Skip to content

ci(changesets): version packages#1328

Open
voltagent-bot wants to merge 1 commit into
mainfrom
changeset-release/main
Open

ci(changesets): version packages#1328
voltagent-bot wants to merge 1 commit into
mainfrom
changeset-release/main

Conversation

@voltagent-bot
Copy link
Copy Markdown
Member

@voltagent-bot voltagent-bot commented May 29, 2026

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@voltagent/server-core@2.1.18

Patch Changes

@voltagent/server-elysia@2.0.9

Patch Changes

@voltagent/server-hono@2.0.14

Patch Changes

@voltagent/serverless-hono@2.0.12

Patch Changes


Summary by cubic

Enforces workflow ownership checks for suspend and cancel control routes to prevent unauthorized actions. Publishes patch releases of server packages and updates all example apps (fixes #1316).

  • Dependencies
    • Bump: @voltagent/server-core@2.1.18, @voltagent/server-hono@2.0.14, @voltagent/serverless-hono@2.0.12, @voltagent/server-elysia@2.0.9; updated example app package.jsons and lockfile.

Written for commit 819df15. Summary will update on new commits.

Review in cubic

Summary by CodeRabbit

  • Bug Fixes
    • Workflow ownership is now validated before suspend and cancel control routes execute on workflow executions, ensuring proper authorization checks.

Review Change Stack

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented May 29, 2026

Deploying voltagent with  Cloudflare Pages  Cloudflare Pages

Latest commit: 819df15
Status: ✅  Deploy successful!
Preview URL: https://d7964db4.voltagent.pages.dev
Branch Preview URL: https://changeset-release-main.voltagent.pages.dev

View logs

@joggrbot

This comment has been minimized.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 29, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d506c4fb-ae81-4373-9d4b-5af57fe1c230

📥 Commits

Reviewing files that changed from the base of the PR and between 41cad53 and 819df15.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (87)
  • .changeset/workflow-control-ownership.md
  • examples/base/package.json
  • examples/github-repo-analyzer/package.json
  • examples/github-star-stories/package.json
  • examples/next-js-chatbot-starter-template/package.json
  • examples/with-a2a-server/package.json
  • examples/with-airtable/package.json
  • examples/with-amazon-bedrock/package.json
  • examples/with-anthropic/package.json
  • examples/with-auth/package.json
  • examples/with-cerbos/package.json
  • examples/with-chroma/package.json
  • examples/with-client-side-tools/package.json
  • examples/with-cloudflare-workers/package.json
  • examples/with-composio-mcp/package.json
  • examples/with-custom-endpoints/package.json
  • examples/with-dynamic-parameters/package.json
  • examples/with-dynamic-prompts/package.json
  • examples/with-feedback/package.json
  • examples/with-google-ai/package.json
  • examples/with-google-drive-mcp/server/package.json
  • examples/with-google-vertex-ai/package.json
  • examples/with-groq-ai/package.json
  • examples/with-guardrails/package.json
  • examples/with-hooks/package.json
  • examples/with-hugging-face-mcp/package.json
  • examples/with-langfuse/package.json
  • examples/with-mcp-elicitation/package.json
  • examples/with-mcp-server/package.json
  • examples/with-mcp/package.json
  • examples/with-memory-rest-api/package.json
  • examples/with-middleware/package.json
  • examples/with-nestjs/package.json
  • examples/with-netlify-functions/package.json
  • examples/with-nextjs-resumable-stream/package.json
  • examples/with-nextjs/package.json
  • examples/with-nuxt/package.json
  • examples/with-ollama/package.json
  • examples/with-openrouter/package.json
  • examples/with-peaka-mcp/package.json
  • examples/with-pinecone/package.json
  • examples/with-planagents/package.json
  • examples/with-playwright/package.json
  • examples/with-postgres/package.json
  • examples/with-qdrant/package.json
  • examples/with-rag-chatbot/package.json
  • examples/with-recipe-generator/package.json
  • examples/with-research-assistant/package.json
  • examples/with-resumable-streams/package.json
  • examples/with-retries-fallback/package.json
  • examples/with-retrieval/package.json
  • examples/with-slack/package.json
  • examples/with-subagents/package.json
  • examples/with-summarization/package.json
  • examples/with-supabase/package.json
  • examples/with-tavily-search/package.json
  • examples/with-thinking-tool/package.json
  • examples/with-tool-routing/package.json
  • examples/with-tools/package.json
  • examples/with-turso/package.json
  • examples/with-vector-search/package.json
  • examples/with-vercel-ai/package.json
  • examples/with-viteval/package.json
  • examples/with-voice-elevenlabs/package.json
  • examples/with-voice-openai/package.json
  • examples/with-voice-xsai/package.json
  • examples/with-voltagent-actions/package.json
  • examples/with-voltagent-exporter/package.json
  • examples/with-voltagent-managed-memory/package.json
  • examples/with-voltops-resumable-streams/package.json
  • examples/with-voltops-retrieval/package.json
  • examples/with-whatsapp/package.json
  • examples/with-workflow-chain/package.json
  • examples/with-workflow/package.json
  • examples/with-working-memory/package.json
  • examples/with-workspace/package.json
  • examples/with-xquik-tools/package.json
  • examples/with-youtube-to-blog/package.json
  • examples/with-zapier-mcp/package.json
  • packages/server-core/CHANGELOG.md
  • packages/server-core/package.json
  • packages/server-elysia/CHANGELOG.md
  • packages/server-elysia/package.json
  • packages/server-hono/CHANGELOG.md
  • packages/server-hono/package.json
  • packages/serverless-hono/CHANGELOG.md
  • packages/serverless-hono/package.json
💤 Files with no reviewable changes (1)
  • .changeset/workflow-control-ownership.md

