Skip to content

Bump the minor-and-patch group in /packages/paperclip-plugin-muster with 4 updates - #870

Merged
Dkm0315 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/paperclip-plugin-muster/minor-and-patch-1991554b4c
Nov 15, 2026
Merged

Bump the minor-and-patch group in /packages/paperclip-plugin-muster with 4 updates#870
Dkm0315 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/paperclip-plugin-muster/minor-and-patch-1991554b4c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /packages/paperclip-plugin-muster with 4 updates: @paperclipai/plugin-sdk, @types/node, react and vitest.

Updates @paperclipai/plugin-sdk from 2026.1001.0 to 2026.1106.0

Release notes

Sourced from @​paperclipai/plugin-sdk's releases.

v2026.1106.0

Paperclip v2026.1106.0

Released: 2026-11-06

Paperclip v2026.1106.0 carries 515 commits, promoted from 2026.1023.0-beta.0. The headline is that the Paperclip Runner is now the default for new agents: new Claude, Codex, OpenCode, and Pi agents start on the native Runner on qualified macOS and Linux hosts, existing agents get a one-click "Upgrade runner" action, and GitHub Copilot joins as a native harness. Around that: project repositories that automatically become skill sources, model-backed prompt injection prevention, agent observability to Braintrust or any OTLP endpoint, a unified Google Workspace connection, bulk edits on the Agents roster, workspaces that compact and expire themselves with encrypted restore points, and Grok Bot and Muse as experimental Runner providers. Underneath, server restarts report ready sooner, the Docker image boots from a precompiled bundle, task pages load faster, and more background services stop polling the database.

Breaking Changes

  • The Pipelines experiment is removed. Pipeline boards, stage settings, case automation, review queues, the pipelines CLI commands, the pipelines:write permission, the enablePipelines setting, and the linkedCases field on task detail are gone; Cases and Routines remain. Existing pipeline tables and records are preserved untouched and a stored enablePipelines value is ignored. (#16834)
  • Run failures no longer reach Sentry by default. A backend DSN alone no longer reports agent run failures. Set PAPERCLIP_SENTRY_RUN_FAILURES=unexpected to keep the previous filtered policy or all to report every failed or timed-out run; the default is off. (#16300)
  • The run history list is bounded. GET /api/companies/{companyId}/heartbeat-runs returns 200 rows by default and at most 1,000; clients that relied on an unbounded array must pass an explicit limit. (#16286)
  • paperclipai agent instructions-file:delete requires --yes like the other destructive CLI commands; scripts that call it must add the flag. (#11504)

