JD Davis
34a5517562
chore: release 0.36.5 ( #3214 )
...
🤖 I have created a release *beep* *boop*
---
##
[0.36.5](https://github.com/headroomlabs-ai/headroom/compare/v0.36.4...v0.36.5 )
(2026-08-22)
### Bug Fixes
* **codex:** detect ChatGPT auth from id_token claims so wrap/init emit
requires_openai_auth
([#3212 ](https://github.com/headroomlabs-ai/headroom/issues/3212 ))
([2f81fa52f81fa5931#3213 ](https://github.com/headroomlabs-ai/headroom/issues/3213 ))
([8f3e33a8f3e33a00ehttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-22 16:22:48 -07:00
JD Davis
91186b40d8
chore: release 0.36.4 ( #3189 )
...
🤖 I have created a release *beep* *boop*
---
##
[0.36.4](https://github.com/headroomlabs-ai/headroom/compare/v0.36.3...v0.36.4 )
(2026-08-22)
### Bug Fixes
* **dashboard:** pin MIME types for the vendored static assets
([#3193 ](https://github.com/headroomlabs-ai/headroom/issues/3193 ))
([b485768b4857685ff#3194 ](https://github.com/headroomlabs-ai/headroom/issues/3194 ))
([1617f831617f839a1#3195 ](https://github.com/headroomlabs-ai/headroom/issues/3195 ))
([3e3c4093e3c409436#3191 ](https://github.com/headroomlabs-ai/headroom/issues/3191 ))
([9c30b629c30b62962#3183 ](https://github.com/headroomlabs-ai/headroom/issues/3183 ))
([202c189202c1895e1https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-21 23:29:15 -07:00
JD Davis
87e71dd100
chore: release 0.36.3 ( #3188 )
...
🤖 I have created a release *beep* *boop*
---
##
[0.36.3](https://github.com/headroomlabs-ai/headroom/compare/v0.36.2...v0.36.3 )
(2026-08-21)
### Bug Fixes
* **proxy/responses:** lift Codex >= 0.149.0 additional_tools into
top-level tools
([#3186 ](https://github.com/headroomlabs-ai/headroom/issues/3186 ))
([25ca58025ca580825https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-21 14:57:44 -07:00
JD Davis
5e0ce242e9
chore: release 0.36.2 ( #3157 )
...
🤖 I have created a release *beep* *boop*
---
##
[0.36.2](https://github.com/headroomlabs-ai/headroom/compare/v0.36.1...v0.36.2 )
(2026-08-21)
### Bug Fixes
* **copilot:** bind the minted token to the integration ID we forward
([#3164 ](https://github.com/headroomlabs-ai/headroom/issues/3164 ))
([397803a397803a942#3162 ](https://github.com/headroomlabs-ai/headroom/issues/3162 ))
([45cb1b945cb1b9c48#3163 ](https://github.com/headroomlabs-ai/headroom/issues/3163 ))
([40069644006964a03#2281 ](https://github.com/headroomlabs-ai/headroom/issues/2281 ))
([089106208910624fb#2277 ](https://github.com/headroomlabs-ai/headroom/issues/2277 ))
([f7e5d37f7e5d37f52#3146 ](https://github.com/headroomlabs-ai/headroom/issues/3146 ))
([c6dd823c6dd823384#3143 ](https://github.com/headroomlabs-ai/headroom/issues/3143 ))
([c8db13dc8db13d5ad#3145 ](https://github.com/headroomlabs-ai/headroom/issues/3145 ))
([9c14e3a9c14e3aa95#3147 ](https://github.com/headroomlabs-ai/headroom/issues/3147 ))
([a307c11a307c11109#3149 ](https://github.com/headroomlabs-ai/headroom/issues/3149 ))
([6e2e10f6e2e10f67a#2279 ](https://github.com/headroomlabs-ai/headroom/issues/2279 ))
([85774fc85774fcb70#2280 ](https://github.com/headroomlabs-ai/headroom/issues/2280 ))
([a382137a382137844#3144 ](https://github.com/headroomlabs-ai/headroom/issues/3144 ))
([6928d196928d1932chttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-20 23:09:18 -07:00
dependabot[bot]
08910624fb
deps: bump ai from 6.0.138 to 7.0.59 in /sdk/typescript ( #2281 )
...
Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai ) from
6.0.138 to 7.0.59.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/vercel/ai/releases ">ai's
releases</a>.</em></p>
<blockquote>
<h2>ai@6.0.253</h2>
<h3>Patch Changes</h3>
<ul>
<li>d91d30b: Preserve reasoning block IDs from UI message streams on
reasoning UI parts.</li>
<li>Updated dependencies [0ec239b]
<ul>
<li><code>@ai-sdk/gateway</code><a
href="https://github.com/3 "><code>@3</code></a>.0.172</li>
</ul>
</li>
</ul>
<h2>ai@6.0.252</h2>
<h3>Patch Changes</h3>
<ul>
<li>2f96d3f: Allow providers without reranking model support to satisfy
the <code>Provider</code> type.</li>
<li>afb1965: Propagate errors thrown by the Chat <code>onFinish</code>
callback to the initiating request.</li>
<li>Updated dependencies [18b0965]</li>
<li>Updated dependencies [451d2c3]
<ul>
<li><code>@ai-sdk/gateway</code><a
href="https://github.com/3 "><code>@3</code></a>.0.171</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md ">ai's
changelog</a>.</em></p>
<blockquote>
<h2>7.0.59</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [401a4ba]</li>
<li>Updated dependencies [7af9646]
<ul>
<li><code>@ai-sdk/provider-utils</code><a
href="https://github.com/5 "><code>@5</code></a>.0.26</li>
<li><code>@ai-sdk/gateway</code><a
href="https://github.com/4 "><code>@4</code></a>.0.47</li>
</ul>
</li>
</ul>
<h2>7.0.58</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>72ad23f: Respect ToolLoopAgent timeouts configured in agent
settings.</p>
</li>
<li>
<p>ad6a650: feat(video): allow <code>aspectRatio: 'adaptive'</code> on
<code>generateVideo</code></p>
<p>Some video models derive the output ratio from the input and reject
explicit
<code>{width}:{height}</code> values — BytePlus Seedance 2.5 does this
for first-frame,
first-and-last-frame, editing, and extension tasks.
<code>aspectRatio</code> on
<code>VideoModelV3CallOptions</code>,
<code>VideoModelV4CallOptions</code>, and
<code>experimental_generateVideo</code> is now
<code>`${number}:${number}` | 'adaptive'</code>, so
those calls no longer need a type assertion. Support is
provider-specific.</p>
</li>
<li>
<p>81cd026: Reduce bundle size by making internal Zod v4 imports
tree-shakeable.</p>
</li>
<li>
<p>Updated dependencies [c477556]</p>
</li>
<li>
<p>Updated dependencies [ad6a650]</p>
</li>
<li>
<p>Updated dependencies [81cd026]</p>
<ul>
<li><code>@ai-sdk/gateway</code><a
href="https://github.com/4 "><code>@4</code></a>.0.46</li>
<li><code>@ai-sdk/provider</code><a
href="https://github.com/4 "><code>@4</code></a>.0.7</li>
<li><code>@ai-sdk/provider-utils</code><a
href="https://github.com/5 "><code>@5</code></a>.0.25</li>
</ul>
</li>
</ul>
<h2>7.0.57</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [1937bef]
<ul>
<li><code>@ai-sdk/provider-utils</code><a
href="https://github.com/5 "><code>@5</code></a>.0.24</li>
<li><code>@ai-sdk/gateway</code><a
href="https://github.com/4 "><code>@4</code></a>.0.45</li>
</ul>
</li>
</ul>
<h2>7.0.56</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>25c9120: Expose provider metadata on language-model-call end
callbacks and telemetry spans.</p>
</li>
<li>
<p>89080c8: fix (ai/gateway): make retried <code>doStart</code> calls
idempotent</p>
<p><code>generateVideo</code> retries <code>doStart</code>, which
creates a billable generation, so a
retry after a lost response could start a second one. It now mints one
idempotency token per logical start — outside the retry closure — and
forwards it
as an <code>idempotency-key</code> header, so a provider that
deduplicates (the Vercel AI</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cbdbeee90dhttps://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18645 ">#18645</a>)</li>
<li><a
href="63db19387bhttps://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18587 ">#18587</a>)</li>
<li><a
href="72ad23fd5681cd0263f3https://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18304 ">#18304</a>)</li>
<li><a
href="ad6a65001dhttps://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18586 ">#18586</a>)</li>
<li><a
href="ae26160e2bhttps://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18566 ">#18566</a>)</li>
<li><a
href="2f04a5e2achttps://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18560 ">#18560</a>)</li>
<li><a
href="89080c861b25c91200cehttps://github.com/vercel/ai/tree/HEAD/packages/ai/issues/18100 ">#18100</a>)</li>
<li><a
href="79d619530chttps://github.com/vercel/ai/commits/ai@7.0.59/packages/ai ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for ai since your current version.</p>
</details>
<br />
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: JerrettDavis <mxjerrett@gmail.com>
2026-08-20 21:31:13 -05:00
JD Davis
37faf2f247
chore: release 0.36.1 ( #3152 )
...
## Description
Release 0.36.1, generated by Release Please, containing the security
fixes from #2207 (WEB-01–07). This updates the changelog and keeps
Python, TypeScript SDK, plugin package, marketplace, server, and release
metadata versions aligned at 0.36.1.
## Type of Change
- [x] Release / version metadata
## Changes Made
- Updated the release manifest and generated changelog for 0.36.1.
- Synchronized `pyproject.toml`, TypeScript SDK, OpenClaw, OpenCode,
agent-hook plugin, marketplace, server, and release metadata versions.
- Included the 0.36.1 changelog entry for the security assessment fixes
merged in #2207 .
## Testing
- [x] CI and release validation pass
### Test Output
All current required checks are complete and passing, including version
sync, package builds, wheel smoke imports, security scans, Python test
shards, native wrapper checks, and devcontainer validation.
## Real Behavior Proof
- Environment: GitHub Actions release and CI workflows for commit
`52c0a0c61dce0af81af3ff73a34efe8b451501cb`.
- Observed result: all generated version-bearing files report 0.36.1;
build and smoke-import jobs produced and validated the release
artifacts.
- Not exercised: publishing jobs are intentionally skipped for a pull
request and run only after the release receives final human approval and
is merged.
## Runtime Rollout Safety
- Rollout-managed features: none; this PR packages already-merged
behavior.
- Stable/default behavior changed: no additional runtime behavior beyond
the included, already-reviewed security fixes.
- Kill switch / disable path: not applicable to generated release
metadata.
- Qualification impact: release artifact construction and smoke-import
validation are green.
- Rollback path: do not merge the release PR, or revert the release
commit before publishing.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Release Notes
### Bug Fixes
- **security:** address u9up assessment findings (WEB-01–07) (#2207 )
This PR was generated with Release Please and then its description was
expanded to document review and qualification evidence. It still
requires final human review; no publishing or merge has been performed.
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-20 17:20:18 -07:00
JD Davis
b88b9078d8
chore: release 0.36.0 ( #3067 )
...
🤖 I have created a release *beep* *boop*
---
##
[0.36.0](https://github.com/headroomlabs-ai/headroom/compare/v0.35.0...v0.36.0 )
(2026-08-20)
### Features
* add deterministic runtime rollout controls
([#1490 ](https://github.com/headroomlabs-ai/headroom/issues/1490 ))
([3077ac83077ac81e8#3051 ](https://github.com/headroomlabs-ai/headroom/issues/3051 ))
([f9807fdf9807fd69e1b0b0b81b0b0b89a4#2976 ](https://github.com/headroomlabs-ai/headroom/issues/2976 )
* **wrap/claude:** make the --1m fallback model configurable via
HEADROOM_1M_MODEL
([#2983 ](https://github.com/headroomlabs-ai/headroom/issues/2983 ))
([2a847252a8472525d#3073 ](https://github.com/headroomlabs-ai/headroom/issues/3073 ))
([6d2254d6d2254dfb5#3101 ](https://github.com/headroomlabs-ai/headroom/issues/3101 ))
([131b119131b119c05#3082 ](https://github.com/headroomlabs-ai/headroom/issues/3082 )
* **ccr:** make StreamingCCRHandler work on OpenAI streams
([#3069 ](https://github.com/headroomlabs-ai/headroom/issues/3069 ))
([7ef736f7ef736fb1a#3092 ](https://github.com/headroomlabs-ai/headroom/issues/3092 ))
([c502087c502087db7942af56942af56f11#3094 ](https://github.com/headroomlabs-ai/headroom/issues/3094 ))
([0ec73fa0ec73faa28#3102 ](https://github.com/headroomlabs-ai/headroom/issues/3102 ))
([139c7cb139c7cbdde#3078 ](https://github.com/headroomlabs-ai/headroom/issues/3078 )
* **ccr:** verify a scanned marker's hash before advertising it
([#2908 ](https://github.com/headroomlabs-ai/headroom/issues/2908 ))
([41dab2d41dab2d099#2996 ](https://github.com/headroomlabs-ai/headroom/issues/2996 ))
([a708c05a708c0571e#3062 ](https://github.com/headroomlabs-ai/headroom/issues/3062 ))
([ac8646aac8646aa3c#2958 ](https://github.com/headroomlabs-ai/headroom/issues/2958 ))
([e269afbe269afb935#2993 ](https://github.com/headroomlabs-ai/headroom/issues/2993 ))
([2d88e312d88e31a40#2832 ](https://github.com/headroomlabs-ai/headroom/issues/2832 ))
([825261982526191a1#3064 ](https://github.com/headroomlabs-ai/headroom/issues/3064 ))
([96c25f596c25f5181#3077 ](https://github.com/headroomlabs-ai/headroom/issues/3077 ))
([204e751204e751d2f#3112 ](https://github.com/headroomlabs-ai/headroom/issues/3112 ))
([b77d612b77d612913#3136 ](https://github.com/headroomlabs-ai/headroom/issues/3136 ))
([df6ff6bdf6ff6bd5b#3121 ](https://github.com/headroomlabs-ai/headroom/issues/3121 ))
([93c474e93c474e84b#3120 ](https://github.com/headroomlabs-ai/headroom/issues/3120 ))
([8156d4d8156d4dc3a#3061 ](https://github.com/headroomlabs-ai/headroom/issues/3061 ))
([481e0b8481e0b83d5#2982 ](https://github.com/headroomlabs-ai/headroom/issues/2982 ))
([eafdf11eafdf11a2c#2987 ](https://github.com/headroomlabs-ai/headroom/issues/2987 ))
([be5b26dbe5b26d807#2980 ](https://github.com/headroomlabs-ai/headroom/issues/2980 ))
([ddd2a25ddd2a259ec#3085 ](https://github.com/headroomlabs-ai/headroom/issues/3085 ))
([58f28dc58f28dc7a6#2985 ](https://github.com/headroomlabs-ai/headroom/issues/2985 ))
([ddd9f76ddd9f76729#3080 ](https://github.com/headroomlabs-ai/headroom/issues/3080 ))
([c5563d3c5563d3a7d#2978 ](https://github.com/headroomlabs-ai/headroom/issues/2978 ))
([6077e5a6077e5a149#2951 ](https://github.com/headroomlabs-ai/headroom/issues/2951 ))
([2d1e96b2d1e96b85c#2979 ](https://github.com/headroomlabs-ai/headroom/issues/2979 ))
([a3fe5cba3fe5cb65b#639 ](https://github.com/headroomlabs-ai/headroom/issues/639 ))
([6576ef66576ef639c#2868 ](https://github.com/headroomlabs-ai/headroom/issues/2868 ))
([eeb038beeb038bc0c#2780 ](https://github.com/headroomlabs-ai/headroom/issues/2780 ))
([ef7e07eef7e07e0f5#3089 ](https://github.com/headroomlabs-ai/headroom/issues/3089 ))
([3ed8f763ed8f76019#2953 ](https://github.com/headroomlabs-ai/headroom/issues/2953 ))
([f1c34d3f1c34d336c#3026 ](https://github.com/headroomlabs-ai/headroom/issues/3026 ))
([#3052 ](https://github.com/headroomlabs-ai/headroom/issues/3052 ))
([c16be9bc16be9bbbe#2876 ](https://github.com/headroomlabs-ai/headroom/issues/2876 ))
([7de35737de35739c6#3142 ](https://github.com/headroomlabs-ai/headroom/issues/3142 ))
([0e26fb80e26fb80de#3086 ](https://github.com/headroomlabs-ai/headroom/issues/3086 ))
([2cae0f82cae0f8eaf#3035 ](https://github.com/headroomlabs-ai/headroom/issues/3035 ))
([a01897ca01897c791#2988 ](https://github.com/headroomlabs-ai/headroom/issues/2988 ))
([536c949536c949a69#2622 ](https://github.com/headroomlabs-ai/headroom/issues/2622 ))
([d76fce0d76fce04a3#3015 ](https://github.com/headroomlabs-ai/headroom/issues/3015 ))
([b3f4436b3f443636d#2997 ](https://github.com/headroomlabs-ai/headroom/issues/2997 ))
([8a1d38b8a1d38bc5d#3060 ](https://github.com/headroomlabs-ai/headroom/issues/3060 ))
([a6ab359a6ab359a5d#3046 ](https://github.com/headroomlabs-ai/headroom/issues/3046 ))
([2f4d0012f4d001c9f#3029 ](https://github.com/headroomlabs-ai/headroom/issues/3029 ))
([a06a51ea06a51eca6#765 ](https://github.com/headroomlabs-ai/headroom/issues/765 ))
([#1357 ](https://github.com/headroomlabs-ai/headroom/issues/1357 ))
([9fde1279fde127534#3091 ](https://github.com/headroomlabs-ai/headroom/issues/3091 ))
([a29d201a29d2015e5#3124 ](https://github.com/headroomlabs-ai/headroom/issues/3124 ))
([17522fb17522fb0a1#3134 ](https://github.com/headroomlabs-ai/headroom/issues/3134 ))
([284ff31284ff31947#3024 ](https://github.com/headroomlabs-ai/headroom/issues/3024 ))
([9d370599d370592b0#3122 ](https://github.com/headroomlabs-ai/headroom/issues/3122 ))
([05f5ef405f5ef47cb#2879 ](https://github.com/headroomlabs-ai/headroom/issues/2879 ))
([6d878256d87825f62#3123 ](https://github.com/headroomlabs-ai/headroom/issues/3123 ))
([250ede2250ede2f7f#2971 ](https://github.com/headroomlabs-ai/headroom/issues/2971 ))
([8ea87e78ea87e7804#2986 ](https://github.com/headroomlabs-ai/headroom/issues/2986 ))
([1aa701a1aa701adaa#2772 ](https://github.com/headroomlabs-ai/headroom/issues/2772 ))
([c831081c8310819a4#2945 ](https://github.com/headroomlabs-ai/headroom/issues/2945 ))
([61478836147883d5e#1628 ](https://github.com/headroomlabs-ai/headroom/issues/1628 ))
([b7f342cb7f342c153#3081 ](https://github.com/headroomlabs-ai/headroom/issues/3081 ))
([6c9f41e6c9f41e08c#2966 ](https://github.com/headroomlabs-ai/headroom/issues/2966 ))
([5731be75731be7e68#2965 ](https://github.com/headroomlabs-ai/headroom/issues/2965 ))
([b30f339b30f339d69#2962 ](https://github.com/headroomlabs-ai/headroom/issues/2962 ))
([ff17961ff17961cd7#2288 ](https://github.com/headroomlabs-ai/headroom/issues/2288 ))
([322425c322425c43b#2964 ](https://github.com/headroomlabs-ai/headroom/issues/2964 ))
([888a9f4888a9f4e14#2967 ](https://github.com/headroomlabs-ai/headroom/issues/2967 ))
([bbe9013bbe901319d#2963 ](https://github.com/headroomlabs-ai/headroom/issues/2963 ))
([d6fb536d6fb5365f6https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-19 21:14:59 -07:00
Tejas Chopra
93f2d7a2da
chore: release main ( #2792 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.35.0</summary>
##
[0.35.0](https://github.com/headroomlabs-ai/headroom/compare/v0.34.0...v0.35.0 )
(2026-08-12)
### Features
* **beacon:** allowlist the routing summary key
([#2818 ](https://github.com/headroomlabs-ai/headroom/issues/2818 ))
([7940c057940c05ebf#2853 ](https://github.com/headroomlabs-ai/headroom/issues/2853 ))
([e0870efe0870ef931#2802 ](https://github.com/headroomlabs-ai/headroom/issues/2802 ))
([6ec3e346ec3e3478a#2539 ](https://github.com/headroomlabs-ai/headroom/issues/2539 ))
([7f6950b7f6950be340d6866b0d6866b91ae4904e2e4904e23a6#2324 ](https://github.com/headroomlabs-ai/headroom/issues/2324 ))
([12f9f5812f9f58cb3#2796 ](https://github.com/headroomlabs-ai/headroom/issues/2796 ))
([e9a24f3e9a24f3ec1#2815 ](https://github.com/headroomlabs-ai/headroom/issues/2815 ))
([2954e372954e370480ae948c0ae948c151#2941 ](https://github.com/headroomlabs-ai/headroom/issues/2941 ))
([37524583752458022def3d76def3d76e5a#2917 ](https://github.com/headroomlabs-ai/headroom/issues/2917 ))
([1a04c951a04c957f5d0c1f5bd0c1f5b8ad#2669 ](https://github.com/headroomlabs-ai/headroom/issues/2669 ))
([d0a86d4d0a86d409f#717 ](https://github.com/headroomlabs-ai/headroom/issues/717 ))
([685ebe4685ebe457d#2512 ](https://github.com/headroomlabs-ai/headroom/issues/2512 ))
([ce8ce83ce8ce8313f#2467 ](https://github.com/headroomlabs-ai/headroom/issues/2467 ))
([e583e08e583e082d8#2252 ](https://github.com/headroomlabs-ai/headroom/issues/2252 ))
([5568d735568d738af#2477 ](https://github.com/headroomlabs-ai/headroom/issues/2477 ))
([7981396798139608c#2830 ](https://github.com/headroomlabs-ai/headroom/issues/2830 ))
([7092b537092b53c46#2538 ](https://github.com/headroomlabs-ai/headroom/issues/2538 ))
([a540eb2a540eb2c61d7bc1e2d7bc1e275f#2839 ](https://github.com/headroomlabs-ai/headroom/issues/2839 ))
([564e0a8564e0a8d0f#2791 ](https://github.com/headroomlabs-ai/headroom/issues/2791 ))
([64e203964e203931b#2566 ](https://github.com/headroomlabs-ai/headroom/issues/2566 ))
([7f24d697f24d695ee#902 ](https://github.com/headroomlabs-ai/headroom/issues/902 ))
([#1080 ](https://github.com/headroomlabs-ai/headroom/issues/1080 ))
([4dab2544dab254d52#2253 ](https://github.com/headroomlabs-ai/headroom/issues/2253 ))
([2483f572483f57002#2865 ](https://github.com/headroomlabs-ai/headroom/issues/2865 ))
([894937189493714d2#2513 ](https://github.com/headroomlabs-ai/headroom/issues/2513 ))
([#2537 ](https://github.com/headroomlabs-ai/headroom/issues/2537 ))
([d7cf981d7cf981093#2453 ](https://github.com/headroomlabs-ai/headroom/issues/2453 ))
([#2459 ](https://github.com/headroomlabs-ai/headroom/issues/2459 ))
([1edaeb81edaeb8b76#2469 ](https://github.com/headroomlabs-ai/headroom/issues/2469 ))
([fc5c4e2fc5c4e239ce044139e044139001#2846 ](https://github.com/headroomlabs-ai/headroom/issues/2846 ))
([3488f8d3488f8d4b5#2230 ](https://github.com/headroomlabs-ai/headroom/issues/2230 ))
([29d8a5e29d8a5e563#2283 ](https://github.com/headroomlabs-ai/headroom/issues/2283 ))
([e240df2e240df2b69#2289 ](https://github.com/headroomlabs-ai/headroom/issues/2289 ))
([a24fe7da24fe7dcbf#1322 ](https://github.com/headroomlabs-ai/headroom/issues/1322 ))
([31079943107994aed#2883 ](https://github.com/headroomlabs-ai/headroom/issues/2883 ))
([2f2950a2f2950a626#2579 ](https://github.com/headroomlabs-ai/headroom/issues/2579 ))
([1f5feff1f5fefffd3659618265961827cf4bd8ecd4bd8ecd1e3#2470 ](https://github.com/headroomlabs-ai/headroom/issues/2470 ))
([e00c6ffe00c6ff81c#2295 ](https://github.com/headroomlabs-ai/headroom/issues/2295 ))
([c471800c471800e8e#2231 ](https://github.com/headroomlabs-ai/headroom/issues/2231 ))
([f840d5ff840d5f2fe#2195 ](https://github.com/headroomlabs-ai/headroom/issues/2195 ))
([#2541 ](https://github.com/headroomlabs-ai/headroom/issues/2541 ))
([4e5a67a4e5a67a342fd4628dfd4628d821c85abf7c85abf7a87#2936 ](https://github.com/headroomlabs-ai/headroom/issues/2936 ))
([941c25d941c25d31e#2495 ](https://github.com/headroomlabs-ai/headroom/issues/2495 ))
([#2540 ](https://github.com/headroomlabs-ai/headroom/issues/2540 ))
([5c561bd5c561bd913#2696 ](https://github.com/headroomlabs-ai/headroom/issues/2696 ))
([54ea28d54ea28d983702dbc5702dbc5902#2472 ](https://github.com/headroomlabs-ai/headroom/issues/2472 ))
([08466f308466f3cae#2554 ](https://github.com/headroomlabs-ai/headroom/issues/2554 ))
