vercel · github-actions · Jun 22, 2026 · Jun 22, 2026
@@ -1,5 +1,14 @@
 # @workflow/ai
 
+## 4.1.3
+
+### Patch Changes
+
+- [#2440](https://github.com/vercel/workflow/pull/2440) [`80ccca0`](https://github.com/vercel/workflow/commit/80ccca023d39c4fb735e72fb7446e95bd6b9eb14) Thanks [@pranaygp](https://github.com/pranaygp)! - Re-release `@workflow/ai` on the 4.x stable line. Versions 5.0.0, 6.0.0, and 7.0.0 were published to the `latest` dist-tag in error: a changesets peer-dependency misconfiguration force-bumped a full major on every `workflow` minor release, even though `@workflow/ai` had no breaking changes. Those versions are deprecated — `^4` remains the correct stable range.
+
+- Updated dependencies [[`f2ad726`](https://github.com/vercel/workflow/commit/f2ad7261b14dd64085c80584b9d472019414b512), [`0a5e2aa`](https://github.com/vercel/workflow/commit/0a5e2aa247bc8e4e45d389a2af839110723ce863)]:
+  - workflow@4.6.0
+
 ## 7.0.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/ai",
-  "version": "4.1.2",
+  "version": "4.1.3",
   "description": "Workflow SDK compatible helper library for the AI SDK",
   "type": "module",
   "main": "dist/index.js",

@@ -1,5 +1,17 @@
 # @workflow/astro
 
+## 4.0.11
+
+### Patch Changes
+
+- [#2457](https://github.com/vercel/workflow/pull/2457) [`c4ed84f`](https://github.com/vercel/workflow/commit/c4ed84f1630efa50d20640bc942623c3e648ef21) Thanks [@pranaygp](https://github.com/pranaygp)! - Bump the `astro` dev dependency to 6.4.6 to resolve CVE-2026-54299 (GHSA-2pvr-wf23-7pc7, host header SSRF in prerendered error page fetch).
+
+- Updated dependencies [[`ba62f57`](https://github.com/vercel/workflow/commit/ba62f575e249845d762984f75fcb1a7405a3c8fc), [`578f7e1`](https://github.com/vercel/workflow/commit/578f7e1f1b03d2a7eb39591aa457931b960755cb), [`4c49cc8`](https://github.com/vercel/workflow/commit/4c49cc88957bedcc59f16f2bb4b905a0056d5eff), [`c5d14c8`](https://github.com/vercel/workflow/commit/c5d14c8a89b12cabd6ce9e008afb41780bff2adc), [`b357137`](https://github.com/vercel/workflow/commit/b3571378b8ce9964843d76ce1c5b6e5e2c4cf5da), [`8d1f299`](https://github.com/vercel/workflow/commit/8d1f2993cb8e266e6b688d461160d847011b8393)]:
+  - @workflow/builders@4.1.1
+  - @workflow/swc-plugin@4.1.2
+  - @workflow/rollup@4.0.11
+  - @workflow/vite@4.0.11
+
 ## 4.0.10
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/astro",
-  "version": "4.0.10",
+  "version": "4.0.11",
   "description": "Astro integration for Workflow SDK",
   "type": "module",
   "main": "dist/index.js",

