[PunGrumpy]

Workflows that use this action still install @cursor/sdk 1.0.38. The current release is 1.3.1. The action's Agent.create, stream, wait, cancel, and tool allowlist are the same on that release, so the lockfile can move without a code change.

The model docs still offered composer-2 and said the SDK rejects auto. Composer 2 is retired and rerouted to Composer 2.5. The SDK passes the id through and the account catalog accepts or rejects it. The default stays default, because Plus does not include Auto and changing the default would change every workflow that omits model.

Cursor being part of SpaceX does not change the package name, the API key, or the tool contract, so this pull request does not rebrand the action.

Proof: bun run typecheck, bun run test (34 pass), bun run lint, and bun run build with a clean dist/. npm ci --omit=dev installed @cursor/sdk 1.3.1. bun run docs:typecheck and bun run docs:build passed before the commit.

Created with Grok 4.7 in Grok Build. The diff was written by agy (claude-sonnet-4-6).

Summary by CodeRabbit

• Documentation
  • Updated model examples to use Composer 2.5.
  • Clarified that model IDs are validated against the account’s available model catalog, and errors identify models available to that account.
  • Added guidance that composer-2 routes to Composer 2.5, while access to auto depends on the account plan; Plus plans do not support auto.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
cursor-action	Ready	Preview	Nov 4, 2026 10:16am UTC

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

The pull request updates the @cursor/sdk dependency to ^1.3.1 and adds a patch changeset. It updates model examples and documentation to describe account-catalog validation and clarify auto availability.

Changes: SDK model catalog update

Layer / File(s)	Summary
SDK version and release note package.json, .changeset/sdk-1.3.1.md, plans/README.md	The SDK requirement changes to ^1.3.1. The changeset and plan document record the update and related model guidance.
Model input guidance README.md, action.yml, docs/content/examples.mdx, docs/content/reference.mdx, docs/content/troubleshooting.mdx	Input descriptions and examples use composer-2.5 and describe account-catalog validation. Troubleshooting notes that composer-2 reroutes to Composer 2.5 and that auto availability depends on the account plan.

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Merge Risk: Minimal · up to ca1c3

The dependency update and model guidance have no established merge-blocking issue. The inspected SDK supports the documented model-rejection guidance.

- [ ] Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

_{I’m a rabbit; I hop through the docs,
Past model names and catalog checks.
Composer’s example now wears a new coat,
While auto gets a plan-specific note.
I nibble a change, then thump my feet,
And leave the release note tidy and neat.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​cursor/​sdk@​1.0.38 ⏵ 1.3.1	-5		+17	-1

View full report