Version Packages

[RhysSullivan]

Summary

Prepare the patch release for executor@1.5.24.

• Consumes the pending changesets into generated package versions and changelogs.
• Normalizes the pending release metadata so the release plan is patch-only.
• Bumps executor from 1.5.23 to 1.5.24 and updates the fixed release group accordingly.

Validation

• bunx changeset status --verbose before versioning reported patch bumps only, with no minor or major releases.
• bun run release:check passed, including CLI typecheck, release bootstrap smoke test, and release publish dry run.
• Dry-run artifact smoke test reported executor v1.5.24.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	ae05c1c	Jun 29 2026, 02:33 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	ae05c1c	Commit Preview URL Branch Preview URL	Jun 29 2026, 02:32 PM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[greptile-apps]

Greptile Summary

This is the changeset-generated version packages PR bumping executor and all workspace packages to 1.5.24, consuming three pending patch changesets: a Windows startup regression fix for v1-to-v2 database migration, a title-bar polish pass, and a self-host/Cloudflare version-bake fix that stopped the "update available" false-positive. Alongside the standard version/changelog/lockfile updates, two auth test files are patched to add the missing organizationSlug field to their toEqual assertions, aligning the tests with what resolveApiKeyPrincipal and resolveJwtPrincipal already return in production.

• Version bumps: All workspace packages step from 1.5.23 → 1.5.24 (or their respective minor/patch equivalents); bun.lock is updated consistently.
• Changeset cleanup: The three .changeset/*.md files are deleted as expected after versioning.
• Test assertion fixes: protected-api-key-auth.node.test.ts and protected-jwt-auth.node.test.ts both add organizationSlug to their toEqual checks; the stubs already returned the slug field, so the values are correct.

Confidence Score: 5/5

Safe to merge: all changes are version/changelog bookkeeping plus two test assertion fixes that bring the test expectations in line with already-shipped production behavior.

The version bumps and lockfile updates are mechanical and consistent across the monorepo. The two test file changes correctly add the organizationSlug field that resolveApiKeyPrincipal and resolveJwtPrincipal already return, fixing assertions that would have been failing against the production implementation. No logic changes, no new runtime paths.

No files require special attention beyond what was noted in the prior review about empty changelog sections in apps/desktop/CHANGELOG.md.

Important Files Changed

Filename	Overview
apps/cloud/src/api/protected-api-key-auth.node.test.ts	Adds organizationSlug to the toEqual assertion; matches what resolveApiKeyPrincipal already returns (org.slug), fixing a previously incomplete assertion.
apps/cloud/src/api/protected-jwt-auth.node.test.ts	Adds organizationSlug to the toEqual assertion; mirrors the api-key test fix for the JWT bearer path.
apps/cli/CHANGELOG.md	Adds complete 1.5.24 entry with all three changeset descriptions and updated dependency list.
apps/desktop/CHANGELOG.md	Adds an empty 1.5.24 section with no Patch Changes description, even though desktop-titlebar-polish.md directly targeted this package.
packages/react/CHANGELOG.md	Adds 1.4.44 entry with Patch Changes heading and updated dependency list; content limited to dependency-only bump (no direct changeset prose).
bun.lock	Workspace package versions updated consistently to match the new 1.5.24 release across all affected packages.
apps/cloud/CHANGELOG.md	Adds 1.4.42 entry listing transitive dependency bumps; no direct changeset targets for this package.
apps/host-selfhost/CHANGELOG.md	Adds 0.0.23 entry listing transitive dependency bumps; selfhost-update-card-version and desktop-titlebar-polish directly targeted this package but no prose appears.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[".changeset/desktop-titlebar-polish.md\n@executor-js/desktop, host-selfhost,\nhost-cloudflare, react"] --> V[changeset version]
    B[".changeset/selfhost-update-card-version.md\n@executor-js/host-selfhost,\nhost-cloudflare, react"] --> V
    C[".changeset/windows-migration-handle-release.md\nexecutor (CLI)"] --> V

    V --> D["Bump executor → 1.5.24\napps/cli, apps/desktop,\n+ all dependent packages"]
    V --> E["Bump transitive deps\napps/cloud, apps/host-selfhost,\npackages/*"]
    V --> F["Delete changeset files\n(3 files removed)"]
    V --> G["Update CHANGELOG.md\n(executor full prose;\nothers dependency-only)"]
    V --> H["Update bun.lock\n(workspace versions)"]

    D -.->|"also in this PR"| I["Test assertion fixes\nprotected-api-key-auth.node.test.ts\nprotected-jwt-auth.node.test.ts\n+ organizationSlug to toEqual"]

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[".changeset/desktop-titlebar-polish.md\n@executor-js/desktop, host-selfhost,\nhost-cloudflare, react"] --> V[changeset version]
    B[".changeset/selfhost-update-card-version.md\n@executor-js/host-selfhost,\nhost-cloudflare, react"] --> V
    C[".changeset/windows-migration-handle-release.md\nexecutor (CLI)"] --> V

    V --> D["Bump executor → 1.5.24\napps/cli, apps/desktop,\n+ all dependent packages"]
    V --> E["Bump transitive deps\napps/cloud, apps/host-selfhost,\npackages/*"]
    V --> F["Delete changeset files\n(3 files removed)"]
    V --> G["Update CHANGELOG.md\n(executor full prose;\nothers dependency-only)"]
    V --> H["Update bun.lock\n(workspace versions)"]

    D -.->|"also in this PR"| I["Test assertion fixes\nprotected-api-key-auth.node.test.ts\nprotected-jwt-auth.node.test.ts\n+ organizationSlug to toEqual"]

Loading

_{Reviews (2): Last reviewed commit: "Fix protected auth identity tests" | Re-trigger Greptile}

[greptile-apps]

Missing changelog entries for directly-targeted changesets

desktop-titlebar-polish.md explicitly listed "@executor-js/desktop": patch, so this package was a direct (not transitive) target of that changeset. The generated 1.5.24 section is empty — no "Patch Changes" heading, no entry — while the equivalent slot in apps/cli/CHANGELOG.md received all three changeset descriptions. The same gap exists in packages/react/CHANGELOG.md 1.4.44 (targeted by both desktop-titlebar-polish and selfhost-update-card-version) and apps/host-selfhost/CHANGELOG.md 0.0.23 (targeted by both). Anyone looking at the desktop or react changelogs for this release will find no record of what changed.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1212

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1212

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1212

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1212

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1212

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1212

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1212

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1212

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1212

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1212

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1212

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1212

executor

npm i https://pkg.pr.new/executor@1212

commit: ae05c1c