Repository navigation
Version Packages - #2340
Open
RhysSullivan wants to merge 1 commit into
Open
Version Packages#2340RhysSullivan wants to merge 1 commit into
RhysSullivan wants to merge 1 commit into
Conversation
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-marketing | 60836a1 | Commit Preview URL Branch Preview URL |
Oct 27 2026, 05:10 AM |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-cloud | 60836a1 | Oct 27 2026, 05:11 AM |
Contributor
Cloudflare preview
Sign-in is Cloudflare Access (one-time PIN to an allowed email). The preview has its own database and encryption key; it is destroyed when this PR closes. |
@executor-js/codemode-core
@executor-js/runtime-quickjs
@executor-js/plugin-file-secrets
@executor-js/plugin-graphql
@executor-js/plugin-keychain
@executor-js/plugin-mcp
@executor-js/plugin-onepassword
@executor-js/plugin-openapi
@executor-js/cli
@executor-js/config
@executor-js/execution
@executor-js/sdk
executor
commit: |
RhysSullivan
force-pushed
the
changeset-release/main
branch
6 times, most recently
from
October 25, 2026 21:54
0fd7916 to
0ae64a5
Compare
RhysSullivan
force-pushed
the
changeset-release/main
branch
from
October 27, 2026 05:09
0ae64a5 to
60836a1
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.
Releases
@executor-js/cli@0.2.62
Patch Changes
56aec8b,fb8f45a]:@executor-js/config@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/execution@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/sdk@1.6.12
Patch Changes
#2402
56aec8bThanks @RhysSullivan! - Keep OAuth requests within the scopes a dynamically registered client was registered for. DCR clients now persist the scopes their registration asked for (oauth_client.origin_requested_scopes) and the scopes the server registered, from the registration response (oauth_client.origin_scopes, RFC 7591 §3.2.1). Reuse picks a client only when its registration covers the requested scopes, so reconnecting after a server adds scopes registers a new client instead of pairing the old one with scopes the server refuses withinvalid_scope.oauth.startnarrows discovered scopes to the server-registered set and fails with a clear error when declared scopes fall outside it. Clients registered before this release have no recorded scopes and are registered again on their next connect; existing connections keep refreshing through them.#2337
fb8f45aThanks @RhysSullivan! - Hosts can pause every change to a workspace withworkspaceWriteGate: connection and OAuth writes, OAuth completion (before the code is exchanged) and OAuth token refreshes are refused with the host's message, while reads and tool calls keep working. The OAuth callback popup now shows why a refusal the user can act on happened. Executor Cloud uses this to freeze an organization while it moves to Executor v2, refuses changes to it once it has moved, and opens a moved organization's dashboard in v2.@executor-js/vite-plugin@0.0.72
Patch Changes
56aec8b,fb8f45a]:@executor-js/runtime-quickjs@1.6.12
Patch Changes
@executor-js/plugin-desktop-settings@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-example@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-file-secrets@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-graphql@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-keychain@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-mcp@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-onepassword@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-openapi@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-toolkits@1.5.47
Patch Changes
56aec8b,fb8f45a]:@executor-js/codemode-core@1.6.12
executor@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/cloud@1.4.73
Patch Changes
#2391
083209aThanks @RhysSullivan! - An MCP request that reaches a session while the session is being torn down now gets the "Session not found" protocol error instead of a 500.#2337
fb8f45aThanks @RhysSullivan! - Hosts can pause every change to a workspace withworkspaceWriteGate: connection and OAuth writes, OAuth completion (before the code is exchanged) and OAuth token refreshes are refused with the host's message, while reads and tool calls keep working. The OAuth callback popup now shows why a refusal the user can act on happened. Executor Cloud uses this to freeze an organization while it moves to Executor v2, refuses changes to it once it has moved, and opens a moved organization's dashboard in v2.#2388
f08d88dThanks @RhysSullivan! - Executor Cloud forwards MCP requests that usemode=passthroughfor a workspace that has moved to Executor v2, instead of refusing them. v2 serves its own tools for them.#2356
b0d1089Thanks @RhysSullivan! - Executor Cloud hands a signed-in member of a workspace that has moved to Executor v2 to v2 with a short-lived signed token, so v2 opens the workspace without asking them to sign in again. It is off untilV2_SESSION_HANDOFF_SECRETis set.Updated dependencies [
56aec8b,fb8f45a]:@executor-js/host-selfhost@0.0.54
Patch Changes
56aec8b,fb8f45a]:@executor-js/local@1.6.12
Patch Changes
56aec8b,fb8f45a]:@executor-js/e2e@0.0.52
Patch Changes
56aec8b,fb8f45a]:@executor-js/example-all-plugins@0.0.73
Patch Changes
56aec8b,fb8f45a]:@executor-js/example-docs-sdk-quickstart@0.0.58
Patch Changes
56aec8b,fb8f45a]:@executor-js/analytics@0.1.19
Patch Changes
@executor-js/api@1.4.75
Patch Changes
#2337
fb8f45aThanks @RhysSullivan! - Hosts can pause every change to a workspace withworkspaceWriteGate: connection and OAuth writes, OAuth completion (before the code is exchanged) and OAuth token refreshes are refused with the host's message, while reads and tool calls keep working. The OAuth callback popup now shows why a refusal the user can act on happened. Executor Cloud uses this to freeze an organization while it moves to Executor v2, refuses changes to it once it has moved, and opens a moved organization's dashboard in v2.Updated dependencies [
56aec8b,fb8f45a]:@executor-js/cloudflare@0.0.54
Patch Changes
56aec8b,fb8f45a]:@executor-js/mcp-apps-shell@1.4.23
Patch Changes
@executor-js/runtime-workerd-subprocess@0.0.27
Patch Changes
@executor-js/onboarding-demo@0.0.7
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-encrypted-secrets@0.0.54
Patch Changes
56aec8b,fb8f45a]:@executor-js/plugin-provider-service-split@0.0.26
Patch Changes
56aec8b,fb8f45a]:@executor-js/react@1.4.75
Patch Changes
56aec8b,fb8f45a]:@executor-js/desktop@1.6.12