json`
descriptor to 0.33.0 so all package/plugin/registry version declarations
match the Release Please version bump.
## Type of Change
- [x] Documentation update
- [x] Release / packaging metadata
## Changes Made
- Updated `.release-please-manifest.json`, `pyproject.toml`,
`plugins/openclaw/package.json`, and `sdk/typescript/package.json` to
0.33.0.
- Updated the generated `CHANGELOG.md` release notes for 0.33.0.
- Synced `plugins/headroom-agent-hooks` plugin manifests and marketplace
metadata to 0.33.0.
- Synced `uv.lock` editable `headroom-ai` package version to 0.33.0.
- Regenerated the canonical MCP `server.json` descriptor to 0.33.0.
## Testing
- [x] Version verification passes
- [x] Version-sync tests pass
- [x] MCP server descriptor test passes
- [x] Whitespace check passes
### Test Output
```text
uv run python scripts/verify-versions.py
All versions aligned at 0.33.0
uv run pytest scripts/tests/test_version_sync.py scripts/tests/test_sync_plugin_versions.py -q
14 passed in 0.80s
uv run pytest tests/test_mcp_registry/test_server_json.py -q
4 passed in 0.42s
git diff --check
# no output
```
## Real Behavior Proof
- Environment: Windows 11, local checkout of the Release Please branch.
- Exact command / steps: Ran version verification and MCP descriptor
tests after syncing release metadata, plugin marketplace versions,
lockfile version, and `server.json`.
- Observed result: All package, plugin manifest, marketplace, lockfile,
and MCP descriptor release versions are aligned at 0.33.0.
2026-07-16 21:27:08 -07:00
Tejas Chopra
63945abe3a
chore: sync version state to released 0.31.0 to unblock release-please (v0.32.0) ( #2338 )
...
## Description
**Fixes the Release Please pipeline so it emits `v0.32.0`.** pip /
Docker / npm are out of sync because 0.32.0 was never actually released.
### Root cause
Same failure mode as #1916 . #2175 (a `fix(deps)` PR) bumped
`pyproject.toml` + `.release-please-manifest.json` to **0.32.0
out-of-band**, so release-please reads 0.32.0 as the *current* version
and computes the next release as **0.33.0** (#1923 ) — **skipping 0.32.0,
which was never tagged, GitHub-released, or published to PyPI/Docker.**
The last real release is `v0.31.0` (2026-07-09). The plugin/marketplace
manifests were also left at 0.31.0, so version state was split-brained:
```
pyproject.toml / openclaw / sdk-typescript : 0.32.0 <- #2175
plugin.json (x2) / marketplace.json (x2) : 0.31.0
manifest : 0.32.0
```
### Fix
Realign every version-tracked file **and** the RP manifest to the last
real release, **0.31.0**, via the repo's own `scripts/version-sync.py
--version 0.31.0`. Versions only — no code change.
## What happens after merge
1. Release Please runs on `main`, sees `manifest = 0.31.0` + releasable
commits since `v0.31.0`, and **rewrites its release PR (#1923 ) to
`chore: release 0.32.0`** (bumping every version file).
2. Merging that PR tags `v0.32.0` and fires `release: published`, which
publishes **PyPI + npm (SDK + openclaw) + Docker** at 0.32.0 in one shot
— bringing all registries back in sync.
## Changes Made
- `.release-please-manifest.json` → `0.31.0`
- `pyproject.toml`, `sdk/typescript/package.json`,
`plugins/openclaw/package.json`, `.releasemetadata` → `0.31.0` (via
`version-sync.py`)
- Plugin/marketplace manifests were already `0.31.0` (unchanged).
## Testing
```text
$ python scripts/verify-versions.py
All versions aligned at 0.31.0
```
## Real Behavior Proof
- Environment: local `.venv`.
- Steps: `version-sync.py --version 0.31.0`, reset manifest,
`verify-versions.py`.
- Observed: all 9 version entries aligned at 0.31.0; no CHANGELOG
touched (Changelog Guard passes).
- Not tested: the live release-please recompute (will run on merge —
expected to rewrite #1923 to `chore: release 0.32.0`).
## Note on downstream publish
The release-please workflow only triggers `release.yml`/`docker.yml` if
`RELEASE_PLEASE_TOKEN` (a PAT) is set — with the `GITHUB_TOKEN` fallback
the release is created but downstream publishes don't fire. #1916
shipped 0.31.0 fully via this path, so the PAT was set then; if the
0.32.0 publish doesn't fire on merge, verify that secret still exists.
2026-07-16 21:06:51 -07:00
Zhenjia ZHOU
5de12f75e3
docs(ccr): correct stale 5-minute TTL hints to 30 minutes ( #2224 )
...
## Description
The CCR store default TTL is `DEFAULT_TTL = 1800s` (30 minutes — see
`crates/headroom-core/src/ccr/mod.rs` and `config.py
store_ttl_seconds=1800`), but several user-facing hints and docstrings
still said "5 minutes", the old default. The opencode/openclaw retrieve
tools surfaced `(default TTL: 5 minutes)` in their expiry hint — exactly
the misleading message reported in #1023 . (The CCR cache itself works;
the row-drop store bridge that populates the retrieve store landed for
#389.)
This corrects the two plugin hints, the `InMemoryCcrStore` docstrings,
the SQLite/backend default TTL comments, and the `smart_crusher` mirror
comment. The `mod.rs` comment that references "the *old* 5-minute
default" is intentionally left unchanged — it correctly describes
history.
## Type of Change
- [x] Documentation update
## Changes Made
- `plugins/openclaw/src/tools/headroom-retrieve.ts` +
`plugins/opencode/src/retrieve.ts`: retrieve-failure hint `5 minutes` →
`30 minutes`.
- `crates/headroom-core/src/ccr/backends/in_memory.rs`: two docstrings
(`5 minutes by default`, `5-minute TTL`) → `30 minutes` / `30-minute`.
- `crates/headroom-core/src/ccr/backends/mod.rs` + `sqlite.rs`:
SQLite/default backend TTL comments `5-minute` → `30-minute`.
- `headroom/transforms/smart_crusher.py`: mirror comment `defaults to 5
minutes` → `30 minutes`.
## Testing
- [x] Linting passes (`ruff` / `cargo check`)
- [x] Manual verification (see Real Behavior Proof)
### Test Output
```text
$ ruff format --check headroom/transforms/smart_crusher.py # clean
$ cargo check -p headroom-core # Finished, no errors
```
## Real Behavior Proof
- Environment: macOS (Darwin), branch `feat/ccr-ttl-hint-fix` off
`main`.
- Exact command / steps: grepped every `5 minutes` / `5-minute` TTL
reference across the repo; confirmed the real default is `DEFAULT_TTL =
Duration::from_secs(1800)` (`ccr/mod.rs:66`), that
`InMemoryCcrStore::new()` uses `DEFAULT_TTL` (not a local 300s), and
that `config.py` sets `store_ttl_seconds = 1800 # 30 minutes`.
- Observed result: all stale CCR default-TTL "5 minutes" references now
read "30 minutes"; the one historical reference (`mod.rs`: "the old
5-minute default") is left as-is because it is accurate.
- Not tested: nothing runtime changed — these are docstring/comment/hint
string edits only, so there is no behavior to exercise.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [ ] I have commented my code — N/A (this PR is comments/strings)
- [x] I have made corresponding changes to the documentation (this *is*
the doc change)
- [x] My changes generate no new warnings
- [ ] I have added tests — N/A (no behavior change)
- [x] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md — N/A: user-facing hint/docstring
correction, no functional change
## Additional Notes
- Surfaced while root-causing #1023 : the "cache permanently empty / TTL:
5 minutes" report is resolved on `main` (the store-bridge for #389
populates the retrieve store), but the stale "5 minutes" strings the
reporter actually saw were still in the tree. This PR fixes those.
---------
Co-authored-by: JerrettDavis <mxjerrett@gmail.com>
2026-07-15 18:15:53 +00:00
JD Davis
ea3d5a86b7
fix(deps): clear Dependabot lockfile alerts ( #2175 )
...
## Description
Clears the current dependency/security-audit blockers that are making
unrelated PRs red:
- `transformers 5.3.0` / `CVE-2026-5241`, fixed by requiring
`transformers>=5.5.0` in the locked optional dependency set.
- `sqlitedict <=2.1.0` via the optional `benchmark` extra's
`lm-eval[api]` dependency. There is no patched `sqlitedict` release, so
this PR removes the published/locked `benchmark` extra instead of
shipping a known-vulnerable transitive dependency.
- `esbuild >=0.27.3,<0.28.1` in the OpenCode plugin lockfile, fixed by
forcing `esbuild@0.28.1` through the OpenCode npm override and
regenerated lockfile.
The benchmark code still invokes `python -m lm_eval`; researchers who
need that harness should install `lm-eval[api]` in their benchmark
environment until its transitive vulnerability has a patched release.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- `pyproject.toml`: remove the `benchmark` optional extra, document
external `lm-eval[api]` installation guidance, and require
`transformers>=5.5.0`.
- `uv.lock`: regenerate without the `benchmark` extra, removing
`lm-eval` and `sqlitedict` lock entries and locking the patched
transformers floor.
- `plugins/opencode/package.json`: add an `overrides` entry for
`esbuild@0.28.1`.
- `plugins/opencode/package-lock.json`: regenerate the OpenCode lockfile
with `esbuild@0.28.1`.
## Testing
- [x] Unit tests pass (`pytest`)
- [x] Linting passes (`ruff check .`)
- [ ] Type checking passes (`mypy headroom`)
- [ ] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
uv lock --check
rg -n -F 'sqlitedict' uv.lock # no matches
rg -n -F 'name = "lm-eval"' uv.lock # no matches
rg -n -F "extra == 'benchmark'" uv.lock # no matches
rg -n -F '0.27.7' plugins/opencode/package-lock.json plugins/opencode/package.json # no matches
npm ls esbuild --package-lock-only
npm audit --package-lock-only # found 0 vulnerabilities
git diff --check
```
Previous GitHub checks were green. After merging current `main`, fresh
GitHub checks are running again; local targeted validation still passes.
## Real Behavior Proof
- Environment: Windows 11, Python 3.13.3, uv, npm in `plugins/opencode`,
Dependabot/pip-audit alert metadata from the failing PR jobs.
- Exact command / steps: inspected the regenerated Python and npm
lockfiles with `rg`, checked the uv lock with `uv lock --check`, checked
OpenCode's dependency tree with `npm ls esbuild --package-lock-only`,
and ran `npm audit --package-lock-only`.
- Observed result: `uv.lock` no longer contains `sqlitedict`, `lm-eval`,
or a `benchmark` extra marker; `transformers` resolves at the patched
`>=5.5.0` floor; OpenCode's lock resolves `esbuild@0.28.1`; `npm audit
--package-lock-only` reports 0 vulnerabilities; GitHub `Dependency audit
(pip-audit)` passes.
- Not tested: running the external `lm-eval` harness after installing it
separately.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [x] I have updated the CHANGELOG.md if applicable
## Screenshots (if applicable)
N/A - dependency and lockfile security fix.
## Additional Notes
The `benchmark` extra can be restored once the upstream `lm-eval[api]`
dependency chain stops pulling a vulnerable `sqlitedict` release.
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-14 20:40:28 -07:00
ninosat00
5709291914
chore(release): harden local artifact smokes ( #1824 )
...
## Description
Harden the release artifact workflow so maintainers can reproduce npm
and Python release checks locally and so OpenClaw packaging does not
depend on a not-yet-published SDK version. This follow-up also keeps the
OpenClaw loader export contract explicit and updates the PR after the
branch was merged with current `headroomlabs/main`.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [x] New feature (non-breaking change that adds functionality)
- [x] Documentation update
## Changes Made
- Added reusable local release smoke scripts for npm assets, Python
wheel/sdist artifacts, and the combined release gate.
- Switched the release workflow npm asset build to the reusable npm
builder.
- Made OpenClaw release asset building install against the just-built
local SDK tarball before rewriting packed metadata to the release
dependency range.
- Kept the OpenClaw source dependency registry-installable at
`headroom-ai@^0.22.3` while the packed artifact still ships
`^<release-version>`.
- Added `registerHeadroomPlugin` as a named export while preserving the
default `{ register }` OpenClaw loader contract.
- Added Windows development bootstrap docs/script and regression tests
for version sync, npm asset ordering, OpenClaw source installability,
and Python wheel smoke import isolation.
## Testing
- [x] Unit tests pass (`pytest`)
- [x] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
uv run --with pytest python -m pytest tests/test_release_workflows.py scripts/tests/test_version_sync.py -q
44 passed, 1 warning
node --check scripts/build_npm_release_assets.mjs
node --check scripts/verify_npm_release_assets.mjs
python -m py_compile scripts/build_python_release_smoke.py scripts/release_smoke_all.py scripts/version-sync.py
python scripts/verify-versions.py
All versions aligned at 0.31.0
npm ci (plugins/openclaw)
added 88 packages, audited 89 packages, found 0 vulnerabilities
python scripts/release_smoke_all.py --out release-assets-local/all-pr1824-postmerge-fixed-20260710-104739
Verified npm release assets for 0.31.0
wheel metadata OK: headroom_ai-0.31.0-cp310-abi3-win_amd64.whl contains headroom/_core.pyd
sdist License-File metadata OK: ['LICENSE', 'NOTICE']
smoke-import OK: version=0.31.0 hello=headroom-core
```
## Real Behavior Proof
- Environment: Windows 11, Python 3.14.3, Node v24.14.0, npm 11.9.0, uv
0.11.15, Rust/Cargo already installed in the local development
environment.
- Exact command / steps: Ran `python scripts/release_smoke_all.py --out
release-assets-local/all-pr1824-postmerge-fixed-20260710-104739` after
syncing this branch with current `headroomlabs/main`.
- Observed result: The command built `headroom-ai-0.31.0.tgz`,
`headroom-openclaw-0.31.0.tgz`,
`headroom_ai-0.31.0-cp310-abi3-win_amd64.whl`, and
`headroom_ai-0.31.0.tar.gz`; npm verifier passed; the wheel installed
into a fresh venv and imported `headroom._core`.
- Not tested: Full GitHub Actions release matrix and publish jobs with
real PyPI/npm/GitHub Packages credentials.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [x] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md if applicable
## Screenshots (if applicable)
N/A.
## Additional Notes
The post-merge full smoke initially failed because the OpenClaw source
package depended on `headroom-ai@^0.31.0`, which is not available on
public npm yet. The builder now installs OpenClaw against the just-built
local SDK tarball before build/pack, and then rewrites packed metadata
to `^0.31.0`.
---------
Co-authored-by: JerrettDavis <mxjerrett@gmail.com>
Co-authored-by: Tejas Chopra <chopratejas@gmail.com>
2026-07-14 16:07:34 -04:00
dependabot[bot]
350daeba73
deps: bump @types/node from 22.19.15 to 26.1.1 in /plugins/openclaw ( #1685 )
...
Bumps
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node )
from 22.19.15 to 26.1.1.
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node ">compare
view</a></li>
</ul>
</details>
<br />
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 17:02:22 -05:00
Mohammad Hussian
662b7bc00e
fix(release): sync all package versions to v0.31.0 ( #1882 )
...
## Description
Current `main` has advanced the core package versions to `0.31.0`, but
the plugin marketplace manifests and hook plugin manifests were still
left at `0.30.0`. This PR now keeps the original version-sync intent
while updating the remaining metadata to the current release line.
It also preserves the previously-added `lxml-html-clean>=0.4.5` security
floor in `pyproject.toml` / `uv.lock` so the security audit remains
unblocked.
Closes #1872
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- Synced `pyproject.toml`, SDK/package manifests, plugin manifests,
marketplaces, `.release-please-manifest.json`, and editable package lock
metadata to `0.31.0`.
- Updated the OpenClaw plugin dependency on `headroom-ai` to `^0.31.0`.
- Merged current `main` and resolved the version metadata conflicts in
favor of current `0.31.0` alignment.
## Testing
- [x] Unit tests pass (`pytest tests/test_plugin_manifests.py
scripts/tests/test_version_sync.py -q`)
- [ ] Linting passes (`ruff check .`)
- [ ] Type checking passes (`mypy headroom`)
- [ ] New tests added for new functionality
- [x] Manual testing performed (`python scripts/verify-versions.py`)
### Test Output
```text
python scripts/verify-versions.py
All versions aligned at 0.31.0
pytest tests/test_plugin_manifests.py scripts/tests/test_version_sync.py -q
10 passed in 0.42s
```
## Real Behavior Proof
- Environment: Windows, Python 3.13.13, PR head after merging current
`main`.
- Exact command / steps: Ran `python scripts/verify-versions.py` and
`pytest tests/test_plugin_manifests.py
scripts/tests/test_version_sync.py -q`.
- Observed result: Version verification exits successfully with `All
versions aligned at 0.31.0`; focused manifest/version-sync tests pass.