Highlights

  • The Paperclip Runner is the default — New Claude agents on Apple Silicon, Intel macOS, and Linux x64 (#15993, #15997), new Codex agents on Apple Silicon, Intel macOS, Linux x64, and Linux ARM64 (#15683), and new OpenCode and Pi agents on macOS and Linux x64 (#17120, #17142) now start on the native Runner instead of the legacy adapter, across onboarding, the API and CLI, hires, built-ins, plugins, and imports; Linux needs GNU libc 2.39 or later, a "Legacy runner" override lives under Advanced, and existing agents keep their current runner. Existing Claude and Codex agents on qualified targets show an Upgrade runner action that converts them in one click, keeping model, account, and instructions and listing any settings that could not be converted (#17122). Claude Runner agents start with their core task tools preloaded, measured about 20% faster on simple tasks (#16885), carry the chosen effort level through resumes (#15994), and start on Linux ARM64 (#16372).
  • GitHub Copilot as a native harness — Connect GitHub Copilot through Apps / AI Connections with a saved GitHub token; the agent's model list is discovered from the authenticated account, and Copilot (CLI 1.0.88) runs through the Paperclip Runner with the same instruction, permission, and completion boundaries as the other native providers, including the Linux provider manifest needed for Daytona sandboxes (#15705, #15701, #15706).
  • Project repositories become skill sources — GitHub repositories attached to a new project are imported as skill sources automatically: Paperclip imports their skills, re-checks the configured branch every five minutes with the setup person's GitHub connection, and installs new skills unless excluded; existing projects get an "adopt repositories" action in Skills → Sources, automatic updates can be paused, project-derived skills inherit project access, and each run pins the skill versions it started with (#16066). Imports keep the whole repository snapshot at the scanned commit so skills that depend on shared scripts or sibling skills work after delivery, list every skill with its folder, and skip unsupported or oversized files with a warning instead of failing (#15731, #16308). Sources gain a branch picker that loads the repository's branches, marks the default, and validates the ref before saving (#16288); a source whose tracked branch disappeared shows a branch repair action (#16256); each saved source is listed once with grouped refresh errors (#16310); and disconnecting a source really removes it, with a keep-or-delete choice for the imported skills (#16150).
  • Model-backed prompt injection prevention — Settings → Connections lets a connection manager pick a shared OpenRouter connection and model (default openai/gpt-oss-safeguard-20b) to classify tool results before they reach an agent, replacing the regex verdict and allowing benign code that merely looks like an attack; costs appear in Costs, and a "Test model checks" action verifies two fixed samples. Off until configured. (#16976)
  • Agent observability to your own backend — Company Settings → General → Agent observability sends native Codex and Claude Code logs and traces to Braintrust (US) or a custom OTLP HTTP endpoint, with credentials held in company secrets and a test action; off by default (#16874). Braintrust also joins the Apps catalog with US and EU sign-in or API-key methods (#17141).
  • A unified Google Workspace connection — One Google Workspace entry replaces the separate Google service setups: pick Gmail, Drive (Docs, Sheets, Slides), and Calendar, each optionally read-only, and consent and tool access are bound to that selection; existing Google connections keep working (#15545). Gmail gains an opt-in archive capability (#16331).
