Skip to content

Version Packages - #1508

Merged
RhysSullivan merged 1 commit into
mainfrom
changeset-release/main
Aug 4, 2026
Merged

Version Packages#1508
RhysSullivan merged 1 commit into
mainfrom
changeset-release/main

Conversation

@RhysSullivan

@RhysSullivan RhysSullivan commented Jul 30, 2026

Copy link
Copy Markdown
Collaborator

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@executor-js/cli@0.2.45

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/config@1.5.38

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/execution@1.5.38

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38
    • @executor-js/codemode-core@1.5.38

@executor-js/sdk@1.5.38

Patch Changes

  • #1524 6a924dd Thanks @RhysSullivan! - Cache hosted outbound DNS guard resolutions, so a proxied request no longer pays a fresh lookup on every hop. makeHostedHttp builds the guarded fetch and the guarded HTTP client layer over one cache; building them separately still works but resolves each hostname twice.

    The outbound guard also honors the caller's redirect mode, which it previously ignored: manual now returns the unfollowed 3xx with its Location header, and error rejects, rather than both silently following the redirect. Redirect method semantics now match platform fetch — a DELETE or PUT meeting a 301/302, and a HEAD meeting a 303, keep their method instead of being rewritten to GET, so the request the caller made is the request that goes out. Exhausting the redirect budget rejects rather than handing back the raw 3xx as if it were a final response.

    Address classification is tightened too: the cloud metadata endpoint is now blocked by the address a hostname denotes rather than by one dotted-decimal spelling, so its IPv6 forms (::ffff:169.254.169.254, the 6to4 2002:a9fe:a9fe::, NAT64) are blocked under allowLocalNetwork as well, and a name that merely resolves to it is blocked in that mode too — the resolved-address check now runs whether or not the local network is allowed, with only the metadata rule applied to its answers when it is; IPv6 prefixes that carry an IPv4 destination (IPv4-translatable, 6to4, local-use NAT64) are classified by that destination; deprecated site-local addresses (fec0::/10) count as local; every address a hostname resolves to is checked rather than the first; subresource integrity survives a cross-origin redirect; and address forms the platform resolver reads differently from a decimal-only parser (octal octets, a dotted quad in the head of a compressed literal) no longer classify as public.

@executor-js/vite-plugin@0.0.55

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/runtime-quickjs@1.5.38

Patch Changes

  • Updated dependencies []:
    • @executor-js/codemode-core@1.5.38

@executor-js/plugin-desktop-settings@1.5.38

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/plugin-example@1.5.38

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/plugin-file-secrets@1.5.38

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/plugin-graphql@1.5.38

Patch Changes

  • Updated dependencies [6a924dd, 1de85fc]:
    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/api@1.4.58
    • @executor-js/config@1.5.38

@executor-js/plugin-keychain@1.5.38

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/plugin-mcp@1.5.38

Patch Changes

  • Updated dependencies [6a924dd, 1de85fc]:
    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/api@1.4.58
    • @executor-js/config@1.5.38

@executor-js/plugin-onepassword@1.5.38

Patch Changes

  • Updated dependencies [6a924dd, 1de85fc]:
    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/api@1.4.58

@executor-js/plugin-openapi@1.5.38

Patch Changes

  • #1428 df01d91 Thanks @saga-agent! - Use the versioned Google Photos raw upload endpoint so generated upload tools send media to /v1/uploads instead of the invalid /uploads path.

  • Updated dependencies [6a924dd, 1de85fc]:

    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/api@1.4.58
    • @executor-js/config@1.5.38

@executor-js/plugin-toolkits@1.5.30

Patch Changes

  • Updated dependencies [6a924dd, 1de85fc]:
    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/api@1.4.58

@executor-js/codemode-core@1.5.38

executor@1.5.38

Patch Changes

  • #1417 046d67d Thanks @morluto! - Show policy and OAuth app removal failures in the UI, and keep success-only state unchanged when those writes fail.

  • #1511 7eb795d Thanks @RhysSullivan! - Fix: execute scripts that both emit() output and return a value no longer lose the returned value in MCP clients that ignore structuredContent — the return value is now appended to the tool-result content after the emitted items

  • #1418 d3610e3 Thanks @morluto! - Return an execution error when a Deno subprocess closes stdin instead of emitting an unhandled write failure.

  • #1507 541549a Thanks @RhysSullivan! - Fix: OAuth refresh rejections with non-spec error bodies (e.g. Datadog) now surface as expired connections with a reconnect path, and definitively dead refresh tokens are no longer retried against the authorization server

  • #1517 59a6640 Thanks @kitze! - Fix: OpenAPI query parameters that use form-style exploded objects now serialize each object field as a query parameter.

  • #1416 f1b617c Thanks @morluto! - Prevent provider service migration row loss caused by generated ID conflicts.

  • #1420 8c71744 Thanks @morluto! - Abort GraphQL tool calls that exceed the configured invocation timeout instead of waiting indefinitely for an upstream response.

  • Updated dependencies [6a924dd]:

    • @executor-js/sdk@1.5.38
    • @executor-js/local@1.4.4
    • @executor-js/api@1.4.58
    • @executor-js/runtime-quickjs@1.5.38

@executor-js/cloud@1.4.56

Patch Changes

  • Updated dependencies [df01d91, 6a924dd, 1de85fc]:
    • @executor-js/plugin-openapi@1.5.38
    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/runtime-dynamic-worker@1.4.4
    • @executor-js/api@1.4.58
    • @executor-js/execution@1.5.38
    • @executor-js/vite-plugin@0.0.55
    • @executor-js/cloudflare@0.0.37
    • @executor-js/host-mcp@1.4.4
    • @executor-js/mcp-apps-shell@1.4.6
    • @executor-js/plugin-graphql@1.5.38
    • @executor-js/plugin-mcp@1.5.38
    • @executor-js/plugin-toolkits@1.5.30
    • @executor-js/plugin-workos-vault@0.0.2
    • @executor-js/runtime-quickjs@1.5.38

@executor-js/host-selfhost@0.0.37

Patch Changes

  • #1525 c757e13 Thanks @RhysSullivan! - Export self-host traces to an OpenTelemetry collector when OTEL_EXPORTER_OTLP_ENDPOINT is set, so a slow request can be read as a waterfall rather than a wall-clock number. Off by default; logs are a separate opt-in via EXECUTOR_OTEL_EXPORT_LOGS.

