[jonbeckman]

Summary

• Pin ai at 7.0.166, including the overrides entry and @solzero/api.
• Pin @ai-sdk/anthropic at 4.0.99, @ai-sdk/openai at 4.0.111, @ai-sdk/typesafe-ai at 3.0.35, and @ai-sdk/openai-compatible at 3.0.87.
• Pin @ai-sdk/provider at 4.0.37 so ai 7.0.166 and the harness packages share one copy.
• Pin turbo at 2.11.10, semver at 7.8.6, @electric-sql/pglite at 0.4.6, and @electric-sql/pglite-socket at 0.1.6.
• Allow ai@7.0.166 and @ai-sdk/gateway@4.0.139 through the release-age gate.
• Refresh other dependencies that were already inside their current ranges, including Vite 8.3.6, Tailwind CSS 4.3.5, TanStack Query 5.107.1, TanStack Start 1.169.5, lucide-react 1.70.0, and @cloudflare/kumo 2.17.0.

Left unchanged because they are already current: esbuild 0.28.2, @types/node 24.19.2, @cloudflare/workers-types 4.20260702.1, and tsx 4.23.15. Drizzle stays at 1.0.0-rc.5-ab785fc. Alchemy, Effect, workerd, miniflare, and wrangler are untouched.

Not included: agents, @cloudflare/think, @cloudflare/shell, @cloudflare/codemode, and the @ai-sdk/harness* packages. The Codex patch is pinned to @ai-sdk/harness-codex@1.0.43, and those packages are the agent runtime rather than a patch of the current pin. @modelcontextprotocol/sdk stays at 1.32.0 because of its override (1.32.2 exists).

This pull request uses release:none. It does not change VERSION. The dependency updates stay inside current majors, and this pull request does not ship a product behavior change of its own.

Validation

• nub install --frozen-lockfile
• nub run typecheck
• nub run lint
• nub run format
• nub run config:check was run on the earlier pins; this branch ran nub run test:config (31 tests passed)
• nub run test:config (31 tests passed)

Checklist

• I added or updated tests for behavior changes, or explained why tests are not needed.
• I updated documentation and config examples when behavior or configuration changed.
• I added a .tegami/ release entry, or explained why this pull request uses release:none.
• I ran nub run config:check, nub run typecheck, nub run lint, nub run format, and nub run test.
• I did not include credentials, private data, internal URLs, or organization-specific defaults.
• I updated THIRD_PARTY_NOTICES.md for new third-party code or separately licensed assets.

  

[github-actions]

Tegami

This repository uses Tegami to manage releases. When your changes affect published packages, add a changelog file under .tegami/ before merging.

Create a changelog → · Changelog format

Release preview

Package	Bump	Version
solzero	major	2.0.0 → 3.0.0

This PR does not add changelog files. Pending changelogs from other branches are included in the preview above.

Run nub run tegami locally to create a changelog interactively.

_{Managed by Tegami.}

[github-actions]

🟢 e2e solzero-core: 32 passed

4 agent steps · 4 replayed from cache

Change 5 files changed since c7553a4
Filter decision kept all 30 tests (the diff is over 60 kB, so the decision filter left nothing out)

All 32 tests in 13 files

	Test	Agent	Time
🟢	tests/accounts.e2e.ts · 3 passed		7.0s
🟢	create, use and revoke an isolated user API key		3.5s
🟢	Better Auth 1.7 account APIs select the local account row id		164ms
🟢	Accounts settings shows GitHub as unlinked without OAuth providers		3.3s
🟢	tests/admin.e2e.ts · 1 passed		5.3s
🟢	administrator pages show live control-plane configuration		5.3s
🟢	tests/advanced-sessions.e2e.ts · 2 passed		7.8s
🟢	incognito sessions stay outside normal lists but open directly		3.5s
🟢	session MCP definitions and subagent preferences persist		4.3s
🟢	tests/api-contract.e2e.ts · 1 passed		389ms
🟢	exported API key and session schemas decode actual Worker responses		389ms
🟢	tests/auth.e2e.ts · 4 passed		17.9s
🟢	sign-in gate protects every application route		1.1s
🟢	credential sign-in opens the requested settings page		8.3s
🟢	anonymous callers cannot access any protected API group		122ms
🟢	sign-out removes authenticated UI access		8.5s
🟢	tests/auth.setup.e2e.ts · 2 passed		8.2s
🟢	authenticate isolated admin		5.8s
🟢	authenticate isolated peer		2.4s
🟢	tests/bots.e2e.ts · 1 passed		5.1s
🟢	create a bot and manage a temporary routine through the UI		5.1s
🟢	tests/branding.e2e.ts · 3 passed		440ms
🟢	the selected deployment brand reaches the browser		347ms
🟢	health identifies the configured application without exposing configuration		75ms
🟢	OpenAPI uses the selected deployment brand		18ms
🟢	tests/session-transfer.e2e.ts · 1 passed		2.4s
🟢	admin authentication transfer redeems once and retains its deep link		2.4s
🟢	tests/sessions.e2e.ts · 5 passed	1 step	42.7s
🟢	session tools, archive and restoration persist through the real Worker	1 step	5.6s
🟢	a second account cannot read or mutate another account's session		275ms
🟢	isolate executes a real prompt and persists its output		8.5s
🟢	opencode executes a real prompt and persists its output		14.9s
🟢	codex executes a real prompt and persists its output		13.4s
🟢	tests/settings.e2e.ts · 5 passed	2 steps	26.2s
🟢	all settings categories load real data		7.9s
🟢	runtime default persists after reload		6.3s
🟢	MCP deep link and legacy settings URL open the MCP tab		2.3s
🟢	secret editor creates, finds and deletes a disposable secret	1 step	4.6s
🟢	theme preference survives reload	1 step	5.0s
🟢	tests/skills.e2e.ts · 1 passed		8.5s
🟢	global skill defaults and per-user preferences persist independently		8.5s
🟢	tests/workflows.e2e.ts · 3 passed	1 step	9.0s
🟢	workflow authoring, rename, export, disable and archive persist	1 step	6.3s
🟢	manual workflow executes JavaScript and stores a real R2 artifact		2.7s
🟢	invalid workflow definitions are rejected before storage		101ms

_{e2e 0.21.3 · 3m 13s · local-cloudflare · run artifacts}