Repository navigation
chore(release): 0.65.1 - #654
Merged
Merged
Conversation
Second Thoughts. Moves [Unreleased] under 0.65.1 in CHANGELOG.md and bumps package.json.
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 36 minutes. View limit details
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release v0.65.1: Second Thoughts
Changed
>=2.0.26 <2.3, and the optionaleffectpeer accepts 4.1.0. This closes the 2.2.6 and 2.2.7 load-check failures (#622, #647).aiSDK,@opentui/core,conventional-commits-parser,fast-xml-parser,@ai-sdk/openai-compatible, GitHub Actions, and the example apps. No runtime behaviour change.Fixed
speedfield the 1.3 SDK requires (ddc8245).Commit-level detail (77 commits)
Fixes
fix(anthropic): emit required usage speed for SDK 1.3 (
ddc8245)The SDK's Message.Usage now requires a nullable speed field. Include null on messages and message_start while keeping message_delta's narrower usage unchanged. Regenerate the typed wire golden and update the encoder test. Sync bun.lock and retain the runtime-only shrinkwrap.
Validation: bun run typecheck; 152 Anthropic and wire tests passed; build:tui and check-pack (87 files) passed; git diff --check.
Tests
test(anthropic): sync SDK 1.3 conformance and example runs (
a6a1bcd)The SDK adds usage.speed, so strict conformance and scripted client captures reject our newly valid responses until their fixtures match. Regenerate both from the pinned SDK and CI's complete client run. Keep the SDK's Apache-2.0 license beside the derived schema.
Validation: typecheck, 27 conformance tests, check-pack (87 files), git diff --check; CI generated all scripted example transcripts.
test(observability): scope the no-log assertion to the scrape route (
6ec1b01)The test "a successful scrape writes no log line" asserted logs.lines was empty. The capture is cleared in beforeEach, but a streamed request from an earlier test finished later and logged request.usage_missing (reason=disconnect) into the new capture. The test then failed on the merge commit b21b789 (CI run 43016837766, 3920 pass, 1 fail). It passes alone, 4 of 4 runs.
The test is meant to prove the scrape itself logs nothing, so it now filters the capture to lines naming /plugboard/metrics. Rejected: waiting for background work, which would slow every run to hide one race.
Validation: bun test test/http/observability.test.ts passes; full bun test run recorded in the PR.
Docs
docs(changelog): write the 0.65.0 notes and pin the README to 0.65.0 (
24d5f44)The release script needs a non-empty [Unreleased] section, and the README pins the version a user installs. Both were stale: [Unreleased] said "Nothing yet." and the pin was 0.64.0.
The notes cover the OpenCode 2.2.7 support (#646, closes #622 and #647), the routine dependency bumps merged since 0.64.0, and the Anthropic SDK 1.3 usage speed fix (ddc8245).
Validation: git diff origin/main shows only CHANGELOG.md and README.md.
docs(changelog): write the 0.65.1 notes; 0.65.0 was never published (
f3b0d8d)0.65.0 failed its merge-commit CI on a racing test, so nothing was tagged. Per release.ts, the fix goes forward as the next patch. This writes the [Unreleased] notes for 0.65.1, says that 0.65.0 was not published, and pins the README to 0.65.1.
Validation: git diff origin/main shows only CHANGELOG.md and README.md.
docs(changelog): point the Unreleased compare link at v0.64.0 (
8fcd995)The 0.65.0 release commit wrote [Unreleased]: .../compare/v0.65.0...HEAD. v0.65.0 was never tagged (its merge CI failed, see the 0.65.1 notes), so release.ts takes its previous version from that link and fails on git log v0.65.0..HEAD. Pointing it at v0.64.0, the last published tag, lets the next release compute its commit range.
Validation: bun run release 0.65.1 --title ... --push --dry-run is run after this merges.
CI and tooling
chore(deps-dev): bump @types/bun from 1.4.2 to 1.4.4 (
8212e48)Bumps @types/bun from 1.4.2 to 1.4.4.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump @anthropic-ai/sdk from 0.133.0 to 1.3.0 (
9bfa22b)Bumps @anthropic-ai/sdk from 0.133.0 to 1.3.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump openai from 7.32.0 to 7.45.1 (
2a11590)Bumps openai from 7.32.0 to 7.45.1.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(examples): refresh pydantic-ai scripted summary (
a1ad321)The dependency bump changes the recorded client version, so the scripted-run CI gate rejects the old summary. Regenerating the run changes only the version in its two summary files.
Validation: bun examples/_harness/run.ts pydantic-ai --target scripted reported pass; git diff --check passed.
ci(dependabot): auto-merge majors and group CodeQL updates (
421eb82)The owner chose auto-merge for all Dependabot updates once required checks pass. Keep the ruleset and merge-commit gate unchanged. Group CodeQL actions so init and analyze update to the same version together.
