Version Packages - #2
Closed
marcelruhf wants to merge 1 commit into
Closed
marcelruhf wants to merge 1 commit into
marcelruhf wants to merge 1 commit into
Conversation
|
Understand this PR’s impact Explore downstream dependencies and potential security impact with Blast Radius. No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (73)
💤 Files with no reviewable changes (7)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 WalkthroughWalkthroughThe pull request finalizes patch releases across applications, packages, plugins, hosts, kernels, and examples. It adds release notes, updates package versions, and consolidates changeset entries. ChangesRelease metadata
Priority: ⬇️ Low Estimated code review effort: 1 (Trivial) | ~5 minutes Change: Other 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
Owner
Author
|
Closing: fork should release Docker/GHCR only, not npm. Manual docker publish instead. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened after prepare-release versioned packages on
changeset-release/mainbut could not create the PR itself (Actions was not allowed to create PRs). Workflow permissions are now write + create/approve PRs enabled so future prepare-release runs can open this automatically.Merging this will publish the version bump from pending changesets.
Note
Medium Risk
The PR is mostly versioning, but it releases OAuth scope/CIMD/DCR, Slack token handling, toolkit catalog sync, and integration policy UI changes that touch auth and tool access paths.
Overview
This Version Packages PR applies the pending Changesets release: it removes the consumed
.changesetentries, bumps versions across the monorepo (notablyexecutor1.6.11,@executor-js/sdk1.6.11,@executor-js/react1.4.74), and records the aggregated notes in each packageCHANGELOG.mdandbun.lock.What ships in this bump (already merged; this PR only versions and publishes it):
SDK / toolkits — OAuth scope discovery now requests advertised scopes up to an 8 KiB scope-string budget (replacing a 100-scope cap) and fixes health-check behavior when tool sync fails without a probe. Toolkit sessions narrow catalog reads by access pattern and stop blocking tools reads on TTL-only stale catalogs (background rebuild; stale/config-revision still gates within the grace budget).
React console — Tool policies from an account section apply to that connection; connection-level policy menus; members no longer see unusable policy controls; failed policy writes show the server reason. Restricted integration actions appear disabled with an admin explanation; members can browse the catalog and add personal connections.
CLI / self-host — Prefer browser OAuth when a matching client exists; accept Slack bot/user token envelopes on sign-in/refresh;
EXECUTOR_OAUTH_CIMD_ENABLED=falsefalls back to DCR when CIMD is unreachable for automatic MCP/OpenAPI connects.Merging publishes the versioned packages per the release workflow.
Reviewed by Cursor Bugbot for commit 335d8c4. Bugbot is set up for automated code reviews on this repo. Configure here.
Summary by cubic
Releases pending changesets as patch bumps across the workspace, updating package versions, changelogs, and the lockfile. Merging publishes the release.
Key patches in this release
EXECUTOR_OAUTH_CIMD_ENABLED=false; unsetting it restores CIMD without rewriting integration settings.Written for commit 335d8c4. Summary will update on new commits.
Summary by CodeRabbit
New Features
Bug Fixes
Performance