([0805e8e0805e8e410#2848 ](https://github.com/headroomlabs-ai/headroom/issues/2848 ))
([3808f603808f60ca6#2434 ](https://github.com/headroomlabs-ai/headroom/issues/2434 ))
([2b5ee7c2b5ee7cde8c6f9948c6f99482e1#2316 ](https://github.com/headroomlabs-ai/headroom/issues/2316 ))
([1f2c6811f2c681c0b#2318 ](https://github.com/headroomlabs-ai/headroom/issues/2318 ))
([c19e412c19e412b33#2824 ](https://github.com/headroomlabs-ai/headroom/issues/2824 ))
([b97c7c6b97c7c6e99#2480 ](https://github.com/headroomlabs-ai/headroom/issues/2480 ))
([e24a7e6e24a7e66b9#2463 ](https://github.com/headroomlabs-ai/headroom/issues/2463 ))
([6a538616a53861063#2273 ](https://github.com/headroomlabs-ai/headroom/issues/2273 ))
([a30db2ca30db2cae4#2334 ](https://github.com/headroomlabs-ai/headroom/issues/2334 ))
([f669149f669149769#2872 ](https://github.com/headroomlabs-ai/headroom/issues/2872 ))
([675d13f675d13f08d#2491 ](https://github.com/headroomlabs-ai/headroom/issues/2491 ))
([a5b0a8fa5b0a8f4cc99f07e799f07e7bbd739fdef739fdef42309516630951663562#2365 ](https://github.com/headroomlabs-ai/headroom/issues/2365 ))
([aaeba0aaaeba0a319620028f620028fa18#2807 ](https://github.com/headroomlabs-ai/headroom/issues/2807 ))
([0237cbf0237cbffbb#1643 ](https://github.com/headroomlabs-ai/headroom/issues/1643 ))
([a4bd2e6a4bd2e62a5#2164 ](https://github.com/headroomlabs-ai/headroom/issues/2164 ))
([d02df10d02df10758#621 ](https://github.com/headroomlabs-ai/headroom/issues/621 ))
([17cdb1817cdb185bccde1513cde1513c9112149f712149f7446#2330 ](https://github.com/headroomlabs-ai/headroom/issues/2330 ))
([64cb46e64cb46e24b#2381 ](https://github.com/headroomlabs-ai/headroom/issues/2381 ))
([f6398a6f6398a6476#2943 ](https://github.com/headroomlabs-ai/headroom/issues/2943 ))
([039cd24039cd2431a#2254 ](https://github.com/headroomlabs-ai/headroom/issues/2254 ))
([dc163bcdc163bcd1c#2823 ](https://github.com/headroomlabs-ai/headroom/issues/2823 ))
([4ec416d4ec416df88#2360 ](https://github.com/headroomlabs-ai/headroom/issues/2360 ))
([#2412 ](https://github.com/headroomlabs-ai/headroom/issues/2412 ))
([c5a08d2c5a08d22e0#2717 ](https://github.com/headroomlabs-ai/headroom/issues/2717 ))
([a97b824a97b82413b#2372 ](https://github.com/headroomlabs-ai/headroom/issues/2372 ))
([785915478591545ce#2833 ](https://github.com/headroomlabs-ai/headroom/issues/2833 ))
([de9e052de9e0523da#2340 ](https://github.com/headroomlabs-ai/headroom/issues/2340 ) token
inflation)
([#2408 ](https://github.com/headroomlabs-ai/headroom/issues/2408 ))
([74275b774275b7c3e8cd13808cd138039e#2801 ](https://github.com/headroomlabs-ai/headroom/issues/2801 ))
([b6f9877b6f9877c78#2260 ](https://github.com/headroomlabs-ai/headroom/issues/2260 ))
([68401536840153473#2319 ](https://github.com/headroomlabs-ai/headroom/issues/2319 ))
([8a905238a90523209#2232 ](https://github.com/headroomlabs-ai/headroom/issues/2232 ))
([3bb02f83bb02f8f75#2517 ](https://github.com/headroomlabs-ai/headroom/issues/2517 ))
([eb5b5e4eb5b5e4198c093bf1c093bf11ebae38486ae384862a4d7b25aed7b25ae3bb#2387 ](https://github.com/headroomlabs-ai/headroom/issues/2387 ))
([1db6d881db6d88ab4#2946 ](https://github.com/headroomlabs-ai/headroom/issues/2946 ))
([e540d64e540d64feb#2843 ](https://github.com/headroomlabs-ai/headroom/issues/2843 ))
([c49be26c49be269a1#2838 ](https://github.com/headroomlabs-ai/headroom/issues/2838 ))
([53af90d53af90d68c#2852 ](https://github.com/headroomlabs-ai/headroom/issues/2852 ))
([f624d3af624d3a00a#2861 ](https://github.com/headroomlabs-ai/headroom/issues/2861 ))
([91d6bf391d6bf33cd#2751 ](https://github.com/headroomlabs-ai/headroom/issues/2751 ))
([56ee57b56ee57be98#2286 ](https://github.com/headroomlabs-ai/headroom/issues/2286 ))
([64485456448545a7f#2285 ](https://github.com/headroomlabs-ai/headroom/issues/2285 ))
([4925bf64925bf6a82#2750 ](https://github.com/headroomlabs-ai/headroom/issues/2750 ))
([0fd0b990fd0b996a4#2749 ](https://github.com/headroomlabs-ai/headroom/issues/2749 ))
([cd60ee9cd60ee9ae8#2748 ](https://github.com/headroomlabs-ai/headroom/issues/2748 ))
([ff4e016ff4e0167bb#2747 ](https://github.com/headroomlabs-ai/headroom/issues/2747 ))
([267c2bd267c2bdcb5#2881 ](https://github.com/headroomlabs-ai/headroom/issues/2881 ))
([e6e5826e6e5826423#2501 ](https://github.com/headroomlabs-ai/headroom/issues/2501 ))
([ecf130decf130d3ac#2287 ](https://github.com/headroomlabs-ai/headroom/issues/2287 ))
([522faa1522faa1a59#2916 ](https://github.com/headroomlabs-ai/headroom/issues/2916 ))
([148d860148d8605e2https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: JD Davis <mxjerrett@gmail.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-12 19:02:51 -05:00
dependabot[bot]
267c2bdcb5
deps: bump postcss from 8.5.19 to 8.5.25 in /sdk/typescript ( #2747 )
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.19 to
8.5.25.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.25</h2>
<ul>
<li>Fixed 8.5.17 visitor regression.</li>
<li>Fixed <code>list.split()</code> for non-string values (by <a
href="https://github.com/amir-rezaei "><code>@amir-rezaei</code></a>).</li>
</ul>
<h2>8.5.24</h2>
<ul>
<li>Preserve the BOM after the processing (by <a
href="https://github.com/hdimer "><code>@hdimer</code></a>).</li>
</ul>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker "><code>@isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.25</h2>
<ul>
<li>Fixed 8.5.17 visitor regression.</li>
<li>Fixed <code>list.split()</code> for non-string values (by <a
href="https://github.com/amir-rezaei "><code>@amir-rezaei</code></a>).</li>
</ul>
<h2>8.5.24</h2>
<ul>
<li>Preserve the BOM after the processing (by <a
href="https://github.com/hdimer "><code>@hdimer</code></a>).</li>
</ul>
<h2>8.5.23</h2>
<ul>
<li>Do not load source map without <code>opts.from</code> for security
reasons.</li>
</ul>
<h2>8.5.22</h2>
<ul>
<li>Fixed custom property losing semicolon before a comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
<h2>8.5.21</h2>
<ul>
<li>Fixed childless at-rule losing semicolon before comment (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed docs (by <a
href="https://github.com/isker "><code>@isker</code></a>).</li>
</ul>
<h2>8.5.20</h2>
<ul>
<li>Fixed missing space if <code>AtRule#params</code> is set after (by
<a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed mixing AST error on warnings (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="08c989c43c24f6814716f2fa53f11d10edf0b060https://redirect.github.com/postcss/postcss/issues/2121 ">#2121</a>)</li>
<li><a
href="0ebe8ad59173218c64249a114f62b0https://redirect.github.com/postcss/postcss/issues/2119 ">#2119</a>)</li>
<li><a
href="9069261912eb9e1fe7939d19c78ac9https://github.com/postcss/postcss/compare/8.5.19...8.5.25 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/headroomlabs-ai/headroom/network/alerts ).
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 21:58:58 -05:00
Tejas Chopra
9fd5ae3d53
chore: release main ( #2679 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.34.0</summary>
##
[0.34.0](https://github.com/headroomlabs-ai/headroom/compare/v0.33.0...v0.34.0 )
(2026-08-05)
### Features
* **claude:** support Claude Code in VS Code
([#2752 ](https://github.com/headroomlabs-ai/headroom/issues/2752 ))
([13a310a13a310a00d#2423 ](https://github.com/headroomlabs-ai/headroom/issues/2423 ))
([6d5516d6d5516dcb8#2718 ](https://github.com/headroomlabs-ai/headroom/issues/2718 ))
([27970992797099bec#2691 ](https://github.com/headroomlabs-ai/headroom/issues/2691 ))
([f2c48e2f2c48e26c6#2687 ](https://github.com/headroomlabs-ai/headroom/issues/2687 ))
([007446c007446c73a#2694 ](https://github.com/headroomlabs-ai/headroom/issues/2694 ))
([#2703 ](https://github.com/headroomlabs-ai/headroom/issues/2703 ))
([3e348f33e348f327f#2745 ](https://github.com/headroomlabs-ai/headroom/issues/2745 ))
([3f2ca993f2ca99fe1#2698 ](https://github.com/headroomlabs-ai/headroom/issues/2698 ))
([dcb674bdcb674b5e4#2743 ](https://github.com/headroomlabs-ai/headroom/issues/2743 ))
([6422a806422a80a58#2757 ](https://github.com/headroomlabs-ai/headroom/issues/2757 ))
([a033ac4a033ac4176#2753 ](https://github.com/headroomlabs-ai/headroom/issues/2753 ))
([0221e7f0221e7f240#2736 ](https://github.com/headroomlabs-ai/headroom/issues/2736 ))
([3d23d763d23d76248#2716 ](https://github.com/headroomlabs-ai/headroom/issues/2716 ))
([46da91b46da91b2f1#2740 ](https://github.com/headroomlabs-ai/headroom/issues/2740 ))
([224578e224578e80b#2275 ](https://github.com/headroomlabs-ai/headroom/issues/2275 ))
([3eb01223eb0122068#2731 ](https://github.com/headroomlabs-ai/headroom/issues/2731 ))
([a70e5ffa70e5ff78d#2379 ](https://github.com/headroomlabs-ai/headroom/issues/2379 ))
([789a4f3789a4f3060#2761 ](https://github.com/headroomlabs-ai/headroom/issues/2761 ))
([cd92ed5cd92ed52ff#2762 ](https://github.com/headroomlabs-ai/headroom/issues/2762 ))
([0cb72f40cb72f45b2#2760 ](https://github.com/headroomlabs-ai/headroom/issues/2760 ))
([06add9e06add9e9d8#2713 ](https://github.com/headroomlabs-ai/headroom/issues/2713 ))
([#2725 ](https://github.com/headroomlabs-ai/headroom/issues/2725 ))
([01df24501df245252#2711 ](https://github.com/headroomlabs-ai/headroom/issues/2711 ))
([3a27c4d3a27c4dacb#2741 ](https://github.com/headroomlabs-ai/headroom/issues/2741 ))
([f9db5b5f9db5b5060#2709 ](https://github.com/headroomlabs-ai/headroom/issues/2709 ))
([232fb49232fb49c73#2729 ](https://github.com/headroomlabs-ai/headroom/issues/2729 ))
([56b3e4c56b3e4c1b1#2672 ](https://github.com/headroomlabs-ai/headroom/issues/2672 ))
([08fce2908fce29b47#2677 ](https://github.com/headroomlabs-ai/headroom/issues/2677 ))
([e0ce4b1e0ce4b1d48#2778 ](https://github.com/headroomlabs-ai/headroom/issues/2778 ))
([f03cc6df03cc6d88b#2708 ](https://github.com/headroomlabs-ai/headroom/issues/2708 ))
([184146b184146b688#2737 ](https://github.com/headroomlabs-ai/headroom/issues/2737 ))
([8262a4a8262a4a321#2728 ](https://github.com/headroomlabs-ai/headroom/issues/2728 ))
([9cfb0089cfb00838a#2756 ](https://github.com/headroomlabs-ai/headroom/issues/2756 ))
([04e151704e1517ede#2758 ](https://github.com/headroomlabs-ai/headroom/issues/2758 ))
([0ed306b0ed306b22b#2776 ](https://github.com/headroomlabs-ai/headroom/issues/2776 ))
([fc4680bfc4680b37a#2654 ](https://github.com/headroomlabs-ai/headroom/issues/2654 ))
([677e097677e09735a#2676 ](https://github.com/headroomlabs-ai/headroom/issues/2676 ))
([759209c759209cff3#2779 ](https://github.com/headroomlabs-ai/headroom/issues/2779 ))
([0e1d6bf0e1d6bfa79#2692 ](https://github.com/headroomlabs-ai/headroom/issues/2692 ))
([b7a79acb7a79ac31ahttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-04 19:39:34 -07:00
Tejas Chopra
e0ce4b1d48
fix: remove rtk and lean-ctx CLI context tools ( #2677 )
...
## Description
Removes both third-party CLI context tools — **rtk** and **lean-ctx** —
and with them the context-tool selector itself. Headroom no longer
downloads, installs or configures either one, and there is no
replacement.
The previous pass (#2344 ) gated only three entry points inside
`headroom/cli/wrap.py`. That left the feature reachable in practice:
| Gap | Effect |
|---|---|
| `scripts/install.sh:1544`, `install.ps1:1681` | Ran `rtk init --global
--auto-patch` from bash/PowerShell, **bypassing the Python gate
entirely** — `curl \| sh` still wrote a Claude Code `PreToolUse` hook
regardless of `HEADROOM_RTK` |
| `wrap.py` `_setup_context_tool_for_agent` | **`wrap openhands` was
broken by default**: `rtk_required=True` met a gate returning `None` →
`SystemExit(1)`. Invisible because all 8 openhands tests patched
`_ensure_rtk_binary` to a fake path |
| `proxy/helpers.py`, `subscription/tracker.py` | Proxy shelled out to
`rtk gain` from `/stats`, the dashboard and `headroom perf`; the tracker
polled it per contribution (`_RTK_WIRING_DEFAULT = "enabled"`) |
| No cleanup path | Nothing removed artifacts an earlier default had
installed, so a machine that once ran the old default kept rtk in the
loop forever (#1669 , #1955 ) |
Also worth noting: the rtk binary download had **no SHA or signature
verification** — only `rtk --version` as a smoke test.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
- [ ] Performance improvement
- [x] Code refactoring (no functional changes)
## Changes Made
**Removed** — `headroom/rtk/` and `headroom/lean_ctx/` packages,
`headroom/cli/wrap_rtk_metrics.py`, `_selected_context_tool` /
`_setup_context_tool_for_agent` / `_VALID_CONTEXT_TOOLS`, the `--rtk` /
`--no-rtk` / `--no-project-rtk` / `--keep-rtk` flags across all 18 wrap
subcommands, `HEADROOM_RTK*`, the proxy-side `rtk gain` polling, the
dashboard CLI-filtering panel (rows + all 8 `cliFiltering*` Alpine
getters), `paths.rtk_path()` / `lean_ctx_path()`, the SDK path helpers,
`benchmarks/rtk_loop_learn_eval.py`, and the `headroom/rtk/**` CI path
filters.
**Fails loudly, not silently** — `--context-tool` / `--no-context-tool`
/ `HEADROOM_CONTEXT_TOOL` are kept solely to error out. They live in
shell profiles, aliases and CI jobs, and accepting them as a no-op would
read as Headroom having quietly stopped working. The installers reject
them too, which matters more than it looks: their arg parsers forward
the first unknown flag **and everything after it** to the wrapped tool,
so a leftover `--no-rtk` would have silently swallowed a following
`--port` and then been ignored downstream.
**New `headroom/context_tool_cleanup.py`** — deleting the code cannot
help a machine that already ran the old default, since the hooks,
binaries and injected guidance are durable on disk.
`purge_context_tool_artifacts()` runs once per `wrap`/`unwrap` and
removes the registered hook entries, the generated hook scripts, the
Headroom-managed `~/.local/bin` symlinks, the vendored
`~/.headroom/bin/{rtk,lean-ctx}` binaries, the `lean-ctx` MCP server
entry and the marker-fenced instruction blocks. Deliberately
conservative: idempotent, **skips** a malformed config rather than
overwriting it, and only unlinks a symlink resolving inside Headroom's
own bin dir so a user's own build is untouched. It reports on
**stderr**, because `wrap/unwrap openclaw --prepare-only` emit
machine-readable JSON on stdout as their entire contract. Skipped for
`wrap selfheal` (runs from a SessionStart hook; must not race Claude
Code's writer for `~/.claude.json`) and for `--help`, which must stay
read-only.
**Client-config hardening** (discovered while investigating a "corrupted
Serena settings file" report) — `wrap.py` reset a settings file to `{}`
when an existing file would not parse, then wrote that back. One
hand-edited typo or a transient `EACCES`/`EINTR` on a valid file
destroyed the user's `permissions`, `env` and `hooks`, on **every
`headroom wrap claude`**. It now refuses to write. Separately,
`fsutil.write_text` is now atomic (temp file + `fsync` + `os.replace`),
fixing all 14 non-atomic client-config writes at once; it follows
symlinks rather than replacing them (dotfile managers) and preserves an
existing file's mode.
**Deliberately kept** — `rtk` stays in the wrapper-peel list in
`transforms/content_router.py`. It sits beside `sudo`/`env`/`timeout` as
shell-command grammar, so `rtk cat f` is still classified as a file read
for anyone running their own rtk install, which the purge intentionally
leaves alone.
## Testing
- [x] Unit tests pass (`pytest`)
- [x] Linting passes (`ruff check .`)
- [x] Type checking passes (`mypy headroom`)
- [x] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
$ ruff check headroom/ tests/ e2e/ --exclude headroom/dashboard/templates
All checks passed!
$ ruff format --check headroom/ tests/ e2e/ --exclude headroom/dashboard/templates
1255 files already formatted
$ mypy headroom/
Success: no issues found in 508 source files
$ pytest tests/test_context_tool_cleanup.py -q
11 passed
$ pytest tests/test_fsutil.py -q
12 passed
$ pytest tests/test_cli/test_wrap_codex.py -q # 89 tests
89 passed in 431.68s
$ pytest tests/test_cli/test_wrap_opencode.py -q
39 passed in 257.46s
$ pytest tests/test_cli/test_wrap_helpers.py -q
45 passed
$ pytest tests/test_paths.py -q
75 passed
$ pytest tests/test_cli/test_unwrap_claude.py -q
14 passed
$ pytest tests/test_proxy_savings_history.py -q
39 passed
$ pytest tests/test_cli/test_wrap_copilot.py -q
27 passed
$ pytest tests/test_cli/test_wrap_zcode.py -q
20 passed
$ pytest tests/test_subscription_tracker.py -q
9 passed
$ pytest tests/test_proxy_dashboard_stats_cache.py -q
5 passed, 1 skipped
```
Repo-wide grep for 14 removed symbols (`headroom.rtk`,
`headroom.lean_ctx`, `_ensure_rtk_binary`, `_selected_context_tool`,
`_get_context_tool_stats`, `rtk_path`, `lean_ctx_path`,
`wrap_rtk_metrics`, `HEADROOM_RTK`, `cli_tokens_avoided`,
`tokens_saved_rtk`, …) across `*.py`, `*.ts`, `*.sh`, `*.ps1`, `*.yml`,
`*.html`: **zero hits**.
Notable test changes: `test_wrap_openhands.py` no longer patches
`_ensure_rtk_binary` and asserts `wrap openhands --prepare-only` exits 0
unpatched — the regression that was previously masked.
`test_wrap_continue.py` and `test_wrap_hintfile_agents.py` were removed
(every test drove RTK instruction injection). A new
`test_subscription_tracker.py::test_load_state_written_before_cli_context_tools_were_removed`
proves a pre-removal `subscription_state.json` still loads.
## Real Behavior Proof
- **Environment:** macOS 15.4 (darwin 25.4.0), Python 3.12.6, Headroom @
this branch, real `~/.headroom` and `~/.claude` on the dev machine.
- **Exact command / steps and observed result:**
```text
# 1. Retired flag fails loudly instead of silently no-op'ing
$ headroom wrap codex --prepare-only --context-tool rtk
Error: CLI context tools (rtk, lean-ctx) have been removed from Headroom: they
rewrote shell commands through a third-party binary Headroom no longer manages.
Drop --context-tool / --no-context-tool and unset HEADROOM_CONTEXT_TOOL;
`headroom wrap` uninstalls what they left behind on first run.
$ HEADROOM_CONTEXT_TOOL=lean-ctx headroom wrap codex --prepare-only
Error: CLI context tools (rtk, lean-ctx) have been removed from Headroom: ...
# 2. install.sh rejects the retired flags (extracted parse_wrap_args harness)
['--no-rtk', '--port', '9999'] rc=1 ERROR: CLI context tools ... Drop --no-rtk
['--context-tool=rtk'] rc=1 ERROR: CLI context tools ... Drop --context-tool
$ bash -n scripts/install.sh # syntax OK
# 3. Purge ran against the real machine, which had all the orphaned artifacts
$ python -c "from headroom.context_tool_cleanup import purge_context_tool_artifacts; ..."
removed ~/.headroom/bin/lean-ctx (51 MB)
removed ~/.headroom/bin/rtk (7.7 MB)
removed ~/.local/bin/rtk (symlink into ~/.headroom/bin)
removed ~/.claude/hooks/rtk-rewrite.sh
removed 8 lean-ctx-* hook scripts
# ~/.claude.json afterwards: 90 top-level keys, 19 projects, mcpServers unchanged
# → ~59 MB reclaimed, no unrelated key touched
# 4. stdout stays machine-readable while the purge reports (planted a fake artifact)
$ headroom wrap openclaw --prepare-only --gateway-provider-id codex >out 2>err
$ cat out
{"enabled":true,"config":{"proxyPort":8787,...}} # parses as JSON
$ cat err
Retired CLI context tool cleanup: removed /Users/tcms/.headroom/bin/rtk
# 5. --help is inert (planted artifact survives), a real run purges
$ headroom wrap codex --help → artifact survived: CORRECT
$ headroom wrap openclaw --prepare-only → purged: CORRECT
# 6. MCP purge dry-run against a copy of the real 82 KB ~/.claude.json
top-level keys 90 -> 90; projects 19 -> 19; LOST keys: none
all content outside mcpServers byte-identical: True
```
Dashboard rendered via the Playwright test after the panel removal:
"Token Savings" shows only `Proxy 0 (0.0%)` / `Of total wire: 36.86%`,
and "Token Usage" reads Before Compression → Proxy Removed → After
Compression with no "Filtered (this session)" row. Nothing below the
removed panel broke.
- **Not tested:** Windows and Linux (macOS only) — `install.ps1` is
verified by brace-balance and inspection, not executed, since no `pwsh`
is available locally. The wrap e2e suite (`e2e/wrap/run.py`) was updated
but not run; it needs the Docker e2e image. `serena project index`
interaction is exercised in the stacked base PR.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [x] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [x] I did **not** edit `CHANGELOG.md` — it is generated by
release-please from my Conventional Commit PR title (a CI guard enforces
this)
## Additional Notes
**Stacked on #2676** (`tejas/serena-config-bootstrap`) — please merge
that first; this PR's base should then be retargeted to `main`, or it
will read as containing that fix too.
**Breaking-change migration for users:**
- Drop `--rtk`, `--no-rtk`, `--no-project-rtk`, `--keep-rtk`,
`--context-tool`, `--no-context-tool` from any alias, script or CI job,
and unset `HEADROOM_RTK*` / `HEADROOM_CONTEXT_TOOL`. They now error
rather than being ignored, so the failure is immediate and
self-explaining.
- Previously-installed artifacts are purged automatically on the next
`wrap`/`unwrap`; no manual cleanup needed.
- `headroom perf --json` no longer carries a `cli_filtering` key, and
`/stats` no longer returns a `context_tool` section.
**Docs:** `docs/rtk-architecture.md` deleted; RTK/lean-ctx removed from
`README.md`,
`docs/content/docs/{configuration,opencode,grok-build,docker-install,filesystem-contract}.mdx`,
`docs/observability.md` and the matching `wiki/` pages.
`REALIGNMENT/09-phase-G-rtk-observability.md` is marked SUPERSEDED
rather than deleted, to keep the planning record.
**Follow-ups not in scope:** `_emit_wrap_interrupted` was deleted as
dead code — its only caller was the `except KeyboardInterrupt` guarding
the binary download, so with no download there is nothing slow left to
interrupt.
