chore(release): version packages - #841
Open
github-actions[bot] wants to merge 1 commit into
Open
Conversation
Contributor
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 18, 2026 15:18
d704fcb to
bac3fa7
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 19, 2026 01:16
bac3fa7 to
77d5698
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 20, 2026 00:54
77d5698 to
2ddc1f0
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 20, 2026 12:35
2ddc1f0 to
63f9bb5
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 24, 2026 10:29
63f9bb5 to
87cdb62
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 25, 2026 10:12
87cdb62 to
dd304db
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 25, 2026 10:23
dd304db to
3d3680a
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 25, 2026 10:52
3d3680a to
5970d81
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 25, 2026 11:10
5970d81 to
8591568
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 25, 2026 11:15
8591568 to
0385c74
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 25, 2026 11:38
0385c74 to
7e6c71b
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 27, 2026 00:10
7e6c71b to
94fdc56
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 27, 2026 03:11
94fdc56 to
70ca0f1
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 27, 2026 14:08
70ca0f1 to
ca49ffb
Compare
github-actions
Bot
force-pushed
the
changeset-release/main
branch
from
August 27, 2026 15:24
ca49ffb to
de46880
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@chat-adapter/shared@4.39.0
Minor Changes
153bd96: guard Messenger attachment downloads against SSRF and oversized responses
downloadAttachmentin@chat-adapter/sharedaccepts an optionalhostsallowlist that restricts downloads, including redirect targets, to the given hosts and their subdomains. The Messenger adapter uses it to download attachment media only from Meta'sfbsbx.comandfbcdn.nethosts, with the shared SSRF guard, 25 MB size cap, and 30 second timeout. External fallback and link-share URLs are rejected before any network request.bb92688: secure anonymous attachment downloads against SSRF and oversized responses
@chat-adapter/sharedgainsdownloadAttachment, a guarded downloader that refuses private and internal addresses (as URL literals, through DNS resolution, and after redirects), decodes compressed responses, caps the body size at 25 MB, and bounds the whole download with a 30 second timeout. All of these are configurable, including the transport for proxied deployments.The Teams adapter uses it for anonymous attachment downloads. HTTPS attachments on any public host keep working, plain-HTTP URLs are refused, and the Bot Framework Emulator's loopback connector now uses bot authentication so local development keeps working.
b6fa24c: guard attachment downloads across the remaining adapters
Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers.
downloadAttachmentin@chat-adapter/sharednow resolvesheadersper hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts anonResponsehook to reject unexpected final responses before the body is read.Patch Changes
@chat-adapter/slack@4.39.0
Minor Changes
thread.signal, automatic session titles, and session stop/title-change events while preserving the legacyassistant_viewcompatibility path.Patch Changes
7c26965: prevent attachment downloads from sending credentials to untrusted hosts
b6fa24c: guard attachment downloads across the remaining adapters
Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers.
downloadAttachmentin@chat-adapter/sharednow resolvesheadersper hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts anonResponsehook to reject unexpected final responses before the body is read.Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
@chat-adapter/telegram@4.39.0
Minor Changes
replyin the Telegram adapter soThread.reply()threads the answer to its target instead of throwingNotImplementedError. The reference travels as Bot APIreply_parametersand covers text, rich messages, documents, attachments and media groups;allow_sending_without_replykeeps delivery working when the target has been deleted. Malformed reply target ids are rejected before anything is sent, and a rich-message gateway that rejectsreply_parametersfalls back to a regular threaded send.Patch Changes
eddcd7e: Return Telegram file downloads as portable ArrayBuffer data while preserving Buffer support in the shared attachment contract.
b6fa24c: guard attachment downloads across the remaining adapters
Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers.
downloadAttachmentin@chat-adapter/sharednow resolvesheadersper hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts anonResponsehook to reject unexpected final responses before the body is read.Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
chat@4.39.0
Minor Changes
thread.signal, automatic session titles, and session stop/title-change events while preserving the legacyassistant_viewcompatibility path.Patch Changes
16ea171: preserve adapter-returned thread ids when editing channel messages
eddcd7e: Return Telegram file downloads as portable ArrayBuffer data while preserving Buffer support in the shared attachment contract.
929878b: Allow JSX link buttons to include an explicit action ID.
500b7e6: enforce the conversation scope on write tools and stop trusting client-supplied message history in the web adapter
createChatToolsnow runs the same scope guard on write tools that read tools already used, so a thread or channel id the model supplies that resolves outside the scoped conversation is rejected before the write executes.sendDirectMessagetargets a user id rather than a conversation and stays gated by approval alone.The web adapter no longer treats the request body's
messagesarray as a source of conversation state. Only the latest user message is consumed, and tool parts are stripped from it so a browser cannot inject forged tool-call or approval state. Text, file, and custom data parts pass through unchanged; a message left with no parts after stripping is rejected with HTTP 400. Prior turns come from the state adapter whenpersistMessageHistoryis enabled.@chat-adapter/discord@4.39.0
Patch Changes
c4f709f: fix edits, deletes, and reactions on Discord thread starter messages
Operations on a thread's starter message now try the thread first and fall back to the parent channel when Discord reports the message as unknown. Threads on a text channel keep their starter message in the parent channel, so those operations used to fail; forum and media posts keep theirs in the thread and are unaffected.