Validation: actionlint .github/workflows/dependabot-auto-merge.yml; git diff --check; AFT found zero diagnostics in both YAML files.
chore(examples): refresh openai-python scripted summary (
d64e9f7)The client bump changes the version recorded in the scripted run. Regenerating it changes only the two summary files and clears the examples freshness gate.
Validation: bun examples/_harness/run.ts openai-python --target scripted reported pass; git diff --check passed.
chore(examples): include LiteLLM MCP extra (
db49c35)LiteLLM 1.106.6 imports mcp during completion even in this client-only example. Select its supported MCP extra, relock, and regenerate the scripted transcript so the required scenarios can run again.
Validation: uv lock and bun examples/_harness/run.ts litellm-client --target scripted reported pass; git diff --check passed.
chore(deps-dev): bump the opencode-host group across 1 directory with 2 updates (
ec3975e)Bumps the opencode-host group with 2 updates in the / directory: @opencode/plugin and effect.
Updates
@opencode/pluginfrom 2.1.4 to 2.2.2Updates
effectfrom 4.0.1 to 4.1.0--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump ai from 7.0.137 to 7.0.163 (
58df934)Bumps ai from 7.0.137 to 7.0.163.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump @opentui/core from 0.5.17 to 0.8.2 (
59e78f5)Bumps @opentui/core from 0.5.17 to 0.8.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump conventional-commits-parser from 7.1.3 to 7.1.4 (
a86d3dd)Bumps conventional-commits-parser from 7.1.3 to 7.1.4.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump @ai-sdk/openai-compatible from 3.0.67 to 3.0.85 (
f3542fa)Bumps @ai-sdk/openai-compatible from 3.0.67 to 3.0.85.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps-dev): bump fast-xml-parser from 5.11.2 to 5.12.0 (
75ed527)Bumps fast-xml-parser from 5.11.2 to 5.12.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
Dependencies
chore(deps): bump pillow from 12.3.0 to 13.0.0 in /examples/smolagents (
526b0e6)Bumps pillow from 12.3.0 to 13.0.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump certifi in /examples/pydantic-ai (
87f99c3)Bumps certifi from 2026.7.22 to 2026.10.18.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump certifi in /examples/semantic-kernel (
4ebea2a)Bumps certifi from 2026.7.22 to 2026.10.18.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai in /examples/openai-python (
7795ef7)Bumps openai from 3.31.0 to 3.41.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai in /examples/openai-agents (
4861e88)Bumps openai from 3.36.1 to 3.41.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump langchain-core in /examples/langchain-python (
2f6e45f)Bumps langchain-core from 1.6.13 to 1.7.1.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai from 3.36.1 to 3.41.0 in /examples/pydantic-ai (
a8ce4bd)Bumps openai from 3.36.1 to 3.41.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump litellm from 1.106.2 to 1.106.6 in /examples/dspy (
e7b60e4)Bumps litellm from 1.106.2 to 1.106.6.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump litellm in /examples/litellm-client (
d8934ae)Bumps litellm from 1.105.1 to 1.106.6.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai in /examples/langchain-python (
817d046)Bumps openai from 3.36.1 to 3.41.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic-ai-slim[openai] in /examples/pydantic-ai (
a137c94)Bumps pydantic-ai-slim[openai] from 2.57.0 to 2.63.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): sync Bun lock for OpenAI dev update (
29fcd21)Dependabot updated the npm shrinkwrap with dev-only packages and left the frozen Bun lock stale. The runtime and peer dependencies have not changed, so retain the existing runtime-only shrinkwrap and update bun.lock to match the new OpenAI dev version.
Validation: bun install --frozen-lockfile; bun run build:tui; check-pack reported 87 matching files; bun run typecheck; bun test reported 3921 pass, 130 skip, 0 fail across 157 files.
chore(deps): bump pydantic from 2.14.1 to 2.14.2 in /examples/instructor (
4ce007f)Bumps pydantic from 2.14.1 to 2.14.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/pydantic-ai (
43c26c9)Bumps pydantic from 2.14.1 to 2.14.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/openai-agents (
ccfd53b)Bumps pydantic from 2.14.1 to 2.14.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump langchain-core in /examples/langchain-python (
35f21df)Bumps langchain-core from 1.7.1 to 1.7.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic from 2.14.1 to 2.14.2 in /examples/dspy (
5b45dcf)Bumps pydantic from 2.14.1 to 2.14.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): sync Bun types update lockfiles (
74fb484)Dependabot updated the npm shrinkwrap with dev-only packages but left the frozen Bun lock stale. Retain the existing runtime-only shrinkwrap and update bun.lock for the new @types/bun dev version.