2026-07-30 22:59:41 -07:00
Tejas Chopra
28aa53dc7c
chore: release main ( #2339 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.33.0</summary>
##
[0.33.0](https://github.com/headroomlabs-ai/headroom/compare/v0.32.0...v0.33.0 )
(2026-07-29)
### Features
* **lossless:** factor shared directory prefix in the grep search fold
([#2547 ](https://github.com/headroomlabs-ai/headroom/issues/2547 ))
([7dc9a977dc9a978ca#2371 ](https://github.com/headroomlabs-ai/headroom/issues/2371 ))
([02eb90f02eb90f243#2601 ](https://github.com/headroomlabs-ai/headroom/issues/2601 ))
([f54f04ff54f04f5bf#2441 ](https://github.com/headroomlabs-ai/headroom/issues/2441 ))
([#2445 ](https://github.com/headroomlabs-ai/headroom/issues/2445 ))
([9089e7f9089e7f7d3#2549 ](https://github.com/headroomlabs-ai/headroom/issues/2549 ))
([a6d4921a6d4921e82#2546 ](https://github.com/headroomlabs-ai/headroom/issues/2546 ))
([9f1ffef9f1ffefe83#2377 ](https://github.com/headroomlabs-ai/headroom/issues/2377 ))
([d7a8cdbd7a8cdbee1#2458 ](https://github.com/headroomlabs-ai/headroom/issues/2458 ))
([1329ed71329ed7f1a#2555 ](https://github.com/headroomlabs-ai/headroom/issues/2555 ))
([cb8f4b6cb8f4b6436#2388 ](https://github.com/headroomlabs-ai/headroom/issues/2388 ))
([e3c7964e3c7964038#2373 ](https://github.com/headroomlabs-ai/headroom/issues/2373 ))
([56c7d4a56c7d4a59e#334 ](https://github.com/headroomlabs-ai/headroom/issues/334 ))
([#2378 ](https://github.com/headroomlabs-ai/headroom/issues/2378 ))
([9e077859e0778553f#1154 ](https://github.com/headroomlabs-ai/headroom/issues/1154 ))
([e530de5e530de5ad2#1153 ](https://github.com/headroomlabs-ai/headroom/issues/1153 ))
([83e27e583e27e5036#2450 ](https://github.com/headroomlabs-ai/headroom/issues/2450 ))
([bec4ccebec4cce8a9#2400 ](https://github.com/headroomlabs-ai/headroom/issues/2400 ))
([7ebda677ebda67ef6#2370 ](https://github.com/headroomlabs-ai/headroom/issues/2370 ))
([a02073ea02073e332#2411 ](https://github.com/headroomlabs-ai/headroom/issues/2411 ))
([446ec26446ec26003#2404 ](https://github.com/headroomlabs-ai/headroom/issues/2404 ))
([7c7bf437c7bf43057#2391 ](https://github.com/headroomlabs-ai/headroom/issues/2391 ))
([981616c981616c60e#2425 ](https://github.com/headroomlabs-ai/headroom/issues/2425 ))
([fd0e1a8fd0e1a8afe#2413 ](https://github.com/headroomlabs-ai/headroom/issues/2413 ))
([6e4425a6e4425a6bd#2548 ](https://github.com/headroomlabs-ai/headroom/issues/2548 ))
([c990cfbc990cfb803#2322 ](https://github.com/headroomlabs-ai/headroom/issues/2322 ))
([44a174f44a174fef4#2484 ](https://github.com/headroomlabs-ai/headroom/issues/2484 ))
([43a7b5743a7b578a1#2651 ](https://github.com/headroomlabs-ai/headroom/issues/2651 ))
([e0d2cd0e0d2cd0c5a#2382 ](https://github.com/headroomlabs-ai/headroom/issues/2382 ))
([8906d3a8906d3a676#2389 ](https://github.com/headroomlabs-ai/headroom/issues/2389 ))
([89319fb89319fbcad#2604 ](https://github.com/headroomlabs-ai/headroom/issues/2604 ))
([#2631 ](https://github.com/headroomlabs-ai/headroom/issues/2631 ))
([e825588e825588bfb#2406 ](https://github.com/headroomlabs-ai/headroom/issues/2406 ))
([2bb14d12bb14d1ab2#2238 ](https://github.com/headroomlabs-ai/headroom/issues/2238 ))
([#2571 ](https://github.com/headroomlabs-ai/headroom/issues/2571 ))
([904bc67904bc675b3#2478 ](https://github.com/headroomlabs-ai/headroom/issues/2478 ))
([46293f446293f4daf#2597 ](https://github.com/headroomlabs-ai/headroom/issues/2597 ))
([18e1c3c18e1c3c9ba#800 ](https://github.com/headroomlabs-ai/headroom/issues/800 ))
([#2511 ](https://github.com/headroomlabs-ai/headroom/issues/2511 ))
([4a8157f4a8157fa0a#2441 ](https://github.com/headroomlabs-ai/headroom/issues/2441 ))
([#2455 ](https://github.com/headroomlabs-ai/headroom/issues/2455 ))
([2eca5ee2eca5ee114#2409 ](https://github.com/headroomlabs-ai/headroom/issues/2409 ))
([#2414 ](https://github.com/headroomlabs-ai/headroom/issues/2414 ))
([c400f90c400f90810#2348 ](https://github.com/headroomlabs-ai/headroom/issues/2348 ))
([a90be94a90be94e32#2514 ](https://github.com/headroomlabs-ai/headroom/issues/2514 ))
([e4076bbe4076bbe99#2513 ](https://github.com/headroomlabs-ai/headroom/issues/2513 ))
([#2536 ](https://github.com/headroomlabs-ai/headroom/issues/2536 ))
([2a63ec72a63ec70b6#2429 ](https://github.com/headroomlabs-ai/headroom/issues/2429 ))
([170b04a170b04a74d#1893 ](https://github.com/headroomlabs-ai/headroom/issues/1893 )
follow-up)
([#2563 ](https://github.com/headroomlabs-ai/headroom/issues/2563 ))
([b121223b121223ec9#2427 ](https://github.com/headroomlabs-ai/headroom/issues/2427 ))
([17ff13c17ff13ccbe#2527 ](https://github.com/headroomlabs-ai/headroom/issues/2527 ))
([045f3df045f3dfe6f#2456 ](https://github.com/headroomlabs-ai/headroom/issues/2456 ))
([5bd22665bd2266f16#2587 ](https://github.com/headroomlabs-ai/headroom/issues/2587 ))
([f74d874f74d874777#2596 ](https://github.com/headroomlabs-ai/headroom/issues/2596 ))
([85e869985e8699451#2446 ](https://github.com/headroomlabs-ai/headroom/issues/2446 ))
([a09ba6ca09ba6c087#2642 ](https://github.com/headroomlabs-ai/headroom/issues/2642 ))
([b3f016bb3f016b866#2639 ](https://github.com/headroomlabs-ai/headroom/issues/2639 ))
([22b707f22b707fd31#2545 ](https://github.com/headroomlabs-ai/headroom/issues/2545 ))
([0845b260845b26ee6#2504 ](https://github.com/headroomlabs-ai/headroom/issues/2504 ))
([#2535 ](https://github.com/headroomlabs-ai/headroom/issues/2535 ))
([fa47637fa4763761b#2347 ](https://github.com/headroomlabs-ai/headroom/issues/2347 ))
([f64aac9f64aac9733#2486 ](https://github.com/headroomlabs-ai/headroom/issues/2486 ))
([07cf54707cf547607#2439 ](https://github.com/headroomlabs-ai/headroom/issues/2439 ))
([4aac0684aac068814#2420 ](https://github.com/headroomlabs-ai/headroom/issues/2420 ))
([7052d527052d52dcb#2493 ](https://github.com/headroomlabs-ai/headroom/issues/2493 ))
([2195ba72195ba7d91#2333 ](https://github.com/headroomlabs-ai/headroom/issues/2333 ))
([6cdfd3f6cdfd3f64d#2431 ](https://github.com/headroomlabs-ai/headroom/issues/2431 ))
([313c290313c290df9#2410 ](https://github.com/headroomlabs-ai/headroom/issues/2410 ))
([#2415 ](https://github.com/headroomlabs-ai/headroom/issues/2415 ))
([0cbc0e80cbc0e8e54#2435 ](https://github.com/headroomlabs-ai/headroom/issues/2435 ))
([3e976713e976712e7#2520 ](https://github.com/headroomlabs-ai/headroom/issues/2520 ))
([c371d5ac371d5ad60#2542 ](https://github.com/headroomlabs-ai/headroom/issues/2542 ))
([1cc53c91cc53c9c92#2481 ](https://github.com/headroomlabs-ai/headroom/issues/2481 ))
([77b26c077b26c093c#2479 ](https://github.com/headroomlabs-ai/headroom/issues/2479 ))
([a2e42fba2e42fb877#2647 ](https://github.com/headroomlabs-ai/headroom/issues/2647 ))
([1d297381d29738818#2498 ](https://github.com/headroomlabs-ai/headroom/issues/2498 ))
([806d2e4806d2e468a#2402 ](https://github.com/headroomlabs-ai/headroom/issues/2402 ))
([54526bc54526bc858#2449 ](https://github.com/headroomlabs-ai/headroom/issues/2449 ))
([8c8fae08c8fae0d0b#2564 ](https://github.com/headroomlabs-ai/headroom/issues/2564 ))
([d50cfabd50cfabedc#2401 ](https://github.com/headroomlabs-ai/headroom/issues/2401 ))
([d6a1af4d6a1af40d5#112 ](https://github.com/headroomlabs-ai/headroom/issues/112 ))
([#2405 ](https://github.com/headroomlabs-ai/headroom/issues/2405 ))
([f9cbdd6f9cbdd6e39#2659 ](https://github.com/headroomlabs-ai/headroom/issues/2659 ))
([5383c6b5383c6bf2f#2634 ](https://github.com/headroomlabs-ai/headroom/issues/2634 ))
([e86c639e86c6390ce#2342 ](https://github.com/headroomlabs-ai/headroom/issues/2342 ))
([494fb5a494fb5a60e#2543 ](https://github.com/headroomlabs-ai/headroom/issues/2543 ))
([285176b285176be54#2369 ](https://github.com/headroomlabs-ai/headroom/issues/2369 ))
([f4070c4f4070c44cb#2320 ](https://github.com/headroomlabs-ai/headroom/issues/2320 ))
([b759990b75999017f#2383 ](https://github.com/headroomlabs-ai/headroom/issues/2383 ))
([f57e959f57e959a50#2344 ](https://github.com/headroomlabs-ai/headroom/issues/2344 ))
([44136ed44136ed042#2574 ](https://github.com/headroomlabs-ai/headroom/issues/2574 ))
([0994ea00994ea04c8#2340 ](https://github.com/headroomlabs-ai/headroom/issues/2340 ))
([#2350 ](https://github.com/headroomlabs-ai/headroom/issues/2350 ))
([cf5fa64cf5fa644b6#2419 ](https://github.com/headroomlabs-ai/headroom/issues/2419 ))
([9b016f29b016f2b64#2284 ](https://github.com/headroomlabs-ai/headroom/issues/2284 ))
([3266ed73266ed7641#2276 ](https://github.com/headroomlabs-ai/headroom/issues/2276 ))
([961866b961866ba7c#2399 ](https://github.com/headroomlabs-ai/headroom/issues/2399 ))
([fc9c63ffc9c63f18c#2499 ](https://github.com/headroomlabs-ai/headroom/issues/2499 ))
([5d23a0a5d23a0aec2https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-29 15:54:23 -07:00
dependabot[bot]
961866ba7c
deps: bump the npm-minor-patch group across 3 directories with 7 updates ( #2276 )
...
Bumps the npm-minor-patch group with 6 updates in the /docs directory:
| Package | From | To |
| --- | --- | --- |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs ) | `16.11.1` |
`16.11.5` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs ) | `15.1.0` |
`15.2.0` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs ) | `16.11.1` |
`16.11.5` |
|
[@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript )
| `0.106.0` | `0.111.0` |
| [openai](https://github.com/openai/openai-node ) | `6.33.0` | `6.47.0`
|
| [postcss](https://github.com/postcss/postcss ) | `8.5.16` | `8.5.19` |
Bumps the npm-minor-patch group with 1 update in the /plugins/opencode
directory: @opencode-ai/plugin.
Bumps the npm-minor-patch group with 1 update in the /sdk/typescript
directory:
[@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript ).
Updates `fumadocs-core` from 16.11.1 to 16.11.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52af6cf292https://redirect.github.com/fuma-nama/fumadocs/issues/3416 ">#3416</a>
from fuma-nama/tegami/version-packages</li>
<li><a
href="efc9d18402368a92e3a213dfdbc22463623320b5126a74d995430254caab1862822aa5d3710a9614ba78b0177bhttps://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.1...fumadocs@16.11.5 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-mdx` from 15.1.0 to 15.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fuma-nama/fumadocs/releases ">fumadocs-mdx's
releases</a>.</em></p>
<blockquote>
<h2>fumadocs-mdx@15.2.0</h2>
<h3>Support Macro API</h3>
<p>Use <code>fumadocs-mdx/macro</code> to define collections, and enable
the macro-style API from bundler plugin (e.g. <code>createMDX</code>)
using the <code>include</code> option.</p>
<h2>fumadocs-mdx@15.1.1</h2>
<h3>Migrate from <code>js-yaml</code> to <code>yaml</code></h3>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52af6cf292https://redirect.github.com/fuma-nama/fumadocs/issues/3416 ">#3416</a>
from fuma-nama/tegami/version-packages</li>
<li><a
href="efc9d18402368a92e3a213dfdbc22463623320b5126a74d995430254caab1862822aa5d3710a9614ba78b0177bhttps://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.1.0...fumadocs-mdx@15.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-ui` from 16.11.1 to 16.11.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="52af6cf292https://redirect.github.com/fuma-nama/fumadocs/issues/3416 ">#3416</a>
from fuma-nama/tegami/version-packages</li>
<li><a
href="efc9d18402368a92e3a213dfdbc22463623320b5126a74d995430254caab1862822aa5d3710a9614ba78b0177bhttps://github.com/fuma-nama/fumadocs/compare/fumadocs@16.11.1...fumadocs@16.11.5 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@anthropic-ai/sdk` from 0.106.0 to 0.111.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/releases ">@anthropic-ai/sdk's
releases</a>.</em></p>
<blockquote>
<h2>sdk: v0.111.0</h2>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md ">@anthropic-ai/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for claude-sonnet-5 (<a
href="4588db01ec9e467606888d461ea9629436e291590aec1e748bac2fc6779dc8af65d6af2a3a9042ab57c56c91724f2eb80719https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1107 ">#1107</a>)</li>
<li><a
href="96d1a991b6https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1106 ">#1106</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.106.0...sdk-v0.111.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `openai` from 6.33.0 to 6.47.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/openai/openai-node/releases ">openai's
releases</a>.</em></p>
<blockquote>
<h2>v6.47.0</h2>
<h2>6.47.0 (2026-07-14)</h2>
<p>Full Changelog: <a
href="https://github.com/openai/openai-node/compare/v6.46.0...v6.47.0 ">v6.46.0...v6.47.0</a></p>
<h3>Features</h3>
<ul>
<li>add async event iterators (<a
href="https://redirect.github.com/openai/openai-node/issues/1977 ">#1977</a>)
(<a
href="2ece8aa848https://redirect.github.com/openai/openai-node/issues/1987 ">#1987</a>)
(<a
href="5984f442e07bfce973a1https://redirect.github.com/openai/openai-node/issues/1973 ">#1973</a>)
(<a
href="a6f01e53dehttps://redirect.github.com/openai/openai-node/issues/1970 ">#1970</a>)
(<a
href="a86f1fde30https://redirect.github.com/openai/openai-node/issues/1994 ">#1994</a>)
(<a
href="1cdc0196b4https://redirect.github.com/openai/openai-node/issues/1980 ">#1980</a>)
(<a
href="ae17127effhttps://redirect.github.com/openai/openai-node/issues/984 ">#984</a></li>
<li><strong>ci:</strong> bump <code>@arethetypeswrong/cli</code> to
^0.18.0 and run CI workflows on Node 24 (<a
href="baa0b2ad90https://redirect.github.com/openai/openai-node/issues/1972 ">#1972</a>)
(<a
href="9555b71ab8https://redirect.github.com/openai/openai-node/issues/1982 ">#1982</a>)
(<a
href="c1c5c28267https://redirect.github.com/openai/openai-node/issues/1015 ">#1015</a></li>
<li><strong>zod:</strong> support zod v4 mini schemas (<a
href="https://redirect.github.com/openai/openai-node/issues/1985 ">#1985</a>)
(<a
href="2df10fc19ahttps://redirect.github.com/openai/openai-node/issues/1988 ">#1988</a>)
(<a
href="373b08ac3bhttps://github.com/openai/openai-node/compare/v6.45.0...v6.46.0 ">v6.45.0...v6.46.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> gpt-5.6-sol updates (<a
href="6c397d5d28https://redirect.github.com/openai/openai-node/issues/1963 ">#1963</a>)
(<a
href="0e18d30a31https://redirect.github.com/openai/openai-node/issues/1958 ">#1958</a>)
(<a
href="6371623aadhttps://redirect.github.com/openai/openai-node/issues/1967 ">#1967</a>)
(<a
href="95b54e5894https://redirect.github.com/openai/openai-node/issues/1975 ">#1975</a>)
(<a
href="90a72e5345https://redirect.github.com/openai/openai-node/issues/701 ">#701</a></li>
<li>document assistant stream failures (<a
href="https://redirect.github.com/openai/openai-node/issues/1979 ">#1979</a>)
(<a
href="d93fbe5bc5https://redirect.github.com/openai/openai-node/issues/959 ">#959</a></li>
<li>document file search result limits (<a
href="https://redirect.github.com/openai/openai-node/issues/1981 ">#1981</a>)
(<a
href="e9dc283dcehttps://redirect.github.com/openai/openai-node/issues/1004 ">#1004</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/openai/openai-node/blob/main/CHANGELOG.md ">openai's
changelog</a>.</em></p>
<blockquote>
<h2>6.47.0 (2026-07-14)</h2>
<p>Full Changelog: <a
href="https://github.com/openai/openai-node/compare/v6.46.0...v6.47.0 ">v6.46.0...v6.47.0</a></p>
<h3>Features</h3>
<ul>
<li>add async event iterators (<a
href="https://redirect.github.com/openai/openai-node/issues/1977 ">#1977</a>)
(<a
href="2ece8aa848https://redirect.github.com/openai/openai-node/issues/1987 ">#1987</a>)
(<a
href="5984f442e07bfce973a1https://redirect.github.com/openai/openai-node/issues/1973 ">#1973</a>)
(<a
href="a6f01e53dehttps://redirect.github.com/openai/openai-node/issues/1970 ">#1970</a>)
(<a
href="a86f1fde30https://redirect.github.com/openai/openai-node/issues/1994 ">#1994</a>)
(<a
href="1cdc0196b4https://redirect.github.com/openai/openai-node/issues/1980 ">#1980</a>)
(<a
href="ae17127effhttps://redirect.github.com/openai/openai-node/issues/984 ">#984</a></li>
<li><strong>ci:</strong> bump <code>@arethetypeswrong/cli</code> to
^0.18.0 and run CI workflows on Node 24 (<a
href="baa0b2ad90https://redirect.github.com/openai/openai-node/issues/1972 ">#1972</a>)
(<a
href="9555b71ab8https://redirect.github.com/openai/openai-node/issues/1982 ">#1982</a>)
(<a
href="c1c5c28267https://redirect.github.com/openai/openai-node/issues/1015 ">#1015</a></li>
<li><strong>zod:</strong> support zod v4 mini schemas (<a
href="https://redirect.github.com/openai/openai-node/issues/1985 ">#1985</a>)
(<a
href="2df10fc19ahttps://redirect.github.com/openai/openai-node/issues/1988 ">#1988</a>)
(<a
href="373b08ac3bhttps://github.com/openai/openai-node/compare/v6.45.0...v6.46.0 ">v6.45.0...v6.46.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> gpt-5.6-sol updates (<a
href="6c397d5d28https://redirect.github.com/openai/openai-node/issues/1963 ">#1963</a>)
(<a
href="0e18d30a31https://redirect.github.com/openai/openai-node/issues/1958 ">#1958</a>)
(<a
href="6371623aadhttps://redirect.github.com/openai/openai-node/issues/1967 ">#1967</a>)
(<a
href="95b54e5894https://redirect.github.com/openai/openai-node/issues/1975 ">#1975</a>)
(<a
href="90a72e5345https://redirect.github.com/openai/openai-node/issues/701 ">#701</a></li>
<li>document assistant stream failures (<a
href="https://redirect.github.com/openai/openai-node/issues/1979 ">#1979</a>)
(<a
href="d93fbe5bc5https://redirect.github.com/openai/openai-node/issues/959 ">#959</a></li>
<li>document file search result limits (<a
href="https://redirect.github.com/openai/openai-node/issues/1981 ">#1981</a>)
(<a
href="e9dc283dcehttps://redirect.github.com/openai/openai-node/issues/1004 ">#1004</a></li>
</ul>
<h2>6.45.0 (2026-06-24)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6255405380https://redirect.github.com/openai/openai-node/issues/1989 ">#1989</a>)</li>
<li><a
href="1cdc0196b4https://redirect.github.com/openai/openai-node/issues/1994 ">#1994</a>)</li>
<li><a
href="ec2f57fd0dhttps://redirect.github.com/openai/openai-node/issues/1984 ">#1984</a>)</li>
<li><a
href="2df10fc19ahttps://redirect.github.com/openai/openai-node/issues/1985 ">#1985</a>)</li>
<li><a
href="ebb649811dhttps://redirect.github.com/openai/openai-node/issues/1986 ">#1986</a>)</li>
<li><a
href="5984f442e0https://redirect.github.com/openai/openai-node/issues/1987 ">#1987</a>)</li>
<li><a
href="373b08ac3bhttps://redirect.github.com/openai/openai-node/issues/1988 ">#1988</a>)</li>
<li><a
href="a6f01e53dehttps://redirect.github.com/openai/openai-node/issues/1973 ">#1973</a>)</li>
<li><a
href="53e580efb6https://redirect.github.com/openai/openai-node/issues/1976 ">#1976</a>)</li>
<li><a
href="a86f1fde30https://redirect.github.com/openai/openai-node/issues/1970 ">#1970</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/openai/openai-node/compare/v6.33.0...v6.47.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `postcss` from 8.5.16 to 8.5.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media "><code>@chatman-media</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.19</h2>
<ul>
<li>Fixed cleaning <code>before</code> for new nodes inserted to
<code>Root</code> (by <a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
</ul>
<h2>8.5.18</h2>
<ul>
<li>Restricted loading previous source maps file to the
<code>opts.from</code> folder for security reasons (use <code>unsafeMap:
true</code> to disable the check).</li>
</ul>
<h2>8.5.17</h2>
<ul>
<li>Fixed <code>Maximum call stack size exceeded</code> error.</li>
<li>Fixed Prototype hijacking for <code>postcss.fromJSON()</code>.</li>
<li>Fixed <code>Input#origin()</code> for unmapped end position (by <a
href="https://github.com/chatman-media "><code>@chatman-media</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9543b227693d13bf936000d0dd2322https://redirect.github.com/postcss/postcss/issues/2111 ">#2111</a>)</li>
<li><a
href="7a05b33e7a4c0d194c1392b4e7891e95663d3eb774e25ae9f4d1518afd5a2421312ffehttps://github.com/postcss/postcss/compare/8.5.16...8.5.19 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@opencode-ai/plugin` from 1.17.16 to 1.18.2
Updates `@anthropic-ai/sdk` from 0.110.0 to 0.111.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/releases ">@anthropic-ai/sdk's
releases</a>.</em></p>
<blockquote>
<h2>sdk: v0.111.0</h2>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md ">@anthropic-ai/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>0.111.0 (2026-07-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.110.0...sdk-v0.111.0 ">sdk-v0.110.0...sdk-v0.111.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="77b28a647268a6d7b92ae25b885eaca33f3f0b7ceac4bace32https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.1...sdk-v0.110.0 ">sdk-v0.109.1...sdk-v0.110.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="a470e10aaahttps://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.109.0...sdk-v0.109.1 ">sdk-v0.109.0...sdk-v0.109.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="cc4dd4e257https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.108.0...sdk-v0.109.0 ">sdk-v0.108.0...sdk-v0.109.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="7f3211b488https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.107.0...sdk-v0.108.0 ">sdk-v0.107.0...sdk-v0.108.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for claude-sonnet-5 (<a
href="4588db01ec9e467606888d461ea9629436e291590aec1e748bac2fc6779dc8af65d6af2a3a9042ab57c56c91724f2eb80719https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1107 ">#1107</a>)</li>
<li><a
href="96d1a991b6https://redirect.github.com/anthropics/anthropic-sdk-typescript/issues/1106 ">#1106</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-typescript/compare/sdk-v0.106.0...sdk-v0.111.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 11:21:14 -05:00
Tejas Chopra
4381388d56
chore: release main ( #1923 )
...
## Description
Release Please generated the 0.33.0 release PR for main. This updates
release metadata, package versions, and the generated changelog for the
0.33.0 release.
I also aligned the agent-hook plugin manifests, marketplace metadata,
editable lockfile package version, and canonical MCP `server.json`
descriptor to 0.33.0 so all package/plugin/registry version declarations
match the Release Please version bump.
## Type of Change
- [x] Documentation update
- [x] Release / packaging metadata
## Changes Made
- Updated `.release-please-manifest.json`, `pyproject.toml`,
`plugins/openclaw/package.json`, and `sdk/typescript/package.json` to
0.33.0.
- Updated the generated `CHANGELOG.md` release notes for 0.33.0.
- Synced `plugins/headroom-agent-hooks` plugin manifests and marketplace
metadata to 0.33.0.
- Synced `uv.lock` editable `headroom-ai` package version to 0.33.0.
- Regenerated the canonical MCP `server.json` descriptor to 0.33.0.
## Testing
- [x] Version verification passes
- [x] Version-sync tests pass
- [x] MCP server descriptor test passes
- [x] Whitespace check passes
### Test Output
```text
uv run python scripts/verify-versions.py
All versions aligned at 0.33.0
uv run pytest scripts/tests/test_version_sync.py scripts/tests/test_sync_plugin_versions.py -q
14 passed in 0.80s
uv run pytest tests/test_mcp_registry/test_server_json.py -q
4 passed in 0.42s
git diff --check
# no output
```
## Real Behavior Proof
- Environment: Windows 11, local checkout of the Release Please branch.
- Exact command / steps: Ran version verification and MCP descriptor
tests after syncing release metadata, plugin marketplace versions,
lockfile version, and `server.json`.