- Not tested: Full wheel/build matrix; this is metadata-only version
alignment and CI will cover the broader matrix.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] My changes generate no new warnings
- [x] New and existing focused tests pass locally with my changes
- [ ] I have made corresponding changes to the documentation
- [ ] I have updated the CHANGELOG.md if applicable
---------
Co-authored-by: JerrettDavis <mxjerrett@gmail.com>
2026-07-09 16:53:55 -05:00
github-actions[bot]
a9515155c7
chore: release main ( #1918 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.31.0</summary>
##
[0.31.0](https://github.com/headroomlabs-ai/headroom/compare/v0.30.0...v0.31.0 )
(2026-07-09)
### Features
* **cache:** provider-agnostic cache-mode delta + cc-agnostic prefix
comparison
([#1868 ](https://github.com/headroomlabs-ai/headroom/issues/1868 ))
([7c2f0ea7c2f0ea079#1898 ](https://github.com/headroomlabs-ai/headroom/issues/1898 ))
([62cd30762cd3072a2#1899 ](https://github.com/headroomlabs-ai/headroom/issues/1899 ))
([bb112ddbb112dd176#1771 ](https://github.com/headroomlabs-ai/headroom/issues/1771 ))
([6c31db96c31db97fb#1818 ](https://github.com/headroomlabs-ai/headroom/issues/1818 ))
([60af15f60af15f96f#1807 ](https://github.com/headroomlabs-ai/headroom/issues/1807 ))
([ebe0a3bebe0a3bd7b#1891 ](https://github.com/headroomlabs-ai/headroom/issues/1891 ))
([ec950f7ec950f7ef1#1538 ](https://github.com/headroomlabs-ai/headroom/issues/1538 ))
([32ce99e32ce99e4b4#1827 ](https://github.com/headroomlabs-ai/headroom/issues/1827 ))
([0f606b60f606b6281#1781 ](https://github.com/headroomlabs-ai/headroom/issues/1781 ))
([9cbdba49cbdba4dc1#1854 ](https://github.com/headroomlabs-ai/headroom/issues/1854 ))
([f663894f663894f60#1897 ](https://github.com/headroomlabs-ai/headroom/issues/1897 ))
([ede085cede085cc11#1886 ](https://github.com/headroomlabs-ai/headroom/issues/1886 ))
([3a33af13a33af1af3#1747 ](https://github.com/headroomlabs-ai/headroom/issues/1747 ))
([b38315cb38315cf72#1889 ](https://github.com/headroomlabs-ai/headroom/issues/1889 ))
([9d42eba9d42ebaa1a#1648 ](https://github.com/headroomlabs-ai/headroom/issues/1648 ))
([f18c6bdf18c6bd896#1742 ](https://github.com/headroomlabs-ai/headroom/issues/1742 ))
([5194bdc5194bdc5a6#1772 ](https://github.com/headroomlabs-ai/headroom/issues/1772 ))
([c5493eac5493ea93b#1836 ](https://github.com/headroomlabs-ai/headroom/issues/1836 ))
([afd9cbdafd9cbdfaf#1785 ](https://github.com/headroomlabs-ai/headroom/issues/1785 ))
([5af5e225af5e22862#1804 ](https://github.com/headroomlabs-ai/headroom/issues/1804 ))
([88f935a88f935a1eb#1900 ](https://github.com/headroomlabs-ai/headroom/issues/1900 ))
([87f6e9387f6e93c14#1901 ](https://github.com/headroomlabs-ai/headroom/issues/1901 ))
([361adcd361adcd1a0#1728 ](https://github.com/headroomlabs-ai/headroom/issues/1728 ))
([188e382188e382b44#1768 ](https://github.com/headroomlabs-ai/headroom/issues/1768 ))
([#1837 ](https://github.com/headroomlabs-ai/headroom/issues/1837 ))
([84509a484509a4b89#1839 ](https://github.com/headroomlabs-ai/headroom/issues/1839 ))
([5e29c065e29c06aaf#1862 ](https://github.com/headroomlabs-ai/headroom/issues/1862 ))
([380748838074888ac#1892 ](https://github.com/headroomlabs-ai/headroom/issues/1892 ))
([42ebbc642ebbc6cce#1654 ](https://github.com/headroomlabs-ai/headroom/issues/1654 ))
([#1702 ](https://github.com/headroomlabs-ai/headroom/issues/1702 ))
([d6e0710d6e0710228#1676 ](https://github.com/headroomlabs-ai/headroom/issues/1676 ))
([6fb5f3b6fb5f3bc3d#1888 ](https://github.com/headroomlabs-ai/headroom/issues/1888 ))
([1c947b11c947b1103#1786 ](https://github.com/headroomlabs-ai/headroom/issues/1786 ))
([931eed8931eed879d#1737 ](https://github.com/headroomlabs-ai/headroom/issues/1737 ))
([#1887 ](https://github.com/headroomlabs-ai/headroom/issues/1887 ))
([3e85eb13e85eb1880#1383 ](https://github.com/headroomlabs-ai/headroom/issues/1383 ))
([4bd3ddf4bd3ddfaa5#1606 ](https://github.com/headroomlabs-ai/headroom/issues/1606 ))
([7ff842d7ff842da17#1774 ](https://github.com/headroomlabs-ai/headroom/issues/1774 ))
([285808b285808b90e#1802 ](https://github.com/headroomlabs-ai/headroom/issues/1802 ))
([d24a3f8d24a3f8425#1738 ](https://github.com/headroomlabs-ai/headroom/issues/1738 ))
([46d5d6846d5d685d9#1834 ](https://github.com/headroomlabs-ai/headroom/issues/1834 ))
([da2d8dcda2d8dc9db#1875 ](https://github.com/headroomlabs-ai/headroom/issues/1875 ))
([e36439ae36439a941#1850 ](https://github.com/headroomlabs-ai/headroom/issues/1850 ))
([248ae0f248ae0f3e0#1764 ](https://github.com/headroomlabs-ai/headroom/issues/1764 ))
([7de2c1e7de2c1e4c2#1852 ](https://github.com/headroomlabs-ai/headroom/issues/1852 ))
([482013448201345be#1665 ](https://github.com/headroomlabs-ai/headroom/issues/1665 ))
([908997e908997ef61#1783 ](https://github.com/headroomlabs-ai/headroom/issues/1783 ))
([0f553a80f553a8ebb#1864 ](https://github.com/headroomlabs-ai/headroom/issues/1864 ))
([2ccd8312ccd831032#1645 ](https://github.com/headroomlabs-ai/headroom/issues/1645 ))
([2ce19c22ce19c2c55#1513 ](https://github.com/headroomlabs-ai/headroom/issues/1513 ))
([5d140805d14080c94#1878 ](https://github.com/headroomlabs-ai/headroom/issues/1878 ))
([739f654739f654bbd#1787 ](https://github.com/headroomlabs-ai/headroom/issues/1787 ))
([#1847 ](https://github.com/headroomlabs-ai/headroom/issues/1847 ))
([3076e323076e32172#1693 ](https://github.com/headroomlabs-ai/headroom/issues/1693 ))
([681b9a8681b9a8c1a#1840 ](https://github.com/headroomlabs-ai/headroom/issues/1840 ))
([e22d745e22d7453d4#1800 ](https://github.com/headroomlabs-ai/headroom/issues/1800 ))
([53a465b53a465b121#1822 ](https://github.com/headroomlabs-ai/headroom/issues/1822 ))
([#1863 ](https://github.com/headroomlabs-ai/headroom/issues/1863 ))
([140d6e4140d6e4f96#1698 ](https://github.com/headroomlabs-ai/headroom/issues/1698 ))
([140cb05140cb05fbc#1826 ](https://github.com/headroomlabs-ai/headroom/issues/1826 ))
([4ac54934ac54934cb#1782 ](https://github.com/headroomlabs-ai/headroom/issues/1782 ))
([be51008be51008c70#1801 ](https://github.com/headroomlabs-ai/headroom/issues/1801 ))
([838c523838c5234a8#1713 ](https://github.com/headroomlabs-ai/headroom/issues/1713 ))
([c7665cac7665ca088#756 ](https://github.com/headroomlabs-ai/headroom/issues/756 ))
([#1846 ](https://github.com/headroomlabs-ai/headroom/issues/1846 ))
([1573f1f1573f1fd07#1406 ](https://github.com/headroomlabs-ai/headroom/issues/1406 ))
([b4205c6b4205c68e6#1803 ](https://github.com/headroomlabs-ai/headroom/issues/1803 ))
([0a3851b0a3851b240#1817 ](https://github.com/headroomlabs-ai/headroom/issues/1817 ))
([451b9f0451b9f0867#1909 ](https://github.com/headroomlabs-ai/headroom/issues/1909 ))
([45601d945601d93bc#1907 ](https://github.com/headroomlabs-ai/headroom/issues/1907 ))
([8872bbc8872bbc6a2https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-09 07:47:54 -07:00
Tejas Chopra
2990b7457d
chore: sync version state to released 0.30.0 to unblock release-please ( #1916 )
...
## Description
**Fixes the Release Please pipeline**, which stopped opening the release
PR, leaving pip / Docker / npm out of sync.
### Root cause
Recent releases (0.28 → 0.30) were cut **out-of-band** (manual tag +
release), so Release Please's state drifted from reality:
- `.release-please-manifest.json` was frozen at **0.29.0**, and the
in-repo version files at **0.29.0** — even the `v0.30.0` tag commit has
`pyproject.toml = 0.29.0`. The plugin/marketplace manifests were frozen
even further back, at **0.22.3**.
- `v0.30.0` was tagged and published to PyPI (CI stamps the version from
the tag at build time via `version-sync.py`, which is why PyPI got
0.30.0 despite the committed 0.29.0).
- With the manifest at 0.29.0, RP kept computing the next version as
**0.30.0**, saw that tag already exists, and produced **no PR** — so
nothing new could ship, and Docker/npm fell behind.
### Fix
Realign the repo with the last real release (0.30.0) so RP can drive the
next one:
- `.release-please-manifest.json` → `0.30.0`
- `pyproject.toml`, `sdk/typescript/package.json`,
`plugins/openclaw/package.json`, both `plugin.json`, both
`marketplace.json` → `0.30.0` (via `scripts/version-sync.py --version
0.30.0`, which also fixes the 0.22.3 drift).
### What happens after merge
1. Release Please runs on `main`, sees manifest = 0.30.0 + 69 releasable
commits since `v0.30.0`, and opens a clean **`chore: release 0.31.0`**
PR (bumping every version file).
2. Merging that PR tags `v0.31.0` and fires `release: published`, which
publishes **PyPI + npm (SDK + openclaw) + Docker** at 0.31.0 in one shot
— bringing all three registries back in sync.
No behavior/code change — versions only.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature
- [ ] Breaking change
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- Advance the Release Please manifest to the last released version
(0.30.0).
- Sync all 7 version-tracked files to 0.30.0 with the repo's own
`version-sync.py`.
## Testing
- [x] Linting passes (`ruff check .`)
- [x] Manual testing performed (`scripts/verify-versions.py`)
### Test Output
```text
$ python scripts/version-sync.py --version 0.30.0
Version synchronized to 0.30.0
$ python scripts/verify-versions.py
All versions aligned at 0.30.0
Packages: pyproject.toml, plugins/openclaw/package.json, sdk/typescript/package.json,
plugins/headroom-agent-hooks/.claude-plugin/plugin.json,
plugins/headroom-agent-hooks/.github/plugin/plugin.json,
.claude-plugin/marketplace.json, .github/plugin/marketplace.json
```
## Real Behavior Proof
- Environment: local macOS, project `.venv` (Python 3.12.6).
- Exact command / steps: ran `scripts/version-sync.py --version 0.30.0`,
set the RP manifest to 0.30.0, then `scripts/verify-versions.py`.
- Observed result: `verify-versions.py` reports all seven version
locations aligned at 0.30.0; `git diff` shows version-field changes only
(no code). Confirmed PyPI latest is 0.30.0 and a `v0.30.0` tag/release
exists, while the manifest was 0.29.0 — the drift this PR corrects.
- Not tested: the downstream release itself (that runs when the
follow-up `chore: release 0.31.0` PR is merged); npm registry state
could not be read from this environment (network), but the `publish-npm`
job in `release.yml` publishes both npm packages on release.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] My changes generate no new warnings
- [x] New and existing unit tests pass locally with my changes
2026-07-09 07:08:06 -07:00
dependabot[bot]
8872bbc6a2
deps: bump the npm-minor-patch group across 4 directories with 18 updates ( #1907 )
...
Bumps the npm-minor-patch group with 12 updates in the /docs directory:
| Package | From | To |
| --- | --- | --- |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs ) | `16.10.3` |
`16.11.1` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs ) | `15.0.12` |
`15.1.0` |
| [fumadocs-twoslash](https://github.com/fuma-nama/fumadocs ) | `3.1.15`
| `3.3.0` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs ) | `16.10.3` |
`16.11.1` |
| [next](https://github.com/vercel/next.js ) | `16.2.6` | `16.2.10` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react ) |
`19.2.4` | `19.2.7` |
|
[@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react )
| `19.2.14` | `19.2.17` |
|
[react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom )
| `19.2.4` | `19.2.7` |
| [recharts](https://github.com/recharts/recharts ) | `3.8.1` | `3.9.2` |
|
[@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss )
| `4.2.2` | `4.3.2` |
|
[@types/mdx](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mdx )
| `2.0.13` | `2.0.14` |
| [postcss](https://github.com/postcss/postcss ) | `8.5.15` | `8.5.16` |
Bumps the npm-minor-patch group with 1 update in the /plugins/openclaw
directory:
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Bumps the npm-minor-patch group with 2 updates in the /plugins/opencode
directory:
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest )
and @opencode-ai/plugin.
Bumps the npm-minor-patch group with 3 updates in the /sdk/typescript
directory:
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ),
[@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript )
and [dotenv](https://github.com/motdotla/dotenv ).
Updates `fumadocs-core` from 16.10.3 to 16.11.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ab09f500cbhttps://redirect.github.com/fuma-nama/fumadocs/issues/3405 ">#3405</a>)</li>
<li><a
href="889a296d06a5c081d0c69a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e25477https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.10.3...fumadocs@16.11.1 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-mdx` from 15.0.12 to 15.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fuma-nama/fumadocs/releases ">fumadocs-mdx's
releases</a>.</em></p>
<blockquote>
<h2>fumadocs-mdx@15.1.0</h2>
<h3>Default to Base UI</h3>
<p>Internal packages & templates now use Base UI rather than Radix
UI.</p>
<h2>fumadocs-mdx@15.0.13</h2>
<h3>Require <code>collection</code> query param at regex matching</h3>
<p>Instead of passing through all JSON/YAML files, the meta loader now
requires <code>collection</code> query param to be triggered.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e2547702c242b0da3d80b8b2420ec19af868https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.0.12...fumadocs-mdx@15.1.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-twoslash` from 3.1.15 to 3.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fuma-nama/fumadocs/releases ">fumadocs-twoslash's
releases</a>.</em></p>
<blockquote>
<h2>fumadocs-twoslash@3.3.0</h2>
<h3>Default to Base UI</h3>
<p>Internal packages & templates now use Base UI rather than Radix
UI.</p>
<h2>fumadocs-twoslash@3.2.1</h2>
<h3>Migrate to <code>cnfast</code></h3>
<p>Drop <code>tailwind-merge</code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e2547702c242b0da3d80b8b2420ec19af868https://github.com/fuma-nama/fumadocs/compare/fumadocs-twoslash@3.1.15...fumadocs-twoslash@3.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-ui` from 16.10.3 to 16.11.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ab09f500cbhttps://redirect.github.com/fuma-nama/fumadocs/issues/3405 ">#3405</a>)</li>
<li><a
href="889a296d06a5c081d0c69a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e25477https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.10.3...fumadocs@16.11.1 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `lucide-react` from 1.20.0 to 1.23.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases ">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.23.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(docs): prevent scrollbar layout shift on icons page by <a
href="https://github.com/g30r93g "><code>@g30r93g</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4500 ">lucide-icons/lucide#4500</a></li>
<li>chore(docs): Remove certificates banner by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4504 ">lucide-icons/lucide#4504</a></li>
<li>ci(repo-journal.yml): GH copilot repo summary by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4505 ">lucide-icons/lucide#4505</a></li>
<li>ci(repo-journal.yml): Small fix in the workflow by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4508 ">lucide-icons/lucide#4508</a></li>
<li>ci(repo-journal.yml): Switch to token by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4509 ">lucide-icons/lucide#4509</a></li>
<li>feat(icons): added <code>paper-bag</code> icon by <a
href="https://github.com/dkast "><code>@dkast</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4023 ">lucide-icons/lucide#4023</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/g30r93g "><code>@g30r93g</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4500 ">lucide-icons/lucide#4500</a></li>
<li><a href="https://github.com/dkast "><code>@dkast</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4023 ">lucide-icons/lucide#4023</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.22.0...1.23.0 ">https://github.com/lucide-icons/lucide/compare/1.22.0...1.23.0 </a></p>
<h2>Version 1.22.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): add 6 database variant icons by <a
href="https://github.com/Barakudum "><code>@Barakudum</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4336 ">lucide-icons/lucide#4336</a></li>
<li>ci(release.yml): Remove concurrency field to prevent release mess by
<a href="https://github.com/ericfennis "><code>@ericfennis</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4485 ">lucide-icons/lucide#4485</a></li>
<li>fix(docs): fix color input clipping by <a
href="https://github.com/Hsiii "><code>@Hsiii</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4488 ">lucide-icons/lucide#4488</a></li>
<li>docs(site): add Deno to installation instructions by <a
href="https://github.com/bartlomieju "><code>@bartlomieju</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4486 ">lucide-icons/lucide#4486</a></li>
<li>chore(deps): bump esbuild from 0.25.12 to 0.28.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4459 ">lucide-icons/lucide#4459</a></li>
<li>fix(docs): prevent private analytics token from blocking local dev
by <a href="https://github.com/Hsiii "><code>@Hsiii</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4481 ">lucide-icons/lucide#4481</a></li>
<li>docs(installation.md): Remove outdate next tag in installation by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4495 ">lucide-icons/lucide#4495</a></li>
<li>fix(lucide-react-native): Fix context provider export by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4497 ">lucide-icons/lucide#4497</a></li>
<li>fix(astro): add Astro v7 compatibility by <a
href="https://github.com/iseraph-dev "><code>@iseraph-dev</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4491 ">lucide-icons/lucide#4491</a></li>
<li>fix(icons): changed <code>carrot</code> icon by <a
href="https://github.com/jguddas "><code>@jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4010 ">lucide-icons/lucide#4010</a></li>
<li>fix(icons): changed <code>ungroup</code> icon by <a
href="https://github.com/jguddas "><code>@jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3969 ">lucide-icons/lucide#3969</a></li>
<li>feat(icons): added <code>phi</code> icon also used as
<code>golden-ratio</code> by <a
href="https://github.com/whoisBugsbunny "><code>@whoisBugsbunny</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4218 ">lucide-icons/lucide#4218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bartlomieju "><code>@bartlomieju</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4486 ">lucide-icons/lucide#4486</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.21.0...1.22.0 ">https://github.com/lucide-icons/lucide/compare/1.21.0...1.22.0 </a></p>
<h2>Version 1.21.0</h2>
<h2>What's Changed</h2>
<ul>
<li>ci(release.yml): Remove new-version in release flow by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4478 ">lucide-icons/lucide#4478</a></li>
<li>ci(release.yml): Fix workflow and remove <code>version</code>
scripts in package scripts by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4479 ">lucide-icons/lucide#4479</a></li>
<li>fix(docs): rename navigation category label by <a
href="https://github.com/Hsiii "><code>@Hsiii</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4483 ">lucide-icons/lucide#4483</a></li>
<li>feat(icons): added <code>broken-bone</code> icon by <a
href="https://github.com/Patolord "><code>@Patolord</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4131 ">lucide-icons/lucide#4131</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Hsiii "><code>@Hsiii</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4483 ">lucide-icons/lucide#4483</a></li>
<li><a href="https://github.com/Patolord "><code>@Patolord</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4131 ">lucide-icons/lucide#4131</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.20.0...1.21.0 ">https://github.com/lucide-icons/lucide/compare/1.20.0...1.21.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5ff536e139https://github.com/lucide-icons/lucide/commits/1.23.0/packages/lucide-react ">compare
view</a></li>
</ul>
</details>
<br />
Updates `next` from 16.2.6 to 16.2.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases ">next's
releases</a>.</em></p>
<blockquote>
<h2>v16.2.10</h2>
<p>Contains no changes except publishing <code>@next/swc-wasm-web</code>
which was accidentally not published since 16.2.4.</p>
<h2>v16.2.9</h2>
<p>Empty release to ensure <code>next@latest</code> points at a stable
release. Next.js only allows publishing with Trusted Publishing enabled.