Note that deleting a text-channel thread's starter message now deletes the message, which Discord cascades into deleting the thread.
b6fa24c: guard attachment downloads across the remaining adapters
Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers.
downloadAttachmentin@chat-adapter/sharednow resolvesheadersper hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts anonResponsehook to reject unexpected final responses before the body is read.Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
@chat-adapter/gchat@4.39.0
Patch Changes
@chat-adapter/github@4.39.0
Patch Changes
@chat-adapter/instagram@4.39.0
Patch Changes
@chat-adapter/linear@4.39.0
Patch Changes
@chat-adapter/messenger@4.39.0
Patch Changes
153bd96: guard Messenger attachment downloads against SSRF and oversized responses
downloadAttachmentin@chat-adapter/sharedaccepts an optionalhostsallowlist that restricts downloads, including redirect targets, to the given hosts and their subdomains. The Messenger adapter uses it to download attachment media only from Meta'sfbsbx.comandfbcdn.nethosts, with the shared SSRF guard, 25 MB size cap, and 30 second timeout. External fallback and link-share URLs are rejected before any network request.Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
@chat-adapter/notion@4.39.0
Patch Changes
@chat-adapter/teams@4.39.0
Patch Changes
63997ac: hydrate live Teams sender email without requiring Microsoft Graph permissions
bb92688: secure anonymous attachment downloads against SSRF and oversized responses
@chat-adapter/sharedgainsdownloadAttachment, a guarded downloader that refuses private and internal addresses (as URL literals, through DNS resolution, and after redirects), decodes compressed responses, caps the body size at 25 MB, and bounds the whole download with a 30 second timeout. All of these are configurable, including the transport for proxied deployments.The Teams adapter uses it for anonymous attachment downloads. HTTPS attachments on any public host keep working, plain-HTTP URLs are refused, and the Bot Framework Emulator's loopback connector now uses bot authentication so local development keeps working.
Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
@chat-adapter/twilio@4.39.0
Patch Changes
@chat-adapter/web@4.39.0
Patch Changes
500b7e6: enforce the conversation scope on write tools and stop trusting client-supplied message history in the web adapter
createChatToolsnow runs the same scope guard on write tools that read tools already used, so a thread or channel id the model supplies that resolves outside the scoped conversation is rejected before the write executes.sendDirectMessagetargets a user id rather than a conversation and stays gated by approval alone.The web adapter no longer treats the request body's
messagesarray as a source of conversation state. Only the latest user message is consumed, and tool parts are stripped from it so a browser cannot inject forged tool-call or approval state. Text, file, and custom data parts pass through unchanged; a message left with no parts after stripping is rejected with HTTP 400. Prior turns come from the state adapter whenpersistMessageHistoryis enabled.Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
@chat-adapter/whatsapp@4.39.0
Patch Changes
3e6e866: support business-scoped user IDs for inbound and outbound WhatsApp messages
7c26965: prevent attachment downloads from sending credentials to untrusted hosts
b6fa24c: guard attachment downloads across the remaining adapters
Slack, Discord, and WhatsApp attachment downloads now go through the shared guarded downloader: private and internal addresses are refused (as URL literals, through DNS resolution, and after redirects), responses are capped at 25 MB, and downloads time out after 30 seconds. Slack sends the bot token only on hops to trusted Slack origins, and WhatsApp keeps its access token on Meta's media hosts and the configured Graph origin. Telegram enforces the same size cap and timeout with the Web Fetch API so downloads keep working in runtimes like Cloudflare Workers.
downloadAttachmentin@chat-adapter/sharednow resolvesheadersper hop (pass a function to control what each redirect target receives), forwards the resolved headers to custom transports, and accepts anonResponsehook to reject unexpected final responses before the body is read.Updated dependencies [2ce2be0]
Updated dependencies [153bd96]
Updated dependencies [16ea171]
Updated dependencies [eddcd7e]
Updated dependencies [bb92688]
Updated dependencies [929878b]
Updated dependencies [500b7e6]
Updated dependencies [b6fa24c]
@chat-adapter/x@4.39.0
Patch Changes
@chat-adapter/state-ioredis@4.39.0
Patch Changes
@chat-adapter/state-memory@4.39.0
Patch Changes
@chat-adapter/state-pg@4.39.0
Patch Changes
@chat-adapter/state-redis@4.39.0
Patch Changes
@chat-adapter/tests@4.39.0