- Observed result: All package, plugin manifest, marketplace, lockfile,
and MCP descriptor release versions are aligned at 0.33.0.
2026-07-16 21:27:08 -07:00
Tejas Chopra
63945abe3a
chore: sync version state to released 0.31.0 to unblock release-please (v0.32.0) ( #2338 )
...
## Description
**Fixes the Release Please pipeline so it emits `v0.32.0`.** pip /
Docker / npm are out of sync because 0.32.0 was never actually released.
### Root cause
Same failure mode as #1916 . #2175 (a `fix(deps)` PR) bumped
`pyproject.toml` + `.release-please-manifest.json` to **0.32.0
out-of-band**, so release-please reads 0.32.0 as the *current* version
and computes the next release as **0.33.0** (#1923 ) — **skipping 0.32.0,
which was never tagged, GitHub-released, or published to PyPI/Docker.**
The last real release is `v0.31.0` (2026-07-09). The plugin/marketplace
manifests were also left at 0.31.0, so version state was split-brained:
```
pyproject.toml / openclaw / sdk-typescript : 0.32.0 <- #2175
plugin.json (x2) / marketplace.json (x2) : 0.31.0
manifest : 0.32.0
```
### Fix
Realign every version-tracked file **and** the RP manifest to the last
real release, **0.31.0**, via the repo's own `scripts/version-sync.py
--version 0.31.0`. Versions only — no code change.
## What happens after merge
1. Release Please runs on `main`, sees `manifest = 0.31.0` + releasable
commits since `v0.31.0`, and **rewrites its release PR (#1923 ) to
`chore: release 0.32.0`** (bumping every version file).
2. Merging that PR tags `v0.32.0` and fires `release: published`, which
publishes **PyPI + npm (SDK + openclaw) + Docker** at 0.32.0 in one shot
— bringing all registries back in sync.
## Changes Made
- `.release-please-manifest.json` → `0.31.0`
- `pyproject.toml`, `sdk/typescript/package.json`,
`plugins/openclaw/package.json`, `.releasemetadata` → `0.31.0` (via
`version-sync.py`)
- Plugin/marketplace manifests were already `0.31.0` (unchanged).
## Testing
```text
$ python scripts/verify-versions.py
All versions aligned at 0.31.0
```
## Real Behavior Proof
- Environment: local `.venv`.
- Steps: `version-sync.py --version 0.31.0`, reset manifest,
`verify-versions.py`.
- Observed: all 9 version entries aligned at 0.31.0; no CHANGELOG
touched (Changelog Guard passes).
- Not tested: the live release-please recompute (will run on merge —
expected to rewrite #1923 to `chore: release 0.32.0`).
## Note on downstream publish
The release-please workflow only triggers `release.yml`/`docker.yml` if
`RELEASE_PLEASE_TOKEN` (a PAT) is set — with the `GITHUB_TOKEN` fallback
the release is created but downstream publishes don't fire. #1916
shipped 0.31.0 fully via this path, so the PAT was set then; if the
0.32.0 publish doesn't fire on merge, verify that secret still exists.
2026-07-16 21:06:51 -07:00
JD Davis
ea3d5a86b7
fix(deps): clear Dependabot lockfile alerts ( #2175 )
...
## Description
Clears the current dependency/security-audit blockers that are making
unrelated PRs red:
- `transformers 5.3.0` / `CVE-2026-5241`, fixed by requiring
`transformers>=5.5.0` in the locked optional dependency set.
- `sqlitedict <=2.1.0` via the optional `benchmark` extra's
`lm-eval[api]` dependency. There is no patched `sqlitedict` release, so
this PR removes the published/locked `benchmark` extra instead of
shipping a known-vulnerable transitive dependency.
- `esbuild >=0.27.3,<0.28.1` in the OpenCode plugin lockfile, fixed by
forcing `esbuild@0.28.1` through the OpenCode npm override and
regenerated lockfile.
The benchmark code still invokes `python -m lm_eval`; researchers who
need that harness should install `lm-eval[api]` in their benchmark
environment until its transitive vulnerability has a patched release.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- `pyproject.toml`: remove the `benchmark` optional extra, document
external `lm-eval[api]` installation guidance, and require
`transformers>=5.5.0`.
- `uv.lock`: regenerate without the `benchmark` extra, removing
`lm-eval` and `sqlitedict` lock entries and locking the patched
transformers floor.
- `plugins/opencode/package.json`: add an `overrides` entry for
`esbuild@0.28.1`.
- `plugins/opencode/package-lock.json`: regenerate the OpenCode lockfile
with `esbuild@0.28.1`.
## Testing
- [x] Unit tests pass (`pytest`)
- [x] Linting passes (`ruff check .`)
- [ ] Type checking passes (`mypy headroom`)
- [ ] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
uv lock --check
rg -n -F 'sqlitedict' uv.lock # no matches
rg -n -F 'name = "lm-eval"' uv.lock # no matches
rg -n -F "extra == 'benchmark'" uv.lock # no matches
rg -n -F '0.27.7' plugins/opencode/package-lock.json plugins/opencode/package.json # no matches
npm ls esbuild --package-lock-only
npm audit --package-lock-only # found 0 vulnerabilities
git diff --check
```
Previous GitHub checks were green. After merging current `main`, fresh
GitHub checks are running again; local targeted validation still passes.
## Real Behavior Proof
- Environment: Windows 11, Python 3.13.3, uv, npm in `plugins/opencode`,
Dependabot/pip-audit alert metadata from the failing PR jobs.
- Exact command / steps: inspected the regenerated Python and npm
lockfiles with `rg`, checked the uv lock with `uv lock --check`, checked
OpenCode's dependency tree with `npm ls esbuild --package-lock-only`,
and ran `npm audit --package-lock-only`.
- Observed result: `uv.lock` no longer contains `sqlitedict`, `lm-eval`,
or a `benchmark` extra marker; `transformers` resolves at the patched
`>=5.5.0` floor; OpenCode's lock resolves `esbuild@0.28.1`; `npm audit
--package-lock-only` reports 0 vulnerabilities; GitHub `Dependency audit
(pip-audit)` passes.
- Not tested: running the external `lm-eval` harness after installing it
separately.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [ ] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [x] I have updated the CHANGELOG.md if applicable
## Screenshots (if applicable)
N/A - dependency and lockfile security fix.
## Additional Notes
The `benchmark` extra can be restored once the upstream `lm-eval[api]`
dependency chain stops pulling a vulnerable `sqlitedict` release.
---------
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-14 20:40:28 -07:00
Vinay Gupta
bd8de9f382
fix(proxy): keep recent stats request rows ( #1922 )
...
## Description
`/stats.recent_requests` was built from the request-log tail, but then
filtered out any row whose compact token fields were incomplete. That
made the dashboard/API summary diverge from the raw request counters:
`requests.by_model` could show many recent requests for a model while
`recent_requests` only showed the few rows with complete
compression-token accounting.
This fixes the stats payload so the compact `recent_requests` table
mirrors the latest request-log rows without masking unknown token
accounting as measured zero. Missing/non-finite compact numeric fields
now remain `null`, and each row exposes `token_accounting_status` plus
`has_exact_tokens` so API clients and the dashboard can distinguish
complete, partial, and missing token accounting.
Closes #1914
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring
## Changes Made
- Removed the token-completeness filter from
`_build_recent_request_payload()`.
- Preserved unknown compact recent-request numeric fields as `null`.
- Added `token_accounting_status` and `has_exact_tokens` to compact
recent request rows.
- Updated the dashboard recent-requests table to render unknown
token/latency fields as `unknown`.
- Hardened `build_session_summary()` against token-incomplete
request-log rows and surfaced an `unknown_token_accounting` bucket.
- Added TypeScript SDK fields for the compact recent-request stats
contract.
- Added a regression test covering missing, partial, and complete
token-accounting rows.
## Testing
- [x] Focused stats regression passes
- [x] Adjacent summary/MCP tests pass
- [x] TypeScript SDK typecheck/tests pass
- [x] Ruff check passes
- [x] Ruff format check passes
- [x] Diff whitespace check passes
- [ ] Full suite not run
### Test Output
```text
$ uv run --no-project ... pytest tests/test_proxy_stats_recent_requests.py -q
4 passed, 1 warning
$ uv run --no-project ... pytest tests/test_proxy_dashboard_stats_cache.py::test_session_summary_uses_generic_cli_filtering_keys tests/test_proxy_dashboard_stats_cache.py::test_session_summary_surfaces_codex_ws_counters tests/test_ccr_mcp_server.py -q
19 passed, 1 skipped
$ npm run typecheck
tsc --noEmit
$ npm test
296 passed, 33 skipped
$ uv run --no-project --with ruff ruff check headroom/proxy/server.py headroom/proxy/cost.py headroom/ccr/mcp_server.py tests/test_proxy_stats_recent_requests.py
All checks passed!
$ uv run --no-project --with ruff ruff format --check headroom/proxy/server.py headroom/proxy/cost.py headroom/ccr/mcp_server.py tests/test_proxy_stats_recent_requests.py
4 files already formatted
$ git diff --check
clean
```
## Verification
- Principal engineer review: no blockers after the final
finite-number/accounting-status alignment.
- Senior developer review: no blockers; implementation and focused
coverage look solid for #1914 .
- Architect/design review: original API/UI contract blocker resolved;
unknowns remain visible as `null`/`unknown` instead of measured zero.
## Notes
The normal editable `uv run pytest ...` path is blocked locally by the
known native build issue in `esaxx-rs` (`fatal error: 'cstdint' file not
found`) while building the Rust extension on this machine. I validated
the Python-only stats path with a temporary `headroom._core` import stub
and `HEADROOM_REQUIRE_RUST_CORE=false`; no repository files were changed
for that stub.
## Review Readiness
- [x] I have performed a self-review
- [ ] This PR is ready for human review
2026-07-13 10:09:51 -04:00
github-actions[bot]
a9515155c7
chore: release main ( #1918 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.31.0</summary>
##
[0.31.0](https://github.com/headroomlabs-ai/headroom/compare/v0.30.0...v0.31.0 )
(2026-07-09)
### Features
* **cache:** provider-agnostic cache-mode delta + cc-agnostic prefix
comparison
([#1868 ](https://github.com/headroomlabs-ai/headroom/issues/1868 ))
([7c2f0ea7c2f0ea079#1898 ](https://github.com/headroomlabs-ai/headroom/issues/1898 ))
([62cd30762cd3072a2#1899 ](https://github.com/headroomlabs-ai/headroom/issues/1899 ))
([bb112ddbb112dd176#1771 ](https://github.com/headroomlabs-ai/headroom/issues/1771 ))
([6c31db96c31db97fb#1818 ](https://github.com/headroomlabs-ai/headroom/issues/1818 ))
([60af15f60af15f96f#1807 ](https://github.com/headroomlabs-ai/headroom/issues/1807 ))
([ebe0a3bebe0a3bd7b#1891 ](https://github.com/headroomlabs-ai/headroom/issues/1891 ))
([ec950f7ec950f7ef1#1538 ](https://github.com/headroomlabs-ai/headroom/issues/1538 ))
([32ce99e32ce99e4b4#1827 ](https://github.com/headroomlabs-ai/headroom/issues/1827 ))
([0f606b60f606b6281#1781 ](https://github.com/headroomlabs-ai/headroom/issues/1781 ))
([9cbdba49cbdba4dc1#1854 ](https://github.com/headroomlabs-ai/headroom/issues/1854 ))
([f663894f663894f60#1897 ](https://github.com/headroomlabs-ai/headroom/issues/1897 ))
([ede085cede085cc11#1886 ](https://github.com/headroomlabs-ai/headroom/issues/1886 ))
([3a33af13a33af1af3#1747 ](https://github.com/headroomlabs-ai/headroom/issues/1747 ))
([b38315cb38315cf72#1889 ](https://github.com/headroomlabs-ai/headroom/issues/1889 ))
([9d42eba9d42ebaa1a#1648 ](https://github.com/headroomlabs-ai/headroom/issues/1648 ))
([f18c6bdf18c6bd896#1742 ](https://github.com/headroomlabs-ai/headroom/issues/1742 ))
([5194bdc5194bdc5a6#1772 ](https://github.com/headroomlabs-ai/headroom/issues/1772 ))
([c5493eac5493ea93b#1836 ](https://github.com/headroomlabs-ai/headroom/issues/1836 ))
([afd9cbdafd9cbdfaf#1785 ](https://github.com/headroomlabs-ai/headroom/issues/1785 ))
([5af5e225af5e22862#1804 ](https://github.com/headroomlabs-ai/headroom/issues/1804 ))
([88f935a88f935a1eb#1900 ](https://github.com/headroomlabs-ai/headroom/issues/1900 ))
([87f6e9387f6e93c14#1901 ](https://github.com/headroomlabs-ai/headroom/issues/1901 ))
([361adcd361adcd1a0#1728 ](https://github.com/headroomlabs-ai/headroom/issues/1728 ))
([188e382188e382b44#1768 ](https://github.com/headroomlabs-ai/headroom/issues/1768 ))
([#1837 ](https://github.com/headroomlabs-ai/headroom/issues/1837 ))
([84509a484509a4b89#1839 ](https://github.com/headroomlabs-ai/headroom/issues/1839 ))
([5e29c065e29c06aaf#1862 ](https://github.com/headroomlabs-ai/headroom/issues/1862 ))
([380748838074888ac#1892 ](https://github.com/headroomlabs-ai/headroom/issues/1892 ))
([42ebbc642ebbc6cce#1654 ](https://github.com/headroomlabs-ai/headroom/issues/1654 ))
([#1702 ](https://github.com/headroomlabs-ai/headroom/issues/1702 ))
([d6e0710d6e0710228#1676 ](https://github.com/headroomlabs-ai/headroom/issues/1676 ))
([6fb5f3b6fb5f3bc3d#1888 ](https://github.com/headroomlabs-ai/headroom/issues/1888 ))
([1c947b11c947b1103#1786 ](https://github.com/headroomlabs-ai/headroom/issues/1786 ))
([931eed8931eed879d#1737 ](https://github.com/headroomlabs-ai/headroom/issues/1737 ))
([#1887 ](https://github.com/headroomlabs-ai/headroom/issues/1887 ))
([3e85eb13e85eb1880#1383 ](https://github.com/headroomlabs-ai/headroom/issues/1383 ))
([4bd3ddf4bd3ddfaa5#1606 ](https://github.com/headroomlabs-ai/headroom/issues/1606 ))
([7ff842d7ff842da17#1774 ](https://github.com/headroomlabs-ai/headroom/issues/1774 ))
([285808b285808b90e#1802 ](https://github.com/headroomlabs-ai/headroom/issues/1802 ))
([d24a3f8d24a3f8425#1738 ](https://github.com/headroomlabs-ai/headroom/issues/1738 ))
([46d5d6846d5d685d9#1834 ](https://github.com/headroomlabs-ai/headroom/issues/1834 ))
([da2d8dcda2d8dc9db#1875 ](https://github.com/headroomlabs-ai/headroom/issues/1875 ))
([e36439ae36439a941#1850 ](https://github.com/headroomlabs-ai/headroom/issues/1850 ))
([248ae0f248ae0f3e0#1764 ](https://github.com/headroomlabs-ai/headroom/issues/1764 ))
([7de2c1e7de2c1e4c2#1852 ](https://github.com/headroomlabs-ai/headroom/issues/1852 ))
([482013448201345be#1665 ](https://github.com/headroomlabs-ai/headroom/issues/1665 ))
([908997e908997ef61#1783 ](https://github.com/headroomlabs-ai/headroom/issues/1783 ))
([0f553a80f553a8ebb#1864 ](https://github.com/headroomlabs-ai/headroom/issues/1864 ))
([2ccd8312ccd831032#1645 ](https://github.com/headroomlabs-ai/headroom/issues/1645 ))
([2ce19c22ce19c2c55#1513 ](https://github.com/headroomlabs-ai/headroom/issues/1513 ))
([5d140805d14080c94#1878 ](https://github.com/headroomlabs-ai/headroom/issues/1878 ))
([739f654739f654bbd#1787 ](https://github.com/headroomlabs-ai/headroom/issues/1787 ))
([#1847 ](https://github.com/headroomlabs-ai/headroom/issues/1847 ))
([3076e323076e32172#1693 ](https://github.com/headroomlabs-ai/headroom/issues/1693 ))
([681b9a8681b9a8c1a#1840 ](https://github.com/headroomlabs-ai/headroom/issues/1840 ))
([e22d745e22d7453d4#1800 ](https://github.com/headroomlabs-ai/headroom/issues/1800 ))
([53a465b53a465b121#1822 ](https://github.com/headroomlabs-ai/headroom/issues/1822 ))
([#1863 ](https://github.com/headroomlabs-ai/headroom/issues/1863 ))
([140d6e4140d6e4f96#1698 ](https://github.com/headroomlabs-ai/headroom/issues/1698 ))
([140cb05140cb05fbc#1826 ](https://github.com/headroomlabs-ai/headroom/issues/1826 ))
([4ac54934ac54934cb#1782 ](https://github.com/headroomlabs-ai/headroom/issues/1782 ))
([be51008be51008c70#1801 ](https://github.com/headroomlabs-ai/headroom/issues/1801 ))
([838c523838c5234a8#1713 ](https://github.com/headroomlabs-ai/headroom/issues/1713 ))
([c7665cac7665ca088#756 ](https://github.com/headroomlabs-ai/headroom/issues/756 ))
([#1846 ](https://github.com/headroomlabs-ai/headroom/issues/1846 ))
([1573f1f1573f1fd07#1406 ](https://github.com/headroomlabs-ai/headroom/issues/1406 ))
([b4205c6b4205c68e6#1803 ](https://github.com/headroomlabs-ai/headroom/issues/1803 ))
([0a3851b0a3851b240#1817 ](https://github.com/headroomlabs-ai/headroom/issues/1817 ))
([451b9f0451b9f0867#1909 ](https://github.com/headroomlabs-ai/headroom/issues/1909 ))
([45601d945601d93bc#1907 ](https://github.com/headroomlabs-ai/headroom/issues/1907 ))
([8872bbc8872bbc6a2https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-09 07:47:54 -07:00
Tejas Chopra
2990b7457d
chore: sync version state to released 0.30.0 to unblock release-please ( #1916 )
...
## Description
**Fixes the Release Please pipeline**, which stopped opening the release
PR, leaving pip / Docker / npm out of sync.
### Root cause
Recent releases (0.28 → 0.30) were cut **out-of-band** (manual tag +
release), so Release Please's state drifted from reality:
- `.release-please-manifest.json` was frozen at **0.29.0**, and the
in-repo version files at **0.29.0** — even the `v0.30.0` tag commit has
`pyproject.toml = 0.29.0`. The plugin/marketplace manifests were frozen
even further back, at **0.22.3**.
- `v0.30.0` was tagged and published to PyPI (CI stamps the version from
the tag at build time via `version-sync.py`, which is why PyPI got
0.30.0 despite the committed 0.29.0).
- With the manifest at 0.29.0, RP kept computing the next version as
**0.30.0**, saw that tag already exists, and produced **no PR** — so
nothing new could ship, and Docker/npm fell behind.
### Fix
Realign the repo with the last real release (0.30.0) so RP can drive the
next one:
- `.release-please-manifest.json` → `0.30.0`
- `pyproject.toml`, `sdk/typescript/package.json`,
`plugins/openclaw/package.json`, both `plugin.json`, both
`marketplace.json` → `0.30.0` (via `scripts/version-sync.py --version
0.30.0`, which also fixes the 0.22.3 drift).
### What happens after merge
1. Release Please runs on `main`, sees manifest = 0.30.0 + 69 releasable
commits since `v0.30.0`, and opens a clean **`chore: release 0.31.0`**
PR (bumping every version file).
2. Merging that PR tags `v0.31.0` and fires `release: published`, which
publishes **PyPI + npm (SDK + openclaw) + Docker** at 0.31.0 in one shot
— bringing all three registries back in sync.
No behavior/code change — versions only.
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature
- [ ] Breaking change
- [ ] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
- Advance the Release Please manifest to the last released version
(0.30.0).
- Sync all 7 version-tracked files to 0.30.0 with the repo's own
`version-sync.py`.
## Testing
- [x] Linting passes (`ruff check .`)
- [x] Manual testing performed (`scripts/verify-versions.py`)
### Test Output
```text
$ python scripts/version-sync.py --version 0.30.0
Version synchronized to 0.30.0
$ python scripts/verify-versions.py
All versions aligned at 0.30.0
Packages: pyproject.toml, plugins/openclaw/package.json, sdk/typescript/package.json,
plugins/headroom-agent-hooks/.claude-plugin/plugin.json,
plugins/headroom-agent-hooks/.github/plugin/plugin.json,
.claude-plugin/marketplace.json, .github/plugin/marketplace.json
```
## Real Behavior Proof
- Environment: local macOS, project `.venv` (Python 3.12.6).
- Exact command / steps: ran `scripts/version-sync.py --version 0.30.0`,
set the RP manifest to 0.30.0, then `scripts/verify-versions.py`.
- Observed result: `verify-versions.py` reports all seven version
locations aligned at 0.30.0; `git diff` shows version-field changes only
(no code). Confirmed PyPI latest is 0.30.0 and a `v0.30.0` tag/release
exists, while the manifest was 0.29.0 — the drift this PR corrects.
- Not tested: the downstream release itself (that runs when the
follow-up `chore: release 0.31.0` PR is merged); npm registry state
could not be read from this environment (network), but the `publish-npm`
job in `release.yml` publishes both npm packages on release.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] My changes generate no new warnings
- [x] New and existing unit tests pass locally with my changes
2026-07-09 07:08:06 -07:00
dependabot[bot]
8872bbc6a2
deps: bump the npm-minor-patch group across 4 directories with 18 updates ( #1907 )
...
Bumps the npm-minor-patch group with 12 updates in the /docs directory:
| Package | From | To |
| --- | --- | --- |
| [fumadocs-core](https://github.com/fuma-nama/fumadocs ) | `16.10.3` |
`16.11.1` |
| [fumadocs-mdx](https://github.com/fuma-nama/fumadocs ) | `15.0.12` |
`15.1.0` |
| [fumadocs-twoslash](https://github.com/fuma-nama/fumadocs ) | `3.1.15`
| `3.3.0` |
| [fumadocs-ui](https://github.com/fuma-nama/fumadocs ) | `16.10.3` |
`16.11.1` |
| [next](https://github.com/vercel/next.js ) | `16.2.6` | `16.2.10` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react ) |
`19.2.4` | `19.2.7` |
|
[@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react )
| `19.2.14` | `19.2.17` |
|
[react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom )
| `19.2.4` | `19.2.7` |
| [recharts](https://github.com/recharts/recharts ) | `3.8.1` | `3.9.2` |
|
[@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss )
| `4.2.2` | `4.3.2` |
|
[@types/mdx](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mdx )
| `2.0.13` | `2.0.14` |
| [postcss](https://github.com/postcss/postcss ) | `8.5.15` | `8.5.16` |
Bumps the npm-minor-patch group with 1 update in the /plugins/openclaw
directory:
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ).
Bumps the npm-minor-patch group with 2 updates in the /plugins/opencode
directory:
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest )
and @opencode-ai/plugin.
Bumps the npm-minor-patch group with 3 updates in the /sdk/typescript
directory:
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ),
[@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript )
and [dotenv](https://github.com/motdotla/dotenv ).