  • Workspaces that clean up after themselves — One hour after a task tree finishes, the terminal-workspace reaper removes regenerable directories such as node_modules, dist, and target that the repository's own .gitignore ignores, keeping the branch and all source changes; the archive cooldown drops from 7 days to 1 (#16304). Opt-in Git cache expiration removes finished Paperclip-owned worktrees and private base clones 24 hours after the task tree is done and restores them at the exact commit when a task reopens (#16457, #16691); with restore points on, closed worktrees that still hold unpushed commits or uncommitted files are saved to an encrypted restore point first and restored exactly when work resumes, idle open issues are parked the same way after seven days, nested multi-repository checkouts get their own restore points, and a task whose restore point has expired reopens on a fresh workspace with a note instead of failing (#17248, #17271, #17257, #17269). Unused materialized skill versions are removed hourly and rebuilt on demand (#16433), and host-side failover backups of remote-sandbox sessions expire a week after their issues close (#16866).
  • Tasks with their own workspace — A task that needs files but has no configured source now gets a stable company/task directory instead of inheriting the agent's home folder, agents can inspect, select, and request repositories for their workspace through new runner tools, and chat connections can set project and workspace defaults (#15749); a fresh task gets its own clone when the project's default checkout contains a worktree the agent cannot read (#16095), with a one-click Retry on a clean checkout when setup is blocked that way (#16909).
  • Bulk edits on the Agents roster — Select rows and filter by harness to change the AI connection, the default model, or both for many agents at once, with a preview and retry for failed updates; the roster's status selector is removed and paused agents show a badge instead of dimming (#17215). The agent Overview shows who created an agent in companies with more than one person (#16055).
  • Grok Bot and Muse, both experimental — Grok Bot lets you invite an existing Grok Bot as an agent that receives assignments through a webhook routine and works through a dedicated agent-OAuth MCP connection, with guided setup, pairing codes, progress, questions, documents, and files flowing back into the task, and Stop and recovery controls; provider spending is not reported (#16219, #16338, #16274, #16305). Muse pairs a personal Meta Muse through a wake-only receiver and Vault-backed OAuth with a ten-minute single-use ticket, with readiness, credential expiry, and disconnect controls in the invite dialog (#16444, #16447, #16448, #16450).
  • Talk to an agent with Speko — A Speko entry in the Apps catalog connects a Speko persona to an existing agent so you can talk to it by browser voice or phone from a task, with transcripts, call controls, inbound-line settings, phone callbacks, and call entries in Activity; shown while the Chat connectors experimental setting is on (#15728).
  • Slack bots, refined — Slack connection Settings are simplified around "Open Slack configuration" and a "Send test message" row, with "Use your own app" under Advanced (#15679); plain direct messages always start or continue work even when Require at-mention is on for channel threads (#16151); and the eyes reaction appears as soon as a mention is accepted, including in direct messages (#16491, #16494).
  • A sturdier GitHub review bot — The bot keeps one main PR comment updated across pushes, ignores messages addressed to other bots, and marks stopped work accurately (#16901); summary comments are headed with the bot's display name so several bots on one PR are distinguishable (#16212); publication retries through GitHub 503/429 with bounded backoff and survives restarts without duplicate comments or checks (#16284, #16883); GitHub bot tools get the gateway's 60-second maximum so submit_review no longer times out (#16275); and settings show a "Reconnect GitHub" notice with reconnect-the-saved-App as the first option (#16856).
  • More apps in the catalog — Daytona, with personal or shared API-key credentials and 274 generated actions for sandboxes, snapshots, volumes, files, Git, and commands (#16483); Unikraft Cloud, with actions generated from its OpenAPI specs and a per-connection default metro (#17139); and Ditto (#16472). A provider card with several connections collapses them behind an "N connections" row (#16097).
  • Agent commentary in Audit — The complaints and suggestions agents file about their tooling now have a home: Audit gains a Commentary tab with agent and type filters, text search, paging, and shareable links (#16884), readable by every human role through a new commentary:view permission (#16903).