In order to fix NPM dist-tags, we have to release a new version.
Updating dist-tags is not possible with Trusted Publishing.</p>
<h2>v16.2.8</h2>
<p>Release with no changes in an attempt to fix <code>next@latest</code>
pointing at a prerelease version.</p>
<h2>v16.2.7</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Backport documentation fixes for v16.2 (<a
href="https://redirect.github.com/vercel/next.js/issues/93804 ">#93804</a>)</li>
<li>[backport] Patch <code>playwright-core</code> to resolve
<code>_finishedPromise</code> on <code>requestFailed</code> (<a
href="https://redirect.github.com/vercel/next.js/issues/93920 ">#93920</a>)</li>
<li>[backport] Fix dev mode hydration failure when page is served from
HTTP cache (<a
href="https://redirect.github.com/vercel/next.js/issues/93492 ">#93492</a>)</li>
<li>[backport] Fix catch-all <code>router.query</code> corruption with
<code>basePath</code> + <code>rewrites</code> (<a
href="https://redirect.github.com/vercel/next.js/issues/93917 ">#93917</a>)</li>
<li>[backport] Encode non-ASCII characters in cache tags at construction
(<a
href="https://redirect.github.com/vercel/next.js/issues/93918 ">#93918</a>)</li>
<li>[backport] Fix server action forwarding loop with middleware
rewrites (<a
href="https://redirect.github.com/vercel/next.js/issues/93919 ">#93919</a>)</li>
<li>[backport] Turbopack: switch from base40 to base38 hash encoding (<a
href="https://redirect.github.com/vercel/next.js/issues/93932 ">#93932</a>)</li>
<li>[ci] Disable hanging node 24 typescript tests on 16.2 backport
branch (<a
href="https://redirect.github.com/vercel/next.js/issues/94164 ">#94164</a>)</li>
<li>[backport] Fix "type: module" in project dir when using
standalone or adapters (<a
href="https://redirect.github.com/vercel/next.js/issues/94050 ">#94050</a>)</li>
<li>[backport] Propagate adapter preferred regions (<a
href="https://redirect.github.com/vercel/next.js/issues/94200 ">#94200</a>)</li>
<li>[16.2.x] Don't drop <code>FormData</code> entries (<a
href="https://redirect.github.com/vercel/next.js/issues/94240 ">#94240</a>)</li>
<li>[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS
config resolution (<a
href="https://redirect.github.com/vercel/next.js/issues/94284 ">#94284</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/icyJoseph "><code>@icyJoseph</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>, <a
href="https://github.com/mischnic "><code>@mischnic</code></a>, <a
href="https://github.com/bgw "><code>@bgw</code></a>, <a
href="https://github.com/timneutkens "><code>@timneutkens</code></a>,
and <a
href="https://github.com/lukesandberg "><code>@lukesandberg</code></a>
for helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9dadfd693c534d9c144chttps://redirect.github.com/vercel/next.js/issues/95160 ">#95160</a>)</li>
<li><a
href="98941fc427https://redirect.github.com/vercel/next.js/issues/94935 ">#94935</a>)</li>
<li><a
href="6e1a94de7chttps://redirect.github.com/vercel/next.js/issues/94640 ">#94640</a>)</li>
<li><a
href="f37fad9405d9aaaedfd8https://redirect.github.com/vercel/next.js/issues/94627 ">#94627</a>)</li>
<li><a
href="6f1680448c0dbc1d5c86https://redirect.github.com/vercel/next.js/issues/94598 ">#94598</a>)</li>
<li><a
href="90e3c811e7https://redirect.github.com/vercel/next.js/issues/94339 ">#94339</a>)</li>
<li><a
href="83f402c69dhttps://redirect.github.com/vercel/next.js/issues/94334 ">#94334</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v16.2.6...v16.2.10 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `react` from 19.2.4 to 19.2.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/releases ">react's
releases</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6
(<a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>
by <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.6 (May 6th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Type hardening and performance improvements
(<a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.5 (April 8th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add more cycle protections (<a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/blob/main/CHANGELOG.md ">react's
changelog</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6 (<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>)</li>
</ul>
<h2>19.2.6 (May 6, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Type hardening and performance improvements (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>)</li>
</ul>
<h2>19.2.5 (March 18, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Add more cycle protections (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6117d7cca4https://github.com/facebook/react/tree/HEAD/packages/react/issues/36591 ">#36591</a>)</li>
<li><a
href="eaf3e95ca923f4f9f30dhttps://github.com/facebook/react/commits/v19.2.7/packages/react ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for react since your current version.</p>
</details>
<br />
Updates `@types/react` from 19.2.14 to 19.2.17
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react ">compare
view</a></li>
</ul>
</details>
<br />
Updates `react-dom` from 19.2.4 to 19.2.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/releases ">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6
(<a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>
by <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.6 (May 6th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Type hardening and performance improvements
(<a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.5 (April 8th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add more cycle protections (<a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/blob/main/CHANGELOG.md ">react-dom's
changelog</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6 (<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>)</li>
</ul>
<h2>19.2.6 (May 6, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Type hardening and performance improvements (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>)</li>
</ul>
<h2>19.2.5 (March 18, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Add more cycle protections (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6117d7cca4https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/36591 ">#36591</a>)</li>
<li><a
href="eaf3e95ca923f4f9f30dhttps://github.com/facebook/react/commits/v19.2.7/packages/react-dom ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for react-dom since your current version.</p>
</details>
<br />
Updates `recharts` from 3.8.1 to 3.9.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/recharts/recharts/releases ">recharts's
releases</a>.</em></p>
<blockquote>
<h2>v3.9.2</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: clarify custom labels and ticks need SVG elements by <a
href="https://github.com/ishaanlabs-gg "><code>@ishaanlabs-gg</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7524 ">recharts/recharts#7524</a></li>
<li>chore(deps): bump immer from 11.1.8 to 11.1.9 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/recharts/recharts/pull/7526 ">recharts/recharts#7526</a></li>
<li>fix(Sankey): avoid exponential depth traversal on dense graphs by <a
href="https://github.com/dm-gthb "><code>@dm-gthb</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7479 ">recharts/recharts#7479</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/ishaanlabs-gg "><code>@ishaanlabs-gg</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7524 ">recharts/recharts#7524</a></li>
<li><a href="https://github.com/dm-gthb "><code>@dm-gthb</code></a> made
their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7479 ">recharts/recharts#7479</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/recharts/recharts/compare/v3.9.1...v3.9.2 ">https://github.com/recharts/recharts/compare/v3.9.1...v3.9.2 </a></p>
<h2>v3.9.1</h2>
<h2>What's Changed</h2>
<ul>
<li>perf: optimize ScatterChart hover by reducing re-renders from O(n)
to O(1) by <a href="https://github.com/roy7 "><code>@roy7</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7133 ">recharts/recharts#7133</a></li>
<li>fix(YAxis): render explicit ticks when a non-literal domain can't
resolve on empty data (<a
href="https://redirect.github.com/recharts/recharts/issues/7362 ">#7362</a>)
by <a href="https://github.com/nlenepveu "><code>@nlenepveu</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7393 ">recharts/recharts#7393</a></li>
<li>fix: avoid Sankey nodes overlapping skipped-depth links by <a
href="https://github.com/pupuking723 "><code>@pupuking723</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7471 ">recharts/recharts#7471</a></li>
<li>Add stacked bar chart with horizontal threshold line example by <a
href="https://github.com/nijuse "><code>@nijuse</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7495 ">recharts/recharts#7495</a></li>
<li>fix(DefaultLegendContent): omit empty value from legend icon
aria-label by <a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7501 ">recharts/recharts#7501</a></li>
<li>chore(deps): bump immer from 10.2.0 to 11.1.8 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/recharts/recharts/pull/7452 ">recharts/recharts#7452</a></li>
<li>fix(getNiceTickValues): remove trailing duplicate tick when
allowDecimals=false by <a
href="https://github.com/JSap0914 "><code>@JSap0914</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7482 ">recharts/recharts#7482</a></li>
<li>Fix/per graphical item formatter prop by <a
href="https://github.com/shreedharbhat98 "><code>@shreedharbhat98</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7287 ">recharts/recharts#7287</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pupuking723 "><code>@pupuking723</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7471 ">recharts/recharts#7471</a></li>
<li><a href="https://github.com/nijuse "><code>@nijuse</code></a> made
their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7495 ">recharts/recharts#7495</a></li>
<li><a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7501 ">recharts/recharts#7501</a></li>
<li><a href="https://github.com/JSap0914 "><code>@JSap0914</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7482 ">recharts/recharts#7482</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/recharts/recharts/compare/v3.9.0...v3.9.1 ">https://github.com/recharts/recharts/compare/v3.9.0...v3.9.1 </a></p>
<h2>v3.9.0</h2>
<h2>What's Changed</h2>
<h3>Animations</h3>
<p>3.9 comes with new animations! There are several bug fixes and what's
best, all animations are now fully customizable.</p>
<p>See the animations guide on <a
href="https://recharts.github.io/en-US/guide/animations/ ">https://recharts.github.io/en-US/guide/animations/ </a></p>
<ul>
<li>Animation guide by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7179 ">recharts/recharts#7179</a></li>
<li>Animation tests by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7255 ">recharts/recharts#7255</a></li>
<li>New animation props by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7215 ">recharts/recharts#7215</a></li>
<li>test: cover legacy animation length changes by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7283 ">recharts/recharts#7283</a></li>
<li>test: add sparse animation path tests for Line component by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7295 ">recharts/recharts#7295</a></li>
<li>Export and document interpolate function by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7293 ">recharts/recharts#7293</a></li>
<li>test: enhance line animation tests for ComposedChart and responsive
by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7289 ">recharts/recharts#7289</a></li>
<li>Manual animations on website by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7483 ">recharts/recharts#7483</a></li>
<li>Add new example where chart animates by scroll by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7484 ">recharts/recharts#7484</a></li>
<li>fix: preserve single-value line dash gaps during animation by <a
href="https://github.com/puneetdixit200 "><code>@puneetdixit200</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7405 ">recharts/recharts#7405</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b3451050c0f27779c04885f9369f40https://redirect.github.com/recharts/recharts/issues/7520 ">#7520</a>)</li>
<li><a
href="52a2a896cfhttps://redirect.github.com/recharts/recharts/issues/7479 ">#7479</a>)</li>
<li><a
href="8a056c1018https://redirect.github.com/recharts/recharts/issues/7527 ">#7527</a>)</li>
<li><a
href="2af6ec6f0fhttps://redirect.github.com/recharts/recharts/issues/7526 ">#7526</a>)</li>
<li><a
href="6f10d53cf6https://redirect.github.com/recharts/recharts/issues/7524 ">#7524</a>)</li>
<li><a
href="c04f1a7678https://redirect.github.com/recharts/recharts/issues/7521 ">#7521</a>)</li>
<li><a
href="69c7a9630ahttps://redirect.github.com/recharts/recharts/issues/7522 ">#7522</a>)</li>
<li><a
href="6efaf16a1ahttps://redirect.github.com/recharts/recharts/issues/7515 ">#7515</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/recharts/recharts/compare/v3.8.1...v3.9.2 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for recharts since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
Updates `@tailwindcss/postcss` from 4.2.2 to 4.3.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases ">@tailwindcss/postcss's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.2</h2>
<h3>Fixed</h3>
<ul>
<li>Support bare spacing values for <code>auto-rows-*</code> and
<code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and
<code>auto-cols-16</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229 ">#20229</a>)</li>
<li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode
from crashing on Windows when <code>@source</code> points to a directory
that doesn't exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242 ">#20242</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x
when <code>context.parentURL</code> is not a valid URL (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245 ">#20245</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
rebuilds when the input CSS file changes in an ignored directory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246 ">#20246</a>)</li>
<li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to
use custom variants defined later (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247 ">#20247</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when
scanned files or directories are deleted (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259 ">#20259</a>)</li>
<li>Generate <code>font-size</code> instead of <code>color</code>
declarations for <code>text-[--spacing(…)]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260 ">#20260</a>)</li>
<li>Prevent <code>@source</code> patterns from scanning unrelated
sibling files and folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263 ">#20263</a>)</li>
<li>Extract class candidates adjacent to Template Toolkit delimiters
like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and
<code>.tx</code> files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Extract class candidates from conditional Maud syntax like
<code>p.text-black[condition]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Prevent <code>@position-try</code> rules from triggering unknown
at-rule warnings when optimizing CSS (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277 ">#20277</a>)</li>
<li>Support class suggestions for named opacity modifiers from
<code>--opacity</code> theme values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287 ">#20287</a>)</li>
<li>Prevent type errors in <code>@tailwindcss/postcss</code> when used
with newer PostCSS patch releases (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289 ">#20289</a>)</li>
</ul>
<h2>v4.3.1</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--silent</code> option to suppress output in
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100 ">#20100</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Remove deprecation warnings by using
<code>Module#registerHooks</code> instead of
<code>Module#register</code> on Node 26+ (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028 ">#20028</a>)</li>
<li>Canonicalization: don't crash when plugin utilities throw for
unsupported values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052 ">#20052</a>)</li>
<li>Allow <code>@apply</code> to be used with CSS mixins (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427 ">#19427</a>)</li>
<li>Ensure <code>not-*</code> correctly negates <code>@container</code>
queries, including <code>style(…)</code> queries (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059 ">#20059</a>)</li>
<li>Ensure <code>drop-shadow-*</code> color utilities work with custom
shadow values containing <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080 ">#20080</a>)</li>
<li>Fix 'Sourcemap is likely to be incorrect' warnings when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103 ">#20103</a>)</li>
<li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack
projects without requiring <code>webpack</code> as a peer dependency (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027 ">#20027</a>)</li>
<li>Canonicalization: don't suggest invalid <code>calc(…)</code>
expressions (e.g. <code>px-[calc(1rem+0px)]</code> →
<code>px-[calc(1rem+0)]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127 ">#20127</a>)</li>
<li>Canonicalization: avoid suggesting large spacing-scale values for
arbitrary lengths (e.g. <code>left-[99999px]</code> →
<code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130 ">#20130</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
recovers when a tracked dependency is deleted and restored (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137 ">#20137</a>)</li>
<li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored
when scanning for class candidates (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139 ">#20139</a>)</li>
<li>Ensure class candidates are extracted from Twig
<code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198 ">#20198</a>)</li>
<li>Don't crash in the Ruby or Vue preprocessors when scanning files
containing invalid UTF-8 bytes (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588 ">#19588</a>)</li>
<li>Allow <code>@variant</code> to be used inside <code>addBase</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480 ">#19480</a>)</li>
<li>Ensure <code>@source</code> globs with symlinks are preserved (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Ensure later <code>@source</code> rules can re-include files
excluded by earlier <code>@source not</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Upgrade: don't migrate empty class rules to invalid
<code>@utility</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205 ">#20205</a>)</li>
<li>Ensure transitions between <code>inset-shadow-none</code> and other
inset shadows work correctly (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208 ">#20208</a>)</li>
<li>Ensure explicitly referenced <code>@source</code> directories are
scanned even when ignored by git (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214 ">#20214</a>)</li>
<li>Ensure <code>@source</code> globs ending in <code>**/*</code>
preserve dynamic path segments to avoid scanning too many files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217 ">#20217</a>)</li>
<li>Canonicalization: don't fold <code>calc(…)</code> divisions when the
result would require high precision (e.g.