Updates `fumadocs-core` from 16.10.3 to 16.11.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ab09f500cbhttps://redirect.github.com/fuma-nama/fumadocs/issues/3405 ">#3405</a>)</li>
<li><a
href="889a296d06a5c081d0c69a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e25477https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.10.3...fumadocs@16.11.1 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-mdx` from 15.0.12 to 15.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fuma-nama/fumadocs/releases ">fumadocs-mdx's
releases</a>.</em></p>
<blockquote>
<h2>fumadocs-mdx@15.1.0</h2>
<h3>Default to Base UI</h3>
<p>Internal packages & templates now use Base UI rather than Radix
UI.</p>
<h2>fumadocs-mdx@15.0.13</h2>
<h3>Require <code>collection</code> query param at regex matching</h3>
<p>Instead of passing through all JSON/YAML files, the meta loader now
requires <code>collection</code> query param to be triggered.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e2547702c242b0da3d80b8b2420ec19af868https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@15.0.12...fumadocs-mdx@15.1.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-twoslash` from 3.1.15 to 3.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fuma-nama/fumadocs/releases ">fumadocs-twoslash's
releases</a>.</em></p>
<blockquote>
<h2>fumadocs-twoslash@3.3.0</h2>
<h3>Default to Base UI</h3>
<p>Internal packages & templates now use Base UI rather than Radix
UI.</p>
<h2>fumadocs-twoslash@3.2.1</h2>
<h3>Migrate to <code>cnfast</code></h3>
<p>Drop <code>tailwind-merge</code>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e2547702c242b0da3d80b8b2420ec19af868https://github.com/fuma-nama/fumadocs/compare/fumadocs-twoslash@3.1.15...fumadocs-twoslash@3.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `fumadocs-ui` from 16.10.3 to 16.11.1
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ab09f500cbhttps://redirect.github.com/fuma-nama/fumadocs/issues/3405 ">#3405</a>)</li>
<li><a
href="889a296d06a5c081d0c69a269030df3e33f4362f3597c9d1e60f389cf3de4611f97d49d0953007600297e25477https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.10.3...fumadocs@16.11.1 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `lucide-react` from 1.20.0 to 1.23.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/lucide-icons/lucide/releases ">lucide-react's
releases</a>.</em></p>
<blockquote>
<h2>Version 1.23.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(docs): prevent scrollbar layout shift on icons page by <a
href="https://github.com/g30r93g "><code>@g30r93g</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4500 ">lucide-icons/lucide#4500</a></li>
<li>chore(docs): Remove certificates banner by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4504 ">lucide-icons/lucide#4504</a></li>
<li>ci(repo-journal.yml): GH copilot repo summary by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4505 ">lucide-icons/lucide#4505</a></li>
<li>ci(repo-journal.yml): Small fix in the workflow by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4508 ">lucide-icons/lucide#4508</a></li>
<li>ci(repo-journal.yml): Switch to token by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4509 ">lucide-icons/lucide#4509</a></li>
<li>feat(icons): added <code>paper-bag</code> icon by <a
href="https://github.com/dkast "><code>@dkast</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4023 ">lucide-icons/lucide#4023</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/g30r93g "><code>@g30r93g</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4500 ">lucide-icons/lucide#4500</a></li>
<li><a href="https://github.com/dkast "><code>@dkast</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4023 ">lucide-icons/lucide#4023</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.22.0...1.23.0 ">https://github.com/lucide-icons/lucide/compare/1.22.0...1.23.0 </a></p>
<h2>Version 1.22.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(icons): add 6 database variant icons by <a
href="https://github.com/Barakudum "><code>@Barakudum</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4336 ">lucide-icons/lucide#4336</a></li>
<li>ci(release.yml): Remove concurrency field to prevent release mess by
<a href="https://github.com/ericfennis "><code>@ericfennis</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4485 ">lucide-icons/lucide#4485</a></li>
<li>fix(docs): fix color input clipping by <a
href="https://github.com/Hsiii "><code>@Hsiii</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4488 ">lucide-icons/lucide#4488</a></li>
<li>docs(site): add Deno to installation instructions by <a
href="https://github.com/bartlomieju "><code>@bartlomieju</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4486 ">lucide-icons/lucide#4486</a></li>
<li>chore(deps): bump esbuild from 0.25.12 to 0.28.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4459 ">lucide-icons/lucide#4459</a></li>
<li>fix(docs): prevent private analytics token from blocking local dev
by <a href="https://github.com/Hsiii "><code>@Hsiii</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4481 ">lucide-icons/lucide#4481</a></li>
<li>docs(installation.md): Remove outdate next tag in installation by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4495 ">lucide-icons/lucide#4495</a></li>
<li>fix(lucide-react-native): Fix context provider export by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4497 ">lucide-icons/lucide#4497</a></li>
<li>fix(astro): add Astro v7 compatibility by <a
href="https://github.com/iseraph-dev "><code>@iseraph-dev</code></a> in
<a
href="https://redirect.github.com/lucide-icons/lucide/pull/4491 ">lucide-icons/lucide#4491</a></li>
<li>fix(icons): changed <code>carrot</code> icon by <a
href="https://github.com/jguddas "><code>@jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4010 ">lucide-icons/lucide#4010</a></li>
<li>fix(icons): changed <code>ungroup</code> icon by <a
href="https://github.com/jguddas "><code>@jguddas</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/3969 ">lucide-icons/lucide#3969</a></li>
<li>feat(icons): added <code>phi</code> icon also used as
<code>golden-ratio</code> by <a
href="https://github.com/whoisBugsbunny "><code>@whoisBugsbunny</code></a>
in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4218 ">lucide-icons/lucide#4218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bartlomieju "><code>@bartlomieju</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4486 ">lucide-icons/lucide#4486</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.21.0...1.22.0 ">https://github.com/lucide-icons/lucide/compare/1.21.0...1.22.0 </a></p>
<h2>Version 1.21.0</h2>
<h2>What's Changed</h2>
<ul>
<li>ci(release.yml): Remove new-version in release flow by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4478 ">lucide-icons/lucide#4478</a></li>
<li>ci(release.yml): Fix workflow and remove <code>version</code>
scripts in package scripts by <a
href="https://github.com/ericfennis "><code>@ericfennis</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4479 ">lucide-icons/lucide#4479</a></li>
<li>fix(docs): rename navigation category label by <a
href="https://github.com/Hsiii "><code>@Hsiii</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4483 ">lucide-icons/lucide#4483</a></li>
<li>feat(icons): added <code>broken-bone</code> icon by <a
href="https://github.com/Patolord "><code>@Patolord</code></a> in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4131 ">lucide-icons/lucide#4131</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Hsiii "><code>@Hsiii</code></a> made
their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4483 ">lucide-icons/lucide#4483</a></li>
<li><a href="https://github.com/Patolord "><code>@Patolord</code></a>
made their first contribution in <a
href="https://redirect.github.com/lucide-icons/lucide/pull/4131 ">lucide-icons/lucide#4131</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/lucide-icons/lucide/compare/1.20.0...1.21.0 ">https://github.com/lucide-icons/lucide/compare/1.20.0...1.21.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5ff536e139https://github.com/lucide-icons/lucide/commits/1.23.0/packages/lucide-react ">compare
view</a></li>
</ul>
</details>
<br />
Updates `next` from 16.2.6 to 16.2.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/next.js/releases ">next's
releases</a>.</em></p>
<blockquote>
<h2>v16.2.10</h2>
<p>Contains no changes except publishing <code>@next/swc-wasm-web</code>
which was accidentally not published since 16.2.4.</p>
<h2>v16.2.9</h2>
<p>Empty release to ensure <code>next@latest</code> points at a stable
release. Next.js only allows publishing with Trusted Publishing enabled.
In order to fix NPM dist-tags, we have to release a new version.
Updating dist-tags is not possible with Trusted Publishing.</p>
<h2>v16.2.8</h2>
<p>Release with no changes in an attempt to fix <code>next@latest</code>
pointing at a prerelease version.</p>
<h2>v16.2.7</h2>
<blockquote>
<p>[!NOTE]
This release is backporting bug fixes. It does <strong>not</strong>
include all pending features/changes on canary.</p>
</blockquote>
<h3>Core Changes</h3>
<ul>
<li>Backport documentation fixes for v16.2 (<a
href="https://redirect.github.com/vercel/next.js/issues/93804 ">#93804</a>)</li>
<li>[backport] Patch <code>playwright-core</code> to resolve
<code>_finishedPromise</code> on <code>requestFailed</code> (<a
href="https://redirect.github.com/vercel/next.js/issues/93920 ">#93920</a>)</li>
<li>[backport] Fix dev mode hydration failure when page is served from
HTTP cache (<a
href="https://redirect.github.com/vercel/next.js/issues/93492 ">#93492</a>)</li>
<li>[backport] Fix catch-all <code>router.query</code> corruption with
<code>basePath</code> + <code>rewrites</code> (<a
href="https://redirect.github.com/vercel/next.js/issues/93917 ">#93917</a>)</li>
<li>[backport] Encode non-ASCII characters in cache tags at construction
(<a
href="https://redirect.github.com/vercel/next.js/issues/93918 ">#93918</a>)</li>
<li>[backport] Fix server action forwarding loop with middleware
rewrites (<a
href="https://redirect.github.com/vercel/next.js/issues/93919 ">#93919</a>)</li>
<li>[backport] Turbopack: switch from base40 to base38 hash encoding (<a
href="https://redirect.github.com/vercel/next.js/issues/93932 ">#93932</a>)</li>
<li>[ci] Disable hanging node 24 typescript tests on 16.2 backport
branch (<a
href="https://redirect.github.com/vercel/next.js/issues/94164 ">#94164</a>)</li>
<li>[backport] Fix "type: module" in project dir when using
standalone or adapters (<a
href="https://redirect.github.com/vercel/next.js/issues/94050 ">#94050</a>)</li>
<li>[backport] Propagate adapter preferred regions (<a
href="https://redirect.github.com/vercel/next.js/issues/94200 ">#94200</a>)</li>
<li>[16.2.x] Don't drop <code>FormData</code> entries (<a
href="https://redirect.github.com/vercel/next.js/issues/94240 ">#94240</a>)</li>
<li>[backport] feat(turbopack): add LocalPathOrProjectPath PostCSS
config resolution (<a
href="https://redirect.github.com/vercel/next.js/issues/94284 ">#94284</a>)</li>
</ul>
<h3>Credits</h3>
<p>Huge thanks to <a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/icyJoseph "><code>@icyJoseph</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>, <a
href="https://github.com/mischnic "><code>@mischnic</code></a>, <a
href="https://github.com/bgw "><code>@bgw</code></a>, <a
href="https://github.com/timneutkens "><code>@timneutkens</code></a>,
and <a
href="https://github.com/lukesandberg "><code>@lukesandberg</code></a>
for helping!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9dadfd693c534d9c144chttps://redirect.github.com/vercel/next.js/issues/95160 ">#95160</a>)</li>
<li><a
href="98941fc427https://redirect.github.com/vercel/next.js/issues/94935 ">#94935</a>)</li>
<li><a
href="6e1a94de7chttps://redirect.github.com/vercel/next.js/issues/94640 ">#94640</a>)</li>
<li><a
href="f37fad9405d9aaaedfd8https://redirect.github.com/vercel/next.js/issues/94627 ">#94627</a>)</li>
<li><a
href="6f1680448c0dbc1d5c86https://redirect.github.com/vercel/next.js/issues/94598 ">#94598</a>)</li>
<li><a
href="90e3c811e7https://redirect.github.com/vercel/next.js/issues/94339 ">#94339</a>)</li>
<li><a
href="83f402c69dhttps://redirect.github.com/vercel/next.js/issues/94334 ">#94334</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/next.js/compare/v16.2.6...v16.2.10 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `react` from 19.2.4 to 19.2.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/releases ">react's
releases</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6
(<a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>
by <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.6 (May 6th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Type hardening and performance improvements
(<a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.5 (April 8th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add more cycle protections (<a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/blob/main/CHANGELOG.md ">react's
changelog</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6 (<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>)</li>
</ul>
<h2>19.2.6 (May 6, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Type hardening and performance improvements (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>)</li>
</ul>
<h2>19.2.5 (March 18, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Add more cycle protections (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6117d7cca4https://github.com/facebook/react/tree/HEAD/packages/react/issues/36591 ">#36591</a>)</li>
<li><a
href="eaf3e95ca923f4f9f30dhttps://github.com/facebook/react/commits/v19.2.7/packages/react ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for react since your current version.</p>
</details>
<br />
Updates `@types/react` from 19.2.14 to 19.2.17
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react ">compare
view</a></li>
</ul>
</details>
<br />
Updates `react-dom` from 19.2.4 to 19.2.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/facebook/react/releases ">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6
(<a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>
by <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.6 (May 6th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Type hardening and performance improvements
(<a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
<h2>19.2.5 (April 8th, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Add more cycle protections (<a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>
by <a href="https://github.com/eps1lon "><code>@eps1lon</code></a> and
<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/blob/main/CHANGELOG.md ">react-dom's
changelog</a>.</em></p>
<blockquote>
<h2>19.2.7 (June 1, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Fixed missing <code>FormData</code> entries in Server Actions which
regressed in 19.2.6 (<a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36566 ">#36566</a>)</li>
</ul>
<h2>19.2.6 (May 6, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Type hardening and performance improvements (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36425 ">#36425</a>)</li>
</ul>
<h2>19.2.5 (March 18, 2026)</h2>
<h3>React Server Components</h3>
<ul>
<li>Add more cycle protections (<a
href="https://github.com/eps1lon "><code>@eps1lon</code></a>, <a
href="https://github.com/unstubbable "><code>@unstubbable</code></a> <a
href="https://redirect.github.com/facebook/react/pull/36236 ">#36236</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6117d7cca4https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/36591 ">#36591</a>)</li>
<li><a
href="eaf3e95ca923f4f9f30dhttps://github.com/facebook/react/commits/v19.2.7/packages/react-dom ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for react-dom since your current version.</p>
</details>
<br />
Updates `recharts` from 3.8.1 to 3.9.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/recharts/recharts/releases ">recharts's
releases</a>.</em></p>
<blockquote>
<h2>v3.9.2</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: clarify custom labels and ticks need SVG elements by <a
href="https://github.com/ishaanlabs-gg "><code>@ishaanlabs-gg</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7524 ">recharts/recharts#7524</a></li>
<li>chore(deps): bump immer from 11.1.8 to 11.1.9 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/recharts/recharts/pull/7526 ">recharts/recharts#7526</a></li>
<li>fix(Sankey): avoid exponential depth traversal on dense graphs by <a
href="https://github.com/dm-gthb "><code>@dm-gthb</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7479 ">recharts/recharts#7479</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/ishaanlabs-gg "><code>@ishaanlabs-gg</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7524 ">recharts/recharts#7524</a></li>
<li><a href="https://github.com/dm-gthb "><code>@dm-gthb</code></a> made
their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7479 ">recharts/recharts#7479</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/recharts/recharts/compare/v3.9.1...v3.9.2 ">https://github.com/recharts/recharts/compare/v3.9.1...v3.9.2 </a></p>
<h2>v3.9.1</h2>
<h2>What's Changed</h2>
<ul>
<li>perf: optimize ScatterChart hover by reducing re-renders from O(n)
to O(1) by <a href="https://github.com/roy7 "><code>@roy7</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7133 ">recharts/recharts#7133</a></li>
<li>fix(YAxis): render explicit ticks when a non-literal domain can't
resolve on empty data (<a
href="https://redirect.github.com/recharts/recharts/issues/7362 ">#7362</a>)
by <a href="https://github.com/nlenepveu "><code>@nlenepveu</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7393 ">recharts/recharts#7393</a></li>
<li>fix: avoid Sankey nodes overlapping skipped-depth links by <a
href="https://github.com/pupuking723 "><code>@pupuking723</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7471 ">recharts/recharts#7471</a></li>
<li>Add stacked bar chart with horizontal threshold line example by <a
href="https://github.com/nijuse "><code>@nijuse</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7495 ">recharts/recharts#7495</a></li>
<li>fix(DefaultLegendContent): omit empty value from legend icon
aria-label by <a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a> in
<a
href="https://redirect.github.com/recharts/recharts/pull/7501 ">recharts/recharts#7501</a></li>
<li>chore(deps): bump immer from 10.2.0 to 11.1.8 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/recharts/recharts/pull/7452 ">recharts/recharts#7452</a></li>
<li>fix(getNiceTickValues): remove trailing duplicate tick when
allowDecimals=false by <a
href="https://github.com/JSap0914 "><code>@JSap0914</code></a> in <a
href="https://redirect.github.com/recharts/recharts/pull/7482 ">recharts/recharts#7482</a></li>
<li>Fix/per graphical item formatter prop by <a
href="https://github.com/shreedharbhat98 "><code>@shreedharbhat98</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7287 ">recharts/recharts#7287</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/pupuking723 "><code>@pupuking723</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7471 ">recharts/recharts#7471</a></li>
<li><a href="https://github.com/nijuse "><code>@nijuse</code></a> made
their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7495 ">recharts/recharts#7495</a></li>
<li><a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7501 ">recharts/recharts#7501</a></li>
<li><a href="https://github.com/JSap0914 "><code>@JSap0914</code></a>
made their first contribution in <a
href="https://redirect.github.com/recharts/recharts/pull/7482 ">recharts/recharts#7482</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/recharts/recharts/compare/v3.9.0...v3.9.1 ">https://github.com/recharts/recharts/compare/v3.9.0...v3.9.1 </a></p>
<h2>v3.9.0</h2>
<h2>What's Changed</h2>
<h3>Animations</h3>
<p>3.9 comes with new animations! There are several bug fixes and what's
best, all animations are now fully customizable.</p>
<p>See the animations guide on <a
href="https://recharts.github.io/en-US/guide/animations/ ">https://recharts.github.io/en-US/guide/animations/ </a></p>
<ul>
<li>Animation guide by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7179 ">recharts/recharts#7179</a></li>
<li>Animation tests by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7255 ">recharts/recharts#7255</a></li>
<li>New animation props by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7215 ">recharts/recharts#7215</a></li>
<li>test: cover legacy animation length changes by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7283 ">recharts/recharts#7283</a></li>
<li>test: add sparse animation path tests for Line component by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7295 ">recharts/recharts#7295</a></li>
<li>Export and document interpolate function by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7293 ">recharts/recharts#7293</a></li>
<li>test: enhance line animation tests for ComposedChart and responsive
by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7289 ">recharts/recharts#7289</a></li>
<li>Manual animations on website by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7483 ">recharts/recharts#7483</a></li>
<li>Add new example where chart animates by scroll by <a
href="https://github.com/PavelVanecek "><code>@PavelVanecek</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7484 ">recharts/recharts#7484</a></li>
<li>fix: preserve single-value line dash gaps during animation by <a
href="https://github.com/puneetdixit200 "><code>@puneetdixit200</code></a>
in <a
href="https://redirect.github.com/recharts/recharts/pull/7405 ">recharts/recharts#7405</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b3451050c0f27779c04885f9369f40https://redirect.github.com/recharts/recharts/issues/7520 ">#7520</a>)</li>
<li><a
href="52a2a896cfhttps://redirect.github.com/recharts/recharts/issues/7479 ">#7479</a>)</li>
<li><a
href="8a056c1018https://redirect.github.com/recharts/recharts/issues/7527 ">#7527</a>)</li>
<li><a
href="2af6ec6f0fhttps://redirect.github.com/recharts/recharts/issues/7526 ">#7526</a>)</li>
<li><a
href="6f10d53cf6https://redirect.github.com/recharts/recharts/issues/7524 ">#7524</a>)</li>
<li><a
href="c04f1a7678https://redirect.github.com/recharts/recharts/issues/7521 ">#7521</a>)</li>
<li><a
href="69c7a9630ahttps://redirect.github.com/recharts/recharts/issues/7522 ">#7522</a>)</li>
<li><a
href="6efaf16a1ahttps://redirect.github.com/recharts/recharts/issues/7515 ">#7515</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/recharts/recharts/compare/v3.8.1...v3.9.2 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for recharts since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version modifies <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />
Updates `@tailwindcss/postcss` from 4.2.2 to 4.3.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/releases ">@tailwindcss/postcss's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.2</h2>
<h3>Fixed</h3>
<ul>
<li>Support bare spacing values for <code>auto-rows-*</code> and
<code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and
<code>auto-cols-16</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229 ">#20229</a>)</li>
<li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode
from crashing on Windows when <code>@source</code> points to a directory
that doesn't exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242 ">#20242</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x
when <code>context.parentURL</code> is not a valid URL (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245 ">#20245</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
rebuilds when the input CSS file changes in an ignored directory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246 ">#20246</a>)</li>
<li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to
use custom variants defined later (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247 ">#20247</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when
scanned files or directories are deleted (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259 ">#20259</a>)</li>
<li>Generate <code>font-size</code> instead of <code>color</code>
declarations for <code>text-[--spacing(…)]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260 ">#20260</a>)</li>
<li>Prevent <code>@source</code> patterns from scanning unrelated
sibling files and folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263 ">#20263</a>)</li>
<li>Extract class candidates adjacent to Template Toolkit delimiters
like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and
<code>.tx</code> files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Extract class candidates from conditional Maud syntax like
<code>p.text-black[condition]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Prevent <code>@position-try</code> rules from triggering unknown
at-rule warnings when optimizing CSS (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277 ">#20277</a>)</li>
<li>Support class suggestions for named opacity modifiers from
<code>--opacity</code> theme values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287 ">#20287</a>)</li>
<li>Prevent type errors in <code>@tailwindcss/postcss</code> when used
with newer PostCSS patch releases (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289 ">#20289</a>)</li>
</ul>
<h2>v4.3.1</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--silent</code> option to suppress output in
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100 ">#20100</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Remove deprecation warnings by using
<code>Module#registerHooks</code> instead of
<code>Module#register</code> on Node 26+ (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028 ">#20028</a>)</li>
<li>Canonicalization: don't crash when plugin utilities throw for
unsupported values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052 ">#20052</a>)</li>
<li>Allow <code>@apply</code> to be used with CSS mixins (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427 ">#19427</a>)</li>
<li>Ensure <code>not-*</code> correctly negates <code>@container</code>
queries, including <code>style(…)</code> queries (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059 ">#20059</a>)</li>
<li>Ensure <code>drop-shadow-*</code> color utilities work with custom
shadow values containing <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080 ">#20080</a>)</li>
<li>Fix 'Sourcemap is likely to be incorrect' warnings when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103 ">#20103</a>)</li>
<li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack
projects without requiring <code>webpack</code> as a peer dependency (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027 ">#20027</a>)</li>
<li>Canonicalization: don't suggest invalid <code>calc(…)</code>
expressions (e.g. <code>px-[calc(1rem+0px)]</code> →
<code>px-[calc(1rem+0)]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127 ">#20127</a>)</li>
<li>Canonicalization: avoid suggesting large spacing-scale values for
arbitrary lengths (e.g. <code>left-[99999px]</code> →
<code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130 ">#20130</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
recovers when a tracked dependency is deleted and restored (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137 ">#20137</a>)</li>
<li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored
when scanning for class candidates (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139 ">#20139</a>)</li>
<li>Ensure class candidates are extracted from Twig
<code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198 ">#20198</a>)</li>
<li>Don't crash in the Ruby or Vue preprocessors when scanning files
containing invalid UTF-8 bytes (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588 ">#19588</a>)</li>
<li>Allow <code>@variant</code> to be used inside <code>addBase</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480 ">#19480</a>)</li>
<li>Ensure <code>@source</code> globs with symlinks are preserved (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Ensure later <code>@source</code> rules can re-include files
excluded by earlier <code>@source not</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Upgrade: don't migrate empty class rules to invalid
<code>@utility</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205 ">#20205</a>)</li>
<li>Ensure transitions between <code>inset-shadow-none</code> and other
inset shadows work correctly (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208 ">#20208</a>)</li>
<li>Ensure explicitly referenced <code>@source</code> directories are
scanned even when ignored by git (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214 ">#20214</a>)</li>
<li>Ensure <code>@source</code> globs ending in <code>**/*</code>
preserve dynamic path segments to avoid scanning too many files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217 ">#20217</a>)</li>
<li>Canonicalization: don't fold <code>calc(…)</code> divisions when the
result would require high precision (e.g.
<code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not
<code>w-[28.571428571428573%]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221 ">#20221</a>)</li>
<li>Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228 ">#20228</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Generate <code>0</code> instead of <code>calc(var(--spacing) *
0)</code> for spacing utilities like <code>m-0</code> and
<code>left-0</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20196 ">#20196</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md ">@tailwindcss/postcss's
changelog</a>.</em></p>
<blockquote>
<h2>[4.3.2] - 2026-06-26</h2>
<h3>Fixed</h3>
<ul>
<li>Support bare spacing values for <code>auto-rows-*</code> and
<code>auto-cols-*</code> utilities (e.g. <code>auto-rows-12</code> and
<code>auto-cols-16</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20229 ">#20229</a>)</li>
<li>Prevent <code>@tailwindcss/cli</code> in <code>--watch</code> mode
from crashing on Windows when <code>@source</code> points to a directory
that doesn't exist (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20242 ">#20242</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing in Deno v2.8.x
when <code>context.parentURL</code> is not a valid URL (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20245 ">#20245</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
rebuilds when the input CSS file changes in an ignored directory (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20246 ">#20246</a>)</li>
<li>Allow <code>@variant</code> rules used in <code>addBase(…)</code> to
use custom variants defined later (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20247 ">#20247</a>)</li>
<li>Prevent <code>@tailwindcss/vite</code> from crashing during HMR when
scanned files or directories are deleted (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20259 ">#20259</a>)</li>
<li>Generate <code>font-size</code> instead of <code>color</code>
declarations for <code>text-[--spacing(…)]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20260 ">#20260</a>)</li>
<li>Prevent <code>@source</code> patterns from scanning unrelated
sibling files and folders (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20263 ">#20263</a>)</li>
<li>Extract class candidates adjacent to Template Toolkit delimiters
like <code>%]…[%</code> in <code>.tt</code>, <code>.tt2</code>, and
<code>.tx</code> files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Extract class candidates from conditional Maud syntax like
<code>p.text-black[condition]</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20269 ">#20269</a>)</li>
<li>Prevent <code>@position-try</code> rules from triggering unknown
at-rule warnings when optimizing CSS (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20277 ">#20277</a>)</li>
<li>Support class suggestions for named opacity modifiers from
<code>--opacity</code> theme values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20287 ">#20287</a>)</li>
<li>Prevent type errors in <code>@tailwindcss/postcss</code> when used
with newer PostCSS patch releases (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20289 ">#20289</a>)</li>
</ul>
<h2>[4.3.1] - 2026-06-12</h2>
<h3>Added</h3>
<ul>
<li>Add <code>--silent</code> option to suppress output in
<code>@tailwindcss/cli</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20100 ">#20100</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Remove deprecation warnings by using
<code>Module#registerHooks</code> instead of
<code>Module#register</code> on Node 26+ (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20028 ">#20028</a>)</li>
<li>Canonicalization: don't crash when plugin utilities throw for
unsupported values (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20052 ">#20052</a>)</li>
<li>Allow <code>@apply</code> to be used with CSS mixins (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19427 ">#19427</a>)</li>
<li>Ensure <code>not-*</code> correctly negates <code>@container</code>
queries, including <code>style(…)</code> queries (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20059 ">#20059</a>)</li>
<li>Ensure <code>drop-shadow-*</code> color utilities work with custom
shadow values containing <code>calc(…)</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20080 ">#20080</a>)</li>
<li>Fix 'Sourcemap is likely to be incorrect' warnings when using
<code>@tailwindcss/vite</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20103 ">#20103</a>)</li>
<li>Ensure <code>@tailwindcss/webpack</code> can be installed in Rspack
projects without requiring <code>webpack</code> as a peer dependency (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20027 ">#20027</a>)</li>
<li>Canonicalization: don't suggest invalid <code>calc(…)</code>
expressions (e.g. <code>px-[calc(1rem+0px)]</code> →
<code>px-[calc(1rem+0)]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20127 ">#20127</a>)</li>
<li>Canonicalization: avoid suggesting large spacing-scale values for
arbitrary lengths (e.g. <code>left-[99999px]</code> →
<code>left-[99999px]</code>, not <code>left-24999.75</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20130 ">#20130</a>)</li>
<li>Ensure <code>@tailwindcss/cli</code> in <code>--watch</code> mode
recovers when a tracked dependency is deleted and restored (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20137 ">#20137</a>)</li>
<li>Ensure standalone <code>@tailwindcss/cli</code> binaries are ignored
when scanning for class candidates (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20139 ">#20139</a>)</li>
<li>Ensure class candidates are extracted from Twig
<code>addClass(…)</code> and <code>removeClass(…)</code> calls (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20198 ">#20198</a>)</li>
<li>Don't crash in the Ruby or Vue preprocessors when scanning files
containing invalid UTF-8 bytes (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19588 ">#19588</a>)</li>
<li>Allow <code>@variant</code> to be used inside <code>addBase</code>
(<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/19480 ">#19480</a>)</li>
<li>Ensure <code>@source</code> globs with symlinks are preserved (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Ensure later <code>@source</code> rules can re-include files
excluded by earlier <code>@source not</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20203 ">#20203</a>)</li>
<li>Upgrade: don't migrate empty class rules to invalid
<code>@utility</code> rules (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20205 ">#20205</a>)</li>
<li>Ensure transitions between <code>inset-shadow-none</code> and other
inset shadows work correctly (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20208 ">#20208</a>)</li>
<li>Ensure explicitly referenced <code>@source</code> directories are
scanned even when ignored by git (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20214 ">#20214</a>)</li>
<li>Ensure <code>@source</code> globs ending in <code>**/*</code>
preserve dynamic path segments to avoid scanning too many files (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20217 ">#20217</a>)</li>
<li>Canonicalization: don't fold <code>calc(…)</code> divisions when the
result would require high precision (e.g.