  • Updated dependencies [df01d91, 6a924dd, 1de85fc]:

    • @executor-js/plugin-openapi@1.5.38
    • @executor-js/sdk@1.5.38
    • @executor-js/react@1.4.58
    • @executor-js/plugin-provider-service-split@0.0.9
    • @executor-js/app@1.4.4
    • @executor-js/analytics@0.1.2
    • @executor-js/api@1.4.58
    • @executor-js/execution@1.5.38
    • @executor-js/host-mcp@1.4.4
    • @executor-js/mcp-apps-shell@1.4.6
    • @executor-js/plugin-encrypted-secrets@0.0.37
    • @executor-js/plugin-graphql@1.5.38
    • @executor-js/plugin-mcp@1.5.38
    • @executor-js/plugin-toolkits@1.5.30
    • @executor-js/runtime-quickjs@1.5.38

@executor-js/e2e@0.0.35

Patch Changes

  • Updated dependencies [df01d91, 6a924dd]:
    • @executor-js/plugin-openapi@1.5.38
    • @executor-js/sdk@1.5.38
    • @executor-js/api@1.4.58
    • @executor-js/plugin-graphql@1.5.38
    • @executor-js/plugin-mcp@1.5.38
    • @executor-js/plugin-toolkits@1.5.30

@executor-js/example-all-plugins@0.0.56

Patch Changes

  • Updated dependencies [df01d91, 6a924dd]:
    • @executor-js/plugin-openapi@1.5.38
    • @executor-js/sdk@1.5.38
    • @executor-js/plugin-file-secrets@1.5.38
    • @executor-js/plugin-graphql@1.5.38
    • @executor-js/plugin-keychain@1.5.38
    • @executor-js/plugin-mcp@1.5.38
    • @executor-js/plugin-onepassword@1.5.38
    • @executor-js/plugin-workos-vault@0.0.2

@executor-js/example-docs-sdk-quickstart@0.0.41

Patch Changes

  • Updated dependencies [df01d91, 6a924dd]:
    • @executor-js/plugin-openapi@1.5.38
    • @executor-js/sdk@1.5.38

@executor-js/analytics@0.1.2

Patch Changes

  • Updated dependencies []:
    • @executor-js/execution@1.5.38

@executor-js/api@1.4.58

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38
    • @executor-js/execution@1.5.38
    • @executor-js/host-mcp@1.4.4

@executor-js/cloudflare@0.0.37

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38
    • @executor-js/api@1.4.58
    • @executor-js/execution@1.5.38
    • @executor-js/host-mcp@1.4.4

@executor-js/mcp-apps-shell@1.4.6

Patch Changes

  • Updated dependencies [1de85fc]:
    • @executor-js/react@1.4.58
    • @executor-js/runtime-quickjs@1.5.38

@executor-js/runtime-workerd-subprocess@0.0.10

Patch Changes

  • Updated dependencies []:
    • @executor-js/codemode-core@1.5.38

@executor-js/plugin-encrypted-secrets@0.0.37

Patch Changes

  • Updated dependencies [6a924dd]:
    • @executor-js/sdk@1.5.38

@executor-js/plugin-provider-service-split@0.0.9

Patch Changes

  • Updated dependencies [df01d91, 6a924dd]:
    • @executor-js/plugin-openapi@1.5.38
    • @executor-js/sdk@1.5.38

@executor-js/react@1.4.58

Patch Changes

  • #1240 1de85fc Thanks @jackulau! - Keep native <select> dropdown options readable in dark mode. The console themes through prefers-color-scheme and never sets a .dark class, so Tailwind dark: utilities never matched and the native option popup rendered with a light color scheme over dark text. NativeSelect now uses a solid themed surface (bg-popover) and pins color-scheme to the active theme, so the browser draws a matching, readable popup.

  • Updated dependencies [6a924dd]:

    • @executor-js/sdk@1.5.38
    • @executor-js/api@1.4.58

@executor-js/desktop@1.5.38

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 30, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
executor-marketing 745e64a Commit Preview URL

Branch Preview URL
Aug 03 2026, 08:52 PM

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 30, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
executor-cloud 745e64a Aug 03 2026, 08:52 PM

@github-actions

github-actions Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Cloudflare preview

Torn down — the PR is closed.

@pkg-pr-new

pkg-pr-new Bot commented Jul 30, 2026

Copy link
Copy Markdown

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1508

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1508

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1508

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1508

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1508

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1508

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1508

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1508

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1508

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1508

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1508

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1508

executor

npm i https://pkg.pr.new/executor@1508

commit: 6ecfb44

@RhysSullivan
RhysSullivan force-pushed the changeset-release/main branch 12 times, most recently from 5d443a6 to 745e64a Compare August 3, 2026 20:49
@RhysSullivan
RhysSullivan force-pushed the changeset-release/main branch from 745e64a to 6ecfb44 Compare August 4, 2026 17:42
@RhysSullivan
RhysSullivan merged commit 4c9e78a into main Aug 4, 2026
20 of 21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant