Repository navigation
chore(deps): update dependency @copilotkit/core to v1.84.1 - #100
KayzenRoot wants to merge 1 commit into
Conversation
|
@linear-code[bot] — comment — 2026-11-04 (original): |
ECC Tools / Security EvidenceCommit: Security evidence gate passed (success) No security-sensitive scanner-evidence gap detected. Mode: enforce Scanned 1 changed file(s). No missing scanner-evidence signal was detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / PR Risk TaxonomyCommit: PR taxonomy review recommended (neutral) Detected 2 PR taxonomy bucket(s): Install Manifest Integrity, CI/CD Recommendation. Scanned 1 changed file(s). Roadmap taxonomy buckets: Install Manifest IntegrityInstall manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance. Signals:
Paths:
CI/CD RecommendationCI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work. Signals:
Paths:
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
There was a problem hiding this comment.
Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.
ECC Tools / Reference Set ReadinessCommit: Reference set readiness gaps detected (neutral) Reference evidence present for 0/7 areas (0%) across 1 changed file(s). This check is based on files changed in this PR. Repository-level readiness is still reported by
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Hosted Promotion ReadinessCommit: Hosted promotion readiness passed (success) No hosted promotion evidence gaps detected across 1 changed file(s); 0 corpus scenarios had matching evidence. This check compares PR file changes against the evaluator/RAG promotion corpus in No evaluator corpus scenarios matched this PR. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
29 upstream issues and 45 upstream PRs are open here, most written against the hosted Intelligence design this fork removed. Triages each one with a reason and a proposed action: 18 issues and 20 PRs to close, the rest to keep or review. Two closes rest on evidence gathered in this repository rather than opinion: the @CopilotKit 1.84.1 bumps (#100, #101) were tried and break typecheck in Chat.tsx, and the zod 4.6.7 bump (#98) plus pt-BR localisation (#73) are already in main. Nothing is closed by this commit; it records the recommendation so the decision can be reviewed before it is executed.
|
Closing with evidence: upgrading @copilotkit/core from 1.75.0 to 1.84.1 was tried in this fork and breaks typecheck in src/client/Chat.tsx, because the AG-UI message types changed. The runtime integration is validated against 1.75.0. This upgrade needs its own change that migrates the types. |
This PR contains the following updates:
1.75.0→1.84.1Release Notes
CopilotKit/CopilotKit (@copilotkit/core)
v1.84.1Compare Source
This patch release improves A2UI catalog serialization so that composed custom component trees are correctly recognized by agent SDKs.
v1.84.0Compare Source
Features
d168487)Fixes
3a956ad)a7c4dde)035c0db)117de16)bfb8236)c5d73ce)57a2fbf)8e843ae)f1bab1d)6cfc310)9cc2d2c)c6124c7)e1281c7)fa171c7)Other Changes
590a6ca)Breaking Changes
57a2fbf)Gen UI requires version "1.0" and capability key "1.0".
Pre-release v1.0 operations and capability envelopes are no longer accepted.
Demos must update their payloads and align agent SDK/CopilotKit versions.
v1.83.0Compare Source
Other Changes
4693af4)v1.82.0Compare Source
Features
d028e14)4ca3a23)136f515)Fixes
6bc87e7)ed78b19)system, notmessages(#7881) (8863a2a)ef8f126)a57920b)7d1f273)b1d7e02)2c74500)063a7a9)2d3f4ca)b0570a0)v1.81.0Compare Source
Features
2aff26d)6960c50)Fixes
44247a4)2d7362b)0c7efff)3b5617b)d01d9c7)3cc0e69)37ed094)Breaking Changes
None
v1.80.0Compare Source
Features
4930320)f0a2490)Fixes
b0c1736)dd9f04b)56c1056)6429c79)4177870)0ea6f28)3f73c87)08f41c8)b4cb0ef)59ba1aa)7e8e10b)4225da2)99f29ee)49c7f17)d65c046)8c6620b)a1f9a2f)f46dcbb)7b446f8)d8a2ccb)Other Changes
2c19c57)25bdfe6)03198b0)e29aa9f)Breaking Changes
b0c1736)MCP App widgets now run in a sandbox without
allow-same-origin, so they get an opaque origin and cannot use
localStorage, sessionStorage, IndexedDB or cookies.
Requests from a widget that need CORS, such as module scripts and fetch,
are now sent with Origin: null. Serve public widget assets with
0ea6f28)createCatalogrenderers (and the deprecatedcreateA2UICatalogrender) now get props typed as the A2UI binderresolves them, so code written against the raw schema types can stop
compiling.
Call Action props as functions, for example
props.onPress(), insteadof reading them as action objects.
Use bound props as plain values (
props.levelis anumber) and drophandling of the
{ path }and{ call }shapes, which renderers neverreceive at runtime.
A plain
z.array(z.string())prop now resolves toanylike a childlist, so annotate callback parameters, for example
props.children.map((id: string) => …).v1.79.1Compare Source
Features
81ca993)Fixes
16a1b46)5bdb483)93b2ecd)v1.79.0Compare Source
Features
6b593cb)b7f0b96)Fixes
7e97c05)8de118e)04bc56a)Breaking Changes
b7f0b96)A
headersbuilder now runs when each request is sent,not on each provider render (React, Vue and Angular). A new token from the
builder no longer reloads the thread list or rejoins realtime, so an app
that switches users must remount the provider (for example
key={userId}) or callsetHeaders. Otherwise the new user keeps seeingthe previous user's threads.
v1.78.0Compare Source
Features
d38d016)Fixes
9158409)d1bdd92)be3a15c)c88c376)6b550dc)Other Changes
4dc033a)Breaking Changes
9158409)With
OPENAI_BASE_URLset to a host other than OpenAI or Azure,"openai/..."model strings now use the Chat Completions API (#7726).Through a proxy in front of OpenAI (LiteLLM, Portkey, Helicone), models and
options that only the Responses API supports, such as reasoning summaries,
stop working. Set
COPILOTKIT_OPENAI_API=responsesto keep the Responses API.d38d016)A
learningobject withouttrajectoryIdnow starts capture after mount.To keep starting capture yourself with
startTrajectory(), addautoStart: false, for examplelearning={{ onError, autoStart: false }}.v1.77.2Compare Source
Features
8bd4389)v1.77.1Compare Source
Features
0143a22)b111c24)9a0db13)a0480fa)Fixes
e7c023f)8a458e7)abf8182)75f5721)b8c331e)d966b88)0a2e6d0)7f40d35)6373ce7)f21e006)Other Changes
d4afb51)v1.77.0Compare Source
Features
a161b38)1840e7c)06f61ae)20ee84c)Fixes
f1a9bb6)214614a)0629f84)a9b1c26)579d0f7)c69b965)9c6f1dd)Other Changes
632b050)16dbbdf)v1.76.0Compare Source
Features
7693a04)Fixes
5832fff)5135c56)c7c4538)v1.75.2Compare Source
Fixes
081e745)bd39b04)v1.75.1Compare Source
Features
b3d1aad)Fixes
278a78d)2476de1)5fd09ab)7a7a500)a1fbc07)Breaking Changes
b3d1aad)Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.