<code>w-[calc(100%/3.5)]</code> → <code>w-[calc(100%/3.5)]</code>, not
<code>w-[28.571428571428573%]</code>) (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20221 ">#20221</a>)</li>
<li>Serve ESM type declarations to ESM importers of
<code>@tailwindcss/postcss</code> (<a
href="https://redirect.github.com/tailwindlabs/tailwindcss/pull/20228 ">#20228</a>)</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="056a155072https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20281 ">#20281</a>)</li>
<li><a
href="8a14a71010https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20226 ">#20226</a>)</li>
<li><a
href="522288ca08https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20228 ">#20228</a>)</li>
<li><a
href="8dcdb66e8ahttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20095 ">#20095</a>)</li>
<li><a
href="588bd7371fhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20023 ">#20023</a>)</li>
<li><a
href="12eb5ae7b6https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20015 ">#20015</a>)</li>
<li><a
href="4255671c5fhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/20013 ">#20013</a>)</li>
<li><a
href="52f94c74bbhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19999 ">#19999</a>)</li>
<li><a
href="d194d4c3e6https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19878 ">#19878</a>)</li>
<li><a
href="bfb5732b0bhttps://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss/issues/19980 ">#19980</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-postcss ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions ">GitHub Actions</a>, a new
releaser for <code>@tailwindcss/postcss</code> since your current
version.</p>
</details>
<br />
Updates `@types/mdx` from 2.0.13 to 2.0.14
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mdx ">compare
view</a></li>
</ul>
</details>
<br />
Updates `@types/react` from 19.2.14 to 19.2.17
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react ">compare
view</a></li>
</ul>
</details>
<br />
Updates `postcss` from 8.5.15 to 8.5.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases ">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md ">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.16</h2>
<ul>
<li>Fixed <code>Input#origin()</code> position (by <a
href="https://github.com/mizdra "><code>@mizdra</code></a>).</li>
<li>Fixed <code>raws</code> after rehydrating a JSON AST (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
<li>Fixed putting parent-less node in <code>nodes</code> of new node (by
<a
href="https://github.com/MahinAnowar "><code>@MahinAnowar</code></a>).</li>
<li>Fixed computing <code>offset</code> in <code>positionBy()</code> (by
<a
href="https://github.com/greymoth-jp "><code>@greymoth-jp</code></a>).</li>
<li>Fixed <code>rangeBy()</code> on <code>index: 0</code> (by <a
href="https://github.com/sarathfrancis90 "><code>@sarathfrancis90</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92ccc93ff1818bdd604346e451068ehttps://redirect.github.com/postcss/postcss/issues/2036 ">#2036</a>)</li>
<li><a
href="34942ce76cd4feed6453https://redirect.github.com/postcss/postcss/issues/2097 ">#2097</a>)</li>
<li><a
href="da323fc8d388633691943828982213https://redirect.github.com/postcss/postcss/issues/2100 ">#2100</a>)</li>
<li><a
href="d1e80b8303https://redirect.github.com/postcss/postcss/issues/2091 ">#2091</a>)</li>
<li><a
href="b91e4a6390https://github.com/postcss/postcss/compare/8.5.15...8.5.16 ">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npm ...
_Description has been truncated_
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 09:38:37 -04:00
github-actions[bot]
660fa8cfb6
chore: release main ( #1574 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.29.0</summary>
##
[0.29.0](https://github.com/headroomlabs-ai/headroom/compare/v0.28.0...v0.29.0 )
(2026-07-03)
### Features
* **proxy:** add --lossless no-CCR mode with format-native compaction
([#1721 ](https://github.com/headroomlabs-ai/headroom/issues/1721 ))
([c75ebdec75ebdee6d#1680 ](https://github.com/headroomlabs-ai/headroom/issues/1680 ))
([2fe19c32fe19c39e4#1726 ](https://github.com/headroomlabs-ai/headroom/issues/1726 ))
([eea667aeea667a720#1553 ](https://github.com/headroomlabs-ai/headroom/issues/1553 ))
([54cfa3654cfa361d3#1456 ](https://github.com/headroomlabs-ai/headroom/issues/1456 ))
([7d87aa27d87aa2f1c#1564 ](https://github.com/headroomlabs-ai/headroom/issues/1564 ))
([96e1dfe96e1dfe395#1610 ](https://github.com/headroomlabs-ai/headroom/issues/1610 ))
([4bf7f924bf7f92417#1634 ](https://github.com/headroomlabs-ai/headroom/issues/1634 ))
([d5bf98dd5bf98df31#1431 ](https://github.com/headroomlabs-ai/headroom/issues/1431 ))
([ddd4adfddd4adf911#1479 ](https://github.com/headroomlabs-ai/headroom/issues/1479 ))
([de24cd5de24cd5fc0#1474 ](https://github.com/headroomlabs-ai/headroom/issues/1474 ))
([f00ace6f00ace6da5#1653 ](https://github.com/headroomlabs-ai/headroom/issues/1653 ))
([646e705646e705514#1511 ](https://github.com/headroomlabs-ai/headroom/issues/1511 ))
([e035aefe035aefce2#1548 ](https://github.com/headroomlabs-ai/headroom/issues/1548 ))
([e386c09e386c097d6#1527 ](https://github.com/headroomlabs-ai/headroom/issues/1527 ))
([99a854099a8540e65#1576 ](https://github.com/headroomlabs-ai/headroom/issues/1576 ))
([816cb85816cb85fa8#1544 ](https://github.com/headroomlabs-ai/headroom/issues/1544 ))
([#1560 ](https://github.com/headroomlabs-ai/headroom/issues/1560 ))
([6b227b96b227b9c90#1288 ](https://github.com/headroomlabs-ai/headroom/issues/1288 ))
([27a546827a5468349#1428 ](https://github.com/headroomlabs-ai/headroom/issues/1428 ))
([1c0e1521c0e15243e#198 ](https://github.com/headroomlabs-ai/headroom/issues/198 ))
([#1559 ](https://github.com/headroomlabs-ai/headroom/issues/1559 ))
([b84afbfb84afbfb83#1691 ](https://github.com/headroomlabs-ai/headroom/issues/1691 ))
([bec47a1bec47a1898#1459 ](https://github.com/headroomlabs-ai/headroom/issues/1459 ))
([adaeb88adaeb88a4d#1596 ](https://github.com/headroomlabs-ai/headroom/issues/1596 ))
([c19347cc19347c310#1573 ](https://github.com/headroomlabs-ai/headroom/issues/1573 ))
([ad0034fad0034f981#1427 ](https://github.com/headroomlabs-ai/headroom/issues/1427 ))
([a932247a9322477e3#1672 ](https://github.com/headroomlabs-ai/headroom/issues/1672 ))
([8cddf9b8cddf9b58e#1647 ](https://github.com/headroomlabs-ai/headroom/issues/1647 ))
([5fe4e7b5fe4e7b195#1430 ](https://github.com/headroomlabs-ai/headroom/issues/1430 ))
([15ac65015ac650d40#1451 ](https://github.com/headroomlabs-ai/headroom/issues/1451 ))
([d337e3bd337e3b828#1473 ](https://github.com/headroomlabs-ai/headroom/issues/1473 ))
([312129a312129a8e7#1598 ](https://github.com/headroomlabs-ai/headroom/issues/1598 ))
([2a34a822a34a822f2#1663 ](https://github.com/headroomlabs-ai/headroom/issues/1663 ))
([9fbd47b9fbd47ba6b#1632 ](https://github.com/headroomlabs-ai/headroom/issues/1632 ))
([814ffa3814ffa36a4#1429 ](https://github.com/headroomlabs-ai/headroom/issues/1429 ))
([72ade3772ade37112#1162 ](https://github.com/headroomlabs-ai/headroom/issues/1162 ))
([64783d864783d8824#1719 ](https://github.com/headroomlabs-ai/headroom/issues/1719 ))
([0d18ef20d18ef26f4#575 ](https://github.com/headroomlabs-ai/headroom/issues/575 ))
([#1563 ](https://github.com/headroomlabs-ai/headroom/issues/1563 ))
([95abca395abca3abd#1393 ](https://github.com/headroomlabs-ai/headroom/issues/1393 ))
([cff7247cff7247efd#1464 ](https://github.com/headroomlabs-ai/headroom/issues/1464 ))
([6cba4416cba4419d0#1477 ](https://github.com/headroomlabs-ai/headroom/issues/1477 ))
([75427bb75427bbd4a#1604 ](https://github.com/headroomlabs-ai/headroom/issues/1604 ))
([c9d717cc9d717c13chttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-02 22:54:04 -07:00
github-actions[bot]
aea3c35177
chore: release main ( #1441 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.28.0</summary>
##
[0.28.0](https://github.com/headroomlabs-ai/headroom/compare/v0.27.0...v0.28.0 )
(2026-06-29)
### Features
* add --disable-kompress-fallback to restore legacy PASSTHROUGH fallback
([#1185 ](https://github.com/headroomlabs-ai/headroom/issues/1185 ))
([f309244f309244a77#559 ](https://github.com/headroomlabs-ai/headroom/issues/559 ))
([91cd21091cd2102d7#1124 ](https://github.com/headroomlabs-ai/headroom/issues/1124 ))
([85786b385786b33a3#1138 ](https://github.com/headroomlabs-ai/headroom/issues/1138 ))
([e5031b0e5031b0121#1313 ](https://github.com/headroomlabs-ai/headroom/issues/1313 ))
([#1343 ](https://github.com/headroomlabs-ai/headroom/issues/1343 ))
([46587214658721ea0#1125 ](https://github.com/headroomlabs-ai/headroom/issues/1125 ))
([f39858cf39858c233#1105 ](https://github.com/headroomlabs-ai/headroom/issues/1105 ))
([b4571ccb4571cc346#1160 ](https://github.com/headroomlabs-ai/headroom/issues/1160 ))
([14e8dc414e8dc4c84#1115 ](https://github.com/headroomlabs-ai/headroom/issues/1115 ))
([ced75e4ced75e4718#738 ](https://github.com/headroomlabs-ai/headroom/issues/738 ))
([c0745d4c0745d4161#1537 ](https://github.com/headroomlabs-ai/headroom/issues/1537 ))
([546ab55546ab553dc#870 ](https://github.com/headroomlabs-ai/headroom/issues/870 ))
([#1259 ](https://github.com/headroomlabs-ai/headroom/issues/1259 ))
([a2159c0a2159c0b66#1068 ](https://github.com/headroomlabs-ai/headroom/issues/1068 ))
([723b80c723b80c091#1127 ](https://github.com/headroomlabs-ai/headroom/issues/1127 ))
([978ffa0978ffa0a6a#1158 ](https://github.com/headroomlabs-ai/headroom/issues/1158 ))
([#1351 ](https://github.com/headroomlabs-ai/headroom/issues/1351 ))
([b50d9c1b50d9c17ce#1230 ](https://github.com/headroomlabs-ai/headroom/issues/1230 ))
([dca9853dca9853ed9#1037 ](https://github.com/headroomlabs-ai/headroom/issues/1037 ))
([84f987184f9871e30#1312 ](https://github.com/headroomlabs-ai/headroom/issues/1312 ))
([#1336 ](https://github.com/headroomlabs-ai/headroom/issues/1336 ))
([5986c225986c2260f#1486 ](https://github.com/headroomlabs-ai/headroom/issues/1486 ))
([4db3bc94db3bc91d9#1284 ](https://github.com/headroomlabs-ai/headroom/issues/1284 ))
([530318b530318b425#1532 ](https://github.com/headroomlabs-ai/headroom/issues/1532 ))
([c2fc4d3c2fc4d3753#1022 ](https://github.com/headroomlabs-ai/headroom/issues/1022 ))
([#1197 ](https://github.com/headroomlabs-ai/headroom/issues/1197 ))
([0c9b42a0c9b42a919#1273 ](https://github.com/headroomlabs-ai/headroom/issues/1273 ))
([2cae13d2cae13dd79#1539 ](https://github.com/headroomlabs-ai/headroom/issues/1539 ))
([d2565a6d2565a6983#1399 ](https://github.com/headroomlabs-ai/headroom/issues/1399 ))
([2e29c722e29c7223f#1012 ](https://github.com/headroomlabs-ai/headroom/issues/1012 ))
([51943885194388b66#1126 ](https://github.com/headroomlabs-ai/headroom/issues/1126 ))
([#1164 ](https://github.com/headroomlabs-ai/headroom/issues/1164 ))
([a0cb798a0cb7982e3#1206 ](https://github.com/headroomlabs-ai/headroom/issues/1206 ))
([38f140438f1404432#1491 ](https://github.com/headroomlabs-ai/headroom/issues/1491 ))
([bd76235bd76235f5c#1373 ](https://github.com/headroomlabs-ai/headroom/issues/1373 ))
([e06b616e06b61671f#1375 ](https://github.com/headroomlabs-ai/headroom/issues/1375 ))
([8aab8f28aab8f22cb#1332 ](https://github.com/headroomlabs-ai/headroom/issues/1332 ))
([823840282384022bd#1302 ](https://github.com/headroomlabs-ai/headroom/issues/1302 ))
([cbd361dcbd361de2a#1231 ](https://github.com/headroomlabs-ai/headroom/issues/1231 ))
([#1299 ](https://github.com/headroomlabs-ai/headroom/issues/1299 ))
([5e0bb695e0bb69725#961 ](https://github.com/headroomlabs-ai/headroom/issues/961 ))
([#1349 ](https://github.com/headroomlabs-ai/headroom/issues/1349 ))
([e6bbc40e6bbc40b11#1269 ](https://github.com/headroomlabs-ai/headroom/issues/1269 ))
([ad7993bad7993bf15#1324 ](https://github.com/headroomlabs-ai/headroom/issues/1324 ))
([35939c335939c3536#1509 ](https://github.com/headroomlabs-ai/headroom/issues/1509 ))
([5771a805771a8020e#1118 ](https://github.com/headroomlabs-ai/headroom/issues/1118 ))
([5912d655912d65674#1382 ](https://github.com/headroomlabs-ai/headroom/issues/1382 ))
([615848e615848eba4#1276 ](https://github.com/headroomlabs-ai/headroom/issues/1276 ))
([17ecad917ecad9d89#1301 ](https://github.com/headroomlabs-ai/headroom/issues/1301 ))
([8da0b4e8da0b4e565#1290 ](https://github.com/headroomlabs-ai/headroom/issues/1290 ))
([da1a397da1a3973ed#833 ](https://github.com/headroomlabs-ai/headroom/issues/833 ))
([#1348 ](https://github.com/headroomlabs-ai/headroom/issues/1348 ))
([feedeadfeedead077#1498 ](https://github.com/headroomlabs-ai/headroom/issues/1498 ))
([1baa04e1baa04ef65#1400 ](https://github.com/headroomlabs-ai/headroom/issues/1400 ))
([42612c842612c86df#1287 ](https://github.com/headroomlabs-ai/headroom/issues/1287 ))
([3590046359004646b#1386 ](https://github.com/headroomlabs-ai/headroom/issues/1386 ))
([22def9322def93177#1106 ](https://github.com/headroomlabs-ai/headroom/issues/1106 ))
([f216e43f216e43055#1381 ](https://github.com/headroomlabs-ai/headroom/issues/1381 ))
([6c837906c83790680#1499 ](https://github.com/headroomlabs-ai/headroom/issues/1499 ))
([80fa08680fa086660#571 ](https://github.com/headroomlabs-ai/headroom/issues/571 ))
([b618d2db618d2d11a#1433 ](https://github.com/headroomlabs-ai/headroom/issues/1433 ))
([936274793627471b7#1374 ](https://github.com/headroomlabs-ai/headroom/issues/1374 ))
([51d4bcf51d4bcfc11#1331 ](https://github.com/headroomlabs-ai/headroom/issues/1331 ))
([3be25263be2526b76#1321 ](https://github.com/headroomlabs-ai/headroom/issues/1321 ))
([bb3e040bb3e040a46#1500 ](https://github.com/headroomlabs-ai/headroom/issues/1500 ))
([d5ac07fd5ac07fc45#1134 ](https://github.com/headroomlabs-ai/headroom/issues/1134 ))
([561ba17561ba17ec2#1100 ](https://github.com/headroomlabs-ai/headroom/issues/1100 ))
([#1258 ](https://github.com/headroomlabs-ai/headroom/issues/1258 ))
([3d59df73d59df7be8#1338 ](https://github.com/headroomlabs-ai/headroom/issues/1338 ))
([acafb2dacafb2d0f6#996 ](https://github.com/headroomlabs-ai/headroom/issues/996 ))
([b4682d6b4682d6f91#296 ](https://github.com/headroomlabs-ai/headroom/issues/296 ))
([#1352 ](https://github.com/headroomlabs-ai/headroom/issues/1352 ))
([90734b690734b691a#1501 ](https://github.com/headroomlabs-ai/headroom/issues/1501 ))
([27e010e27e010e38f#1103 ](https://github.com/headroomlabs-ai/headroom/issues/1103 ))
([cdfeeaccdfeeacc63#1377 ](https://github.com/headroomlabs-ai/headroom/issues/1377 ))
([b09f027b09f027062#1376 ](https://github.com/headroomlabs-ai/headroom/issues/1376 ))
([55c700c55c700c686#1132 ](https://github.com/headroomlabs-ai/headroom/issues/1132 ))
([#1305 ](https://github.com/headroomlabs-ai/headroom/issues/1305 ))
([70cc96a70cc96a386#1329 ](https://github.com/headroomlabs-ai/headroom/issues/1329 ))
([90bee8990bee89243#1495 ](https://github.com/headroomlabs-ai/headroom/issues/1495 ))
([547b15d547b15dab2#1323 ](https://github.com/headroomlabs-ai/headroom/issues/1323 ))
([43494ff43494ff526#1543 ](https://github.com/headroomlabs-ai/headroom/issues/1543 ))
([5d3803a5d3803a21c#1488 ](https://github.com/headroomlabs-ai/headroom/issues/1488 ))
([91571739157173018#1465 ](https://github.com/headroomlabs-ai/headroom/issues/1465 ))
([16c638b16c638bc21#1540 ](https://github.com/headroomlabs-ai/headroom/issues/1540 ))
([a7d3360a7d3360a05#549 ](https://github.com/headroomlabs-ai/headroom/issues/549 ))
([24cf25624cf256e50#1489 ](https://github.com/headroomlabs-ai/headroom/issues/1489 ))
([8e0dadf8e0dadfe02#1123 ](https://github.com/headroomlabs-ai/headroom/issues/1123 ))
([#1260 ](https://github.com/headroomlabs-ai/headroom/issues/1260 ))
([a00fb67a00fb6761e#1314 ](https://github.com/headroomlabs-ai/headroom/issues/1314 ))
([97588179758817979#1130 ](https://github.com/headroomlabs-ai/headroom/issues/1130 ))
([27d6f8e27d6f8e2a7#1255 ](https://github.com/headroomlabs-ai/headroom/issues/1255 ))
([8d6c1758d6c175d60#1263 ](https://github.com/headroomlabs-ai/headroom/issues/1263 ))
([f03021ff03021f1b6#1296 ](https://github.com/headroomlabs-ai/headroom/issues/1296 ))
([c30ec4cc30ec4cda8#1117 ](https://github.com/headroomlabs-ai/headroom/issues/1117 ))
([fda4670fda4670ef8#1308 ](https://github.com/headroomlabs-ai/headroom/issues/1308 ))
([#1341 ](https://github.com/headroomlabs-ai/headroom/issues/1341 ))
([52068dd52068dd650#1093 ](https://github.com/headroomlabs-ai/headroom/issues/1093 ))
([a35fe86a35fe86e87#1307 ](https://github.com/headroomlabs-ai/headroom/issues/1307 ))
([#1387 ](https://github.com/headroomlabs-ai/headroom/issues/1387 ))
([c6c921ac6c921a7c1#1481 ](https://github.com/headroomlabs-ai/headroom/issues/1481 ))
([c632023c632023cc1#1311 ](https://github.com/headroomlabs-ai/headroom/issues/1311 ))
([d633e81d633e8172c#1251 ](https://github.com/headroomlabs-ai/headroom/issues/1251 ))
([b4fde0cb4fde0c3a4#1191 ](https://github.com/headroomlabs-ai/headroom/issues/1191 ))
([959ab0d959ab0de47#1294 ](https://github.com/headroomlabs-ai/headroom/issues/1294 ))
([b829cebb829ceba84#1313 ](https://github.com/headroomlabs-ai/headroom/issues/1313 ))
([b0146c4b0146c4ccd#1171 ](https://github.com/headroomlabs-ai/headroom/issues/1171 ))
([#1298 ](https://github.com/headroomlabs-ai/headroom/issues/1298 ))
([6c68ff46c68ff4e9fhttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-29 12:53:17 -07:00
Tejas Chopra
a639540959
chore: remove committed node_modules + stray/internal markdown (repo hygiene) ( #1528 )
...
## Description
Repo hygiene for a public OSS project: removes committed `node_modules`,
stray/internal/draft markdown, and commercial-surface references —
keeping every real doc (the published docs site, the wiki guides, and
all component READMEs) intact. Every file was content-audited before
removal, and load-bearing files were verified against the code/CI and
kept.
Net: **1,695 files changed, +23 / −266,409** (the deletions are
dominated by a committed `node_modules` tree).
Closes # (no tracking issue)
## Type of Change
- [ ] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update
- [x] Code refactoring (no functional changes)
## Changes Made
**Removed (verified to have no code/CI dependencies):**
- `examples/vercel-ai-sdk-pr/` — 1,649 committed `node_modules` files
(zero example source); `node_modules/` added to `.gitignore`.
- `docs/spec/` (23 draft "Living Specification" files — orphaned,
`1.0.0-draft`, drifted from the code), `docs/superpowers/` (2 agent
plans), `docs/proposals/` (2 internal/commercial memos).
- 6 orphan `docs/*.md` (auth-modes, bedrock,
claude-code-vertex-headroom, cortex-code, output-token-reduction-guide,
rtk-loop-weighting).
- `PR.md` (committed PR draft), `ENTERPRISE.md`, `.github/FUNDING.yml`.
**Content scrubs:**
- Removed unreleased "Headroom Cloud" / `api.headroom.ai` / `hr_`
references from `configuration.mdx`, `wiki/configuration.md`,
`wiki/typescript-sdk.md`, `sdk/typescript/README.md` (reworded to
neutral, accurate phrasing).
- Dropped a stale "awaiting maintainer before merge" line from
`plugins/headroom-oauth2/SPEC.md`; tidied `.gitignore` comments (kept
the protective `headroom-managed/` ignore rule).
- Fixed the now-dangling links into removed files (README
nav/`output-token-reduction` link, `scripts/README`, `wiki/vertex`).
**Explicitly KEPT (load-bearing — would orphan in-code citations if
removed):**
- `.changelog.md` — consumed by `.github/workflows/release.yml` (read as
the release-notes file).
- `REALIGNMENT/`, `docs/observability.md`, `docs/rtk-architecture.md`,
`wiki/plans/`, `TESTING-copilot-subscription.md` — referenced by the
Rust core / Python / tests as design docs.
## Testing
- [ ] Unit tests pass (`pytest`)
- [x] Linting passes (`ruff check`)
- [ ] Type checking passes (`mypy`)
- [x] New tests added for new functionality
- [x] Manual testing performed
### Test Output
```text
# Docs/markdown + .gitignore only — no Python/Rust source changed, so the
# behavioral test suite is unaffected. Verified the cleanup did not orphan
# references or break the published docs site:
$ git ls-files 'docs/content/docs/*.mdx' | wc -l # published site intact
42
$ # meta.json nav unchanged; no published page removed.
$ grep -rnI "Headroom Cloud|api.headroom.ai|'hr_" $(git ls-files '*.md' '*.mdx')
>>> none
$ # dangling refs to removed files (excl pre-existing P0/P2 spec stubs that
$ # never existed in git): none remaining.
```
## Real Behavior Proof
- Environment: macOS, local git clone of the repo (markdown/.gitignore
changes only — no runtime).