📝 Walkthrough

Walkthrough

This PR bumps four core server packages to patch versions that validate workflow ownership before suspend/cancel control routes execute, and updates fifty-six example projects to use the new dependency versions.

Changes

Workflow Ownership Validation Release

Layer / File(s) Summary
Core package versions, dependencies, and changelogs
packages/server-core/package.json, packages/server-core/CHANGELOG.md, packages/server-hono/package.json, packages/server-hono/CHANGELOG.md, packages/serverless-hono/package.json, packages/serverless-hono/CHANGELOG.md, packages/server-elysia/package.json, packages/server-elysia/CHANGELOG.md
@voltagent/server-core is bumped to 2.1.18 with a changelog entry describing workflow ownership validation before suspend/cancel control routes act. @voltagent/server-hono, @voltagent/serverless-hono, and @voltagent/server-elysia are each bumped one patch/minor version and updated to depend on the new server-core release, with matching changelog entries.
Example project dependency updates
examples/*/package.json (56 projects)
All example projects are updated to consume the new patch versions of @voltagent/server-hono and @voltagent/serverless-hono in their dependencies blocks.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

  • VoltAgent/voltagent#1030: Implements workflow-ownership validation in the suspend/cancel control handlers before this PR bumps and releases the containing packages.

Poem

🐰 Hop along, version bump parade!
Fifty-six examples, all upgraded with aid,
Workflow control locks now tidy and tight—
Ownership checks make suspends just right! 🔒

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The PR title 'ci(changesets): version packages' is clear and directly describes the changeset automation that updates package versions for npm release.
Description check ✅ Passed The description is comprehensive, generated by the Changesets action. It clearly lists all released packages, their version bumps, and links to the underlying fix (PR #1318, Fixes #1316).
Linked Issues check ✅ Passed The PR correctly addresses issue #1316 by validating workflow ownership in suspend/cancel endpoints before mutations occur, as confirmed by the included changelog entries.
Out of Scope Changes check ✅ Passed All changes are scoped to version bumps and dependency updates across package.json files and changelogs, which are appropriate for a changesets release automation PR.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch changeset-release/main

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 88 files

Re-trigger cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG] Workflow suspend/cancel endpoints ignore the workflow ID path parameter

1 participant