From 9184be3afbba93b682c8f77ab642496c79b6f012 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 19:19:55 +0000 Subject: [PATCH] Version Packages --- .changeset/authorize-container-http.md | 5 ---- .changeset/calm-ravens-sync.md | 5 ---- .changeset/connect-names-host-paths.md | 5 ---- .changeset/container-launch-spec.md | 5 ---- .changeset/exec-env-allowlist.md | 5 ---- .changeset/quiet-files-stay.md | 5 ---- .changeset/remove-upstream-url.md | 5 ---- .changeset/rename-ws-endpoint-to-api.md | 5 ---- .changeset/sync-node-modules.md | 5 ---- .changeset/tall-pumas-shave.md | 5 ---- docs/README.md | 2 +- examples/container/Dockerfile | 2 +- examples/egress/Dockerfile | 2 +- examples/mcp/Dockerfile | 2 +- .../Dockerfile.workspace | 2 +- examples/think/Dockerfile | 2 +- examples/tutorial/Dockerfile | 2 +- package-lock.json | 8 +++--- .../computer-computerd-linux-x64/README.md | 2 +- .../computer-computerd-linux-x64/package.json | 2 +- packages/computer/CHANGELOG.md | 26 +++++++++++++++++++ packages/computer/package.json | 2 +- packages/computerd/CHANGELOG.md | 8 ++++++ packages/computerd/package.json | 2 +- packages/dofs/CHANGELOG.md | 2 ++ packages/dofs/package.json | 2 +- packages/rpc/CHANGELOG.md | 7 +++++ packages/rpc/package.json | 2 +- 28 files changed, 60 insertions(+), 67 deletions(-) delete mode 100644 .changeset/authorize-container-http.md delete mode 100644 .changeset/calm-ravens-sync.md delete mode 100644 .changeset/connect-names-host-paths.md delete mode 100644 .changeset/container-launch-spec.md delete mode 100644 .changeset/exec-env-allowlist.md delete mode 100644 .changeset/quiet-files-stay.md delete mode 100644 .changeset/remove-upstream-url.md delete mode 100644 .changeset/rename-ws-endpoint-to-api.md delete mode 100644 .changeset/sync-node-modules.md delete mode 100644 .changeset/tall-pumas-shave.md diff --git a/.changeset/authorize-container-http.md b/.changeset/authorize-container-http.md deleted file mode 100644 index 8899fceb..00000000 --- a/.changeset/authorize-container-http.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -The container's HTTP surface now requires a bearer token. The host generates a secret, passes it to the container as RPC_CLIENT_SECRET at launch, and sends it on /connect. Readiness at /health stays open, and leaving the variable unset disables the checks. Before opening a session the host checks that the container refuses an unauthenticated request and fails the connect if it does not, so a container or image predating this has to be recycled. The container's dial-back to the host carries the same secret, and the host refuses an upgrade that does not present it. diff --git a/.changeset/calm-ravens-sync.md b/.changeset/calm-ravens-sync.md deleted file mode 100644 index b79ac8b0..00000000 --- a/.changeset/calm-ravens-sync.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": patch ---- - -Create missing parent directories while applying sync entries. diff --git a/.changeset/connect-names-host-paths.md b/.changeset/connect-names-host-paths.md deleted file mode 100644 index b1cad5d0..00000000 --- a/.changeset/connect-names-host-paths.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -The /connect caller now provides both API & healthcheck endpoints. The container no longer builds either path itself, so a host is free to serve them wherever it likes. diff --git a/.changeset/container-launch-spec.md b/.changeset/container-launch-spec.md deleted file mode 100644 index 7cc4b90c..00000000 --- a/.changeset/container-launch-spec.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -`IWorkspaceContainerAPI.start()` and `restart()` now take a single `ContainerLaunchSpec` of `{ env, enableInternet }` instead of two arguments, and return which of `launched`, `adopted` or `relaunched` happened. Each launch records its spec, and a container found already running is relaunched unless it matches, because neither the environment nor the internet flag can be changed on a live container. A container started outside this API has no record and is relaunched rather than trusted. `setInactivityTimeout()` joins the interface so a caller that pre-starts containers, such as a warm pool, does not need to reach past it. diff --git a/.changeset/exec-env-allowlist.md b/.changeset/exec-env-allowlist.md deleted file mode 100644 index a9dc991a..00000000 --- a/.changeset/exec-env-allowlist.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -A command run through the shell no longer inherits the container's whole environment. It receives PATH, HOME, TMPDIR, TZ, LANG, TERM, the LC_ family, and any variable prefixed COMPUTER_VAR_, which arrives with the prefix stripped so COMPUTER_VAR_NODE_ENV becomes NODE_ENV. A workspace that relied on some other inherited variable needs the prefix. diff --git a/.changeset/quiet-files-stay.md b/.changeset/quiet-files-stay.md deleted file mode 100644 index f1f2d49e..00000000 --- a/.changeset/quiet-files-stay.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": patch ---- - -Fix issue where the edit tool would rewrite the whole file when oldText doesn't match exactly. diff --git a/.changeset/remove-upstream-url.md b/.changeset/remove-upstream-url.md deleted file mode 100644 index a1ffec68..00000000 --- a/.changeset/remove-upstream-url.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -The UPSTREAM_URL environment variable has been removed along with the container's own sync loop. Syncing is driven by whichever peer holds the other end of the Cap'n Web session. diff --git a/.changeset/rename-ws-endpoint-to-api.md b/.changeset/rename-ws-endpoint-to-api.md deleted file mode 100644 index d21fef3f..00000000 --- a/.changeset/rename-ws-endpoint-to-api.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -The Cap'n Web /ws endpoint has been renamed to /api at both ends of the connection. A durable object that routes the container's outbound upgrade must match /api in its own fetch handler. Support for the Cap'n Web HTTP batch transport has been removed, so /api carries a websocket only. diff --git a/.changeset/sync-node-modules.md b/.changeset/sync-node-modules.md deleted file mode 100644 index 31904923..00000000 --- a/.changeset/sync-node-modules.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": patch ---- - -Sync `node_modules` by default so package manager installs persist across workspace runtimes. diff --git a/.changeset/tall-pumas-shave.md b/.changeset/tall-pumas-shave.md deleted file mode 100644 index f124feff..00000000 --- a/.changeset/tall-pumas-shave.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@cloudflare/computer": minor ---- - -Make the artifacts session id optional: `createArtifact(binding)` now returns a client over the whole namespace rather than requiring a session to scope by. See [./docs/15_artifacts_interface.md](./docs/15_artifacts_interface.md) for details. diff --git a/docs/README.md b/docs/README.md index ee289137..acec5888 100644 --- a/docs/README.md +++ b/docs/README.md @@ -63,7 +63,7 @@ copies the prebuilt binary out of the public GHCR image and into a thin Debian base: ```dockerfile -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM debian:stable-slim diff --git a/examples/container/Dockerfile b/examples/container/Dockerfile index 23f15561..a5431973 100644 --- a/examples/container/Dockerfile +++ b/examples/container/Dockerfile @@ -14,7 +14,7 @@ # back to the userspace shim transparently. -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM debian:stable-slim diff --git a/examples/egress/Dockerfile b/examples/egress/Dockerfile index e34a5620..47b8f7f5 100644 --- a/examples/egress/Dockerfile +++ b/examples/egress/Dockerfile @@ -1,4 +1,4 @@ -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM debian:bookworm-slim diff --git a/examples/mcp/Dockerfile b/examples/mcp/Dockerfile index a547322f..48a95717 100644 --- a/examples/mcp/Dockerfile +++ b/examples/mcp/Dockerfile @@ -1,4 +1,4 @@ -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM node:22-bookworm-slim diff --git a/examples/think-compare-runtimes/Dockerfile.workspace b/examples/think-compare-runtimes/Dockerfile.workspace index 3593e3d1..78ef135e 100644 --- a/examples/think-compare-runtimes/Dockerfile.workspace +++ b/examples/think-compare-runtimes/Dockerfile.workspace @@ -12,7 +12,7 @@ # that do not expose /dev/fuse. -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM --platform=linux/amd64 node:22-trixie-slim diff --git a/examples/think/Dockerfile b/examples/think/Dockerfile index 99f68703..065dca68 100644 --- a/examples/think/Dockerfile +++ b/examples/think/Dockerfile @@ -9,7 +9,7 @@ # surface reads and writes. -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM debian:stable-slim diff --git a/examples/tutorial/Dockerfile b/examples/tutorial/Dockerfile index 8c8658ee..ad990296 100644 --- a/examples/tutorial/Dockerfile +++ b/examples/tutorial/Dockerfile @@ -8,7 +8,7 @@ # through the Workspace is on disk for pandoc to read, and the PDF # pandoc writes syncs back to the durable object. -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM debian:stable-slim diff --git a/package-lock.json b/package-lock.json index 17616fe2..355b8c81 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13491,7 +13491,7 @@ }, "packages/computer": { "name": "@cloudflare/computer", - "version": "0.2.1", + "version": "0.3.0", "license": "MIT", "dependencies": { "acorn": "^8.17.0", @@ -13552,7 +13552,7 @@ }, "packages/computerd": { "name": "@cloudflare/computerd", - "version": "0.2.1", + "version": "0.3.0", "license": "MIT", "dependencies": { "@cloudflare/computer-rpc": "*", @@ -13572,7 +13572,7 @@ }, "packages/dofs": { "name": "@cloudflare/dofs", - "version": "0.2.1", + "version": "0.3.0", "devDependencies": { "@cloudflare/vitest-pool-workers": "^0.16.10", "@cloudflare/workers-types": "^4.20260616.1", @@ -13590,7 +13590,7 @@ }, "packages/rpc": { "name": "@cloudflare/computer-rpc", - "version": "0.2.1", + "version": "0.3.0", "dependencies": { "@cloudflare/dofs": "*", "capnweb": "^0.10.0" diff --git a/packages/computer-computerd-linux-x64/README.md b/packages/computer-computerd-linux-x64/README.md index e508f0ce..95581ec8 100644 --- a/packages/computer-computerd-linux-x64/README.md +++ b/packages/computer-computerd-linux-x64/README.md @@ -20,7 +20,7 @@ builds the binary, stages it into `bin/computerd`, and publishes the image instead: ```dockerfile -FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.2.1 AS computerd +FROM ghcr.io/cloudflare/computer-computerd-linux-x64:0.3.0 AS computerd FROM debian:stable-slim RUN apt-get update \ && apt-get install -y --no-install-recommends \ diff --git a/packages/computer-computerd-linux-x64/package.json b/packages/computer-computerd-linux-x64/package.json index 9b7383c0..6f834dc5 100644 --- a/packages/computer-computerd-linux-x64/package.json +++ b/packages/computer-computerd-linux-x64/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/computer-computerd-linux-x64", - "version": "0.2.1", + "version": "0.3.0", "description": "Docker image context for the prebuilt computerd linux-x64 binary.", "license": "MIT", "private": true diff --git a/packages/computer/CHANGELOG.md b/packages/computer/CHANGELOG.md index da653afa..41c31a4b 100644 --- a/packages/computer/CHANGELOG.md +++ b/packages/computer/CHANGELOG.md @@ -1,5 +1,31 @@ # @cloudflare/computer +## 0.3.0 + +### Minor Changes + +- [#110](https://github.com/cloudflare/computer/pull/110) [`c85a255`](https://github.com/cloudflare/computer/commit/c85a25597ab9c28c8f50245f6ec24d76532794df) Thanks [@aron-cf](https://github.com/aron-cf)! - The container's HTTP surface now requires a bearer token. The host generates a secret, passes it to the container as RPC_CLIENT_SECRET at launch, and sends it on /connect. Readiness at /health stays open, and leaving the variable unset disables the checks. Before opening a session the host checks that the container refuses an unauthenticated request and fails the connect if it does not, so a container or image predating this has to be recycled. The container's dial-back to the host carries the same secret, and the host refuses an upgrade that does not present it. + +- [#108](https://github.com/cloudflare/computer/pull/108) [`3074d90`](https://github.com/cloudflare/computer/commit/3074d9027b6fa1e1f3742cb715fd4914199c85b4) Thanks [@aron-cf](https://github.com/aron-cf)! - The /connect caller now provides both API & healthcheck endpoints. The container no longer builds either path itself, so a host is free to serve them wherever it likes. + +- [#110](https://github.com/cloudflare/computer/pull/110) [`199fc17`](https://github.com/cloudflare/computer/commit/199fc1740b019cae0274b810d99861b093e2a3e4) Thanks [@aron-cf](https://github.com/aron-cf)! - `IWorkspaceContainerAPI.start()` and `restart()` now take a single `ContainerLaunchSpec` of `{ env, enableInternet }` instead of two arguments, and return which of `launched`, `adopted` or `relaunched` happened. Each launch records its spec, and a container found already running is relaunched unless it matches, because neither the environment nor the internet flag can be changed on a live container. A container started outside this API has no record and is relaunched rather than trusted. `setInactivityTimeout()` joins the interface so a caller that pre-starts containers, such as a warm pool, does not need to reach past it. + +- [#110](https://github.com/cloudflare/computer/pull/110) [`c85a255`](https://github.com/cloudflare/computer/commit/c85a25597ab9c28c8f50245f6ec24d76532794df) Thanks [@aron-cf](https://github.com/aron-cf)! - A command run through the shell no longer inherits the container's whole environment. It receives PATH, HOME, TMPDIR, TZ, LANG, TERM, the LC* family, and any variable prefixed COMPUTER_VAR*, which arrives with the prefix stripped so COMPUTER_VAR_NODE_ENV becomes NODE_ENV. A workspace that relied on some other inherited variable needs the prefix. + +- [#108](https://github.com/cloudflare/computer/pull/108) [`3074d90`](https://github.com/cloudflare/computer/commit/3074d9027b6fa1e1f3742cb715fd4914199c85b4) Thanks [@aron-cf](https://github.com/aron-cf)! - The UPSTREAM_URL environment variable has been removed along with the container's own sync loop. Syncing is driven by whichever peer holds the other end of the Cap'n Web session. + +- [#108](https://github.com/cloudflare/computer/pull/108) [`3074d90`](https://github.com/cloudflare/computer/commit/3074d9027b6fa1e1f3742cb715fd4914199c85b4) Thanks [@aron-cf](https://github.com/aron-cf)! - The Cap'n Web /ws endpoint has been renamed to /api at both ends of the connection. A durable object that routes the container's outbound upgrade must match /api in its own fetch handler. Support for the Cap'n Web HTTP batch transport has been removed, so /api carries a websocket only. + +- [#109](https://github.com/cloudflare/computer/pull/109) [`e2dd6d8`](https://github.com/cloudflare/computer/commit/e2dd6d8f9a5d078024cad52fff179bbb33fc3597) Thanks [@aron-cf](https://github.com/aron-cf)! - Make the artifacts session id optional: `createArtifact(binding)` now returns a client over the whole namespace rather than requiring a session to scope by. See [./docs/15_artifacts_interface.md](./docs/15_artifacts_interface.md) for details. + +### Patch Changes + +- [#111](https://github.com/cloudflare/computer/pull/111) [`e9bbc50`](https://github.com/cloudflare/computer/commit/e9bbc50103c7eeea258b83faf3049d64830bc037) Thanks [@aron-cf](https://github.com/aron-cf)! - Create missing parent directories while applying sync entries. + +- [#96](https://github.com/cloudflare/computer/pull/96) [`45fa716`](https://github.com/cloudflare/computer/commit/45fa7163563f3f5ddb8398aece6f6ed64be58ed9) Thanks [@agent-think](https://github.com/apps/agent-think)! - Fix issue where the edit tool would rewrite the whole file when oldText doesn't match exactly. + +- [#113](https://github.com/cloudflare/computer/pull/113) [`f35f5df`](https://github.com/cloudflare/computer/commit/f35f5dfd06d57f801414a3a0583669267f092ed9) Thanks [@aron-cf](https://github.com/aron-cf)! - Sync `node_modules` by default so package manager installs persist across workspace runtimes. + ## 0.2.1 ### Patch Changes diff --git a/packages/computer/package.json b/packages/computer/package.json index 84da591e..cbc5f7eb 100644 --- a/packages/computer/package.json +++ b/packages/computer/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/computer", - "version": "0.2.1", + "version": "0.3.0", "description": "Cloudflare Computer — a SQLite-backed virtual filesystem with sync to a container-side daemon (computerd).", "license": "MIT", "repository": { diff --git a/packages/computerd/CHANGELOG.md b/packages/computerd/CHANGELOG.md index 0f92ee7f..6c7b71d6 100644 --- a/packages/computerd/CHANGELOG.md +++ b/packages/computerd/CHANGELOG.md @@ -1,5 +1,13 @@ # @cloudflare/computerd +## 0.3.0 + +### Patch Changes + +- Updated dependencies []: + - @cloudflare/dofs@0.3.0 + - @cloudflare/computer-rpc@0.3.0 + ## 0.2.1 ### Patch Changes diff --git a/packages/computerd/package.json b/packages/computerd/package.json index f3987d19..20eec69e 100644 --- a/packages/computerd/package.json +++ b/packages/computerd/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/computerd", - "version": "0.2.1", + "version": "0.3.0", "description": "Computer daemon CLI and FUSE mount. Source-only; the distributable lives at @cloudflare/computer-computerd-linux-x64.", "license": "MIT", "private": true, diff --git a/packages/dofs/CHANGELOG.md b/packages/dofs/CHANGELOG.md index f38bfc2e..021b3977 100644 --- a/packages/dofs/CHANGELOG.md +++ b/packages/dofs/CHANGELOG.md @@ -1,5 +1,7 @@ # @cloudflare/dofs +## 0.3.0 + ## 0.2.1 ## 0.2.0 diff --git a/packages/dofs/package.json b/packages/dofs/package.json index 40872848..92809e5e 100644 --- a/packages/dofs/package.json +++ b/packages/dofs/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/dofs", - "version": "0.2.1", + "version": "0.3.0", "private": true, "type": "module", "exports": { diff --git a/packages/rpc/CHANGELOG.md b/packages/rpc/CHANGELOG.md index 0a0030f1..2fa6913c 100644 --- a/packages/rpc/CHANGELOG.md +++ b/packages/rpc/CHANGELOG.md @@ -1,5 +1,12 @@ # @cloudflare/computer-rpc +## 0.3.0 + +### Patch Changes + +- Updated dependencies []: + - @cloudflare/dofs@0.3.0 + ## 0.2.1 ### Patch Changes diff --git a/packages/rpc/package.json b/packages/rpc/package.json index 518c59a5..d7f73d99 100644 --- a/packages/rpc/package.json +++ b/packages/rpc/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/computer-rpc", - "version": "0.2.1", + "version": "0.3.0", "private": true, "type": "module", "exports": {