- Exact command / steps: 4 read-only content-audit agents classified
every `.md`/`.mdx` file; each removal candidate was cross-checked
against the codebase (`grep` for citations in `.rs`/`.py`/tests,
workflows, and configs); only files with no dependents were removed; the
tree was re-grepped after removal to confirm no new dangling references;
verified the published docs site page count (`git ls-files
'docs/content/docs/*.mdx' | wc -l` = 42, unchanged).
- Observed result: the 42-page published docs site and all wiki guides
are untouched; no source or workflow references a removed file;
`.changelog.md` (consumed by release.yml) and the code-cited design docs
were detected as dependencies and kept; the committed `node_modules`
tree is removed and `node_modules/` is gitignored so it can't be
re-committed; zero "Headroom Cloud"/`headroom.dev` references remain.
- Not tested: N/A — no executable code changed (only markdown, `.mdx`,
and `.gitignore`), so the behavioral test suite is unaffected.
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [x] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md if applicable
## Additional Notes
- This branch deletes `.github/FUNDING.yml` while PR #1526 edits it —
the two will be sequenced at merge (delete wins).
- A follow-up option (not in this PR): also remove the internal design
docs that are currently cited by the code (`REALIGNMENT/`,
`docs/observability.md`, `docs/rtk-architecture.md`, `wiki/plans/`) —
that requires scrubbing ~15–20 in-code citations so nothing dangles, so
it's deliberately deferred.
- Untracked local working files (`benchmarks/hf_pilot/`,
`tools/copilot-test/`) are intentionally left out of git (not
committed).
2026-06-27 23:32:54 -07:00
Tejas Chopra
5771a8020e
fix(deps): remediate dependency CVEs and publish SBOM ( #1509 )
...
## Description
Supply-chain hardening: takes the **shipped** dependency surface from
**26 known CVEs to 0**. `pip install headroom-ai[all]` now resolves with
no known vulnerabilities (verified with Anchore syft + grype). Also
publishes a checked-in SBOM package (`sbom/`) so any user — especially
pilots running their own security review — can verify what's inside and
that we track it.
This addresses the Dependabot alerts on `main` (9 high / 4 moderate / 7
low at time of writing).
Closes #
## Type of Change
- [x] Bug fix (non-breaking change that fixes an issue)
- [ ] New feature (non-breaking change that adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update
- [ ] Performance improvement
- [ ] Code refactoring (no functional changes)
## Changes Made
**Rust**
- `pyo3` 0.24 → 0.29 (GHSA-36hh-v3qg-5jq4 High, GHSA-chgr-c6px-7xpp
Med). Migrated `Python::allow_threads` → `Python::detach` (10 sites) and
added `from_py_object` to the `Clone`-deriving `#[pyclass]` types (both
required by the 0.25+ API).
- `pyo3-log` 0.12 → 0.13; `lru` 0.12 → 0.18 (GHSA-rhfx-m35p-ff5j).
**Python**
- `torch` → 2.12.1, `mem0ai` → 2.x.
- Floor-pinned transitive CVE deps via `[tool.uv]
constraint-dependencies`: `pygments>=2.20.0`,
`pydantic-settings>=2.14.2`, `gitpython>=3.1.50`, `langsmith>=0.9.0`.
- **Removed `benchmark` from the `[all]` aggregate** so the default
install is CVE-free. `lm-eval` is invoked as an external subprocess
(`python -m lm_eval`) and never imported, so it is not a true runtime
dep — it remains available via the opt-in `[benchmark]` extra. See
[Accepted Risks](#additional-notes).
**npm (build/test tooling — never shipped in the
wheel/container/published SDK)**
- `esbuild` override `>=0.28.1` in `sdk/typescript` + `plugins/openclaw`
(GHSA-g7r4-m6w7-qqqr).
- `docs/`: `@anthropic-ai/sdk` → `^0.106.0` (GHSA-p7fg-763f-g4gf),
`postcss` override to force Next.js's bundled copy ≥8.5.10
(GHSA-qx2v-qp2m-jg93); regenerated a stale `bun.lock` that carried a
**Critical** vitest/vite.
**CI**
- Pinned `pypa/gh-action-pypi-publish` `@release/v1` → `@v1.13.0`
(GHSA-vxmw-7h4f-hqxh) in `release.yml` + `publish.yml`.
**SBOM**
- New `sbom/` directory: CycloneDX 1.7 + SPDX 2.3 SBOMs, grype scan
evidence, 330-package license inventory, and a regeneration guide.
## Testing
- [ ] Unit tests pass (`pytest`) — N/A, no Python source changed
(deps/config only)
- [x] Linting passes — `cargo fmt --check` + `cargo clippy` clean on the
changed crate; 0 `.py` files changed so `ruff`/`mypy` scope is
unaffected
- [x] Type checking passes — `cargo check --workspace` (0 errors)
- [ ] New tests added — N/A (dependency bumps; covered by existing
suites)
- [x] Manual testing performed — see Real Behavior Proof
### Test Output
```text
# headroom-ai[all] product surface — the number that matters
$ grype sbom:sbom/headroom-sbom-all-extra.cdx.json
No vulnerabilities found
# full repo scan (universal lock incl. opt-in [benchmark] + dev)
$ grype sbom:sbom/headroom-sbom.cdx.json
NAME INSTALLED TYPE VULNERABILITY SEVERITY
sqlitedict 2.1.0 python GHSA-g4r7-86gm-pgqc High # [benchmark]-only, unpatchable, accepted
nltk 3.9.4 python GHSA-p4gq-832x-fm9v High # [benchmark]-only, unpatchable, accepted
# pyo3 0.29 migration — extension builds + imports + runs
$ cargo check --workspace
Finished `dev` profile [unoptimized + debuginfo] target(s)
$ maturin develop && python -c "from headroom._core import DiffCompressor, SmartCrusher; ..."
extension OK — detach + from_py_object paths exercised
# lru 0.18 — eviction path
$ cargo test -p headroom-proxy --lib drift
14 passed, 213 filtered out
# per-ecosystem npm audits
$ (cd sdk/typescript && npm audit) -> found 0 vulnerabilities
$ (cd plugins/openclaw && npm audit) -> found 0 vulnerabilities
$ (cd docs && npm audit && bun audit) -> found 0 vulnerabilities / No vulnerabilities found
```
## Real Behavior Proof
- Environment: macOS (darwin 25.4.0, arm64), Python 3.12 `.venv`, Rust
1.95 toolchain, syft 1.46.0, grype 0.115.0, bun 1.3.14, maturin 1.13.3.
- Exact command / steps: (1) `uv export --extra all --no-dev
--no-emit-project | syft → grype` for the product surface; (2) `cargo
check --workspace` + `maturin develop` + extension import/compress smoke
test; (3) `cargo test -p headroom-proxy --lib drift`; (4) `cargo fmt
--check` + `cargo clippy -p headroom-py`; (5) `npm audit` in
sdk/openclaw/docs + `bun audit` in docs.
- Observed result: `headroom-ai[all]` resolution scans clean — "No
vulnerabilities found" (179 pkgs); full/prod SBOM shows only the 2
documented accepted CVEs; pyo3 0.29 extension imports and runs (detach +
from_py_object paths exercised); drift tests 14/14 pass; cargo fmt +
clippy clean; all npm/bun audits report 0.
- Not tested: full `pytest` suite (no Python source changed);
release-profile wheel build (used dev-profile `maturin develop` for the
import proof — the extension is semantically identical).
## Review Readiness
- [x] I have performed a self-review
- [x] This PR is ready for human review
## Checklist
- [x] My code follows the project's style guidelines
- [x] I have performed a self-review of my code
- [x] I have commented my code, particularly in hard-to-understand areas
- [x] I have made corresponding changes to the documentation
(`sbom/README.md`)
- [x] My changes generate no new warnings
- [ ] I have added tests that prove my fix is effective — N/A
(dependency bumps; existing suites + scans cover it)
- [x] New and existing unit tests pass locally with my changes
- [ ] I have updated the CHANGELOG.md — N/A (Release Please
auto-generates from the conventional commit)
## Additional Notes
**Accepted risks (the 2 residual CVEs).** Both originate solely from the
EleutherAI `lm-evaluation-harness` under the **opt-in `[benchmark]`
extra**, which Headroom invokes as a subprocess (never imports):
- `sqlitedict` CVE-2024-35515 (High) — pickle deserialization; package
abandoned (last release 2021), **no upstream fix exists**.
- `nltk` CVE-2026-54293 (High) — path traversal in `nltk.data.load()`;
affects ≤3.9.4 (current latest), **no patched release**.
Neither is in `[all]`, the published wheel, or the container. They are
documented in `sbom/README.md` and will be picked up automatically once
upstream ships fixes.
**Release/CHANGELOG:** N/A items above are because this is a
dependency/security PR with no Python source changes; CHANGELOG is
Release-Please-managed via the conventional commit message.
2026-06-27 15:28:12 -07:00
github-actions[bot]
95b2333ee5
chore: release main ( #1274 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.27.0</summary>
##
[0.27.0](https://github.com/chopratejas/headroom/compare/v0.26.0...v0.27.0 )
(2026-06-22)
### Features
* **cli:** add headroom doctor setup diagnostics
([#926 ](https://github.com/chopratejas/headroom/issues/926 ))
([e45cf4ee45cf4e061#1088 ](https://github.com/chopratejas/headroom/issues/1088 ))
([26be2c326be2c39cb#818 ](https://github.com/chopratejas/headroom/issues/818 ))
([b7be381b7be3814f1#983 ](https://github.com/chopratejas/headroom/issues/983 ))
([0d89c670d89c674cd#965 ](https://github.com/chopratejas/headroom/issues/965 ))
([a99dc61a99dc61424#856 ](https://github.com/chopratejas/headroom/issues/856 ) P3b)
([#1028 ](https://github.com/chopratejas/headroom/issues/1028 ))
([fe4f9eefe4f9ee478#1190 ](https://github.com/chopratejas/headroom/issues/1190 ))
([d9d0bf4d9d0bf4b79#1030 ](https://github.com/chopratejas/headroom/issues/1030 ))
([e8fc8a0e8fc8a0d18#1090 ](https://github.com/chopratejas/headroom/issues/1090 ))
([6904d476904d47a01#946 ](https://github.com/chopratejas/headroom/issues/946 ))
([#991 ](https://github.com/chopratejas/headroom/issues/991 ))
([addebdbaddebdb29c#1128 ](https://github.com/chopratejas/headroom/issues/1128 ))
([d789a7cd789a7c528#1113 ](https://github.com/chopratejas/headroom/issues/1113 ))
([0e059150e0591506c#1095 ](https://github.com/chopratejas/headroom/issues/1095 ))
([#1141 ](https://github.com/chopratejas/headroom/issues/1141 ))
([9f7f3ad9f7f3adfea#1213 ](https://github.com/chopratejas/headroom/issues/1213 ))
([#1236 ](https://github.com/chopratejas/headroom/issues/1236 ))
([08fb84508fb845fe3#1108 ](https://github.com/chopratejas/headroom/issues/1108 ))
([8894ee08894ee0c18#1064 ](https://github.com/chopratejas/headroom/issues/1064 ))
([5eae32b5eae32ba47#956 ](https://github.com/chopratejas/headroom/issues/956 ))
([#993 ](https://github.com/chopratejas/headroom/issues/993 ))
([b2f04e4b2f04e4ef7#1240 ](https://github.com/chopratejas/headroom/issues/1240 ))
([#1254 ](https://github.com/chopratejas/headroom/issues/1254 ))
([bc12acebc12acef59#746 ](https://github.com/chopratejas/headroom/issues/746 ))
([#995 ](https://github.com/chopratejas/headroom/issues/995 ))
([500ec2b500ec2b7fa#1161 ](https://github.com/chopratejas/headroom/issues/1161 ))
([3fc2a783fc2a78a5e#1092 ](https://github.com/chopratejas/headroom/issues/1092 ))
([#1262 ](https://github.com/chopratejas/headroom/issues/1262 ))
([4f9feda4f9fedaa7a#1218 ](https://github.com/chopratejas/headroom/issues/1218 ))
([2e6c4422e6c442dc8#1038 ](https://github.com/chopratejas/headroom/issues/1038 ))
([#1137 ](https://github.com/chopratejas/headroom/issues/1137 ))
([bcabc5cbcabc5cb11#1265 ](https://github.com/chopratejas/headroom/issues/1265 ))
([b5f63d8b5f63d8fa9#940 ](https://github.com/chopratejas/headroom/issues/940 ))
([#1053 ](https://github.com/chopratejas/headroom/issues/1053 ))
([f03e77bf03e77bec0#1222 ](https://github.com/chopratejas/headroom/issues/1222 ))
([1f18d591f18d59809#1215 ](https://github.com/chopratejas/headroom/issues/1215 ))
([381d771381d771e46#1226 ](https://github.com/chopratejas/headroom/issues/1226 ))
([bd55a42bd55a426bc#1036 ](https://github.com/chopratejas/headroom/issues/1036 ))
([b0cd032b0cd0329c7#998 ](https://github.com/chopratejas/headroom/issues/998 ))
([#1031 ](https://github.com/chopratejas/headroom/issues/1031 ))
([c987283c98728363a#1223 ](https://github.com/chopratejas/headroom/issues/1223 ))
([b998697b99869778b#956 ](https://github.com/chopratejas/headroom/issues/956 ))
([#994 ](https://github.com/chopratejas/headroom/issues/994 ))
([7e86baf7e86bafb90#992 ](https://github.com/chopratejas/headroom/issues/992 ))
([5b846915b84691770#1240 ](https://github.com/chopratejas/headroom/issues/1240 ))
([7c26a547c26a54d53#1071 ](https://github.com/chopratejas/headroom/issues/1071 ))
([9f712cc9f712ccbd7#951 ](https://github.com/chopratejas/headroom/issues/951 ))
([#1078 ](https://github.com/chopratejas/headroom/issues/1078 ))
([a554c3aa554c3a0e6https://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-21 22:28:55 -07:00
dependabot[bot]
75f81cd19f
ci: bump the npm_and_yarn group across 3 directories with 3 updates ( #1056 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps the npm_and_yarn group with 1 update in the /docs directory:
[js-yaml](https://github.com/nodeca/js-yaml ).
Bumps the npm_and_yarn group with 1 update in the /plugins/openclaw
directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ).
Bumps the npm_and_yarn group with 2 updates in the /sdk/typescript
directory:
[vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) and
[form-data](https://github.com/form-data/form-data ).
Updates `js-yaml` from 4.1.1 to 4.2.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md ">js-yaml's
changelog</a>.</em></p>
<blockquote>
<h2>[4.2.0] - 2026-06-01</h2>
<h3>Added</h3>
<ul>
<li>Added <code>docs/safety.md</code> with notes about processing
untrusted YAML.</li>
<li>Added <code>maxDepth</code> (100) loader option. Not a problem, but
gives a better
exception instead of RangeError on stack overflow.</li>
<li>Added <code>maxMergeSeqLength</code> (20) loader option. Not a
problem after <code>merge</code> fix,
but an additional restriction for safety.</li>
<li>Added sourcemaps to <code>dist/</code> builds.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Stop resolving numbers with underscores as numeric scalars, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/627 ">#627</a>.</li>
<li>Switched dev toolchains to Vite / neostandard.</li>
<li>Updated demo.</li>
<li>Reorganized tests.</li>
<li><code>dist/</code> files are no longer kept in the repository.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix parsing of properties on the first implicit block mapping key,
<a
href="https://redirect.github.com/nodeca/js-yaml/issues/62 ">#62</a>.</li>
<li>Fix trailing whitespace handling when folding flow scalar lines, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/307 ">#307</a>.</li>
<li>Reject top-level block scalars without content indentation, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/280 ">#280</a>.</li>
<li>Ensure numbers survive round-trip, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/737 ">#737</a>.</li>
<li>Fix test coverage for issue <a
href="https://redirect.github.com/nodeca/js-yaml/issues/221 ">#221</a>.</li>
<li>Fix flow scalar trailing whitespace folding, <a
href="https://redirect.github.com/nodeca/js-yaml/issues/307 ">#307</a>.</li>
<li>Fix digits in YAML named tag handles.</li>
</ul>
<h3>Security</h3>
<ul>
<li>Fix potential DoS via quadratic complexity in merge - deduplicate
repeated
elements (makes sense for malformed files > 10K).</li>
</ul>
<h2>[3.14.2] - 2025-11-15</h2>
<h3>Security</h3>
<ul>
<li>Backported v4.1.1 fix to v3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/nodeca/js-yaml/commits ">compare view</a></li>
</ul>
</details>
<br />
Updates `vite` from 8.0.10 to 8.0.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.16</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.15</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16 ">8.0.16</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> reject UNC paths for launch-editor-middleware
(<a
href="https://redirect.github.com/vitejs/vite/issues/22571 ">#22571</a>)
(<a
href="50b951225bhttps://redirect.github.com/vitejs/vite/issues/22572 ">#22572</a>)
(<a
href="dc245c71e5https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15 ">8.0.15</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>send 408 on request timeout (<a
href="https://redirect.github.com/vitejs/vite/issues/22476 ">#22476</a>)
(<a
href="c85c9eeb9ahttps://redirect.github.com/vitejs/vite/issues/22538 ">#22538</a>)
(<a
href="646dbedd28https://redirect.github.com/vitejs/vite/issues/22488 ">#22488</a>)
(<a
href="85a0eff1c8https://redirect.github.com/vitejs/vite/issues/22511 ">#22511</a>)
(<a
href="2686d7d0b7https://redirect.github.com/vitejs/vite/issues/21762 ">#21762</a>)
(<a
href="47c4213f13https://redirect.github.com/vitejs/vite/issues/22497 ">#22497</a>)
(<a
href="5c8e98f8b5https://redirect.github.com/vitejs/vite/issues/22528 ">#22528</a>)
(<a
href="e3cfb9deechttps://redirect.github.com/vitejs/vite/issues/22509 ">#22509</a>)
(<a
href="40985f1c09https://redirect.github.com/vitejs/vite/issues/22566 ">#22566</a>)
(<a
href="3052a67d93https://redirect.github.com/vitejs/vite/issues/22562 ">#22562</a>)
(<a
href="6978a9ceb9https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14 ">8.0.14</a>
(2026-05-21)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>update rolldown to 1.0.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/22484 ">#22484</a>)
(<a
href="96efc88570https://redirect.github.com/vitejs/vite/issues/22471 ">#22471</a>)
(<a
href="98b8163213https://redirect.github.com/vitejs/vite/issues/22450 ">#22450</a>)
(<a
href="e8e9a34dcfhttps://redirect.github.com/vitejs/vite/issues/22480 ">#22480</a>)
(<a
href="5d94d1bffdhttps://redirect.github.com/vitejs/vite/issues/22342 ">#22342</a>)
(<a
href="b3132daceahttps://redirect.github.com/vitejs/vite/issues/22470 ">#22470</a>)
(<a
href="7cb728eb622c69495f25https://redirect.github.com/vitejs/vite/issues/22310 ">#22310</a>)
(<a
href="0ae2844ab6f94df87ff0dc245c71e5https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572 ">#22572</a>)</li>
<li><a
href="50b951225bhttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571 ">#22571</a>)</li>
<li><a
href="8d1b0195fd2686d7d0b7https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511 ">#22511</a>)</li>
<li><a
href="3052a67d93https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566 ">#22566</a>)</li>
<li><a
href="e3cfb9deechttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528 ">#22528</a>)</li>
<li><a
href="6978a9ceb9https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562 ">#22562</a>)</li>
<li><a
href="646dbedd28https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538 ">#22538</a>)</li>
<li><a
href="85a0eff1c8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488 ">#22488</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `vite` from 8.0.10 to 8.0.16
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases ">vite's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.16</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.15</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.14</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.13</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.12</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
<h2>v8.0.11</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md ">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md ">vite's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16 ">8.0.16</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> reject UNC paths for launch-editor-middleware
(<a
href="https://redirect.github.com/vitejs/vite/issues/22571 ">#22571</a>)
(<a
href="50b951225bhttps://redirect.github.com/vitejs/vite/issues/22572 ">#22572</a>)
(<a
href="dc245c71e5https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15 ">8.0.15</a>
(2026-06-01)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>send 408 on request timeout (<a
href="https://redirect.github.com/vitejs/vite/issues/22476 ">#22476</a>)
(<a
href="c85c9eeb9ahttps://redirect.github.com/vitejs/vite/issues/22538 ">#22538</a>)
(<a
href="646dbedd28https://redirect.github.com/vitejs/vite/issues/22488 ">#22488</a>)
(<a
href="85a0eff1c8https://redirect.github.com/vitejs/vite/issues/22511 ">#22511</a>)
(<a
href="2686d7d0b7https://redirect.github.com/vitejs/vite/issues/21762 ">#21762</a>)
(<a
href="47c4213f13https://redirect.github.com/vitejs/vite/issues/22497 ">#22497</a>)
(<a
href="5c8e98f8b5https://redirect.github.com/vitejs/vite/issues/22528 ">#22528</a>)
(<a
href="e3cfb9deechttps://redirect.github.com/vitejs/vite/issues/22509 ">#22509</a>)
(<a
href="40985f1c09https://redirect.github.com/vitejs/vite/issues/22566 ">#22566</a>)
(<a
href="3052a67d93https://redirect.github.com/vitejs/vite/issues/22562 ">#22562</a>)
(<a
href="6978a9ceb9https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14 ">8.0.14</a>
(2026-05-21)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li>update rolldown to 1.0.2 (<a
href="https://redirect.github.com/vitejs/vite/issues/22484 ">#22484</a>)
(<a
href="96efc88570https://redirect.github.com/vitejs/vite/issues/22471 ">#22471</a>)
(<a
href="98b8163213https://redirect.github.com/vitejs/vite/issues/22450 ">#22450</a>)
(<a
href="e8e9a34dcfhttps://redirect.github.com/vitejs/vite/issues/22480 ">#22480</a>)
(<a
href="5d94d1bffdhttps://redirect.github.com/vitejs/vite/issues/22342 ">#22342</a>)
(<a
href="b3132daceahttps://redirect.github.com/vitejs/vite/issues/22470 ">#22470</a>)
(<a
href="7cb728eb622c69495f25https://redirect.github.com/vitejs/vite/issues/22310 ">#22310</a>)
(<a
href="0ae2844ab6f94df87ff0dc245c71e5https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572 ">#22572</a>)</li>
<li><a
href="50b951225bhttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571 ">#22571</a>)</li>
<li><a
href="8d1b0195fd2686d7d0b7https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511 ">#22511</a>)</li>
<li><a
href="3052a67d93https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566 ">#22566</a>)</li>
<li><a
href="e3cfb9deechttps://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528 ">#22528</a>)</li>
<li><a
href="6978a9ceb9https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562 ">#22562</a>)</li>
<li><a
href="646dbedd28https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538 ">#22538</a>)</li>
<li><a
href="85a0eff1c8https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488 ">#22488</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite ">compare
view</a></li>
</ul>
</details>
<br />
Updates `form-data` from 4.0.5 to 4.0.6
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/form-data/form-data/blob/master/CHANGELOG.md ">form-data's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 ">v4.0.6</a>
- 2026-06-12</h2>
<h3>Commits</h3>
<ul>
<li>[Fix] escape CR, LF, and <code>"</code> in field names and
filenames <a
href="8dff42c6daf31d21ef1092ae0eb5da67b0f65c2e64190db54892ae0eb5daf31d21ef108dff42c6da67b0f65c2ehttps://github.com/form-data/form-data/compare/v4.0.5...v4.0.6 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/chopratejas/headroom/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 23:07:34 -07:00
github-actions[bot]
b81a4a7a16
chore: release main ( #931 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.26.0</summary>
##
[0.26.0](https://github.com/chopratejas/headroom/compare/v0.25.0...v0.26.0 )
(2026-06-16)
### Features
* add Copilot BYOK provider wrapper utilities and CLI support
([#1041 ](https://github.com/chopratejas/headroom/issues/1041 ))
([e67ee2ae67ee2af65#814 ](https://github.com/chopratejas/headroom/issues/814 ))
([6d3f39f6d3f39f213#935 ](https://github.com/chopratejas/headroom/issues/935 ))
([0932b8b0932b8bef4#901 ](https://github.com/chopratejas/headroom/issues/901 ))
([f928576f9285766dd#999 ](https://github.com/chopratejas/headroom/issues/999 ))
([0dc2e1c0dc2e1cb3f#913 ](https://github.com/chopratejas/headroom/issues/913 ))
([2a4d3002a4d300841#918 ](https://github.com/chopratejas/headroom/issues/918 ))
([59390045939004185#909 ](https://github.com/chopratejas/headroom/issues/909 ))
([7d4ae867d4ae86ec0#856 ](https://github.com/chopratejas/headroom/issues/856 ) P3a)
([#1015 ](https://github.com/chopratejas/headroom/issues/1015 ))
([c2e52fec2e52fe743#856 ](https://github.com/chopratejas/headroom/issues/856 ) P2)
([#905 ](https://github.com/chopratejas/headroom/issues/905 ))
([553ade4553ade4ec6#720 ](https://github.com/chopratejas/headroom/issues/720 ))
([7edb27a7edb27ab24#651 ](https://github.com/chopratejas/headroom/issues/651 ))
([0c5c89d0c5c89d05c#942 ](https://github.com/chopratejas/headroom/issues/942 ))
([#954 ](https://github.com/chopratejas/headroom/issues/954 ))
([a7ee8a6a7ee8a60a7#950 ](https://github.com/chopratejas/headroom/issues/950 ))
([1ec93201ec9320888#1018 ](https://github.com/chopratejas/headroom/issues/1018 ))
([3b0bcee3b0bceecf4#1021 ](https://github.com/chopratejas/headroom/issues/1021 ))
([4558bc24558bc2465#1047 ](https://github.com/chopratejas/headroom/issues/1047 ))
([74dff9474dff94fb8#898 ](https://github.com/chopratejas/headroom/issues/898 ))
([b9e2761b9e27614c6#924 ](https://github.com/chopratejas/headroom/issues/924 ))
([8c00f718c00f7103c#986 ](https://github.com/chopratejas/headroom/issues/986 ))
([99c874d99c874d423#1034 ](https://github.com/chopratejas/headroom/issues/1034 ))
([74ae78174ae781644#743 ](https://github.com/chopratejas/headroom/issues/743 ))
([dff6a19dff6a19946#892 ](https://github.com/chopratejas/headroom/issues/892 ))
([b1f700fb1f700fc27#887 ](https://github.com/chopratejas/headroom/issues/887 ))
([d6f0f0fd6f0f0f642#890 ](https://github.com/chopratejas/headroom/issues/890 ))
([16ed73b16ed73bca6#889 ](https://github.com/chopratejas/headroom/issues/889 ))
([65b0e8c65b0e8c58d#893 ](https://github.com/chopratejas/headroom/issues/893 ))
([6cdb8466cdb846200#897 ](https://github.com/chopratejas/headroom/issues/897 ))
([9b0c8409b0c840dd7#997 ](https://github.com/chopratejas/headroom/issues/997 ))
([#1027 ](https://github.com/chopratejas/headroom/issues/1027 ))
([2d3701b2d3701b59e#1045 ](https://github.com/chopratejas/headroom/issues/1045 ))
([0ddd4ed0ddd4ed9e9#947 ](https://github.com/chopratejas/headroom/issues/947 ))
([7c8c9097c8c909c85#903 ](https://github.com/chopratejas/headroom/issues/903 ))
([0632eba0632eba6c3#917 ](https://github.com/chopratejas/headroom/issues/917 ))
([b08ec15b08ec15b0d#1000 ](https://github.com/chopratejas/headroom/issues/1000 ))
([7dbbb407dbbb4077e#885 ](https://github.com/chopratejas/headroom/issues/885 ))
([a14ab45a14ab45cf0#957 ](https://github.com/chopratejas/headroom/issues/957 ))
([b70fccbb70fccbe17#821 ](https://github.com/chopratejas/headroom/issues/821 ))
([e20f16be20f16b1a6#1003 ](https://github.com/chopratejas/headroom/issues/1003 ))
([919379a919379a8a1#641 ](https://github.com/chopratejas/headroom/issues/641 ))
([0b4a4bd0b4a4bd483#943 ](https://github.com/chopratejas/headroom/issues/943 ))
([9b7b4369b7b436b04#884 ](https://github.com/chopratejas/headroom/issues/884 ))
([dd22cfddd22cfd72a#704 ](https://github.com/chopratejas/headroom/issues/704 ))
([e36fccde36fccd8cfhttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-16 15:35:00 -07:00
dependabot[bot]
4f59097045
ci: bump esbuild from 0.27.7 to 0.28.1 in /docs in the npm_and_yarn group across 1 directory ( #936 )
...