@@ -1,5 +1,26 @@
 # @workflow/builders
 
+## 4.1.1
+
+### Patch Changes
+
+- [#2546](https://github.com/vercel/workflow/pull/2546) [`ba62f57`](https://github.com/vercel/workflow/commit/ba62f575e249845d762984f75fcb1a7405a3c8fc) Thanks [@ijjk](https://github.com/ijjk)! - Optimize eager workflow discovery and improve default eager build compatibility. Also fixes NestJS builds pulling SDK build-tooling into the runtime steps bundle, which crashed step handlers at runtime.
+
+- [#2455](https://github.com/vercel/workflow/pull/2455) [`578f7e1`](https://github.com/vercel/workflow/commit/578f7e1f1b03d2a7eb39591aa457931b960755cb) Thanks [@TooTallNate](https://github.com/TooTallNate)! - Fix Next.js lazy discovery workflow IDs for monorepo workspace packages by resolving module specifiers relative to the app package instead of the tracing root.
+
+- [#2324](https://github.com/vercel/workflow/pull/2324) [`4c49cc8`](https://github.com/vercel/workflow/commit/4c49cc88957bedcc59f16f2bb4b905a0056d5eff) Thanks [@VaguelySerious](https://github.com/VaguelySerious)! - Decode escaped workflowCode template literals before graph extraction so unicode-escape identifiers parse correctly.
+
+- [#2545](https://github.com/vercel/workflow/pull/2545) [`c5d14c8`](https://github.com/vercel/workflow/commit/c5d14c8a89b12cabd6ce9e008afb41780bff2adc) Thanks [@ijjk](https://github.com/ijjk)! - Remove the Next.js lazy discovery/deferred builder path and the `workflows.lazyDiscovery` option.
+
+  Fall back to direct generated-file overwrites on Windows when atomic rename is blocked by Next.js dev server file handles.
+
+- [#2427](https://github.com/vercel/workflow/pull/2427) [`8d1f299`](https://github.com/vercel/workflow/commit/8d1f2993cb8e266e6b688d461160d847011b8393) Thanks [@ijjk](https://github.com/ijjk)! - Add `.swc` to the builder's default gitignore handling.
+
+- Updated dependencies [[`f2ad726`](https://github.com/vercel/workflow/commit/f2ad7261b14dd64085c80584b9d472019414b512), [`20a6d73`](https://github.com/vercel/workflow/commit/20a6d73a0aa03b4b2f7318d97e12a5e7818c67d9), [`015452a`](https://github.com/vercel/workflow/commit/015452a70c52044635d24a134b7b984b6d2e1142), [`5a4c6cf`](https://github.com/vercel/workflow/commit/5a4c6cff3ec52038a417cb68bc720bfa15f090e0), [`db8a2c4`](https://github.com/vercel/workflow/commit/db8a2c49820530f7a331bb4c1f0a803e03547831), [`170ea96`](https://github.com/vercel/workflow/commit/170ea9659a2b9c26e611bab8bb5131f9c6cdc14d), [`0a5e2aa`](https://github.com/vercel/workflow/commit/0a5e2aa247bc8e4e45d389a2af839110723ce863), [`b357137`](https://github.com/vercel/workflow/commit/b3571378b8ce9964843d76ce1c5b6e5e2c4cf5da)]:
+  - @workflow/core@4.6.0
+  - @workflow/swc-plugin@4.1.2
+  - @workflow/errors@4.1.4
+
 ## 4.1.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/builders",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "description": "Shared builder infrastructure for Workflow SDK",
   "type": "module",
   "main": "./dist/index.js",