<code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not
<code>w-[28.571428571428573%]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221 ">#20221</a>)</li>
<li>Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228 ">#20228</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Generate <code>0</code> instead of <code>calc(var(--spacing) *
0)</code> for spacing utilities like <code>m-0</code> and
<code>left-0</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20196 ">#20196</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md ">@tailwindcss/postcss's
changelog</a>.</em></p>
<blockquote>
<h2>[4.3.2] - 2026-06-26</h2>
<h3>Fixed</h3>
<ul>
<li>Support bare spacing values for <code>auto-rows-*</code> and
<code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and
<code>auto-cols-16</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229 ">#20229</a>)</li>
<li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode
from crashing on Windows when <code>@source</code> points to a directory
that doesn't exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242 ">#20242</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x
when <code>context.parentURL</code> is not a valid URL (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245 ">#20245</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
rebuilds when the input CSS file changes in an ignored directory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246 ">#20246</a>)</li>
<li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to
use custom variants defined later (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247 ">#20247</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when
scanned files or directories are deleted (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259 ">#20259</a>)</li>
<li>Generate <code>font-size</code> instead of <code>color</code>
declarations for <code>text-[--spacing(…)]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260 ">#20260</a>)</li>
<li>Prevent <code>@source</code> patterns from scanning unrelated
sibling files and folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263 ">#20263</a>)</li>
<li>Extract class candidates adjacent to Template Toolkit delimiters
like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and
<code>.tx</code> files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Extract class candidates from conditional Maud syntax like
<code>p.text-black[condition]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Prevent <code>@position-try</code> rules from triggering unknown
at-rule warnings when optimizing CSS (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277 ">#20277</a>)</li>
<li>Support class suggestions for named opacity modifiers from
<code>--opacity</code> theme values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287 ">#20287</a>)</li>
<li>Prevent type errors in <code>@tailwindcss/postcss</code> when used
with newer PostCSS patch releases (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289 ">#20289</a>)</li>
</ul>
<h2>[4.3.1] - 2026-06-12</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--silent</code> option to suppress output in
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100 ">#20100</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Remove deprecation warnings by using
<code>Module#registerHooks</code> instead of
<code>Module#register</code> on Node 26+ (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028 ">#20028</a>)</li>
<li>Canonicalization: don't crash when plugin utilities throw for
unsupported values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052 ">#20052</a>)</li>
<li>Allow <code>@apply</code> to be used with CSS mixins (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427 ">#19427</a>)</li>
<li>Ensure <code>not-*</code> correctly negates <code>@container</code>
queries, including <code>style(…)</code> queries (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059 ">#20059</a>)</li>
<li>Ensure <code>drop-shadow-*</code> color utilities work with custom
shadow values containing <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080 ">#20080</a>)</li>
<li>Fix 'Sourcemap is likely to be incorrect' warnings when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103 ">#20103</a>)</li>
<li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack
projects without requiring <code>webpack</code> as a peer dependency (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027 ">#20027</a>)</li>
<li>Canonicalization: don't suggest invalid <code>calc(…)</code>
expressions (e.g. <code>px-[calc(1rem+0px)]</code> →
<code>px-[calc(1rem+0)]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127 ">#20127</a>)</li>
<li>Canonicalization: avoid suggesting large spacing-scale values for
arbitrary lengths (e.g. <code>left-[99999px]</code> →
<code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130 ">#20130</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
recovers when a tracked dependency is deleted and restored (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137 ">#20137</a>)</li>
<li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored
when scanning for class candidates (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139 ">#20139</a>)</li>
<li>Ensure class candidates are extracted from Twig
<code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198 ">#20198</a>)</li>
<li>Don't crash in the Ruby or Vue preprocessors when scanning files
containing invalid UTF-8 bytes (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588 ">#19588</a>)</li>
<li>Allow <code>@variant</code> to be used inside <code>addBase</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480 ">#19480</a>)</li>
<li>Ensure <code>@source</code> globs with symlinks are preserved (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Ensure later <code>@source</code> rules can re-include files
excluded by earlier <code>@source not</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Upgrade: don't migrate empty class rules to invalid
<code>@utility</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205 ">#20205</a>)</li>
<li>Ensure transitions between <code>inset-shadow-none</code> and other
inset shadows work correctly (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208 ">#20208</a>)</li>
<li>Ensure explicitly referenced <code>@source</code> directories are
scanned even when ignored by git (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214 ">#20214</a>)</li>
<li>Ensure <code>@source</code> globs ending in <code>**/*</code>
preserve dynamic path segments to avoid scanning too many files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217 ">#20217</a>)</li>
<li>Canonicalization: don't fold <code>calc(…)</code> divisions when the
result would require high precision (e.g.
<code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not
<code>w-[28.571428571428573%]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221 ">#20221</a>)</li>
<li>Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228 ">#20228</a>)</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="056a155072https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20281 ">#20281</a>)</li>
<li><a
href="8a14a71010https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20226 ">#20226</a>)</li>
<li><a
href="522288ca08https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20228 ">#20228</a>)</li>
<li><a
href="8dcdb66e8ahttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20095 ">#20095</a>)</li>
<li><a
href="588bd7371fhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20023 ">#20023</a>)</li>
<li><a
href="12eb5ae7b6https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20015 ">#20015</a>)</li>
<li><a
href="4255671c5fhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20013 ">#20013</a>)</li>
<li><a
href="52f94c74bbhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19999 ">#19999</a>)</li>
<li><a
href="d194d4c3e6https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19878 ">#19878</a>)</li>
<li><a
href="bfb5732b0bhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19980 ">#19980</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-postcss ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for <code>@tailwindcss/postcss</code> since your current
version.</p>
</details>
<br />
Updates `@types/mdx` from 2.0.13 to 2.0.14
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mdx ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@types/react` from 19.2.14 to 19.2.17
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react ">compare
view</a></li>
</ul>
</details>
<br />
Updates `postcss` from 8.5.15 to 8.5.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92ccc93ff1818bdd604346e451068ehttps://redirect.github.com/postcss/postcss/issues/2036 ">#2036</a>)</li>
<li><a
href="34942ce76cd4feed6453https://redirect.github.com/postcss/postcss/issues/2097 ">#2097</a>)</li>
<li><a
href="da323fc8d388633691943828982213https://redirect.github.com/postcss/postcss/issues/2100 ">#2100</a>)</li>
<li><a
href="d1e80b8303https://redirect.github.com/postcss/postcss/issues/2091 ">#2091</a>)</li>
<li><a
href="b91e4a6390https://github.com/postcss/postcss/compare/8.5.15...8.5.16 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npm ...
_Description has been truncated_
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 09:38:37 -04:00
github-actions[bot]
660fa8cfb6
chore: release main ( #1574 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.29.0</summary>
##
[0.29.0](https://github.com/headroomlabs-ai/headroom/compare/v0.28.0...v0.29.0 )
(2026-07-03)
### Features
* **proxy:** add --lossless no-CCR mode with format-native compaction
([#1721 ](https://github.com/headroomlabs-ai/headroom/issues/1721 ))
([c75ebdec75ebdee6d#1680 ](https://github.com/headroomlabs-ai/headroom/issues/1680 ))
([2fe19c32fe19c39e4#1726 ](https://github.com/headroomlabs-ai/headroom/issues/1726 ))
([eea667aeea667a720#1553 ](https://github.com/headroomlabs-ai/headroom/issues/1553 ))
([54cfa3654cfa361d3#1456 ](https://github.com/headroomlabs-ai/headroom/issues/1456 ))
([7d87aa27d87aa2f1c#1564 ](https://github.com/headroomlabs-ai/headroom/issues/1564 ))
([96e1dfe96e1dfe395#1610 ](https://github.com/headroomlabs-ai/headroom/issues/1610 ))
([4bf7f924bf7f92417#1634 ](https://github.com/headroomlabs-ai/headroom/issues/1634 ))
([d5bf98dd5bf98df31#1431 ](https://github.com/headroomlabs-ai/headroom/issues/1431 ))
([ddd4adfddd4adf911#1479 ](https://github.com/headroomlabs-ai/headroom/issues/1479 ))
([de24cd5de24cd5fc0#1474 ](https://github.com/headroomlabs-ai/headroom/issues/1474 ))
([f00ace6f00ace6da5#1653 ](https://github.com/headroomlabs-ai/headroom/issues/1653 ))
([646e705646e705514#1511 ](https://github.com/headroomlabs-ai/headroom/issues/1511 ))
([e035aefe035aefce2#1548 ](https://github.com/headroomlabs-ai/headroom/issues/1548 ))
([e386c09e386c097d6#1527 ](https://github.com/headroomlabs-ai/headroom/issues/1527 ))
([99a854099a8540e65#1576 ](https://github.com/headroomlabs-ai/headroom/issues/1576 ))
([816cb85816cb85fa8#1544 ](https://github.com/headroomlabs-ai/headroom/issues/1544 ))
([#1560 ](https://github.com/headroomlabs-ai/headroom/issues/1560 ))
([6b227b96b227b9c90#1288 ](https://github.com/headroomlabs-ai/headroom/issues/1288 ))
([27a546827a5468349#1428 ](https://github.com/headroomlabs-ai/headroom/issues/1428 ))
([1c0e1521c0e15243e#198 ](https://github.com/headroomlabs-ai/headroom/issues/198 ))
([#1559 ](https://github.com/headroomlabs-ai/headroom/issues/1559 ))
([b84afbfb84afbfb83#1691 ](https://github.com/headroomlabs-ai/headroom/issues/1691 ))
([bec47a1bec47a1898#1459 ](https://github.com/headroomlabs-ai/headroom/issues/1459 ))
([adaeb88adaeb88a4d#1596 ](https://github.com/headroomlabs-ai/headroom/issues/1596 ))
([c19347cc19347c310#1573 ](https://github.com/headroomlabs-ai/headroom/issues/1573 ))
([ad0034fad0034f981#1427 ](https://github.com/headroomlabs-ai/headroom/issues/1427 ))
([a932247a9322477e3#1672 ](https://github.com/headroomlabs-ai/headroom/issues/1672 ))
([8cddf9b8cddf9b58e#1647 ](https://github.com/headroomlabs-ai/headroom/issues/1647 ))
([5fe4e7b5fe4e7b195#1430 ](https://github.com/headroomlabs-ai/headroom/issues/1430 ))
([15ac65015ac650d40#1451 ](https://github.com/headroomlabs-ai/headroom/issues/1451 ))
([d337e3bd337e3b828#1473 ](https://github.com/headroomlabs-ai/headroom/issues/1473 ))
([312129a312129a8e7#1598 ](https://github.com/headroomlabs-ai/headroom/issues/1598 ))
([2a34a822a34a822f2#1663 ](https://github.com/headroomlabs-ai/headroom/issues/1663 ))
([9fbd47b9fbd47ba6b#1632 ](https://github.com/headroomlabs-ai/headroom/issues/1632 ))
([814ffa3814ffa36a4#1429 ](https://github.com/headroomlabs-ai/headroom/issues/1429 ))
([72ade3772ade37112#1162 ](https://github.com/headroomlabs-ai/headroom/issues/1162 ))
([64783d864783d8824#1719 ](https://github.com/headroomlabs-ai/headroom/issues/1719 ))
([0d18ef20d18ef26f4#575 ](https://github.com/headroomlabs-ai/headroom/issues/575 ))
([#1563 ](https://github.com/headroomlabs-ai/headroom/issues/1563 ))
([95abca395abca3abd#1393 ](https://github.com/headroomlabs-ai/headroom/issues/1393 ))
([cff7247cff7247efd#1464 ](https://github.com/headroomlabs-ai/headroom/issues/1464 ))
([6cba4416cba4419d0#1477 ](https://github.com/headroomlabs-ai/headroom/issues/1477 ))
([75427bb75427bbd4a#1604 ](https://github.com/headroomlabs-ai/headroom/issues/1604 ))
([c9d717cc9d717c13chttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-02 22:54:04 -07:00
Krishna
adaeb88a4d
fix(openclaw): detect uv-installed headroom binary in ~/.local/bin ( #1459 )
...
## Description
When `headroom-ai` is installed via `uv tool install headroom-ai`, the
binary lands at `~/.local/bin/headroom`. The plugin's autoStart launcher
detection did not find it because the PATH check used `sh -lc` which may
not source user shell config (`.zshrc`, `.bash_profile`) on all systems.
This PR adds explicit uv path detection and fixes the shell invocation
flag.
Related to #419
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature
- [ ] Breaking change
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring
## Changes Made
- Switch PATH check from `sh -lc` to `sh -c` in `proxy-manager.ts`
- Add explicit uv tool install detection checking
`~/.local/bin/headroom`
## Testing
- [ ] Unit tests pass (`pytest`)
- [ ] Linting passes (`ruff check .`)
- [ ] Type checking passes (`mypy headroom`)
- [x] Manual testing performed
### Test Output
```text
Status: loaded
Version: 0.27.0
Capabilities:
context-engine: headroom
Tools:
headroom_retrieve
```
## Real Behavior Proof
- Environment: EndeavourOS x86_64, OpenClaw 2026.6.10, headroom-ai
0.27.0 via uv
- Exact command / steps: `uv tool install headroom-ai` then `openclaw
gateway restart`
- Observed result: Before fix — autoStart failed with "Headroom proxy
not detected on default endpoints" even though binary exists at
`~/.local/bin/headroom`. After fix — plugin loads and connects
correctly.
- Not tested: Windows, Docker runtime
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Additional Notes
Reproduced while debugging the npm package staleness issue in #419 .
Affects any user following the standard `uv tool install` workflow on
Linux/macOS.