Validation: bun install --frozen-lockfile; bun run typecheck; bun run build:tui; check-pack reported 87 matching files.
chore(deps): bump the codeql-action group with 2 updates (
a404d6a)Bumps the codeql-action group with 2 updates: github/codeql-action/init and github/codeql-action/analyze.
Updates
github/codeql-action/initfrom 4.39.0 to 4.39.1Updates
github/codeql-action/analyzefrom 4.39.0 to 4.39.1--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/langchain-python (
f6edbc8)Bumps pydantic from 2.14.1 to 2.14.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/litellm-client (
e67d656)Bumps pydantic from 2.14.1 to 2.14.2.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump langchain-openai in /examples/langchain-python (
a480ab2)Bumps langchain-openai from 1.7.2 to 1.7.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): align OpenCode 2.2.2 with its Effect pin (
c173784)OpenCode's plugin 2.2.2 requires Effect 4.0.6, not Dependabot's independent 4.1.0 update. Align the dev dependency and advertised peer ranges using host-bump.ts, then preserve the runtime-only npm shrinkwrap with matching peer metadata.
Validation: bun install --frozen-lockfile; typecheck; build:tui; check-pack (87 files); bun test (3921 pass, 130 skip, 0 fail).
build(deps): support opencode 2.2.5 (
fda5928)OpenCode published @opencode/plugin 2.2.5. The bump pins it, pins the effect version it uses, and widens the peer ranges only where needed. Opened and checked by .github/workflows/host-bump.yml.
chore(deps): bump pydantic in /examples/openai-agents (
c52d111)Bumps pydantic from 2.14.2 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump actions/setup-java from 6.1.0 to 6.2.0 (
3ff3525)Bumps actions/setup-java from 6.1.0 to 6.2.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
build(deps): support opencode 2.2.7 (
6583fff)OpenCode published @opencode/plugin 2.2.7. The bump pins it, pins the effect version it uses, and widens the peer ranges only where needed. Opened and checked by .github/workflows/host-bump.yml.
build(deps): regenerate npm-shrinkwrap for the 2.2.7 bump (
12e61aa)The bump widened the effect peer range (4.1.0) and moved @opencode/plugin to 2.2.7, but the shrinkwrap still described the old peer ranges. check-pack.ts failed with "npm-shrinkwrap.json peerDependencies differ from package.json: regenerate it" and the PR CI gate (package job) went red. Regenerated with the command in docs/packaging.md.
Validation: check-pack.ts ok (87 files), bun test 3921 pass / 0 fail, tsc --noEmit clean, opencode-load-check.ts against opencode 2.2.7 ok.
Fixes the failing package job on PR #646. Refs #647.
chore(deps): bump actions/setup-dotnet from 6.0.0 to 6.1.0 (
4ceb658)Bumps actions/setup-dotnet from 6.0.0 to 6.1.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/litellm-client (
9a5058b)Bumps pydantic from 2.14.2 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai in /examples/openai-agents (
0ec1e0c)Bumps openai from 3.41.0 to 3.46.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump litellm from 1.106.6 to 1.108.3 in /examples/dspy (
c943ee3)Bumps litellm from 1.106.6 to 1.108.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump litellm[mcp] in /examples/litellm-client (
02bab9f)Bumps litellm[mcp] from 1.106.6 to 1.108.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/pydantic-ai (
41fa99b)Bumps pydantic from 2.14.2 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai in /examples/langchain-python (
2d6ed32)Bumps openai from 3.41.0 to 3.46.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump the codeql-action group across 1 directory with 3 updates (
8a2d618)Bumps the codeql-action group with 3 updates in the / directory: github/codeql-action/init, github/codeql-action/analyze and github/codeql-action/upload-sarif.
Updates
github/codeql-action/initfrom 4.39.1 to 4.39.3Updates
github/codeql-action/analyzefrom 4.39.1 to 4.39.3Updates
github/codeql-action/upload-sariffrom 4.39.1 to 4.39.3--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/openai-python (
d28e7a0)Bumps pydantic from 2.14.1 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic from 2.14.2 to 2.14.3 in /examples/instructor (
bec8d06)Bumps pydantic from 2.14.2 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic from 2.14.2 to 2.14.3 in /examples/dspy (
24efd29)Bumps pydantic from 2.14.2 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai from 3.41.0 to 3.46.0 in /examples/pydantic-ai (
f0be59c)Bumps openai from 3.41.0 to 3.46.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump pydantic in /examples/langchain-python (
8ca97e4)Bumps pydantic from 2.14.2 to 2.14.3.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump openai in /examples/openai-python (
1fa3f4f)Bumps openai from 3.41.0 to 3.46.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): bump langchain-core in /examples/langchain-python (
bed845e)Bumps langchain-core from 1.7.2 to 1.7.6.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
build(deps): refresh bun.lock for the fast-xml-parser bump (
3fb0c45)The bump changed package.json but the committed bun.lock was not regenerated, so every CI job failed at "bun install --frozen-lockfile" (lockfile had changes). Refreshed with bun install.