Fixes

  • Workspaces and sandboxes — A remote sandbox whose run failed before export, whose lease was cleaned up with unexported work, or whose task was cancelled before reconstruction is kept with its files behind an explicit repair decision instead of being deleted by cleanup (#16397, #16583, #16700); a task whose sandbox was destroyed before export offers a board-only "Continue from saved sources" action (#16690); files left in a stopped run's sandbox are recovered automatically and saved follow-ups delivered once (#16906); a shutdown-time workspace export keeps its ownership through the finalizer drain (#16843); a long copy-back no longer loses its lock to PostgreSQL's idle-transaction timeout (#16340, #16956); resuming a stopped reusable sandbox honors the environment's startup timeout instead of a fixed 60 seconds (#16802); a single timed-out health check no longer replaces a remote Runner (#16835); runs on repositories with thousands of historical workspaces no longer sit in "preparing" for hours (#16372, #16334, #16342, #16963); a shared checkout no longer stays blocked by a reader whose identity is gone (#16928) and a workspace blocked by another task's restricted worktree gets a clear configuration notice instead of an opaque 403 (#16545, #16895); a child task inheriting a busy shared workspace waits instead of failing with a misleading secrets error (#16371); and creating a task with the isolation selector hidden no longer fails setup (#16220).
  • Runs, recovery, and Retry — Tasks held behind a retained-workspace or failed-run hold get one reliable task-level Retry that preserves files, settles accepted results, or starts an independent workspace (#16965, #17053, #16894, #16104); Stop prevents automatic continuation until you resume (#17105, #14180); a server restart no longer strands native runs on permanent holds, repeats saved completions, or overwrites operator stops set in the meantime (#16349, #16962, #16403, #15824); legacy runs killed or lease-lost before dispatch are retried instead of settled as failed (#16355, #16358), a slow completion no longer fails a live controller (#16622), and slow unrelated queries no longer cost legacy runs their lease (#17032); a normal comment on an in-progress task no longer cancels its running retry (#16855), and stopping a queued run before it starts keeps its saved follow-up instead of running it anyway (#16357); messages for paused agents or for an agent other than the task owner are delivered once instead of being failed or deferred forever (#16679, #16673); an agent stuck marked "running" is repaired after a five-minute grace period (#16791); a Claude (ACP) run with a stalled tool call fails after 30 minutes instead of running to the four-hour timeout, and MCP calls get a 15-minute timeout (#16671, #16360); a max-turns exhaustion is no longer misclassified as a missing model (#13885); and a Codex "model at capacity" reply is retried as transient (#16407).
  • Chat and task UI — Dismissing a request above the composer clears the badge, survives reload, and no longer blocks Retry (#17218); a message to a Runner agent no longer briefly swaps its avatar for a generic "Working" row (#16989); a consumed follow-up leaves the pending queue (#16317); the final reply of a worktree task is no longer replaced by the "workspace ready" notice (#16400); a file attached before the first Agent Chat message survives task creation (#16896); task toasts in a multi-user company appear only for people involved in the task (#16153); loading a task list no longer adds unrelated finished tasks to your inbox (#16063); replies default to the latest agent that assigned you the task (#15594); side panel tabs keep a steady width (#17068, #14949); Markdown editors no longer show unsaved changes on load (#13915); and a Slack task that yields to a scheduled continuation returns its result to the original thread (#17045).
  • Costs and budgets — A budget at its warning threshold renders as a warning instead of a false "AGENT HARD STOP" banner (#16201), and budget checks no longer scale with the number of unrelated idle agents in the company (#17046).
  • Connections and MCP — One failed remote MCP call no longer makes every sibling tool on that connection unavailable (#16890); a provider 403 on one chat operation no longer disables the whole Slack, GitHub, or Discord connection (#16847, #16138); GitHub and Slack channel tools stay available on later runs of the same task (#16806); several GitHub review-thread replies each get their own follow-up run (#17054) and identical tool descriptors are listed once (#16281); a large MCP catalog refresh no longer lists a tool twice or deadlocks with an OAuth callback (#16602); assigned tool results over about 500 KB return a bounded reference and a read_tool_result tool instead of hanging (#16980); legacy Codex shell commands can see explicitly assigned service secrets (#17216); native-runner call_api follows the route's own permissions without an extra denylist (#16040); and sandboxed agents can read run history, attachments, skill files, and recovery records and send the bridge token as X-API-Key (#16575, #16892, #12785).
  • Adapters and CLI — An unlimited Claude run no longer fails its CLI probe after one second (#15329); concurrent remote Claude runs of one agent no longer break each other's skill staging (#17061); an isolated Claude task with assigned MCP tools starts (#17149); a sandbox whose preinstalled Claude CLI is older than the selected model needs gets the required version installed privately during setup instead of failing the version check (#17259); a Claude (ACP) server install no longer fails because the ACP bridge was missing from the server package (#15912); a Runner OpenCode turn survives oversized SSE events (#16401) and uses the run's managed GitHub credentials in shell commands (#16488); Hermes calls back at the adapter's configured API URL (#9425); pi_local run logs are about 150× smaller (#10249); paperclipai install and update work with npm 12 and Node 26 (#14000); paperclipai service install no longer writes a service that crash-loops on a missing managed shim (#13985); and the CLI browser login honors rate-limit Retry-After headers (#16482).
  • Server and Docker — Startup no longer fails on legacy SQL_ASCII databases (#16958) or crashes on a scheme-less publicBaseUrl (#13727); a server behind a reverse proxy with slow PTR lookups no longer stops responding for minutes after upgrading (#16333, #16335); one dropped pooled connection no longer fails permission checks, workspace readiness, or the reaper (#16857, #16859); Docker boots with many files on the data volume or a non-default USER_UID/USER_GID no longer walk the whole volume (#15992, #16475); both shipped Compose files forward PAPERCLIP_TOOL_ACTION_SIGNING_SECRET (#15202); a Stop that outlasts sync-back returns a retryable 409 instead of a 500 (#16032); concurrent task title edits no longer 500 (#13898); one malformed comment ID no longer blocks a task's queued wakes (#13912); watchdog wakes deliver the operator's instructions (#13771); the child-task cap counts only open children (#11542); a plain-heartbeat agent can comment on tasks again (#12621); a human handoff from a legacy run no longer gets cancelled by a slow restore (#16082); and feedback exports keep public identifiers readable while still masking real tokens (#16168).