Bumps the npm_and_yarn group with 1 update in the /docs directory:
[esbuild](https://github.com/evanw/esbuild ).
Updates `esbuild` from 0.27.7 to 0.28.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases ">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.28.1</h2>
<ul>
<li>
<p>Disallow <code>\</code> in local development server HTTP requests (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr ">GHSA-g7r4-m6w7-qqqr</a>)</p>
<p>This release fixes a security issue where HTTP requests to esbuild's
local development server could traverse outside of the serve directory
on Windows using a <code>\</code> backslash character. It happened due
to the use of Go's <code>path.Clean()</code> function, which only
handles Unix-style <code>/</code> characters. HTTP requests with paths
containing <code>\</code> are no longer allowed.</p>
<p>Thanks to <a
href="https://github.com/dellalibera "><code>@dellalibera</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Add integrity checks to the Deno API (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr ">GHSA-gv7w-rqvm-qjhr</a>)</p>
<p>The previous release of esbuild added integrity checks to esbuild's
npm install script. This release also adds integrity checks to esbuild's
Deno install script. Now esbuild's Deno API will also fail with an error
if the downloaded esbuild binary contains something other than the
expected content.</p>
<p>Note that esbuild's Deno API installs from
<code>registry.npmjs.org</code> by default, but allows the
<code>NPM_CONFIG_REGISTRY</code> environment variable to override this
with a custom package registry. This change means that the esbuild
executable served by <code>NPM_CONFIG_REGISTRY</code> must now match the
expected content.</p>
<p>Thanks to <a
href="https://github.com/sondt99 "><code>@sondt99</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Avoid inlining <code>using</code> and <code>await using</code>
declarations (<a
href="https://redirect.github.com/evanw/esbuild/issues/4482 ">#4482</a>)</p>
<p>Previously esbuild's minifier sometimes incorrectly inlined
<code>using</code> and <code>await using</code> declarations into
subsequent uses of that declaration, which then fails to dispose of the
resource correctly. This bug happened because inlining was done for
<code>let</code> and <code>const</code> declarations by avoiding doing
it for <code>var</code> declarations, which no longer worked when more
declaration types were added. Here's an example:</p>
<pre lang="js"><code>// Original code
{
using x = new Resource()
x.activate()
}
<p>// Old output (with --minify)<br />
new Resource().activate();</p>
<p>// New output (with --minify)<br />
{using e=new Resource;e.activate()}<br />
</code></pre></p>
</li>
<li>
<p>Fix module evaluation when an error is thrown (<a
href="https://redirect.github.com/evanw/esbuild/issues/4461 ">#4461</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/4467 ">#4467</a>)</p>
<p>If an error is thrown during module evaluation, esbuild previously
didn't preserve the state of the module for subsequent module
references. This was observable if <code>import()</code> or
<code>require()</code> is used to import a module multiple times. The
thrown error is supposed to be thrown by every call to
<code>import()</code> or <code>require()</code>, not just the first.
With this release, esbuild will now throw the same error every time you
call <code>import()</code> or <code>require()</code> on a module that
throws during its evaluation.</p>
</li>
<li>
<p>Fix some edge cases around the <code>new</code> operator (<a
href="https://redirect.github.com/evanw/esbuild/issues/4477 ">#4477</a>)</p>
<p>Previously esbuild incorrectly printed certain edge cases involving
complex expressions inside the target of a <code>new</code> expression
(specifically an optional chain and/or a tagged template literal). The
generated code for the <code>new</code> target was not correctly wrapped
with parentheses, and either contained a syntax error or had different
semantics. These edge cases have been fixed so that they now correctly
wrap the <code>new</code> target in parentheses. Here is an example of
some affected code:</p>
<pre lang="js"><code>// Original code
new (foo()`bar`)()
new (foo()?.bar)()
<p>// Old output<br />
new foo()<code>bar</code>();<br />
new (foo())?.bar();</p>
<p></code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md ">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.28.1</h2>
<ul>
<li>
<p>Disallow <code>\</code> in local development server HTTP requests (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr ">GHSA-g7r4-m6w7-qqqr</a>)</p>
<p>This release fixes a security issue where HTTP requests to esbuild's
local development server could traverse outside of the serve directory
on Windows using a <code>\</code> backslash character. It happened due
to the use of Go's <code>path.Clean()</code> function, which only
handles Unix-style <code>/</code> characters. HTTP requests with paths
containing <code>\</code> are no longer allowed.</p>
<p>Thanks to <a
href="https://github.com/dellalibera "><code>@dellalibera</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Add integrity checks to the Deno API (<a
href="https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr ">GHSA-gv7w-rqvm-qjhr</a>)</p>
<p>The previous release of esbuild added integrity checks to esbuild's
npm install script. This release also adds integrity checks to esbuild's
Deno install script. Now esbuild's Deno API will also fail with an error
if the downloaded esbuild binary contains something other than the
expected content.</p>
<p>Note that esbuild's Deno API installs from
<code>registry.npmjs.org</code> by default, but allows the
<code>NPM_CONFIG_REGISTRY</code> environment variable to override this
with a custom package registry. This change means that the esbuild
executable served by <code>NPM_CONFIG_REGISTRY</code> must now match the
expected content.</p>
<p>Thanks to <a
href="https://github.com/sondt99 "><code>@sondt99</code></a> for
reporting this issue.</p>
</li>
<li>
<p>Avoid inlining <code>using</code> and <code>await using</code>
declarations (<a
href="https://redirect.github.com/evanw/esbuild/issues/4482 ">#4482</a>)</p>
<p>Previously esbuild's minifier sometimes incorrectly inlined
<code>using</code> and <code>await using</code> declarations into
subsequent uses of that declaration, which then fails to dispose of the
resource correctly. This bug happened because inlining was done for
<code>let</code> and <code>const</code> declarations by avoiding doing
it for <code>var</code> declarations, which no longer worked when more
declaration types were added. Here's an example:</p>
<pre lang="js"><code>// Original code
{
using x = new Resource()
x.activate()
}
<p>// Old output (with --minify)<br />
new Resource().activate();</p>
<p>// New output (with --minify)<br />
{using e=new Resource;e.activate()}<br />
</code></pre></p>
</li>
<li>
<p>Fix module evaluation when an error is thrown (<a
href="https://redirect.github.com/evanw/esbuild/issues/4461 ">#4461</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/4467 ">#4467</a>)</p>
<p>If an error is thrown during module evaluation, esbuild previously
didn't preserve the state of the module for subsequent module
references. This was observable if <code>import()</code> or
<code>require()</code> is used to import a module multiple times. The
thrown error is supposed to be thrown by every call to
<code>import()</code> or <code>require()</code>, not just the first.
With this release, esbuild will now throw the same error every time you
call <code>import()</code> or <code>require()</code> on a module that
throws during its evaluation.</p>
</li>
<li>
<p>Fix some edge cases around the <code>new</code> operator (<a
href="https://redirect.github.com/evanw/esbuild/issues/4477 ">#4477</a>)</p>
<p>Previously esbuild incorrectly printed certain edge cases involving
complex expressions inside the target of a <code>new</code> expression
(specifically an optional chain and/or a tagged template literal). The
generated code for the <code>new</code> target was not correctly wrapped
with parentheses, and either contained a syntax error or had different
semantics. These edge cases have been fixed so that they now correctly
wrap the <code>new</code> target in parentheses. Here is an example of
some affected code:</p>
<pre lang="js"><code>// Original code
new (foo()`bar`)()
new (foo()?.bar)()
<p>// Old output<br />
new foo()<code>bar</code>();<br />
new (foo())?.bar();<br />
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bb9db84c029ff053e53b0a9bf2135be2a1a7132083a2cbfc35https://redirect.github.com/evanw/esbuild/issues/4482 ">#4482</a>:
don't inline <code>using</code> declarations</li>
<li><a
href="308ad745d8https://redirect.github.com/evanw/esbuild/issues/4471 ">#4471</a>:
renaming of nested <code>var</code> declarations</li>
<li><a
href="f013f5f99aaafd6e48b1https://redirect.github.com/evanw/esbuild/issues/4462 ">#4462</a>)</li>
<li><a
href="15300c30b51bda0c31d7https://redirect.github.com/evanw/esbuild/issues/4461 ">#4461</a>,
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/4467 ">#4467</a>:
esm evaluation fixes</li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.27.7...v0.28.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/chopratejas/headroom/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 23:16:29 -05:00
github-actions[bot]
8a53c8ec3b
chore: release main ( #891 )
...
🤖 I have created a release *beep* *boop*
---
<details><summary>0.25.0</summary>
##
[0.25.0](https://github.com/chopratejas/headroom/compare/v0.24.0...v0.25.0 )
(2026-06-12)
### Features
* add differential network capture harness
([#761 ](https://github.com/chopratejas/headroom/issues/761 ))
([11ab5f811ab5f83a1#834 ](https://github.com/chopratejas/headroom/issues/834 ))
([c425893c425893d12#778 ](https://github.com/chopratejas/headroom/issues/778 ))
([#784 ](https://github.com/chopratejas/headroom/issues/784 ))
([eb2e50feb2e50feb2#793 ](https://github.com/chopratejas/headroom/issues/793 ))
([3c77e523c77e52ce4#640 ](https://github.com/chopratejas/headroom/issues/640 ))
([028efab028efabb4e#851 ](https://github.com/chopratejas/headroom/issues/851 ))
([c0cadccc0cadccff9#807 ](https://github.com/chopratejas/headroom/issues/807 ))
([34dafe634dafe69d9#854 ](https://github.com/chopratejas/headroom/issues/854 ))
([5f1d88a5f1d88ad27#817 ](https://github.com/chopratejas/headroom/issues/817 ))
([53a08c653a08c63bf#859 ](https://github.com/chopratejas/headroom/issues/859 ))
([06b262506b2625b17#204 ](https://github.com/chopratejas/headroom/issues/204 ))
([6367d0b6367d0b722#766 ](https://github.com/chopratejas/headroom/issues/766 ))
([c71592dc71592d421#856 ](https://github.com/chopratejas/headroom/issues/856 ) P1)
([#857 ](https://github.com/chopratejas/headroom/issues/857 ))
([d5f5802d5f58026e2#824 ](https://github.com/chopratejas/headroom/issues/824 ))
([058bced058bcedab8#862 ](https://github.com/chopratejas/headroom/issues/862 ))
([c2106cbc2106cbdab#823 ](https://github.com/chopratejas/headroom/issues/823 ))
([693d9d2693d9d20e2#791 ](https://github.com/chopratejas/headroom/issues/791 ))
([0b8b8d90b8b8d92de#261 ](https://github.com/chopratejas/headroom/issues/261 ))
([2269e402269e40bde#803 ](https://github.com/chopratejas/headroom/issues/803 ))
([914a60a914a60a2b0#516 ](https://github.com/chopratejas/headroom/issues/516 ))
([19eac8e19eac8e00d#799 ](https://github.com/chopratejas/headroom/issues/799 ))
([74392b274392b238e#249 ](https://github.com/chopratejas/headroom/issues/249 ))
([8f374268f374263d3#838 ](https://github.com/chopratejas/headroom/issues/838 ))
([8db5efc8db5efc6f9#852 ](https://github.com/chopratejas/headroom/issues/852 ))
([bfcb07dbfcb07d78e#715 ](https://github.com/chopratejas/headroom/issues/715 ))
([2533f772533f7703e#839 ](https://github.com/chopratejas/headroom/issues/839 ))
([30078f830078f8465#875 ](https://github.com/chopratejas/headroom/issues/875 ))
([249af6c249af6cc7b#878 ](https://github.com/chopratejas/headroom/issues/878 ))
([b716c8cb716c8c2ee#774 ](https://github.com/chopratejas/headroom/issues/774 ))
([199d693199d693f98#731 ](https://github.com/chopratejas/headroom/issues/731 ))
([96abf3896abf38b09#771 ](https://github.com/chopratejas/headroom/issues/771 ))
([2f9ff072f9ff07e6c#647 ](https://github.com/chopratejas/headroom/issues/647 ))
([84ac33284ac332d14#836 ](https://github.com/chopratejas/headroom/issues/836 ))
([0ffe2b60ffe2b6ea4#481 ](https://github.com/chopratejas/headroom/issues/481 ))
([fd73b88fd73b88368#772 ](https://github.com/chopratejas/headroom/issues/772 ))
([574bbae574bbae2cb#557 ](https://github.com/chopratejas/headroom/issues/557 ))
([6b0c09f6b0c09ffd5#744 ](https://github.com/chopratejas/headroom/issues/744 ))
([5dfb4465dfb446da1#616 ](https://github.com/chopratejas/headroom/issues/616 ))
([9252d859252d852c5#788 ](https://github.com/chopratejas/headroom/issues/788 ))
([6ea6e316ea6e31f09#760 ](https://github.com/chopratejas/headroom/issues/760 ))
([b439599b4395993ae#373 ](https://github.com/chopratejas/headroom/issues/373 ))
([9bff5759bff5752bb#581 ](https://github.com/chopratejas/headroom/issues/581 ))
([163677b163677b405#815 ](https://github.com/chopratejas/headroom/issues/815 ))
([929698a929698af10d10bd5fd10bd5f59c#442 ](https://github.com/chopratejas/headroom/issues/442 ))
([93c693793c69372e6#770 ](https://github.com/chopratejas/headroom/issues/770 ))
([d76a729d76a7296df#783 ](https://github.com/chopratejas/headroom/issues/783 ))
([841663d841663da16#577 ](https://github.com/chopratejas/headroom/issues/577 ))
([#794 ](https://github.com/chopratejas/headroom/issues/794 ))
([0ce68de0ce68dedd7#785 ](https://github.com/chopratejas/headroom/issues/785 ))
([ae2122fae2122fda8#605 ](https://github.com/chopratejas/headroom/issues/605 ))
([b4b5025b4b50253f1#745 ](https://github.com/chopratejas/headroom/issues/745 ))
([e50fbb3e50fbb3e0d#874 ](https://github.com/chopratejas/headroom/issues/874 ))
([f9384eff9384ef4b7#604 ](https://github.com/chopratejas/headroom/issues/604 ))
([2ad300a2ad300aff8#877 ](https://github.com/chopratejas/headroom/issues/877 ))
([05bd56b05bd56bcb6ec7d006ec7d0065cchttps://github.com/googleapis/release-please ). See
[documentation](https://github.com/googleapis/release-please#release-please ).
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-11 22:18:46 -08:00
github-actions[bot]
01762b1ec7
chore: release main ( #607 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-08 11:21:23 -07:00
github-actions[bot]
f7c2552264
chore: release main
2026-06-04 14:05:56 +00:00
github-actions[bot]
cc71e07d01
chore: release main
2026-05-26 03:54:25 +00:00
chopratejas
8e4ab187e9
ci(release): align manifest + pyproject + package.json to 0.22.3
...
The repo had drifted: pyproject.toml said 0.9.1 but PyPI's latest
published headroom-ai was 0.22.3. release_version.py papered over
this by taking max(canonical, latest_tag) at release time;
release-please does NOT do that — it trusts the manifest verbatim.
Left as-is, release-please would propose 0.9.2 on the next merge
and PyPI would reject it ("400 Cannot publish version lower than
latest"), looping the bot forever.
Fix: align every version-bearing file to 0.22.3 (the truth on
PyPI). Done via `scripts/version-sync.py --version 0.22.3`:
- .release-please-manifest.json
- pyproject.toml
- sdk/typescript/package.json
- plugins/openclaw/package.json (+ headroom-ai dep range -> ^0.22.3)
- .claude-plugin/marketplace.json
- .github/plugin/marketplace.json
- plugins/headroom-agent-hooks/.claude-plugin/plugin.json
- plugins/headroom-agent-hooks/.github/plugin/plugin.json
After this lands, the bot's next release PR will propose 0.22.4
(patch) or 0.23.0 (minor) depending on conventional-commit traffic
since v0.22.3.
2026-05-25 18:41:38 -07:00
dependabot[bot]
2f659535d2
chore(deps): bump the npm_and_yarn group across 3 directories with 4 updates
...
Bumps the npm_and_yarn group with 1 update in the /sdk/typescript directory: [esbuild](https://github.com/evanw/esbuild ).
Bumps the npm_and_yarn group with 1 update in the /plugins/openclaw directory: [esbuild](https://github.com/evanw/esbuild ).
Bumps the npm_and_yarn group with 2 updates in the /docs directory: [postcss](https://github.com/postcss/postcss ) and [next](https://github.com/vercel/next.js ).
Updates `esbuild` from 0.21.5 to 0.27.4
- [Release notes](https://github.com/evanw/esbuild/releases )
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md )
- [Commits](https://github.com/evanw/esbuild/compare/v0.21.5...v0.27.4 )
Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
Updates `vite` from 5.4.21 to 8.0.10
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.10/packages/vite )
Updates `esbuild` from 0.21.5 to 0.27.4
- [Release notes](https://github.com/evanw/esbuild/releases )
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md )
- [Commits](https://github.com/evanw/esbuild/compare/v0.21.5...v0.27.4 )
Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
Updates `vite` from 5.4.21 to 8.0.10
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.10/packages/vite )
Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.10 )
Updates `next` from 16.2.2 to 16.2.4
- [Release notes](https://github.com/vercel/next.js/releases )
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js )
- [Commits](https://github.com/vercel/next.js/compare/v16.2.2...v16.2.4 )
---
updated-dependencies:
- dependency-name: esbuild
dependency-version: 0.27.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: vite
dependency-version: 8.0.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: esbuild
dependency-version: 0.27.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: vite
dependency-version: 8.0.10
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: postcss
dependency-version: 8.5.10
dependency-type: direct:development
dependency-group: npm_and_yarn
- dependency-name: next
dependency-version: 16.2.4
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-04-24 22:15:53 +00:00
Garm
d4cd49af95
feat(telemetry): add headroom_stack and install_mode identity fields
...
Adds two orthogonal identity fields to the anonymous telemetry beacon so we
can segment usage by integration surface and deployment shape:
- headroom_stack: how Headroom is invoked (proxy, wrap_claude, wrap_codex,
adapter_ts_openai, adapter_ts_anthropic, etc.). Resolved from HEADROOM_STACK
env, HEADROOM_AGENT_TYPE fallback, or aggregated request-header counts.
- install_mode: how the proxy is deployed (wrapped / persistent / on_demand).
Detected from HEADROOM_AGENT_TYPE plus DeploymentManifest lookup.
TS SDK adapters now tag every request with X-Headroom-Stack; a FastAPI
middleware buckets the counts and surfaces them via /stats so the beacon can
report requests_by_stack for mixed-integration sessions.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-17 17:12:38 +02:00
JerrettDavis
ebc7158de2
test(sdk/ts): add HEADROOM_WORKSPACE_DIR precedence tests for derived helpers
...
Mirrors the Python coverage gap closure: every derived-only helper
(memoryDbPath, nativeMemoryDir, logDir, rtkPath, beaconLockPath,
pluginConfigDir, etc.) now has both a default test and an override test
that exercises the canonical workspace env var end-to-end.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-16 19:59:38 -05:00
JerrettDavis
028e2c0c1b
feat(sdk/ts): add paths module with HEADROOM_CONFIG_DIR / HEADROOM_WORKSPACE_DIR parity
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-16 19:16:00 -05:00
Adib Mohsin
cdb721a713
typescript coverage
2026-04-06 21:24:36 +06:00
chopratejas
a41c7f0c89
OpenClaw plugin fixes, telemetry fix, cost tracker improvement, tokenBudget support
...
OpenClaw plugin:
- Fix assistant content always returned as array (fixes flatMap crash)
- Clean up debug logging, restore clean plugin entry point
- Add test for text-only assistant round-trip
- Set headroom-ai dependency to npm (not local path)
Telemetry:
- Switch from sb_publishable_ to JWT anon key (PostgREST needs JWT for RLS)
- Switch from upsert to plain INSERT (anon role upsert was failing with 42501)
- Verified: full payload with all JSONB columns writes successfully (201)
Cost tracker:
- Use output_buffer instead of hardcoded 500 for cost estimation in client.py
- CostTracker counterfactual: value removed tokens at avg effective $/token
(actual_spend / billed_tokens) instead of uncached list price — aligns
savings with real billing mix (cache reads, writes, uncached)
- Add debug log for /stats summary payload
- Add 3 tests for new cost savings calculation
TypeScript SDK:
- Add tokenBudget param to compress(), HeadroomClient, CompressOptions
- Proxy /v1/compress accepts optional token_budget to override model limit
2026-03-28 23:46:03 -07:00
chopratejas
284f6d0a09
Fix Vercel AI SDK v6 format: use input/output instead of args/result
...
- ToolCallPart: read `input` (v6) with fallback to `args` (legacy) in vercelToOpenAI
- ToolCallPart: produce `input` instead of `args` in openAIToVercel
- ToolResultPart: produce `output: { type, value }` instead of `result` in openAIToVercel
- ToolResultPart: read `output` (v6) with fallback to `result` (legacy) in vercelToOpenAI
- Add MDX example tests: verify every code sample from PR docs against real APIs
- 116 tests passing (unit + integration + e2e with OpenAI + Anthropic)
2026-03-26 18:04:07 -07:00
chopratejas
7d3f09f028
Make compress() format-aware: auto-detect OpenAI, Anthropic, Vercel, Gemini
...
- compress() now accepts messages in any of 4 formats and returns the same format
- Format detection is structural: Gemini (parts field), Vercel (tool-call hyphen),
Anthropic (tool_use underscore), OpenAI (tool_calls field)
- Added converters: anthropicToOpenAI, geminiToOpenAI, and their inverses
- Updated openAIToVercel to produce AI SDK v6 output format (output: {type, value})
- E2E tested with real Vercel AI SDK + OpenAI gpt-4o-mini + Anthropic claude-haiku-4-5
- headroomMiddleware() proven working: transparently compresses before LLM call
- 14 format detection unit tests, 5 format integration tests, 3 Vercel AI SDK e2e tests
2026-03-26 17:06:54 -07:00
chopratejas
72e65148d2
Add TypeScript SDK (headroom-ai npm package)
...
- New `compress()` function: HTTP client calling POST /v1/compress on the proxy
- HeadroomClient: reusable client with retry, fallback, auth support
- Vercel AI SDK adapter: headroomMiddleware() for wrapLanguageModel()
- OpenAI SDK adapter: withHeadroom() Proxy wrapper
- Anthropic SDK adapter: withHeadroom() Proxy wrapper
- Format converters: Vercel AI SDK ↔ OpenAI message format round-trip
- POST /v1/compress proxy endpoint: compression without LLM call
- 90 TypeScript tests (84 unit + 6 integration) + 9 Python tests
- Zero runtime dependencies, all framework peers optional
- Updated README, proxy docs, integration guide, and 6 other doc pages
- New docs/typescript-sdk.md with full SDK documentation
- Removed docs/superpowers/ from tracking (.gitignore)
2026-03-26 15:41:56 -07:00
JD Davis