Version Packages - #1508
Merged
Merged
Conversation
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-marketing | 745e64a | Commit Preview URL Branch Preview URL |
Aug 03 2026, 08:52 PM |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-cloud | 745e64a | Aug 03 2026, 08:52 PM |
Contributor
Cloudflare previewTorn down — the PR is closed. |
@executor-js/cli
@executor-js/config
@executor-js/execution
@executor-js/sdk
@executor-js/codemode-core
@executor-js/runtime-quickjs
@executor-js/plugin-file-secrets
@executor-js/plugin-graphql
@executor-js/plugin-keychain
@executor-js/plugin-mcp
@executor-js/plugin-onepassword
@executor-js/plugin-openapi
executor
commit: |
RhysSullivan
force-pushed
the
changeset-release/main
branch
12 times, most recently
from
August 3, 2026 20:49
5d443a6 to
745e64a
Compare
RhysSullivan
force-pushed
the
changeset-release/main
branch
from
August 4, 2026 17:42
745e64a to
6ecfb44
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@executor-js/cli@0.2.45
Patch Changes
6a924dd]:@executor-js/config@1.5.38
Patch Changes
6a924dd]:@executor-js/execution@1.5.38
Patch Changes
6a924dd]:@executor-js/sdk@1.5.38
Patch Changes
#1524
6a924ddThanks @RhysSullivan! - Cache hosted outbound DNS guard resolutions, so a proxied request no longer pays a fresh lookup on every hop.makeHostedHttpbuilds the guarded fetch and the guarded HTTP client layer over one cache; building them separately still works but resolves each hostname twice.The outbound guard also honors the caller's
redirectmode, which it previously ignored:manualnow returns the unfollowed 3xx with its Location header, anderrorrejects, rather than both silently following the redirect. Redirect method semantics now match platform fetch — aDELETEorPUTmeeting a 301/302, and aHEADmeeting a 303, keep their method instead of being rewritten toGET, so the request the caller made is the request that goes out. Exhausting the redirect budget rejects rather than handing back the raw 3xx as if it were a final response.Address classification is tightened too: the cloud metadata endpoint is now blocked by the address a hostname denotes rather than by one dotted-decimal spelling, so its IPv6 forms (
::ffff:169.254.169.254, the 6to42002:a9fe:a9fe::, NAT64) are blocked underallowLocalNetworkas well, and a name that merely resolves to it is blocked in that mode too — the resolved-address check now runs whether or not the local network is allowed, with only the metadata rule applied to its answers when it is; IPv6 prefixes that carry an IPv4 destination (IPv4-translatable, 6to4, local-use NAT64) are classified by that destination; deprecated site-local addresses (fec0::/10) count as local; every address a hostname resolves to is checked rather than the first; subresource integrity survives a cross-origin redirect; and address forms the platform resolver reads differently from a decimal-only parser (octal octets, a dotted quad in the head of a compressed literal) no longer classify as public.@executor-js/vite-plugin@0.0.55
Patch Changes
6a924dd]:@executor-js/runtime-quickjs@1.5.38
Patch Changes
@executor-js/plugin-desktop-settings@1.5.38
Patch Changes
6a924dd]:@executor-js/plugin-example@1.5.38
Patch Changes
6a924dd]:@executor-js/plugin-file-secrets@1.5.38
Patch Changes
6a924dd]:@executor-js/plugin-graphql@1.5.38
Patch Changes
6a924dd,1de85fc]:@executor-js/plugin-keychain@1.5.38
Patch Changes
6a924dd]:@executor-js/plugin-mcp@1.5.38
Patch Changes
6a924dd,1de85fc]:@executor-js/plugin-onepassword@1.5.38
Patch Changes
6a924dd,1de85fc]:@executor-js/plugin-openapi@1.5.38
Patch Changes
#1428
df01d91Thanks @saga-agent! - Use the versioned Google Photos raw upload endpoint so generated upload tools send media to/v1/uploadsinstead of the invalid/uploadspath.Updated dependencies [
6a924dd,1de85fc]:@executor-js/plugin-toolkits@1.5.30
Patch Changes
6a924dd,1de85fc]:@executor-js/codemode-core@1.5.38
executor@1.5.38
Patch Changes
#1417
046d67dThanks @morluto! - Show policy and OAuth app removal failures in the UI, and keep success-only state unchanged when those writes fail.#1511
7eb795dThanks @RhysSullivan! - Fix:executescripts that bothemit()output andreturna value no longer lose the returned value in MCP clients that ignorestructuredContent— the return value is now appended to the tool-result content after the emitted items#1418
d3610e3Thanks @morluto! - Return an execution error when a Deno subprocess closes stdin instead of emitting an unhandled write failure.#1507
541549aThanks @RhysSullivan! - Fix: OAuth refresh rejections with non-spec error bodies (e.g. Datadog) now surface as expired connections with a reconnect path, and definitively dead refresh tokens are no longer retried against the authorization server#1517
59a6640Thanks @kitze! - Fix: OpenAPI query parameters that use form-style exploded objects now serialize each object field as a query parameter.#1416
f1b617cThanks @morluto! - Prevent provider service migration row loss caused by generated ID conflicts.#1420
8c71744Thanks @morluto! - Abort GraphQL tool calls that exceed the configured invocation timeout instead of waiting indefinitely for an upstream response.Updated dependencies [
6a924dd]:@executor-js/cloud@1.4.56
Patch Changes
df01d91,6a924dd,1de85fc]:@executor-js/host-selfhost@0.0.37
Patch Changes
#1525
c757e13Thanks @RhysSullivan! - Export self-host traces to an OpenTelemetry collector whenOTEL_EXPORTER_OTLP_ENDPOINTis set, so a slow request can be read as a waterfall rather than a wall-clock number. Off by default; logs are a separate opt-in viaEXECUTOR_OTEL_EXPORT_LOGS.Updated dependencies [
df01d91,6a924dd,1de85fc]:@executor-js/e2e@0.0.35
Patch Changes
df01d91,6a924dd]:@executor-js/example-all-plugins@0.0.56
Patch Changes
df01d91,6a924dd]:@executor-js/example-docs-sdk-quickstart@0.0.41
Patch Changes
df01d91,6a924dd]:@executor-js/analytics@0.1.2
Patch Changes
@executor-js/api@1.4.58
Patch Changes
6a924dd]:@executor-js/cloudflare@0.0.37
Patch Changes
6a924dd]:@executor-js/mcp-apps-shell@1.4.6
Patch Changes
1de85fc]:@executor-js/runtime-workerd-subprocess@0.0.10
Patch Changes
@executor-js/plugin-encrypted-secrets@0.0.37
Patch Changes
6a924dd]:@executor-js/plugin-provider-service-split@0.0.9
Patch Changes
df01d91,6a924dd]:@executor-js/react@1.4.58
Patch Changes
#1240
1de85fcThanks @jackulau! - Keep native<select>dropdown options readable in dark mode. The console themes throughprefers-color-schemeand never sets a.darkclass, so Tailwinddark:utilities never matched and the native option popup rendered with a light color scheme over dark text.NativeSelectnow uses a solid themed surface (bg-popover) and pinscolor-schemeto the active theme, so the browser draws a matching, readable popup.Updated dependencies [
6a924dd]:@executor-js/desktop@1.5.38