2026-06-30 14:18:06 -05:00
github-actions[bot]
aea3c35177
chore: release main ( #1441 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.28.0</summary>
##
[0.28.0](https://github.com/headroomlabs-ai/headroom/compare/v0.27.0...v0.28.0 )
(2026-06-29)
### Features
* add --disable-kompress-fallback to restore legacy PASSTHROUGH fallback
([#1185 ](https://github.com/headroomlabs-ai/headroom/issues/1185 ))
([f309244f309244a77#559 ](https://github.com/headroomlabs-ai/headroom/issues/559 ))
([91cd21091cd2102d7#1124 ](https://github.com/headroomlabs-ai/headroom/issues/1124 ))
([85786b385786b33a3#1138 ](https://github.com/headroomlabs-ai/headroom/issues/1138 ))
([e5031b0e5031b0121#1313 ](https://github.com/headroomlabs-ai/headroom/issues/1313 ))
([#1343 ](https://github.com/headroomlabs-ai/headroom/issues/1343 ))
([46587214658721ea0#1125 ](https://github.com/headroomlabs-ai/headroom/issues/1125 ))
([f39858cf39858c233#1105 ](https://github.com/headroomlabs-ai/headroom/issues/1105 ))
([b4571ccb4571cc346#1160 ](https://github.com/headroomlabs-ai/headroom/issues/1160 ))
([14e8dc414e8dc4c84#1115 ](https://github.com/headroomlabs-ai/headroom/issues/1115 ))
([ced75e4ced75e4718#738 ](https://github.com/headroomlabs-ai/headroom/issues/738 ))
([c0745d4c0745d4161#1537 ](https://github.com/headroomlabs-ai/headroom/issues/1537 ))
([546ab55546ab553dc#870 ](https://github.com/headroomlabs-ai/headroom/issues/870 ))
([#1259 ](https://github.com/headroomlabs-ai/headroom/issues/1259 ))
([a2159c0a2159c0b66#1068 ](https://github.com/headroomlabs-ai/headroom/issues/1068 ))
([723b80c723b80c091#1127 ](https://github.com/headroomlabs-ai/headroom/issues/1127 ))
([978ffa0978ffa0a6a#1158 ](https://github.com/headroomlabs-ai/headroom/issues/1158 ))
([#1351 ](https://github.com/headroomlabs-ai/headroom/issues/1351 ))
([b50d9c1b50d9c17ce#1230 ](https://github.com/headroomlabs-ai/headroom/issues/1230 ))
([dca9853dca9853ed9#1037 ](https://github.com/headroomlabs-ai/headroom/issues/1037 ))
([84f987184f9871e30#1312 ](https://github.com/headroomlabs-ai/headroom/issues/1312 ))
([#1336 ](https://github.com/headroomlabs-ai/headroom/issues/1336 ))
([5986c225986c2260f#1486 ](https://github.com/headroomlabs-ai/headroom/issues/1486 ))
([4db3bc94db3bc91d9#1284 ](https://github.com/headroomlabs-ai/headroom/issues/1284 ))
([530318b530318b425#1532 ](https://github.com/headroomlabs-ai/headroom/issues/1532 ))
([c2fc4d3c2fc4d3753#1022 ](https://github.com/headroomlabs-ai/headroom/issues/1022 ))
([#1197 ](https://github.com/headroomlabs-ai/headroom/issues/1197 ))
([0c9b42a0c9b42a919#1273 ](https://github.com/headroomlabs-ai/headroom/issues/1273 ))
([2cae13d2cae13dd79#1539 ](https://github.com/headroomlabs-ai/headroom/issues/1539 ))
([d2565a6d2565a6983#1399 ](https://github.com/headroomlabs-ai/headroom/issues/1399 ))
([2e29c722e29c7223f#1012 ](https://github.com/headroomlabs-ai/headroom/issues/1012 ))
([51943885194388b66#1126 ](https://github.com/headroomlabs-ai/headroom/issues/1126 ))
([#1164 ](https://github.com/headroomlabs-ai/headroom/issues/1164 ))
([a0cb798a0cb7982e3#1206 ](https://github.com/headroomlabs-ai/headroom/issues/1206 ))
([38f140438f1404432#1491 ](https://github.com/headroomlabs-ai/headroom/issues/1491 ))
([bd76235bd76235f5c#1373 ](https://github.com/headroomlabs-ai/headroom/issues/1373 ))
([e06b616e06b61671f#1375 ](https://github.com/headroomlabs-ai/headroom/issues/1375 ))
([8aab8f28aab8f22cb#1332 ](https://github.com/headroomlabs-ai/headroom/issues/1332 ))
([823840282384022bd#1302 ](https://github.com/headroomlabs-ai/headroom/issues/1302 ))
([cbd361dcbd361de2a#1231 ](https://github.com/headroomlabs-ai/headroom/issues/1231 ))
([#1299 ](https://github.com/headroomlabs-ai/headroom/issues/1299 ))
([5e0bb695e0bb69725#961 ](https://github.com/headroomlabs-ai/headroom/issues/961 ))
([#1349 ](https://github.com/headroomlabs-ai/headroom/issues/1349 ))
([e6bbc40e6bbc40b11#1269 ](https://github.com/headroomlabs-ai/headroom/issues/1269 ))
([ad7993bad7993bf15#1324 ](https://github.com/headroomlabs-ai/headroom/issues/1324 ))
([35939c335939c3536#1509 ](https://github.com/headroomlabs-ai/headroom/issues/1509 ))
([5771a805771a8020e#1118 ](https://github.com/headroomlabs-ai/headroom/issues/1118 ))
([5912d655912d65674#1382 ](https://github.com/headroomlabs-ai/headroom/issues/1382 ))
([615848e615848eba4#1276 ](https://github.com/headroomlabs-ai/headroom/issues/1276 ))
([17ecad917ecad9d89#1301 ](https://github.com/headroomlabs-ai/headroom/issues/1301 ))
([8da0b4e8da0b4e565#1290 ](https://github.com/headroomlabs-ai/headroom/issues/1290 ))
([da1a397da1a3973ed#833 ](https://github.com/headroomlabs-ai/headroom/issues/833 ))
([#1348 ](https://github.com/headroomlabs-ai/headroom/issues/1348 ))
([feedeadfeedead077#1498 ](https://github.com/headroomlabs-ai/headroom/issues/1498 ))
([1baa04e1baa04ef65#1400 ](https://github.com/headroomlabs-ai/headroom/issues/1400 ))
([42612c842612c86df#1287 ](https://github.com/headroomlabs-ai/headroom/issues/1287 ))
([3590046359004646b#1386 ](https://github.com/headroomlabs-ai/headroom/issues/1386 ))
([22def9322def93177#1106 ](https://github.com/headroomlabs-ai/headroom/issues/1106 ))
([f216e43f216e43055#1381 ](https://github.com/headroomlabs-ai/headroom/issues/1381 ))
([6c837906c83790680#1499 ](https://github.com/headroomlabs-ai/headroom/issues/1499 ))
([80fa08680fa086660#571 ](https://github.com/headroomlabs-ai/headroom/issues/571 ))
([b618d2db618d2d11a#1433 ](https://github.com/headroomlabs-ai/headroom/issues/1433 ))
([936274793627471b7#1374 ](https://github.com/headroomlabs-ai/headroom/issues/1374 ))
([51d4bcf51d4bcfc11#1331 ](https://github.com/headroomlabs-ai/headroom/issues/1331 ))
([3be25263be2526b76#1321 ](https://github.com/headroomlabs-ai/headroom/issues/1321 ))
([bb3e040bb3e040a46#1500 ](https://github.com/headroomlabs-ai/headroom/issues/1500 ))
([d5ac07fd5ac07fc45#1134 ](https://github.com/headroomlabs-ai/headroom/issues/1134 ))
([561ba17561ba17ec2#1100 ](https://github.com/headroomlabs-ai/headroom/issues/1100 ))
([#1258 ](https://github.com/headroomlabs-ai/headroom/issues/1258 ))
([3d59df73d59df7be8#1338 ](https://github.com/headroomlabs-ai/headroom/issues/1338 ))
([acafb2dacafb2d0f6#996 ](https://github.com/headroomlabs-ai/headroom/issues/996 ))
([b4682d6b4682d6f91#296 ](https://github.com/headroomlabs-ai/headroom/issues/296 ))
([#1352 ](https://github.com/headroomlabs-ai/headroom/issues/1352 ))
([90734b690734b691a#1501 ](https://github.com/headroomlabs-ai/headroom/issues/1501 ))
([27e010e27e010e38f#1103 ](https://github.com/headroomlabs-ai/headroom/issues/1103 ))
([cdfeeaccdfeeacc63#1377 ](https://github.com/headroomlabs-ai/headroom/issues/1377 ))
([b09f027b09f027062#1376 ](https://github.com/headroomlabs-ai/headroom/issues/1376 ))
([55c700c55c700c686#1132 ](https://github.com/headroomlabs-ai/headroom/issues/1132 ))
([#1305 ](https://github.com/headroomlabs-ai/headroom/issues/1305 ))
([70cc96a70cc96a386#1329 ](https://github.com/headroomlabs-ai/headroom/issues/1329 ))
([90bee8990bee89243#1495 ](https://github.com/headroomlabs-ai/headroom/issues/1495 ))
([547b15d547b15dab2#1323 ](https://github.com/headroomlabs-ai/headroom/issues/1323 ))
([43494ff43494ff526#1543 ](https://github.com/headroomlabs-ai/headroom/issues/1543 ))
([5d3803a5d3803a21c#1488 ](https://github.com/headroomlabs-ai/headroom/issues/1488 ))
([91571739157173018#1465 ](https://github.com/headroomlabs-ai/headroom/issues/1465 ))
([16c638b16c638bc21#1540 ](https://github.com/headroomlabs-ai/headroom/issues/1540 ))
([a7d3360a7d3360a05#549 ](https://github.com/headroomlabs-ai/headroom/issues/549 ))
([24cf25624cf256e50#1489 ](https://github.com/headroomlabs-ai/headroom/issues/1489 ))
([8e0dadf8e0dadfe02#1123 ](https://github.com/headroomlabs-ai/headroom/issues/1123 ))
([#1260 ](https://github.com/headroomlabs-ai/headroom/issues/1260 ))
([a00fb67a00fb6761e#1314 ](https://github.com/headroomlabs-ai/headroom/issues/1314 ))
([97588179758817979#1130 ](https://github.com/headroomlabs-ai/headroom/issues/1130 ))
([27d6f8e27d6f8e2a7#1255 ](https://github.com/headroomlabs-ai/headroom/issues/1255 ))
([8d6c1758d6c175d60#1263 ](https://github.com/headroomlabs-ai/headroom/issues/1263 ))
([f03021ff03021f1b6#1296 ](https://github.com/headroomlabs-ai/headroom/issues/1296 ))
([c30ec4cc30ec4cda8#1117 ](https://github.com/headroomlabs-ai/headroom/issues/1117 ))
([fda4670fda4670ef8#1308 ](https://github.com/headroomlabs-ai/headroom/issues/1308 ))
([#1341 ](https://github.com/headroomlabs-ai/headroom/issues/1341 ))
([52068dd52068dd650#1093 ](https://github.com/headroomlabs-ai/headroom/issues/1093 ))
([a35fe86a35fe86e87#1307 ](https://github.com/headroomlabs-ai/headroom/issues/1307 ))
([#1387 ](https://github.com/headroomlabs-ai/headroom/issues/1387 ))
([c6c921ac6c921a7c1#1481 ](https://github.com/headroomlabs-ai/headroom/issues/1481 ))
([c632023c632023cc1#1311 ](https://github.com/headroomlabs-ai/headroom/issues/1311 ))
([d633e81d633e8172c#1251 ](https://github.com/headroomlabs-ai/headroom/issues/1251 ))
([b4fde0cb4fde0c3a4#1191 ](https://github.com/headroomlabs-ai/headroom/issues/1191 ))
([959ab0d959ab0de47#1294 ](https://github.com/headroomlabs-ai/headroom/issues/1294 ))
([b829cebb829ceba84#1313 ](https://github.com/headroomlabs-ai/headroom/issues/1313 ))
([b0146c4b0146c4ccd#1171 ](https://github.com/headroomlabs-ai/headroom/issues/1171 ))
([#1298 ](https://github.com/headroomlabs-ai/headroom/issues/1298 ))
([6c68ff46c68ff4e9fhttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-29 12:53:17 -07:00
Tejas Chopra
c2fc4d3753
fix(ccr): make headroom_retrieve a hash-only full-content lookup ( #1532 )
...
The optional `query` parameter on headroom_retrieve routed retrieval
through CompressionStore.search(), which BM25-scored the items inside a
single cached blob and dropped everything below a 0.3 relevance floor.
On small per-blob corpora with conversational queries this returned an
empty result the large majority of the time, so the LLM saw "nothing
found" for content that was actually present — pushing users to turn
compression off entirely.
Retrieval is fundamentally a hash lookup (this already matches the Rust
proxy's CCR store, which is put/get only — "no BM25 search"). Remove the
query/search path end to end and always return the full original
content:
Core (Python proxy):
- tool schemas (anthropic/openai/google) drop the `query` property
- parse_tool_call returns the hash (str | None) instead of (hash, query)
- response handler, proxy POST/GET/tool-call handlers, the MCP retrieve
tool, and the streaming feedback recorders retrieve by hash only
- proactive context-tracker expansion always restores full content
- delete CompressionStore.search() and its BM25 machinery (the bm25
module stays — it is still used by relevance/)
- CCRToolCall.query, CCRToolResult.was_search, and
ExpansionRecommendation.expand_full/search_query are removed
Plugins (advertised a now-defunct query param to the LLM):
- hermes (Python), openclaw + opencode (TypeScript) retrieve tools drop
`query` from their schemas, signatures, request URLs, and tests
Benchmarks/docs:
- ccr_regression + adversarial benchmarks switch from store.search() to
full hash retrieval (search input-injection tests repurposed to the
hash, the only remaining input surface)
- wiki/ARCHITECTURE.md, wiki/ccr.md, docs/content/docs/ccr.mdx,
config.py and store docstrings updated to describe hash-only retrieval
Tests updated to assert full-content retrieval and guard the removed
surface; the full CCR/proxy/store/TOIN suite passes. ruff + mypy clean.
## Description
<!-- Briefly explain the change and why it is needed. -->
Closes #
## Type of Change
- [ ] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
-
## Testing
<!-- Check what you actually ran, then paste the real command output
below. -->
- [ ] Unit tests pass (`pytest`)
- [ ] Linting passes (`ruff check .`)
- [ ] Type checking passes (`mypy headroom`)
- [ ] New tests added for new functionality
- [ ] Manual testing performed
### Test Output
```text
# Paste relevant command output or artifact links here
```
## Real Behavior Proof
- Environment:
- Exact command / steps:
- Observed result:
- Not tested:
## Review Readiness
- [ ] I have performed a self-review
- [ ] This PR is ready for human review
## Checklist
- [ ] My code follows the project's style guidelines
- [ ] I have performed a self-review of my code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] I have made corresponding changes to the documentation
- [ ] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [ ] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md if applicable
## Screenshots (if applicable)
Add screenshots to help explain your changes.
## Additional Notes
<!-- Mention any N/A checklist items, tradeoffs, follow-ups, or
maintainer context. -->
2026-06-28 10:32:43 -07:00
Tejas Chopra
5771a8020e
fix(deps): remediate dependency CVEs and publish SBOM ( #1509 )
...
## Description
Supply-chain hardening: takes the **shipped** dependency surface from
**26 known CVEs to 0**. `pip install headroom-ai[all]` now resolves with
no known vulnerabilities (verified with Anchore syft + grype). Also
publishes a checked-in SBOM package (`sbom/`) so any user — especially
pilots running their own security review — can verify what's inside and
that we track it.
This addresses the Dependabot alerts on `main` (9 high / 4 moderate / 7
low at time of writing).
Closes #
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
**Rust**
- `pyo3` 0.24 → 0.29 (GHSA-36hh-v3qg-5jq4 High, GHSA-chgr-c6px-7xpp
Med). Migrated `Python::allow_threads` → `Python::detach` (10 sites) and
added `from_py_object` to the `Clone`-deriving `#[pyclass]` types (both
required by the 0.25+ API).
- `pyo3-log` 0.12 → 0.13; `lru` 0.12 → 0.18 (GHSA-rhfx-m35p-ff5j).
**Python**
- `torch` → 2.12.1, `mem0ai` → 2.x.
- Floor-pinned transitive CVE deps via `[tool.uv]
constraint-dependencies`: `pygments>=2.20.0`,
`pydantic-settings>=2.14.2`, `gitpython>=3.1.50`, `langsmith>=0.9.0`.
- **Removed `benchmark` from the `[all]` aggregate** so the default
install is CVE-free. `lm-eval` is invoked as an external subprocess
(`python -m lm_eval`) and never imported, so it is not a true runtime
dep — it remains available via the opt-in `[benchmark]` extra. See
[Accepted Risks](#additional-notes).
**npm (build/test tooling — never shipped in the
wheel/container/published SDK)**
- `esbuild` override `>=0.28.1` in `sdk/typescript` + `plugins/openclaw`
(GHSA-g7r4-m6w7-qqqr).
- `docs/`: `@anthropic-ai/sdk` → `^0.106.0` (GHSA-p7fg-763f-g4gf),
`postcss` override to force Next.js's bundled copy ≥8.5.10
(GHSA-qx2v-qp2m-jg93); regenerated a stale `bun.lock` that carried a
**Critical** vitest/vite.
**CI**
- Pinned `pypa/gh-action-pypi-publish` `@release/v1` → `@v1.13.0`
(GHSA-vxmw-7h4f-hqxh) in `release.yml` + `publish.yml`.
**SBOM**
- New `sbom/` directory: CycloneDX 1.7 + SPDX 2.3 SBOMs, grype scan
evidence, 330-package license inventory, and a regeneration guide.
## Testing
- [ ] Unit tests pass (`pytest`) — N/A, no Python source changed
(deps/config only)
- [x] Linting passes — `cargo fmt --check` + `cargo clippy` clean on the
changed crate; 0 `.py` files changed so `ruff`/`mypy` scope is
unaffected
- [x] Type checking passes — `cargo check --workspace` (0 errors)
- [ ] New tests added — N/A (dependency bumps; covered by existing
suites)
- [x] Manual testing performed — see Real Behavior Proof
### Test Output
```text
# headroom-ai[all] product surface — the number that matters
$ grype sbom:sbom/headroom-sbom-all-extra.cdx.json
No vulnerabilities found
# full repo scan (universal lock incl. opt-in [benchmark] + dev)
$ grype sbom:sbom/headroom-sbom.cdx.json
NAME INSTALLED TYPE VULNERABILITY SEVERITY
sqlitedict 2.1.0 python GHSA-g4r7-86gm-pgqc High # [benchmark]-only, unpatchable, accepted
nltk 3.9.4 python GHSA-p4gq-832x-fm9v High # [benchmark]-only, unpatchable, accepted
# pyo3 0.29 migration — extension builds + imports + runs
$ cargo check --workspace
Finished `dev` profile [unoptimized + debuginfo] target(s)
$ maturin develop && python -c "from headroom._core import DiffCompressor, SmartCrusher; ..."
extension OK — detach + from_py_object paths exercised
# lru 0.18 — eviction path
$ cargo test -p headroom-proxy --lib drift
14 passed, 213 filtered out
# per-ecosystem npm audits
$ (cd sdk/typescript && npm audit) -> found 0 vulnerabilities
$ (cd plugins/openclaw && npm audit) -> found 0 vulnerabilities
$ (cd docs && npm audit && bun audit) -> found 0 vulnerabilities / No vulnerabilities found
```
## Real Behavior Proof
- Environment: macOS (darwin 25.4.0, arm64), Python 3.12 `.venv`, Rust
1.95 toolchain, syft 1.46.0, grype 0.115.0, bun 1.3.14, maturin 1.13.3.
- Exact command / steps: (1) `uv export --extra all --no-dev
--no-emit-project | syft → grype` for the product surface; (2) `cargo
check --workspace` + `maturin develop` + extension import/compress smoke
test; (3) `cargo test -p headroom-proxy --lib drift`; (4) `cargo fmt
--check` + `cargo clippy -p headroom-py`; (5) `npm audit` in
sdk/openclaw/docs + `bun audit` in docs.
- Observed result: `headroom-ai[all]` resolution scans clean — "No
vulnerabilities found" (179 pkgs); full/prod SBOM shows only the 2
documented accepted CVEs; pyo3 0.29 extension imports and runs (detach +
from_py_object paths exercised); drift tests 14/14 pass; cargo fmt +
clippy clean; all npm/bun audits report 0.
- Not tested: full `pytest` suite (no Python source changed);
release-profile wheel build (used dev-profile `maturin develop` for the
import proof — the extension is semantically identical).
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
(`sbom/README.md`)
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective — N/A
(dependency bumps; existing suites + scans cover it)
- [x] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md — N/A (Release Please
auto-generates from the conventional commit)
## Additional Notes
**Accepted risks (the 2 residual CVEs).** Both originate solely from the
EleutherAI `lm-evaluation-harness` under the **opt-in `[benchmark]`
extra**, which Headroom invokes as a subprocess (never imports):
- `sqlitedict` CVE-2024-35515 (High) — pickle deserialization; package
abandoned (last release 2021), **no upstream fix exists**.
- `nltk` CVE-2026-54293 (High) — path traversal in `nltk.data.load()`;
affects ≤3.9.4 (current latest), **no patched release**.
Neither is in `[all]`, the published wheel, or the container. They are
documented in `sbom/README.md` and will be picked up automatically once
upstream ships fixes.
**Release/CHANGELOG:** N/A items above are because this is a
dependency/security PR with no Python source changes; CHANGELOG is
Release-Please-managed via the conventional commit message.
2026-06-27 15:28:12 -07:00
felixboenkost-droid
6d116b15f1
Harden OpenClaw plugin proxy routing ( #1074 )
...
## Description
Hardens the bundled OpenClaw plugin so configured proxy routing is
fail-closed and `autoStart` is opt-in.
Closes: N/A
This follow-up is intentionally separate from the ContentRouter cache
fix because it changes plugin/gateway behavior rather than core
compression routing.
The plugin should not mutate upstream provider routing unless a
configured proxy URL is reachable and looks like Headroom. It should
also avoid unhandled startup promise rejections when proxy startup is
fire-and-forget.
Why this shape:
- `autoStart: false` by default matches deployments where Headroom is
supervised externally, for example by systemd. The plugin should not
silently start or assume ownership of a proxy unless the operator opted
in.
- Provider routing is fail-closed: a configured URL must first respond
like Headroom, not merely expose a generic liveness endpoint. This
prevents accidentally routing model traffic through the wrong local
service.
- `/readyz` is treated as liveness, not identity. Identity comes from
Headroom-shaped stats endpoints (`/v1/retrieve/stats` or `/stats`)
because those are harder for unrelated services to satisfy by accident.
- Startup remains asynchronous, but errors are captured and exposed
instead of becoming unhandled promise rejections.
- This is a separate PR because the core cache fix is about compression
correctness, while this patch is about integration safety around
OpenClaw gateway routing.
## Type of Change
- [x] Bug fix (non-breaking change fixes issue)
- [ ] New feature (non-breaking change adds functionality)
- [ ] Breaking change (fix or feature would cause existing functionality
change)
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- Make proxy `autoStart` opt-in (`default: false`).
- Probe configured `proxyUrl` before applying provider routing.
- Treat `/readyz` as liveness only; require Headroom-shaped
`/v1/retrieve/stats` or `/stats` for identity.
- Observe fire-and-forget startup promise rejection and expose startup
error for callers.
- Isolate proxy-ready listener failures.
- Keep provider routing deferred when no active/probed Headroom proxy
exists.
- Register retrieve tool with explicit `headroom_retrieve` name.
- Extend plugin/unit tests for configured proxy failures, generic
non-Headroom endpoints, path collisions, and routing behavior.
Changed files:
- `plugins/openclaw/README.md`
- `plugins/openclaw/openclaw.plugin.json`
- `plugins/openclaw/src/engine.ts`
- `plugins/openclaw/src/plugin/index.ts`
- `plugins/openclaw/src/proxy-manager.ts`
- `plugins/openclaw/test/engine.test.ts`
- `plugins/openclaw/test/gateway-config.test.ts`
- `plugins/openclaw/test/plugin-runtime-routing.test.ts`
- `plugins/openclaw/test/proxy-manager.test.ts`
## Testing
- [x] Unit tests pass (`pytest`)
- [x] Linting passes (`ruff check .`)
- [x] Type checking passes (`mypy headroom`)
- [x] New tests added new functionality
- [x] Manual testing performed
### Test Output
```text
$ npm test
Test Files 6 passed (6)
Tests 74 passed (74)
$ npm run typecheck
tsc --noEmit
$ npm run build
tsup && node prepare-dist.mjs
Build success
```
## Real Behavior Proof
- Environment: local OpenClaw plugin package in the Headroom repo.
- Exact command / steps:
- Run plugin test suite.
- Run TypeScript typecheck.
- Run plugin build.
- Observed result:
- Tests passed: `74/74`.
- Typecheck passed.
- Build passed.
- Not tested:
- Full OpenClaw Gateway integration as part of this standalone PR prep.
## Review Readiness
- [x] I performed self-review
- [x] This PR ready for human review
## Checklist
- [x] My code follows project's style guidelines
- [x] I performed self-review my code
- [ ] I commented my code, particularly in hard-to-understand areas
- [x] I made corresponding changes documentation
- [x] My changes generate no new warnings
- [x] I added tests prove fix is effective or feature works
- [x] New and existing unit tests pass locally my changes
- [ ] I updated CHANGELOG.md if applicable
## Screenshots (if applicable)
N/A.
## Additional Notes
Checklist items left unchecked intentionally:
- No CHANGELOG update included.
- No extra comments were needed beyond existing code structure.
Co-authored-by: Björn-Christian Bönkost <bjoern@v2202603344248440850.hotsrv.de>
2026-06-22 22:52:59 -05:00
github-actions[bot]
95b2333ee5
chore: release main ( #1274 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.27.0</summary>
##
[0.27.0](https://github.com/chopratejas/headroom/compare/v0.26.0...v0.27.0 )
(2026-06-22)
### Features
* **cli:** add headroom doctor setup diagnostics
([#926 ](https://github.com/chopratejas/headroom/issues/926 ))
([e45cf4ee45cf4e061#1088 ](https://github.com/chopratejas/headroom/issues/1088 ))
([26be2c326be2c39cb#818 ](https://github.com/chopratejas/headroom/issues/818 ))
([b7be381b7be3814f1#983 ](https://github.com/chopratejas/headroom/issues/983 ))
([0d89c670d89c674cd#965 ](https://github.com/chopratejas/headroom/issues/965 ))
([a99dc61a99dc61424#856 ](https://github.com/chopratejas/headroom/issues/856 ) P3b)
([#1028 ](https://github.com/chopratejas/headroom/issues/1028 ))
([fe4f9eefe4f9ee478#1190 ](https://github.com/chopratejas/headroom/issues/1190 ))
([d9d0bf4d9d0bf4b79#1030 ](https://github.com/chopratejas/headroom/issues/1030 ))
([e8fc8a0e8fc8a0d18#1090 ](https://github.com/chopratejas/headroom/issues/1090 ))
([6904d476904d47a01#946 ](https://github.com/chopratejas/headroom/issues/946 ))
([#991 ](https://github.com/chopratejas/headroom/issues/991 ))
([addebdbaddebdb29c#1128 ](https://github.com/chopratejas/headroom/issues/1128 ))
([d789a7cd789a7c528#1113 ](https://github.com/chopratejas/headroom/issues/1113 ))
([0e059150e0591506c#1095 ](https://github.com/chopratejas/headroom/issues/1095 ))
([#1141 ](https://github.com/chopratejas/headroom/issues/1141 ))
([9f7f3ad9f7f3adfea#1213 ](https://github.com/chopratejas/headroom/issues/1213 ))
([#1236 ](https://github.com/chopratejas/headroom/issues/1236 ))
([08fb84508fb845fe3#1108 ](https://github.com/chopratejas/headroom/issues/1108 ))
([8894ee08894ee0c18#1064 ](https://github.com/chopratejas/headroom/issues/1064 ))
([5eae32b5eae32ba47#956 ](https://github.com/chopratejas/headroom/issues/956 ))
([#993 ](https://github.com/chopratejas/headroom/issues/993 ))
([b2f04e4b2f04e4ef7#1240 ](https://github.com/chopratejas/headroom/issues/1240 ))
([#1254 ](https://github.com/chopratejas/headroom/issues/1254 ))
([bc12acebc12acef59#746 ](https://github.com/chopratejas/headroom/issues/746 ))
([#995 ](https://github.com/chopratejas/headroom/issues/995 ))
([500ec2b500ec2b7fa#1161 ](https://github.com/chopratejas/headroom/issues/1161 ))
([3fc2a783fc2a78a5e#1092 ](https://github.com/chopratejas/headroom/issues/1092 ))
([#1262 ](https://github.com/chopratejas/headroom/issues/1262 ))
([4f9feda4f9fedaa7a#1218 ](https://github.com/chopratejas/headroom/issues/1218 ))
([2e6c4422e6c442dc8#1038 ](https://github.com/chopratejas/headroom/issues/1038 ))
([#1137 ](https://github.com/chopratejas/headroom/issues/1137 ))
([bcabc5cbcabc5cb11#1265 ](https://github.com/chopratejas/headroom/issues/1265 ))
([b5f63d8b5f63d8fa9#940 ](https://github.com/chopratejas/headroom/issues/940 ))
([#1053 ](https://github.com/chopratejas/headroom/issues/1053 ))
([f03e77bf03e77bec0#1222 ](https://github.com/chopratejas/headroom/issues/1222 ))
([1f18d591f18d59809#1215 ](https://github.com/chopratejas/headroom/issues/1215 ))
([381d771381d771e46#1226 ](https://github.com/chopratejas/headroom/issues/1226 ))
([bd55a42bd55a426bc#1036 ](https://github.com/chopratejas/headroom/issues/1036 ))
([b0cd032b0cd0329c7#998 ](https://github.com/chopratejas/headroom/issues/998 ))
([#1031 ](https://github.com/chopratejas/headroom/issues/1031 ))
([c987283c98728363a#1223 ](https://github.com/chopratejas/headroom/issues/1223 ))
([b998697b99869778b#956 ](https://github.com/chopratejas/headroom/issues/956 ))
([#994 ](https://github.com/chopratejas/headroom/issues/994 ))
([7e86baf7e86bafb90#992 ](https://github.com/chopratejas/headroom/issues/992 ))
([5b846915b84691770#1240 ](https://github.com/chopratejas/headroom/issues/1240 ))
([7c26a547c26a54d53#1071 ](https://github.com/chopratejas/headroom/issues/1071 ))
([9f712cc9f712ccbd7#951 ](https://github.com/chopratejas/headroom/issues/951 ))
([#1078 ](https://github.com/chopratejas/headroom/issues/1078 ))
([a554c3aa554c3a0e6https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-21 22:28:55 -07:00
problemsolverai2026-svg
2e6c442dc8
fix(openclaw): wrap plugin export as {register} object for OpenClaw 2026.x compatibility ( #1218 )
...
## Description
The `headroom-openclaw` plugin silently fails to load on OpenClaw
2026.x. OpenClaw's plugin loader calls `setupRegistration.register(api)`
on the plugin's default export. The current plugin exports a **bare
function** as its default — which has no `.register()` method — so the
loader skips it silently and the plugin never initializes. No error is
thrown, no warning logged. The plugin appears "enabled" in the registry
but does nothing.
Fix: wrap the function in a `{ register: headroomPlugin }` object. One
structural change, plugin body unchanged.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
## Changes Made
- Wrapped `export default function headroomPlugin(api)` in a `{
register: headroomPlugin }` object so OpenClaw's loader can call
`.register(api)` on it
## Testing
- [ ] Unit tests pass (`pytest`)
- [ ] Linting passes (`ruff check .`)
- [ ] Type checking passes (`mypy headroom`)
- [ ] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
$ node -e "
const mod = require('./plugins/openclaw/dist/index.js');
const plugin = mod.default;
console.log('type:', typeof plugin);
console.log('has register:', typeof plugin.register);
const mockApi = {
config: { plugins: { entries: { headroom: { config: { proxyUrl: 'http://127.0.0.1:8787 ' } } } } },
logger: { info: (m) => console.log('INFO:', m), warn: console.warn, error: console.error },
registerContextEngine: (id) => console.log('registerContextEngine:', id),
registerTool: () => console.log('registerTool called'),
on: (e) => console.log('on:', e),
};
plugin.register(mockApi);
"
type: object
has register: function
registerContextEngine: headroom
registerTool called
on: gateway_start
INFO: [headroom] Plugin registered
INFO: Headroom proxy ready at http://127.0.0.1:8787
```
## Real Behavior Proof
- Environment: macOS 15.x arm64, OpenClaw 2026.6.8, Node.js v25.8.0,
headroom-openclaw 0.1.0
- Exact command / steps: `openclaw plugins install headroom-ai/openclaw`
→ restart OpenClaw → check gateway logs for `[headroom]` entries → check
`curl http://localhost:8787/stats ` for `api_requests > 0`
- Observed result: Before fix — no `[headroom]` log entries, proxy never
started, `api_requests: 0`. After fix — `[headroom] Plugin registered`
in gateway log, proxy starts, `api_requests: 135`, `$10.11` saved in one
session.
- Observed result (after fix): `[headroom] Plugin registered` in gateway
log. Proxy starts on port 8787. Real Anthropic API calls intercepted —
`/stats` showed `api_requests: 135`, `total_saved_usd: 10.11` after one
session.
- Not tested: Windows, Linux
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] I have commented my code, particularly in hard-to-understand areas
- [ ] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md if applicable
## Additional Notes
Found while integrating headroom into
[Vespera](https://github.com/problemsolverai2026-svg/vespera ), a
persistent local AI system. The workaround was manually setting
`models.providers.anthropic.baseUrl = "http://127.0.0.1:8787 "` in
OpenClaw config — which works but bypasses the plugin entirely. The
proper plugin path should work out of the box.
2026-06-21 09:37:37 -07:00
dependabot[bot]
75f81cd19f
ci: bump the npm_and_yarn group across 3 directories with 3 updates ( #1056 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps the npm_and_yarn group with 1 update in the /docs directory:
[js-yaml](https://github.com/nodeca/js-yaml ).
Bumps the npm_and_yarn group with 1 update in the /plugins/openclaw
directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Bumps the npm_and_yarn group with 2 updates in the /sdk/typescript
directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) and
[form-data](https://github.com/form-data/form-data ).
