Repository navigation
v0.9.34: oauth reconnect conflicts, sandbox host drain, token sealing backfill, migrate guards - #9396
Merged
Merged
Conversation
waleedlatif1
commented
Oct 27, 2026
Collaborator
- docs(library): update best-conversational-ai-platforms-crm-helpdesk (docs(library): update best-conversational-ai-platforms-crm-helpdesk #9379)
- docs(library): update agentic-ai-coding-tools-what-they-are-and-how-the-top-options-compare (docs(library): update agentic-ai-coding-tools-what-they-are-and-how-the-top-options-compare #9380)
- docs(library): update ai-agent-examples-by-department-and-industry (docs(library): update ai-agent-examples-by-department-and-industry #9381)
- docs(library): update best-ai-workflow-builders (docs(library): update best-ai-workflow-builders #9382)
- fix(deps): update nodemailer to 10.1.7 and undici to 7.30.1 for address-parser and fetch advisories (fix(deps): update nodemailer to 10.1.7 and undici to 7.30.1 for address-parser and fetch advisories #9383)
- fix(ci): find the last IndexNow submission through its check run, not the run's job list (fix(ci): find the last IndexNow submission through its check run, not the run's job list #9384)
- improvement(changelog): lead with knowledge base portability (improvement(changelog): lead with knowledge base portability #9377)
- chore(docker): pin Node and prep images for a read-only root filesystem (chore(docker): pin Node and prep images for a read-only root filesystem #9387)
- fix(library): consolidate duplicate sections and FAQs added by repeated refreshes (fix(library): consolidate duplicate sections and FAQs added by repeated refreshes #9390)
- feat(tailscale): expand and validate API operations (feat(tailscale): expand and validate API operations #9385)
- fix(deps): backport zod's leading collection size check so oversized bodies stop validating every element (fix(deps): backport zod's leading collection size check so oversized bodies stop validating every element #9388)
- fix(isolated-vm): drain worker host deploys without failing in-flight executions (fix(isolated-vm): drain worker host deploys without failing in-flight executions #9389)
- fix(chat): normalize markdown list and heading spacing (fix(chat): normalize markdown list and heading spacing #9392)
- fix(credentials): send a conflicting OAuth reconnect back with a reason instead of a 500 (fix(credentials): send a conflicting OAuth reconnect back with a reason instead of a 500 #9391)
- feat(db): add manual Trigger.dev task for the account token sealing backfill (feat(db): add manual Trigger.dev task for the account token sealing backfill #9393)
- fix(ci): queue migrate runs per environment instead of letting them overlap (fix(ci): queue migrate runs per environment instead of letting them overlap #9394)
- fix(ci): only migrate an environment from its own branch (fix(ci): only migrate an environment from its own branch #9395)
…9379) Co-authored-by: Sim Pi Agent <pi@sim.ai>
…he-top-options-compare (#9380) Co-authored-by: Sim Pi Agent <pi@sim.ai>
* docs(library): update best-ai-workflow-builders * Pi Babysit: address PR #9382 feedback --------- Co-authored-by: Sim Pi Agent <pi@sim.ai>
…ss-parser and fetch advisories (#9383)
… the run's job list (#9384) The indexnow job resolved its diff base by listing each earlier main run's jobs at 100 per page, and GitHub's jobs API answers that page with HTTP 502 for every re-run workflow run. The first release scanned back to such a run and failed the step, so no submission ever recorded a success and every later run would fail the same way. Look up the one `indexnow` check run per commit instead (small, and it counts every attempt), treat a lookup that errors as no success, and when no success is in view diff from the oldest run in view so URLs no submission ever covered are still sent.
* docs(changelog): prepare Sim adds an Amazon EC2 block * improvement(changelog): lead with knowledge base portability * fix(changelog): clarify workspace-readable export limits
* feat(tailscale): expand and validate API operations * fix(tailscale): normalize controls and output schemas * fix(tailscale): preserve operation switch defaults
…bodies stop validating every element (#9388) * fix(deps): backport zod's leading collection size check so oversized bodies stop validating every element * fix(deps): stop later checks from reading an oversized container's unparsed elements
… executions (#9389) * fix(isolated-vm): drain worker host deploys without failing in-flight executions - Retire each remote worker connection at a max age (IVM_REMOTE_WORKER_MAX_AGE_MS, default 2 min) so a host the load balancer deregistered stops getting new executions and drains before its deregistration delay cuts the connections - Re-dispatch an execution whose connection closed before it was sent; one that may have reached the host is never re-run and fails with a clear error - Cap raw bytes a host connection may send before authenticating (16 KiB) - Return a cancelled call before reading the worker-target flag * fix(isolated-vm): address review on host drain - Keep counting a refused connection's bytes until its socket closes - Skip a redispatch the caller cancelled in between - Look up the owner's state after the admission waits - Parse IVM_REMOTE_WORKER_MAX_AGE_MS strictly, falling back below 1s - Hold the inspected execution open until the worker check finishes * test(isolated-vm): report an execution that fails before it is held
…on instead of a 500 (#9391) * fix(credentials): send a conflicting OAuth reconnect back with a reason instead of a 500 * fix(credentials): keep the refused grant's tokens on the identity's existing rows * fix(credentials): keep stored scope and resume connectors on a refused reconnect
…ackfill (#9393) * feat(db): add manual Trigger.dev task for the account token sealing backfill * fix(db): reject seal-account-tokens payloads without a boolean dryRun
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Contributor
[High impact] The PR reaches workflow-driven tailnet administration and shared sandbox and credential paths. The PR appears safe to merge, with a non-blocking gap in the IndexNow fallback. Findings
SummaryThis release improves OAuth reconnect errors, sandbox host draining, and migration safety.
|
Contributor
There was a problem hiding this comment.
All reported issues were addressed across 99 files
This PR changes a database schema or migrates data. Ultrareviews find 2.4x more serious bugs than standard reviews. Comment @cubic-dev-ai ultrareview to run one.
Turn on auto-fix | Re-trigger cubic
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.