Repository navigation
chore(release): version packages - #149
Merged
Merged
Conversation
github-actions
Bot
force-pushed
the
changeset-release/main
branch
8 times, most recently
from
November 8, 2026 00:27
0e79b76 to
b19ba90
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
November 8, 2026 00:29
b19ba90 to
97dbd49
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@cloudhal/[email protected]
Patch Changes
mcp.oauthset, the 401 of/mcpcarries aWWW-Authenticatechallenge naming the RFC 9728 protected resource metadata and the scopes to request, the metadata is served at both well-known forms, and a token principal calling a tool without a scope its member's role holds gets a403 insufficient_scopestep-up challenge. Deployments do not set the option yet: the authorization server is phase 2.@cloudhal/[email protected]
Patch Changes
@cloudhal/[email protected]
Patch Changes
mcp.oauthset, the 401 of/mcpcarries aWWW-Authenticatechallenge naming the RFC 9728 protected resource metadata and the scopes to request, the metadata is served at both well-known forms, and a token principal calling a tool without a scope its member's role holds gets a403 insufficient_scopestep-up challenge. Deployments do not set the option yet: the authorization server is phase 2.cloudhal studiocan be reached from beyond the machine it runs on.--host <addr>(orCLOUDHAL_HOST) is the address it listens on (default127.0.0.1;0.0.0.0in a container),--base-url <url>(orCLOUDHAL_BASE_URL) the public origin behind a reverse proxy — Better Auth'sbaseURL(its session cookies areSecurefor https), a trusted origin for the API's CSRF check, and the URL the command prints — and--behind-proxy(orCLOUDHAL_BEHIND_PROXY=1) makes the server take each request's scheme and host from the proxy'sX-Forwarded-Proto/X-Forwarded-Host(serveNode's newtrustProxy, withforwardedUrl/forwardedRequestin@cloudhal/api/node); without the flag those headers are ignored, as before.--init-if-empty(orCLOUDHAL_INIT=<starter>, with--starter,--name/CLOUDHAL_SITE_NAME) creates the project the waycloudhal initdoes when the folder has nocloudhal.json, so a container starts on an empty volume; a folder with other files is refused, asinitrefuses it.studio()returns the boundportnext tourl.cloudhal dev --hostnow also takes an address (--host [<addr>]; alone it still means every interface).@cloudhal/[email protected]
Patch Changes
@cloudhal/astro-renderer,@cloudhal/cliand@cloudhal/cloudflareuse wrangler 4.152.0 (itscreateTestHarnessruns Miniflare 5.20261019.2-beta, andwrangler deployuploads source maps by default since 4.150). The Studio shipped in@cloudhal/cliis built with Tiptap 3.32.0 and@codemirror/language6.13.1. The Rust crate validates with jsonschema 0.60.2, and the monorepo lints and formats with Biome 2.6.2 (Markdown and YAML formatting stay off).@cloudhal/astro-renderer,@cloudhal/cliand@cloudhal/cloudflareuse wrangler 4.158.0, and@cloudhal/astro-rendereruses@astrojs/cloudflare14.4.4, which brings@cloudflare/vite-plugin1.67 (its peer range is wrangler ^4.156.1, so the two move together).@astrojs/cloudflare14.4 needs Astro 7.4, so projects move to Astro 7.4.7: the blog starter asks for it, and theastropeer range of@cloudhal/astro-rendererand@cloudhal/cliis now ^7.4.0 (was ^7.3.0). The blog starter asks for wrangler ^4.158.0.@cloudhal/[email protected]
Patch Changes
@cloudhal/astro-renderer,@cloudhal/cliand@cloudhal/cloudflareuse wrangler 4.152.0 (itscreateTestHarnessruns Miniflare 5.20261019.2-beta, andwrangler deployuploads source maps by default since 4.150). The Studio shipped in@cloudhal/cliis built with Tiptap 3.32.0 and@codemirror/language6.13.1. The Rust crate validates with jsonschema 0.60.2, and the monorepo lints and formats with Biome 2.6.2 (Markdown and YAML formatting stay off).@cloudhal/astro-renderer,@cloudhal/cliand@cloudhal/cloudflareuse wrangler 4.158.0, and@cloudhal/astro-rendereruses@astrojs/cloudflare14.4.4, which brings@cloudflare/vite-plugin1.67 (its peer range is wrangler ^4.156.1, so the two move together).