Updates `js-yaml` from 4.1.1 to 4.2.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md ">js-yaml's
changelog</a>.</em></p>
<blockquote>
<h2>[4.2.0] - 2026-06-01</h2>
<h3>Added</h3>
<ul>
<li>Added <code>docs/safety.md</code> with notes about processing
untrusted YAML.</li>
<li>Added <code>maxDepth</code> (100) loader option. Not a problem, but
gives a better
exception instead of RangeError on stack overflow.</li>
<li>Added <code>maxMergeSeqLength</code> (20) loader option. Not a
problem after <code>merge</code> fix,
but an additional restriction for safety.</li>
<li>Added sourcemaps to <code>dist/</code> builds.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Stop resolving numbers with underscores as numeric scalars, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/627 ">#627</a>.</li>
<li>Switched dev toolchains to Vite / neostandard.</li>
<li>Updated demo.</li>
<li>Reorganized tests.</li>
<li><code>dist/</code> files are no longer kept in the repository.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix parsing of properties on the first implicit block mapping key,
<a
href="https://redirect.github.com/nodeca/js-yaml/issues/62 ">#62</a>.</li>
<li>Fix trailing whitespace handling when folding flow scalar lines, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/307 ">#307</a>.</li>
<li>Reject top-level block scalars without content indentation, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/280 ">#280</a>.</li>
<li>Ensure numbers survive round-trip, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/737 ">#737</a>.</li>
<li>Fix test coverage for issue <a
href="https://redirect.github.com/nodeca/js-yaml/issues/221 ">#221</a>.</li>
<li>Fix flow scalar trailing whitespace folding, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/307 ">#307</a>.</li>
<li>Fix digits in YAML named tag handles.</li>
</ul>
<h3>Security</h3>
<ul>
<li>Fix potential DoS via quadratic complexity in merge - deduplicate
repeated
elements (makes sense for malformed files > 10K).</li>
</ul>
<h2>[3.14.2] - 2025-11-15</h2>
<h3>Security</h3>
<ul>
<li>Backported v4.1.1 fix to v3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/nodeca/js-yaml/commits ">compare view</a></li>
</ul>
</details>
<br />
Updates `vite` from 8.0.10 to 8.0.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.16</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.15</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16 ">8.0.16</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> reject UNC paths for launch-editor-middleware
(<a
href="https://redirect.github.com/vitejs/vite/issues/22571 ">#22571</a>)
(<a
href="50b951225bhttps://redirect.github.com/vitejs/vite/issues/22572 ">#22572</a>)
(<a
href="dc245c71e5https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15 ">8.0.15</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>send 408 on request timeout (<a
href="https://redirect.github.com/vitejs/vite/issues/22476 ">#22476</a>)
(<a
href="c85c9eeb9ahttps://redirect.github.com/vitejs/vite/issues/22538 ">#22538</a>)
(<a
href="646dbedd28https://redirect.github.com/vitejs/vite/issues/22488 ">#22488</a>)
(<a
href="85a0eff1c8https://redirect.github.com/vitejs/vite/issues/22511 ">#22511</a>)
(<a
href="2686d7d0b7https://redirect.github.com/vitejs/vite/issues/21762 ">#21762</a>)
(<a
href="47c4213f13https://redirect.github.com/vitejs/vite/issues/22497 ">#22497</a>)
(<a
href="5c8e98f8b5https://redirect.github.com/vitejs/vite/issues/22528 ">#22528</a>)
(<a
href="e3cfb9deechttps://redirect.github.com/vitejs/vite/issues/22509 ">#22509</a>)
(<a
href="40985f1c09https://redirect.github.com/vitejs/vite/issues/22566 ">#22566</a>)
(<a
href="3052a67d93https://redirect.github.com/vitejs/vite/issues/22562 ">#22562</a>)
(<a
href="6978a9ceb9https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14 ">8.0.14</a>
(2026-05-21)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>update rolldown to 1.0.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/22484 ">#22484</a>)
(<a
href="96efc88570https://redirect.github.com/vitejs/vite/issues/22471 ">#22471</a>)
(<a
href="98b8163213https://redirect.github.com/vitejs/vite/issues/22450 ">#22450</a>)
(<a
href="e8e9a34dcfhttps://redirect.github.com/vitejs/vite/issues/22480 ">#22480</a>)
(<a
href="5d94d1bffdhttps://redirect.github.com/vitejs/vite/issues/22342 ">#22342</a>)
(<a
href="b3132daceahttps://redirect.github.com/vitejs/vite/issues/22470 ">#22470</a>)
(<a
href="7cb728eb622c69495f25https://redirect.github.com/vitejs/vite/issues/22310 ">#22310</a>)
(<a
href="0ae2844ab6f94df87ff0dc245c71e5https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572 ">#22572</a>)</li>
<li><a
href="50b951225bhttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571 ">#22571</a>)</li>
<li><a
href="8d1b0195fd2686d7d0b7https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511 ">#22511</a>)</li>
<li><a
href="3052a67d93https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566 ">#22566</a>)</li>
<li><a
href="e3cfb9deechttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528 ">#22528</a>)</li>
<li><a
href="6978a9ceb9https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562 ">#22562</a>)</li>
<li><a
href="646dbedd28https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538 ">#22538</a>)</li>
<li><a
href="85a0eff1c8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488 ">#22488</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 8.0.10 to 8.0.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.16</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.15</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16 ">8.0.16</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> reject UNC paths for launch-editor-middleware
(<a
href="https://redirect.github.com/vitejs/vite/issues/22571 ">#22571</a>)
(<a
href="50b951225bhttps://redirect.github.com/vitejs/vite/issues/22572 ">#22572</a>)
(<a
href="dc245c71e5https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15 ">8.0.15</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>send 408 on request timeout (<a
href="https://redirect.github.com/vitejs/vite/issues/22476 ">#22476</a>)
(<a
href="c85c9eeb9ahttps://redirect.github.com/vitejs/vite/issues/22538 ">#22538</a>)
(<a
href="646dbedd28https://redirect.github.com/vitejs/vite/issues/22488 ">#22488</a>)
(<a
href="85a0eff1c8https://redirect.github.com/vitejs/vite/issues/22511 ">#22511</a>)
(<a
href="2686d7d0b7https://redirect.github.com/vitejs/vite/issues/21762 ">#21762</a>)
(<a
href="47c4213f13https://redirect.github.com/vitejs/vite/issues/22497 ">#22497</a>)
(<a
href="5c8e98f8b5https://redirect.github.com/vitejs/vite/issues/22528 ">#22528</a>)
(<a
href="e3cfb9deechttps://redirect.github.com/vitejs/vite/issues/22509 ">#22509</a>)
(<a
href="40985f1c09https://redirect.github.com/vitejs/vite/issues/22566 ">#22566</a>)
(<a
href="3052a67d93https://redirect.github.com/vitejs/vite/issues/22562 ">#22562</a>)
(<a
href="6978a9ceb9https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14 ">8.0.14</a>
(2026-05-21)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>update rolldown to 1.0.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/22484 ">#22484</a>)
(<a
href="96efc88570https://redirect.github.com/vitejs/vite/issues/22471 ">#22471</a>)
(<a
href="98b8163213https://redirect.github.com/vitejs/vite/issues/22450 ">#22450</a>)
(<a
href="e8e9a34dcfhttps://redirect.github.com/vitejs/vite/issues/22480 ">#22480</a>)
(<a
href="5d94d1bffdhttps://redirect.github.com/vitejs/vite/issues/22342 ">#22342</a>)
(<a
href="b3132daceahttps://redirect.github.com/vitejs/vite/issues/22470 ">#22470</a>)
(<a
href="7cb728eb622c69495f25https://redirect.github.com/vitejs/vite/issues/22310 ">#22310</a>)
(<a
href="0ae2844ab6f94df87ff0dc245c71e5https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572 ">#22572</a>)</li>
<li><a
href="50b951225bhttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571 ">#22571</a>)</li>
<li><a
href="8d1b0195fd2686d7d0b7https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511 ">#22511</a>)</li>
<li><a
href="3052a67d93https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566 ">#22566</a>)</li>
<li><a
href="e3cfb9deechttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528 ">#22528</a>)</li>
<li><a
href="6978a9ceb9https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562 ">#22562</a>)</li>
<li><a
href="646dbedd28https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538 ">#22538</a>)</li>
<li><a
href="85a0eff1c8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488 ">#22488</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `form-data` from 4.0.5 to 4.0.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md ">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 ">v4.0.6</a>
- 2026-06-12</h2>
<h3>Commits</h3>
<ul>
<li>[Fix] escape CR, LF, and <code>"</code> in field names and
filenames <a
href="8dff42c6daf31d21ef1092ae0eb5da67b0f65c2e64190db54892ae0eb5daf31d21ef108dff42c6da67b0f65c2ehttps://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/chopratejas/headroom/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 23:07:34 -07:00
github-actions[bot]
b81a4a7a16
chore: release main ( #931 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.26.0</summary>
##
[0.26.0](https://github.com/chopratejas/headroom/compare/v0.25.0...v0.26.0 )
(2026-06-16)
### Features
* add Copilot BYOK provider wrapper utilities and CLI support
([#1041 ](https://github.com/chopratejas/headroom/issues/1041 ))
([e67ee2ae67ee2af65#814 ](https://github.com/chopratejas/headroom/issues/814 ))
([6d3f39f6d3f39f213#935 ](https://github.com/chopratejas/headroom/issues/935 ))
([0932b8b0932b8bef4#901 ](https://github.com/chopratejas/headroom/issues/901 ))
([f928576f9285766dd#999 ](https://github.com/chopratejas/headroom/issues/999 ))
([0dc2e1c0dc2e1cb3f#913 ](https://github.com/chopratejas/headroom/issues/913 ))
([2a4d3002a4d300841#918 ](https://github.com/chopratejas/headroom/issues/918 ))
([59390045939004185#909 ](https://github.com/chopratejas/headroom/issues/909 ))
([7d4ae867d4ae86ec0#856 ](https://github.com/chopratejas/headroom/issues/856 ) P3a)
([#1015 ](https://github.com/chopratejas/headroom/issues/1015 ))
([c2e52fec2e52fe743#856 ](https://github.com/chopratejas/headroom/issues/856 ) P2)
([#905 ](https://github.com/chopratejas/headroom/issues/905 ))
([553ade4553ade4ec6#720 ](https://github.com/chopratejas/headroom/issues/720 ))
([7edb27a7edb27ab24#651 ](https://github.com/chopratejas/headroom/issues/651 ))
([0c5c89d0c5c89d05c#942 ](https://github.com/chopratejas/headroom/issues/942 ))
([#954 ](https://github.com/chopratejas/headroom/issues/954 ))
([a7ee8a6a7ee8a60a7#950 ](https://github.com/chopratejas/headroom/issues/950 ))
([1ec93201ec9320888#1018 ](https://github.com/chopratejas/headroom/issues/1018 ))
([3b0bcee3b0bceecf4#1021 ](https://github.com/chopratejas/headroom/issues/1021 ))
([4558bc24558bc2465#1047 ](https://github.com/chopratejas/headroom/issues/1047 ))
([74dff9474dff94fb8#898 ](https://github.com/chopratejas/headroom/issues/898 ))
([b9e2761b9e27614c6#924 ](https://github.com/chopratejas/headroom/issues/924 ))
([8c00f718c00f7103c#986 ](https://github.com/chopratejas/headroom/issues/986 ))
([99c874d99c874d423#1034 ](https://github.com/chopratejas/headroom/issues/1034 ))
([74ae78174ae781644#743 ](https://github.com/chopratejas/headroom/issues/743 ))
([dff6a19dff6a19946#892 ](https://github.com/chopratejas/headroom/issues/892 ))
([b1f700fb1f700fc27#887 ](https://github.com/chopratejas/headroom/issues/887 ))
([d6f0f0fd6f0f0f642#890 ](https://github.com/chopratejas/headroom/issues/890 ))
([16ed73b16ed73bca6#889 ](https://github.com/chopratejas/headroom/issues/889 ))
([65b0e8c65b0e8c58d#893 ](https://github.com/chopratejas/headroom/issues/893 ))
([6cdb8466cdb846200#897 ](https://github.com/chopratejas/headroom/issues/897 ))
([9b0c8409b0c840dd7#997 ](https://github.com/chopratejas/headroom/issues/997 ))
([#1027 ](https://github.com/chopratejas/headroom/issues/1027 ))
([2d3701b2d3701b59e#1045 ](https://github.com/chopratejas/headroom/issues/1045 ))
([0ddd4ed0ddd4ed9e9#947 ](https://github.com/chopratejas/headroom/issues/947 ))
([7c8c9097c8c909c85#903 ](https://github.com/chopratejas/headroom/issues/903 ))
([0632eba0632eba6c3#917 ](https://github.com/chopratejas/headroom/issues/917 ))
([b08ec15b08ec15b0d#1000 ](https://github.com/chopratejas/headroom/issues/1000 ))
([7dbbb407dbbb4077e#885 ](https://github.com/chopratejas/headroom/issues/885 ))
([a14ab45a14ab45cf0#957 ](https://github.com/chopratejas/headroom/issues/957 ))
([b70fccbb70fccbe17#821 ](https://github.com/chopratejas/headroom/issues/821 ))
([e20f16be20f16b1a6#1003 ](https://github.com/chopratejas/headroom/issues/1003 ))
([919379a919379a8a1#641 ](https://github.com/chopratejas/headroom/issues/641 ))
([0b4a4bd0b4a4bd483#943 ](https://github.com/chopratejas/headroom/issues/943 ))
([9b7b4369b7b436b04#884 ](https://github.com/chopratejas/headroom/issues/884 ))
([dd22cfddd22cfd72a#704 ](https://github.com/chopratejas/headroom/issues/704 ))
([e36fccde36fccd8cfhttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-16 15:35:00 -07:00
Tim Poppe
7c8c909c85
fix(openclaw): declare headroom_retrieve tool contract ( #947 )
...
## Summary
- add `contracts.tools` to the OpenClaw plugin manifest
- declare `headroom_retrieve` so the manifest matches the tool
registered at runtime
- remove the OpenClaw `contracts.tools` warning during startup
## Testing
- npm test
- npm run typecheck
<!-- headroom-maintainer-template-completion:start -->
## Description
This PR prepares `fix(openclaw): declare headroom_retrieve tool
contract` for review by documenting the intended change, validation
evidence, and remaining merge-readiness context.
Linked issues: None declared.
## Type of Change
- [x] Bug fix
- [ ] New feature
- [ ] Documentation
- [ ] Refactor
- [ ] Tests only
## Changes Made
- Commit: fix(openclaw): declare headroom_retrieve tool contract
- Touches `plugins/openclaw/openclaw.plugin.json`
## Testing
- [x] GitHub checks reviewed
- [x] Metadata/template validation
- [ ] Local functional testing
### Test Output
```text
gh pr view 947 --repo chopratejas/headroom --json statusCheckRollup
- PR Governance / template: FAILURE
- PR Governance / label: SUCCESS
- external / GitGuardian Security Checks: SUCCESS
```
## Real Behavior Proof
- Environment: GitHub PR metadata and checks for `chopratejas/headroom`
PR #947 .
- Exact command / steps: Reviewed PR title, commits, changed files,
linked issues, labels, and check rollup; appended this maintainer
template completion block without replacing the author's original
description.
- Observed result: PR body now contains all required governance
sections, checked readiness fields, and a non-placeholder validation
evidence block.
- Not tested: This pass updated PR metadata only; code validation
remains represented by the linked GitHub checks and any author-provided
evidence above.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
<!-- headroom-maintainer-template-completion:end -->
2026-06-15 11:12:26 -05:00
dependabot[bot]
4f59097045
ci: bump esbuild from 0.27.7 to 0.28.1 in /docs in the npm_and_yarn group across 1 directory ( #936 )
...
Bumps the npm_and_yarn group with 1 update in the /docs directory:
[esbuild](https://github.com/evanw/esbuild ).
Updates `esbuild` from 0.27.7 to 0.28.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases ">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.28.1</h2>
<ul>
<li>
<p>Disallow <code>\</code> in local development server HTTP requests (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr ">GHSA-g7r4-m6w7-qqqr</a>)</p>
<p>This release fixes a security issue where HTTP requests to esbuild's
local development server could traverse outside of the serve directory
on Windows using a <code>\</code> backslash character. It happened due
to the use of Go's <code>path.Clean()</code> function, which only
handles Unix-style <code>/</code> characters. HTTP requests with paths
containing <code>\</code> are no longer allowed.</p>
<p>Thanks to <a
href="https://github.com/dellalibera "><code>@dellalibera</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Add integrity checks to the Deno API (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr ">GHSA-gv7w-rqvm-qjhr</a>)</p>
<p>The previous release of esbuild added integrity checks to esbuild's
npm install script. This release also adds integrity checks to esbuild's
Deno install script. Now esbuild's Deno API will also fail with an error
if the downloaded esbuild binary contains something other than the
expected content.</p>
<p>Note that esbuild's Deno API installs from
<code>registry.npmjs.org</code> by default, but allows the
<code>NPM_CONFIG_REGISTRY</code> environment variable to override this
with a custom package registry. This change means that the esbuild
executable served by <code>NPM_CONFIG_REGISTRY</code> must now match the
expected content.</p>
<p>Thanks to <a
href="https://github.com/sondt99 "><code>@sondt99</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Avoid inlining <code>using</code> and <code>await using</code>
declarations (<a
href="https://redirect.github.com/evanw/esbuild/issues/4482 ">#4482</a>)</p>
<p>Previously esbuild's minifier sometimes incorrectly inlined
<code>using</code> and <code>await using</code> declarations into
subsequent uses of that declaration, which then fails to dispose of the
resource correctly. This bug happened because inlining was done for
<code>let</code> and <code>const</code> declarations by avoiding doing
it for <code>var</code> declarations, which no longer worked when more
declaration types were added. Here's an example:</p>
<pre lang="js"><code>// Original code
{
using x = new Resource()
x.activate()
}
<p>// Old output (with --minify)<br />
new Resource().activate();</p>
<p>// New output (with --minify)<br />
{using e=new Resource;e.activate()}<br />
</code></pre></p>
</li>
<li>
<p>Fix module evaluation when an error is thrown (<a
href="https://redirect.github.com/evanw/esbuild/issues/4461 ">#4461</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/4467 ">#4467</a>)</p>
<p>If an error is thrown during module evaluation, esbuild previously
didn't preserve the state of the module for subsequent module
references. This was observable if <code>import()</code> or
<code>require()</code> is used to import a module multiple times. The
thrown error is supposed to be thrown by every call to
<code>import()</code> or <code>require()</code>, not just the first.