Validation: bun install --frozen-lockfile exits 0 on this branch.
chore(deps): bump pydantic-ai-slim[openai] in /examples/pydantic-ai (
2a8cf8d)Bumps pydantic-ai-slim[openai] from 2.63.0 to 2.66.0.
--- updated-dependencies:
Signed-off-by: dependabot[bot] support@github.com
chore(deps): regenerate the litellm-client scripted runs for the bump (
99c0d06)The bump changed the example dependencies, so the committed scripted run no longer matched a fresh run and the "Examples (scripted runs are current)" gate failed. Regenerated with bun examples/_harness/run.ts litellm-client --target scripted; the run passes.
Validation: scripted run pass on this branch.
chore(deps): regenerate the openai-python scripted runs for the bump (
ac02148)The bump changed the example dependencies, so the committed scripted run no longer matched a fresh run and the "Examples (scripted runs are current)" gate failed. Regenerated with bun examples/_harness/run.ts openai-python --target scripted; the run passes.
Validation: scripted run pass on this branch.
chore(deps): regenerate the pydantic-ai scripted runs for the bump (
bccaa13)The bump changed the example dependencies, so the committed scripted run no longer matched a fresh run and the "Examples (scripted runs are current)" gate failed. Regenerated with bun examples/_harness/run.ts pydantic-ai --target scripted; the run passes.
Validation: scripted run pass on this branch.
chore(deps): regenerate the langchain-python scripted runs for the bump (
2baf2cf)The bump changed the example dependencies, so the committed scripted run no longer matched a fresh run and the "Examples (scripted runs are current)" gate failed. Regenerated with bun examples/_harness/run.ts langchain-python --target scripted; the run passes.
Validation: scripted run pass on this branch.
build(deps): regenerate npm-shrinkwrap for the fast-xml-parser bump (
f54b5fc)fast-xml-parser is a runtime dependency. The bump changed package.json but not the shrinkwrap, so check-pack.ts failed ("npm-shrinkwrap.json dependencies differ from package.json") and the package gate went red. Regenerated with the command in docs/packaging.md.
Validation: bun .github/scripts/check-pack.ts prints "pack ok: 87 files".
build(deps): refresh bun.lock for this bump (
cd36d28)The bump changed package.json but the committed bun.lock was out of date, so every CI job failed at "bun install --frozen-lockfile". Refreshed with bun install.
Validation: bun install --frozen-lockfile exits 0 on this branch (install exit 0 before refresh).
build(deps): refresh bun.lock for this bump (
08037d2)The bump changed package.json but the committed bun.lock was out of date, so every CI job failed at "bun install --frozen-lockfile". Refreshed with bun install.
Validation: bun install --frozen-lockfile exits 0 on this branch (install exit 0 before refresh).
build(deps): refresh bun.lock for this bump (
45e85bd)The bump changed package.json but the committed bun.lock was out of date, so every CI job failed at "bun install --frozen-lockfile". Refreshed with bun install.
Validation: bun install --frozen-lockfile exits 0 on this branch (install exit 0 before refresh).
build(deps): refresh bun.lock for this bump (
f3f3271)The bump changed package.json but the committed bun.lock was out of date, so every CI job failed at "bun install --frozen-lockfile". Refreshed with bun install.
Validation: bun install --frozen-lockfile exits 0 on this branch (install exit 0 before refresh).
build(deps): regenerate npm-shrinkwrap for this bump (
a3c69f6)The shrinkwrap pinned effect and @opencode/plugin, optional peers that must not ship, so check-pack.ts failed and the package gate went red. Regenerated with the command in docs/packaging.md; check-pack.ts now prints "pack ok".
build(deps): regenerate npm-shrinkwrap for this bump (
a9bc1d1)The shrinkwrap pinned effect and @opencode/plugin, optional peers that must not ship, so check-pack.ts failed and the package gate went red. Regenerated with the command in docs/packaging.md; check-pack.ts now prints "pack ok".
build(deps): regenerate npm-shrinkwrap for this bump (
3e7e3fd)The shrinkwrap pinned effect and @opencode/plugin, optional peers that must not ship, so check-pack.ts failed and the package gate went red. Regenerated with the command in docs/packaging.md; check-pack.ts now prints "pack ok".
build(deps): regenerate npm-shrinkwrap for this bump (
cdad8a3)The shrinkwrap pinned effect and @opencode/plugin, optional peers that must not ship, so check-pack.ts failed and the package gate went red. Regenerated with the command in docs/packaging.md; check-pack.ts now prints "pack ok".