@astrojs/cloudflare14.4 needs Astro 7.4, so projects move to Astro 7.4.7: the blog starter asks for it, and theastropeer range of@cloudhal/astro-rendererand@cloudhal/cliis now ^7.4.0 (was ^7.3.0). The blog starter asks for wrangler ^4.158.0.ghcr.io/cloudhal-dev/cloudhal, built from this release for linux/amd64 and linux/arm64 (tagsX.Y.Z,X.Y,latest;edgenightly frommain). One container runscloudhal studio— Studio, the API and the MCP endpoint — with the project, its SQLite database and media on a/datavolume; the first start on an empty volume scaffolds the project.site-buildinside the container writes the public site as static HTML, which the compose file's optional Caddy serves with automatic TLS next to Studio. Guide: docs/guides/self-host.md.@cloudhal/clino longer contains seroval 1.6.8 (a transitive dependency of@tanstack/react-router), which GHSA-9wx9-5pv9-3349 and GHSA-f86p-h4j2-7qgj affect: the lockfile now resolves seroval 1.7.9 and seroval-plugins 1.7.8. In the same sweep the monorepo lockfiles move undici to 7.30.2 (an override for the 7.28.0 that Miniflare 4 pins; GHSA-2m5v-pch6-74hx, GHSA-4w7w-5xrc-9h26, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c, GHSA-rfgv-xxqx-mfg5, GHSA-w293-vg96-wgc3, GHSA-4cwx-7wf7-3272 and the medium/low undici 7.x advisories patched in 7.29.0 to 7.30.1) and 8.12.4 (the same advisories on the 8.x line, through astro's unifont), rustls to 0.23.46 (GHSA-c8m5-c952-6cm4, GHSA-h2v8-394m-p7vv, GHSA-w44r-93j7-qv28, GHSA-vp88-798v-h67f), and, found bycargo audit, rustls-webpki to 0.103.16 (RUSTSEC-2026-0382), webpki-root-certs to 1.0.11 (RUSTSEC-2026-0383) and tokio to 1.54.1 (RUSTSEC-2026-0386, unsoundness). undici and rustls are development-time dependencies of this repository only; no published package depends on them.cloudhal studiocan be reached from beyond the machine it runs on.--host <addr>(orCLOUDHAL_HOST) is the address it listens on (default127.0.0.1;0.0.0.0in a container),--base-url <url>(orCLOUDHAL_BASE_URL) the public origin behind a reverse proxy — Better Auth'sbaseURL(its session cookies areSecurefor https), a trusted origin for the API's CSRF check, and the URL the command prints — and--behind-proxy(orCLOUDHAL_BEHIND_PROXY=1) makes the server take each request's scheme and host from the proxy'sX-Forwarded-Proto/X-Forwarded-Host(serveNode's newtrustProxy, withforwardedUrl/forwardedRequestin@cloudhal/api/node); without the flag those headers are ignored, as before.--init-if-empty(orCLOUDHAL_INIT=<starter>, with--starter,--name/CLOUDHAL_SITE_NAME) creates the project the waycloudhal initdoes when the folder has nocloudhal.json, so a container starts on an empty volume; a folder with other files is refused, asinitrefuses it.studio()returns the boundportnext tourl.cloudhal dev --hostnow also takes an address (--host [<addr>]; alone it still means every interface).@cloudhal/[email protected]
Patch Changes
@cloudhal/astro-renderer,@cloudhal/cliand@cloudhal/cloudflareuse wrangler 4.152.0 (itscreateTestHarnessruns Miniflare 5.20261019.2-beta, andwrangler deployuploads source maps by default since 4.150). The Studio shipped in@cloudhal/cliis built with Tiptap 3.32.0 and@codemirror/language6.13.1. The Rust crate validates with jsonschema 0.60.2, and the monorepo lints and formats with Biome 2.6.2 (Markdown and YAML formatting stay off).@cloudhal/astro-renderer,@cloudhal/cliand@cloudhal/cloudflareuse wrangler 4.158.0, and@cloudhal/astro-rendereruses@astrojs/cloudflare14.4.4, which brings@cloudflare/vite-plugin1.67 (its peer range is wrangler ^4.156.1, so the two move together).@astrojs/cloudflare14.4 needs Astro 7.4, so projects move to Astro 7.4.7: the blog starter asks for it, and theastropeer range of@cloudhal/astro-rendererand@cloudhal/cliis now ^7.4.0 (was ^7.3.0). The blog starter asks for wrangler ^4.158.0.@cloudhal/[email protected]
Patch Changes
@cloudhal/[email protected]
Patch Changes
[email protected]
Patch Changes
@cloudhal/[email protected]
Patch Changes
@cloudhal/[email protected]
Patch Changes
@cloudhal/[email protected]
Patch Changes
@cloudhal/[email protected]
No changes in this release.