With this release, esbuild will now throw the same error every time you
call <code>import()</code> or <code>require()</code> on a module that
throws during its evaluation.</p>
</li>
<li>
<p>Fix some edge cases around the <code>new</code> operator (<a
href="https://redirect.github.com/evanw/esbuild/issues/4477 ">#4477</a>)</p>
<p>Previously esbuild incorrectly printed certain edge cases involving
complex expressions inside the target of a <code>new</code> expression
(specifically an optional chain and/or a tagged template literal). The
generated code for the <code>new</code> target was not correctly wrapped
with parentheses, and either contained a syntax error or had different
semantics. These edge cases have been fixed so that they now correctly
wrap the <code>new</code> target in parentheses. Here is an example of
some affected code:</p>
<pre lang="js"><code>// Original code
new (foo()`bar`)()
new (foo()?.bar)()
<p>// Old output<br />
new foo()<code>bar</code>();<br />
new (foo())?.bar();</p>
<p></code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md ">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.28.1</h2>
<ul>
<li>
<p>Disallow <code>\</code> in local development server HTTP requests (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr ">GHSA-g7r4-m6w7-qqqr</a>)</p>
<p>This release fixes a security issue where HTTP requests to esbuild's
local development server could traverse outside of the serve directory
on Windows using a <code>\</code> backslash character. It happened due
to the use of Go's <code>path.Clean()</code> function, which only
handles Unix-style <code>/</code> characters. HTTP requests with paths
containing <code>\</code> are no longer allowed.</p>
<p>Thanks to <a
href="https://github.com/dellalibera "><code>@dellalibera</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Add integrity checks to the Deno API (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr ">GHSA-gv7w-rqvm-qjhr</a>)</p>
<p>The previous release of esbuild added integrity checks to esbuild's
npm install script. This release also adds integrity checks to esbuild's
Deno install script. Now esbuild's Deno API will also fail with an error
if the downloaded esbuild binary contains something other than the
expected content.</p>
<p>Note that esbuild's Deno API installs from
<code>registry.npmjs.org</code> by default, but allows the
<code>NPM_CONFIG_REGISTRY</code> environment variable to override this
with a custom package registry. This change means that the esbuild
executable served by <code>NPM_CONFIG_REGISTRY</code> must now match the
expected content.</p>
<p>Thanks to <a
href="https://github.com/sondt99 "><code>@sondt99</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Avoid inlining <code>using</code> and <code>await using</code>
declarations (<a
href="https://redirect.github.com/evanw/esbuild/issues/4482 ">#4482</a>)</p>
<p>Previously esbuild's minifier sometimes incorrectly inlined
<code>using</code> and <code>await using</code> declarations into
subsequent uses of that declaration, which then fails to dispose of the
resource correctly. This bug happened because inlining was done for
<code>let</code> and <code>const</code> declarations by avoiding doing
it for <code>var</code> declarations, which no longer worked when more
declaration types were added. Here's an example:</p>
<pre lang="js"><code>// Original code
{
using x = new Resource()
x.activate()
}
<p>// Old output (with --minify)<br />
new Resource().activate();</p>
<p>// New output (with --minify)<br />
{using e=new Resource;e.activate()}<br />
</code></pre></p>
</li>
<li>
<p>Fix module evaluation when an error is thrown (<a
href="https://redirect.github.com/evanw/esbuild/issues/4461 ">#4461</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/4467 ">#4467</a>)</p>
<p>If an error is thrown during module evaluation, esbuild previously
didn't preserve the state of the module for subsequent module
references. This was observable if <code>import()</code> or
<code>require()</code> is used to import a module multiple times. The
thrown error is supposed to be thrown by every call to
<code>import()</code> or <code>require()</code>, not just the first.
With this release, esbuild will now throw the same error every time you
call <code>import()</code> or <code>require()</code> on a module that
throws during its evaluation.</p>
</li>
<li>
<p>Fix some edge cases around the <code>new</code> operator (<a
href="https://redirect.github.com/evanw/esbuild/issues/4477 ">#4477</a>)</p>
<p>Previously esbuild incorrectly printed certain edge cases involving
complex expressions inside the target of a <code>new</code> expression
(specifically an optional chain and/or a tagged template literal). The
generated code for the <code>new</code> target was not correctly wrapped
with parentheses, and either contained a syntax error or had different
semantics. These edge cases have been fixed so that they now correctly
wrap the <code>new</code> target in parentheses. Here is an example of
some affected code:</p>
<pre lang="js"><code>// Original code
new (foo()`bar`)()
new (foo()?.bar)()
<p>// Old output<br />
new foo()<code>bar</code>();<br />
new (foo())?.bar();<br />
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bb9db84c029ff053e53b0a9bf2135be2a1a7132083a2cbfc35https://redirect.github.com/evanw/esbuild/issues/4482 ">#4482</a>:
don't inline <code>using</code> declarations</li>
<li><a
href="308ad745d8https://redirect.github.com/evanw/esbuild/issues/4471 ">#4471</a>:
renaming of nested <code>var</code> declarations</li>
<li><a
href="f013f5f99aaafd6e48b1https://redirect.github.com/evanw/esbuild/issues/4462 ">#4462</a>)</li>
<li><a
href="15300c30b51bda0c31d7https://redirect.github.com/evanw/esbuild/issues/4461 ">#4461</a>,
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/4467 ">#4467</a>:
esm evaluation fixes</li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.27.7...v0.28.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/chopratejas/headroom/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 23:16:29 -05:00
github-actions[bot]
8a53c8ec3b
chore: release main ( #891 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.25.0</summary>
##
[0.25.0](https://github.com/chopratejas/headroom/compare/v0.24.0...v0.25.0 )
(2026-06-12)
### Features
* add differential network capture harness
([#761 ](https://github.com/chopratejas/headroom/issues/761 ))
([11ab5f811ab5f83a1#834 ](https://github.com/chopratejas/headroom/issues/834 ))
([c425893c425893d12#778 ](https://github.com/chopratejas/headroom/issues/778 ))
([#784 ](https://github.com/chopratejas/headroom/issues/784 ))
([eb2e50feb2e50feb2#793 ](https://github.com/chopratejas/headroom/issues/793 ))
([3c77e523c77e52ce4#640 ](https://github.com/chopratejas/headroom/issues/640 ))
([028efab028efabb4e#851 ](https://github.com/chopratejas/headroom/issues/851 ))
([c0cadccc0cadccff9#807 ](https://github.com/chopratejas/headroom/issues/807 ))
([34dafe634dafe69d9#854 ](https://github.com/chopratejas/headroom/issues/854 ))
([5f1d88a5f1d88ad27#817 ](https://github.com/chopratejas/headroom/issues/817 ))
([53a08c653a08c63bf#859 ](https://github.com/chopratejas/headroom/issues/859 ))
([06b262506b2625b17#204 ](https://github.com/chopratejas/headroom/issues/204 ))
([6367d0b6367d0b722#766 ](https://github.com/chopratejas/headroom/issues/766 ))
([c71592dc71592d421#856 ](https://github.com/chopratejas/headroom/issues/856 ) P1)
([#857 ](https://github.com/chopratejas/headroom/issues/857 ))
([d5f5802d5f58026e2#824 ](https://github.com/chopratejas/headroom/issues/824 ))
([058bced058bcedab8#862 ](https://github.com/chopratejas/headroom/issues/862 ))
([c2106cbc2106cbdab#823 ](https://github.com/chopratejas/headroom/issues/823 ))
([693d9d2693d9d20e2#791 ](https://github.com/chopratejas/headroom/issues/791 ))
([0b8b8d90b8b8d92de#261 ](https://github.com/chopratejas/headroom/issues/261 ))
([2269e402269e40bde#803 ](https://github.com/chopratejas/headroom/issues/803 ))
([914a60a914a60a2b0#516 ](https://github.com/chopratejas/headroom/issues/516 ))
([19eac8e19eac8e00d#799 ](https://github.com/chopratejas/headroom/issues/799 ))
([74392b274392b238e#249 ](https://github.com/chopratejas/headroom/issues/249 ))
([8f374268f374263d3#838 ](https://github.com/chopratejas/headroom/issues/838 ))
([8db5efc8db5efc6f9#852 ](https://github.com/chopratejas/headroom/issues/852 ))
([bfcb07dbfcb07d78e#715 ](https://github.com/chopratejas/headroom/issues/715 ))
([2533f772533f7703e#839 ](https://github.com/chopratejas/headroom/issues/839 ))
([30078f830078f8465#875 ](https://github.com/chopratejas/headroom/issues/875 ))
([249af6c249af6cc7b#878 ](https://github.com/chopratejas/headroom/issues/878 ))
([b716c8cb716c8c2ee#774 ](https://github.com/chopratejas/headroom/issues/774 ))
([199d693199d693f98#731 ](https://github.com/chopratejas/headroom/issues/731 ))
([96abf3896abf38b09#771 ](https://github.com/chopratejas/headroom/issues/771 ))
([2f9ff072f9ff07e6c#647 ](https://github.com/chopratejas/headroom/issues/647 ))
([84ac33284ac332d14#836 ](https://github.com/chopratejas/headroom/issues/836 ))
([0ffe2b60ffe2b6ea4#481 ](https://github.com/chopratejas/headroom/issues/481 ))
([fd73b88fd73b88368#772 ](https://github.com/chopratejas/headroom/issues/772 ))
([574bbae574bbae2cb#557 ](https://github.com/chopratejas/headroom/issues/557 ))
([6b0c09f6b0c09ffd5#744 ](https://github.com/chopratejas/headroom/issues/744 ))
([5dfb4465dfb446da1#616 ](https://github.com/chopratejas/headroom/issues/616 ))
([9252d859252d852c5#788 ](https://github.com/chopratejas/headroom/issues/788 ))
([6ea6e316ea6e31f09#760 ](https://github.com/chopratejas/headroom/issues/760 ))
([b439599b4395993ae#373 ](https://github.com/chopratejas/headroom/issues/373 ))
([9bff5759bff5752bb#581 ](https://github.com/chopratejas/headroom/issues/581 ))
([163677b163677b405#815 ](https://github.com/chopratejas/headroom/issues/815 ))
([929698a929698af10d10bd5fd10bd5f59c#442 ](https://github.com/chopratejas/headroom/issues/442 ))
([93c693793c69372e6#770 ](https://github.com/chopratejas/headroom/issues/770 ))
([d76a729d76a7296df#783 ](https://github.com/chopratejas/headroom/issues/783 ))
([841663d841663da16#577 ](https://github.com/chopratejas/headroom/issues/577 ))
([#794 ](https://github.com/chopratejas/headroom/issues/794 ))
([0ce68de0ce68dedd7#785 ](https://github.com/chopratejas/headroom/issues/785 ))
([ae2122fae2122fda8#605 ](https://github.com/chopratejas/headroom/issues/605 ))
([b4b5025b4b50253f1#745 ](https://github.com/chopratejas/headroom/issues/745 ))
([e50fbb3e50fbb3e0d#874 ](https://github.com/chopratejas/headroom/issues/874 ))
([f9384eff9384ef4b7#604 ](https://github.com/chopratejas/headroom/issues/604 ))
([2ad300a2ad300aff8#877 ](https://github.com/chopratejas/headroom/issues/877 ))
([05bd56b05bd56bcb6ec7d006ec7d0065cchttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-11 22:18:46 -08:00
github-actions[bot]
01762b1ec7
chore: release main ( #607 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-08 11:21:23 -07:00
github-actions[bot]
f7c2552264
chore: release main
2026-06-04 14:05:56 +00:00
github-actions[bot]
cc71e07d01
chore: release main
2026-05-26 03:54:25 +00:00
chopratejas
8e4ab187e9
ci(release): align manifest + pyproject + package.json to 0.22.3
...
The repo had drifted: pyproject.toml said 0.9.1 but PyPI's latest
published headroom-ai was 0.22.3. release_version.py papered over
this by taking max(canonical, latest_tag) at release time;
release-please does NOT do that — it trusts the manifest verbatim.
Left as-is, release-please would propose 0.9.2 on the next merge
and PyPI would reject it ("400 Cannot publish version lower than
latest"), looping the bot forever.
Fix: align every version-bearing file to 0.22.3 (the truth on
PyPI). Done via `scripts/version-sync.py --version 0.22.3`:
- .release-please-manifest.json
- pyproject.toml
- sdk/typescript/package.json
- plugins/openclaw/package.json (+ headroom-ai dep range -> ^0.22.3)
- .claude-plugin/marketplace.json
- .github/plugin/marketplace.json
- plugins/headroom-agent-hooks/.claude-plugin/plugin.json
- plugins/headroom-agent-hooks/.github/plugin/plugin.json
After this lands, the bot's next release PR will propose 0.22.4
(patch) or 0.23.0 (minor) depending on conventional-commit traffic
since v0.22.3.
2026-05-25 18:41:38 -07:00
dependabot[bot]
2f659535d2
chore(deps): bump the npm_and_yarn group across 3 directories with 4 updates
...
Bumps the npm_and_yarn group with 1 update in the /sdk/typescript directory: [esbuild](https://github.com/evanw/esbuild ).
Bumps the npm_and_yarn group with 1 update in the /plugins/openclaw directory: [esbuild](https://github.com/evanw/esbuild ).
Bumps the npm_and_yarn group with 2 updates in the /docs directory: [postcss](https://github.com/postcss/postcss ) and [next](https://github.com/vercel/next.js ).
Updates `esbuild` from 0.21.5 to 0.27.4
- [Release notes](https://github.com/evanw/esbuild/releases )
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md )
- [Commits](https://github.com/evanw/esbuild/compare/v0.21.5...v0.27.4 )
Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
Updates `vite` from 5.4.21 to 8.0.10
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.10/packages/vite )
Updates `esbuild` from 0.21.5 to 0.27.4
- [Release notes](https://github.com/evanw/esbuild/releases )
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md )
- [Commits](https://github.com/evanw/esbuild/compare/v0.21.5...v0.27.4 )
Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
Updates `vite` from 5.4.21 to 8.0.10
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.10/packages/vite )
Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
Updates `next` from 16.2.2 to 16.2.4
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v16.2.2...v16.2.4 )
---
updated-dependencies:
- dependency-name: esbuild
dependency-version: 0.27.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: vite
dependency-version: 8.0.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: esbuild
dependency-version: 0.27.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: vite
dependency-version: 8.0.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: next
dependency-version: 16.2.4
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-24 22:15:53 +00:00
JerrettDavis
91c5835852
chore: bump openclaw plugin version
2026-04-15 19:09:29 -05:00
Tejas Chopra
12adb8ebd2
Merge pull request #136 from JerrettDavis/jd/openclaw-launch-fix
...
fix: lazy-load Headroom proxy startup for OpenClaw
2026-04-11 09:05:13 -07:00
JerrettDavis
a1dcda6bc4
feat(cli): support OpenClaw in Docker-native installs
...
Add host-managed OpenClaw wrap and unwrap flows to the Docker-native wrappers so the installed headroom script can configure the OpenClaw plugin on the host while keeping Headroom itself in Docker. Reuse hidden prepare-only hooks for OpenClaw config payloads, preserve existing plugin metadata on unwrap, and update the Docker-native and integration docs to reflect the supported flow.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-11 00:04:15 -05:00
JerrettDavis
f63cfe7a1e
fix: lazy-load proxy startup dependencies
...
Keep the default Headroom proxy startup path lightweight so OpenClaw can launch it reliably on Windows. This defers heavyweight provider, cache, transform, pricing, and detector imports until they are actually needed, adds a lightweight version module, and keeps the OpenClaw launcher on the configured Python path.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-10 20:33:46 -05:00
JerrettDavis
37f32a8922
test(openclaw): cover branch routing paths
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-08 23:46:16 -05:00
JerrettDavis
2f05705043
fix(openclaw): normalize provider proxy routing
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-08 22:28:17 -05:00
JerrettDavis
d4f6e3938f
fix(proxy): add fast-fail launch settings
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-08 22:03:21 -05:00
JerrettDavis
4d8b76f7da
fix(openclaw): use lightweight headroom launcher checks
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-08 21:39:14 -05:00
JerrettDavis
afb339059b
fix(openclaw): launch Windows headroom shims via shell
...
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-08 21:16:32 -05:00
JerrettDavis
0da1a7b4de
Add OpenClaw unwrap flow and non-blocking proxy startup
2026-04-08 21:16:32 -05:00
JerrettDavis
8134939efb
fix(openclaw): preserve upstream response paths
2026-04-08 21:15:52 -05:00
JerrettDavis
621c3b6f43
fix(openclaw): wait for proxy before gateway routing
2026-04-08 21:10:49 -05:00
JerrettDavis
e0383675aa
fix(openclaw): keep gateway routing runtime-only
2026-04-08 21:10:49 -05:00
JerrettDavis
6f500dfa9c
feat(openclaw): support configurable gateway providers
2026-04-08 21:10:49 -05:00
JerrettDavis
a4fe13d62f
docs(openclaw): document codex gateway routing
2026-04-08 21:10:49 -05:00
JerrettDavis
92b7b09f70
fix(openclaw): route codex through headroom proxy
2026-04-08 21:10:49 -05:00
JerrettDavis
2edff08668
fix(openclaw): normalize engine messages for discord
2026-04-06 22:18:37 -05:00
JD Davis