[jonbeckman]

Summary

• Bump Nub from 0.9.6 to 0.10.0 in packageManager, devEngines.packageManager, and every nubjs/setup-nub step. The action stays on the v0 tag.
• Node.js stays at 24.15.0.
• Update the README, contributing guide, and verify runbook that named 0.9.6.
• nub install accepts the existing nub.lock with no rewrite, so the lockfile is unchanged.

Nub 0.10.0 fails an install when a dependency build script is not approved, and a --filter path selects only a project whose directory is that path. This repository filters by package name, and allowScripts already names the dependency builds it runs.

This pull request uses release:none. It changes the toolchain pin and docs only, and it does not change VERSION or user-facing product behavior.

Validation

• nub install --frozen-lockfile
• nub run typecheck
• nub run lint
• nub run format
• nub run test:config (31 tests passed)

The browser end-to-end suite is unchanged by this pin.

Checklist

• I added or updated tests for behavior changes, or explained why tests are not needed.
• I updated documentation and config examples when behavior or configuration changed.
• I added a .tegami/ release entry, or explained why this pull request uses release:none.
• I ran nub run config:check, nub run typecheck, nub run lint, nub run format, and nub run test.
• I did not include credentials, private data, internal URLs, or organization-specific defaults.
• I updated THIRD_PARTY_NOTICES.md for new third-party code or separately licensed assets.

  

[github-actions]

Tegami

This repository uses Tegami to manage releases. When your changes affect published packages, add a changelog file under .tegami/ before merging.

Create a changelog → · Changelog format

Release preview

Package	Bump	Version
solzero	major	2.0.0 → 3.0.0

This PR does not add changelog files. Pending changelogs from other branches are included in the preview above.

Run nub run tegami locally to create a changelog interactively.

_{Managed by Tegami.}

[github-actions]

🟢 e2e solzero-core: 25 passed, 7 left out by filters

4 agent steps · 4 replayed from cache

Change 9 files changed since c7553a4
Filter decision kept 23 of 30 tests, left out 7 (1 call, 17.5k tokens)

7 tests left out by filters

Test	Filter	Reason
tests/auth.e2e.ts › sign-in gate protects every application route	decision	7% likely affected
tests/auth.e2e.ts › credential sign-in opens the requested settings page	decision	11% likely affected
tests/auth.e2e.ts › anonymous callers cannot access any protected API group	decision	6% likely affected
tests/auth.e2e.ts › sign-out removes authenticated UI access	decision	5% likely affected
tests/branding.e2e.ts › the selected deployment brand reaches the browser	decision	6% likely affected
tests/branding.e2e.ts › health identifies the configured application without exposing configuration	decision	13% likely affected
tests/branding.e2e.ts › OpenAPI uses the selected deployment brand	decision	9% likely affected

All 25 tests in 11 files

	Test	Agent	Time
🟢	tests/accounts.e2e.ts · 3 passed		6.2s
🟢	create, use and revoke an isolated user API key		3.2s
🟢	Better Auth 1.7 account APIs select the local account row id		210ms
🟢	Accounts settings shows GitHub as unlinked without OAuth providers		2.8s
🟢	tests/admin.e2e.ts · 1 passed		4.3s
🟢	administrator pages show live control-plane configuration		4.3s
🟢	tests/advanced-sessions.e2e.ts · 2 passed		6.4s
🟢	incognito sessions stay outside normal lists but open directly		3.0s
🟢	session MCP definitions and subagent preferences persist		3.5s
🟢	tests/api-contract.e2e.ts · 1 passed		656ms
🟢	exported API key and session schemas decode actual Worker responses		656ms
🟢	tests/auth.setup.e2e.ts · 2 passed		6.5s
🟢	authenticate isolated admin		4.5s
🟢	authenticate isolated peer		2.0s
🟢	tests/bots.e2e.ts · 1 passed		4.7s
🟢	create a bot and manage a temporary routine through the UI		4.7s
🟢	tests/session-transfer.e2e.ts · 1 passed		1.9s
🟢	admin authentication transfer redeems once and retains its deep link		1.9s
🟢	tests/sessions.e2e.ts · 5 passed	1 step	39.6s
🟢	session tools, archive and restoration persist through the real Worker	1 step	4.8s
🟢	a second account cannot read or mutate another account's session		205ms
🟢	isolate executes a real prompt and persists its output		7.9s
🟢	opencode executes a real prompt and persists its output		13.6s
🟢	codex executes a real prompt and persists its output		13.0s
🟢	tests/settings.e2e.ts · 5 passed	2 steps	20.7s
🟢	all settings categories load real data		6.4s
🟢	runtime default persists after reload		5.6s
🟢	MCP deep link and legacy settings URL open the MCP tab		1.8s
🟢	secret editor creates, finds and deletes a disposable secret	1 step	3.3s
🟢	theme preference survives reload	1 step	3.6s
🟢	tests/skills.e2e.ts · 1 passed		7.0s
🟢	global skill defaults and per-user preferences persist independently		7.0s
🟢	tests/workflows.e2e.ts · 3 passed	1 step	6.9s
🟢	workflow authoring, rename, export, disable and archive persist	1 step	4.9s
🟢	manual workflow executes JavaScript and stores a real R2 artifact		2.0s
🟢	invalid workflow definitions are rejected before storage		77ms

_{e2e 0.21.3 · 2m 34s · local-cloudflare · run artifacts}