Skip to content

Release 0.13.0 - #857

Open
blove wants to merge 1 commit into
mainfrom
blove/release-0.13.0
Open

blove wants to merge 1 commit into
mainfrom
blove/release-0.13.0

Conversation

@blove

@blove blove commented Sep 25, 2026

Copy link
Copy Markdown
Contributor

Release 0.13.0

This prepares the fixed group of 21 B4.run packages at 0.13.0 from main 980ba8a37. Both charts' appVersion moves to 0.13.0 (b4-app chart 0.2.21, b4-sandbox-infra chart 0.1.25). It consumes the 14 pending changesets and updates the package and example changelogs. This supersedes #856 (0.12.1).

All pending changesets are patch. The 0.x fixed-group Changesets config promotes a minor changeset to 1.0.0, so this follows the 0.12.0 pattern (#822): run pnpm run version, then retarget only the lines that command added, from 0.12.1 to 0.13.0 (111 occurrences). Older CHANGELOG sections are untouched. There are no changes to source, the publishing workflow, or the charts beyond the version bump.

What ships

  • Workspaces: editFile tool and ranged readFile; staged workspaces (sandbox.stagedWorkspaces, source upload plus workspace on POST /threads); read a thread's workspace over HTTP (sandbox.workspaceRead: "http", new thread.workspace operation).
  • Per-thread sandbox and permissions: sandbox.thread decides each thread's workspace, image and policy once at first admission. A thread can have its own permission allow-list and keeps "Always" grants on the thread's record.
  • Performance: batched workspace inspection for the Docker and Kubernetes backends (143 s → about 1 s over about 1.2k entries). Managed workspaces verify the source bundle once per session, not before every call.
  • Security fix: the node build target now carries the thread access policy in its build. A missing policy file at boot refuses to start instead of serving thread endpoints ungated.
  • Testing: responseSchema on createAgentHarness/defineEval; recordings that replay would reject now fail at record time; aimock ^1.43.0.
  • Fixes: a Docker command that exits before reading stdin no longer crashes the process with EPIPE. The sandbox network default is now honest: { mode: "allow" } with no unenforced denylist.

Verification

  • 21/21 publishable packages are at 0.13.0 and both charts' appVersion is 0.13.0. No 0.12.1 remains and no changeset files remain.
  • Run locally on Node 24, all passed: pnpm build, node scripts/check-docs.mjs (which scans the generated CHANGELOGs), pnpm check:release-inventory, pnpm test:release-integrity, pnpm test:sync-chart-appversion, pnpm verify:typescript-tooling-pack (smoke passed at 0.13.0), and git diff --check.

🤖 Generated with Claude Code

Run `pnpm run version` (changeset version + chart appVersion sync) on
main c075436, consuming the 14 pending patch changesets, then retarget
only the lines it added from 0.12.1 to 0.13.0: a minor changeset on the
0.x fixed group would promote every package to 1.0.0. The fixed group of
21 packages and both charts' appVersion go to 0.13.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@vercel

vercel Bot commented Sep 25, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
b4-run Ready Ready Preview Sep 25, 2026 11:12pm UTC

Request Review

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated approval: this PR received an intelligent (AI) code review. See the review comments on this PR.

This branch was successfully deployed

2 active deployments
Preview — 5fad27cf Deployed Sep 25, 2026 by vercel[bot]
vercel-preview — 5fad27cf Deployed Sep 25, 2026 by blove via vercel-native #2431
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant