Repository navigation
chore(deps): bump Mastra to 1.80.0 and Next to 16.4.3 - #62
Open
hamchowderr wants to merge 4 commits into
Open
hamchowderr wants to merge 4 commits into
hamchowderr wants to merge 4 commits into
Conversation
Every @mastra/* pin moves together (core/deployer/server 1.80.0, memory 1.39.1, observability 1.22.0, pg 1.33.0, rag 2.7.1, mastra CLI 1.36.0). Breaking: AgentController sessions are now keyed by session id. The createSession `scope` option and getSessionByResource are gone, and channel resolveResourceId receives the request context. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
next build refuses to finish on 16.4.0 because of a known vulnerability. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
GitHub's runners now ship bwrap, so the isolated path runs in CI and was broken (red on main since 2026-10-25): - bwrap refuses a bind source that doesn't exist, and the runner named every ancestor node_modules, including ones that don't exist. - Only the working directory was writable, but the durable journal is written to the tenant state dir above it, so no approval gate was ever recorded. The state dir is now passed as a read-write path. The sandbox-provider test assumed no host has bwrap; it now checks the backend is forwarded on hosts with and without it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK
hamchowderr
marked this pull request as ready for review
October 30, 2026 23:20
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Before:
next buildon main stops on Next 16.4.0 because of a known security vulnerability.After:
@mastra/*pin is on the latest release.Versions
Breaking change fixed: AgentController sessions are now keyed by session id.
createSession({ scope })andgetSessionByResourcewere removed.getSession(resourceId). Its id is the resourceId.channel:<threadId>id, so it still can't take over the web session.resolveResourceIdnow receivesrequestContext, and the tests pass it.bwrap fix (
lib/durable/runner.ts,lib/providers/sandbox.ts):node_modulesdirectories that exist.How:
overridesand the agents package together, then did a clean reinstall from a fresh lockfile. The dep-uniqueness check passes.npm test: 568 passed, with bwrap presenttsc --noEmit: cleannpm run lint: warnings onlyverify:aimock: passesnext build: passesThe Zapier SDK/CLI bump (#63) and the other exact-pinned updates (#64) are in separate PRs.
🤖 Generated with Claude Code
https://claude.ai/code/session_01CALPMzkCJ9sfSvDy7PCSZK