Improvements

  • Experimental Cases keep one primary task across agent handoffs with a durable handoff ledger, native create_case, read_case, update_case, and handoff_case tools, read-only case pages, and reusable named workflow prompts a case adopts at kickoff or on handoff (#16959, #17114).
  • A failed agent-lifecycle verification names the failed step and a corrective action (#16418), and onboarding creates the agent record as soon as you submit its name, so setup and retries keep one identity (#17005).
  • Plugins can subscribe to committed project and agent lifecycle events with replay instead of polling (#16203); receive agent configuration, instruction, skill, connection, tool, and grant changes through durable runtime hooks (#16499, #16501, #16603, #16604, #16605); store agent- and project-owned instance secrets in the encrypted secret store (#16191, #17034); own project storage and task workspaces, act as the default workspace provider, and run native Runner tasks in plugin-owned environments verified by the agent environment test (#17001, #17247, #16978, #17029, #17252, #15406); and declare authenticated WebSocket routes and agent detail views (#17111).
  • More background work waits for committed writes and known deadlines instead of polling the database: Telegram maintenance (#16094), terminal workspace cleanup (#16282), login cleanup (#17106), execution-control recovery (#17094), MCP event subscriptions (#17036), and skill-source sync (#17008); routines and task monitors fire at their saved deadline instead of waiting for the next scan (#16514).
  • Faster starts everywhere: the server reports ready sooner after a restart because housekeeping runs after readiness and settled finalizations are skipped (#16329, #16485, #16328); the Docker image boots from a precompiled runtime bundle, cutting code-load time from up to 24 seconds to under 4 (#16672); task pages load lazily, defer hidden rendering, and refresh the recent-tasks sidebar through one bounded request (#16849, #16878, #16851, #16862); and agent launches overlap GitHub, skill, tool, and sandbox preparation, reuse a per-company Git object cache and verified sandbox image files, and make far fewer database and Daytona calls (#16620, #16608, #16585, #16487, #16687, #16493, #16683, #16536, #16521, #16527, #16561, #16468, #16480, #16552, #16484, #16473, #16425, #16424, #16461, #16498, #16576, #16569, #16414, #17026).
  • Tasks, project lists, inbox discovery, and Blocked hide agent- and system-created tasks by default behind a "show agent-created tasks" filter saved per company (#16157), and Inbox "Mine" excludes channel, routine, and agent-created tasks unless you commented, were assigned, or have an open request (#16356); failure notices show only the latest error with its retry action (#16982); and an expired connection request card says what is still not connected (#14067).

... (truncated)

Commits
  • 989ee66 Support provider-owned fresh retry workspaces (#17252)
  • 6204239 Support installed default project workspace providers (#17247)
  • 42715d4 Support authenticated WebSocket routes and agent views in plugins (#17111)
  • 00331e0 Connect native Runner admission to plugin-owned workspaces (#16978)
  • 65f59e3 Extend native instance secrets to project lifecycle plugins (#17034)
  • e5351b2 Verify native Runner setup through plugin tasks (#17029)
  • 8b4ab65 Add plugin-owned project storage and task workspaces (#17001)
  • dc6dd23 Add plugin Runner preparation task contract (#16993)
  • 33cc567 Add lease-scoped Runner task hooks to environment plugins (#15406)
  • 8193abb feat(claude): default qualified macOS and Linux targets to Paperclip Runner (...
  • Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group
14e2ae0 
Bumps the minor-and-patch group in /packages/paperclip-plugin-muster with 4 updates: [@paperclipai/plugin-sdk](https://github.com/paperclipai/paperclip/tree/HEAD/packages/plugins/sdk), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [react](https://github.com/react/react/tree/HEAD/packages/react) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `@paperclipai/plugin-sdk` from 2026.1001.0 to 2026.1106.0
- [Release notes](https://github.com/paperclipai/paperclip/releases)
- [Changelog](https://github.com/paperclipai/paperclip/blob/master/doc/RELEASE-AUTOMATION-SETUP.md)
- [Commits](https://github.com/paperclipai/paperclip/commits/v2026.1106.0/packages/plugins/sdk)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@paperclipai/plugin-sdk"
  dependency-version: 2026.1106.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Dkm0315 as a code owner November 15, 2026 15:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 15, 2026
@Dkm0315
Dkm0315 merged commit 890e036 into main Nov 15, 2026
4 checks passed
@Dkm0315
Dkm0315 deleted the dependabot/npm_and_yarn/packages/paperclip-plugin-muster/minor-and-patch-1991554b4c branch November 15, 2026 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Dkm0315 Dkm0315 Awaiting requested review from Dkm0315 Dkm0315 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Dkm0315