@@ -1,5 +1,23 @@
 # @workflow/cli
 
+## 4.3.0
+
+### Minor Changes
+
+- [#2467](https://github.com/vercel/workflow/pull/2467) [`3bb5de1`](https://github.com/vercel/workflow/commit/3bb5de1669ae79e9536c93a5a46b7304a3c90ce4) Thanks [@pranaygp](https://github.com/pranaygp)! - Add a `--url` flag to `inspect`/`web` that prints the run's dashboard deep link to stdout and exits (no browser, no server), and fix the Vercel dashboard URL to use the current `…/workflows/runs/<id>?environment=<env>` route (respecting `--env`).
+
+### Patch Changes
+
+- Updated dependencies [[`ab24408`](https://github.com/vercel/workflow/commit/ab244082447eb60ad24faaad91ff4745af2481c5), [`f2ad726`](https://github.com/vercel/workflow/commit/f2ad7261b14dd64085c80584b9d472019414b512), [`20a6d73`](https://github.com/vercel/workflow/commit/20a6d73a0aa03b4b2f7318d97e12a5e7818c67d9), [`015452a`](https://github.com/vercel/workflow/commit/015452a70c52044635d24a134b7b984b6d2e1142), [`ba62f57`](https://github.com/vercel/workflow/commit/ba62f575e249845d762984f75fcb1a7405a3c8fc), [`578f7e1`](https://github.com/vercel/workflow/commit/578f7e1f1b03d2a7eb39591aa457931b960755cb), [`f9119d4`](https://github.com/vercel/workflow/commit/f9119d4b6a39f93df8d97c338c62eb0b6bccad8d), [`5a4c6cf`](https://github.com/vercel/workflow/commit/5a4c6cff3ec52038a417cb68bc720bfa15f090e0), [`db8a2c4`](https://github.com/vercel/workflow/commit/db8a2c49820530f7a331bb4c1f0a803e03547831), [`170ea96`](https://github.com/vercel/workflow/commit/170ea9659a2b9c26e611bab8bb5131f9c6cdc14d), [`0a5e2aa`](https://github.com/vercel/workflow/commit/0a5e2aa247bc8e4e45d389a2af839110723ce863), [`4c49cc8`](https://github.com/vercel/workflow/commit/4c49cc88957bedcc59f16f2bb4b905a0056d5eff), [`161431b`](https://github.com/vercel/workflow/commit/161431b1d08a46767b76ae9389011ae24d4d2ad7), [`c5d14c8`](https://github.com/vercel/workflow/commit/c5d14c8a89b12cabd6ce9e008afb41780bff2adc), [`b06fa65`](https://github.com/vercel/workflow/commit/b06fa657f5e216fd3281534de96619a1d502ef4c), [`b357137`](https://github.com/vercel/workflow/commit/b3571378b8ce9964843d76ce1c5b6e5e2c4cf5da), [`8d1f299`](https://github.com/vercel/workflow/commit/8d1f2993cb8e266e6b688d461160d847011b8393), [`2a688f0`](https://github.com/vercel/workflow/commit/2a688f0a037e8d72bbc7164adc9f3be0924c62a3), [`2a688f0`](https://github.com/vercel/workflow/commit/2a688f0a037e8d72bbc7164adc9f3be0924c62a3)]:
+  - @workflow/world-local@4.2.1
+  - @workflow/world-vercel@4.5.0
+  - @workflow/core@4.6.0
+  - @workflow/builders@4.1.1
+  - @workflow/world@4.2.1
+  - @workflow/web@4.1.12
+  - @workflow/swc-plugin@4.1.2
+  - @workflow/errors@4.1.4
+
 ## 4.2.10
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/cli",
-  "version": "4.2.10",
+  "version": "4.3.0",
   "description": "Command-line interface for Workflow SDK",
   "type": "module",
   "bin": {

@@ -1,5 +1,31 @@
 # @workflow/core
 
+## 4.6.0
+
+### Minor Changes
+
+- [#1853](https://github.com/vercel/workflow/pull/1853) [`f2ad726`](https://github.com/vercel/workflow/commit/f2ad7261b14dd64085c80584b9d472019414b512) Thanks [@TooTallNate](https://github.com/TooTallNate)! - Add wire-level framing for byte streams (`type: 'bytes'`) so consumers can identify chunk boundaries — a prerequisite for transparent auto-reconnect.
+
+### Patch Changes
+
+- [#2397](https://github.com/vercel/workflow/pull/2397) [`20a6d73`](https://github.com/vercel/workflow/commit/20a6d73a0aa03b4b2f7318d97e12a5e7818c67d9) Thanks [@pranaygp](https://github.com/pranaygp)! - `start({ deploymentId: 'latest' })` is now a no-op in Worlds that don't support atomic deployments (local dev, Postgres) instead of throwing — it logs a warning and targets the current deployment, so workflows that use `'latest'` on Vercel still run locally.
+
+- [#2473](https://github.com/vercel/workflow/pull/2473) [`015452a`](https://github.com/vercel/workflow/commit/015452a70c52044635d24a134b7b984b6d2e1142) Thanks [@pranaygp](https://github.com/pranaygp)! - Drain consecutively consumable replay events in a single synchronous pass instead of one `process.nextTick` per event, removing O(N) macrotask hops from replay.
+
+- [#2522](https://github.com/vercel/workflow/pull/2522) [`5a4c6cf`](https://github.com/vercel/workflow/commit/5a4c6cff3ec52038a417cb68bc720bfa15f090e0) Thanks [@VaguelySerious](https://github.com/VaguelySerious)! - Cache the local dev server port per process so workflow replays no longer re-run OS port discovery (which spawns `lsof` on macOS, ~60ms) on every replay.
+
+- [#2511](https://github.com/vercel/workflow/pull/2511) [`db8a2c4`](https://github.com/vercel/workflow/commit/db8a2c49820530f7a331bb4c1f0a803e03547831) Thanks [@VaguelySerious](https://github.com/VaguelySerious)! - Emit `workflowName` on per-step events (`step_created`, `step_completed`) so Worlds can access it without additional queries
+
+- [#2471](https://github.com/vercel/workflow/pull/2471) [`170ea96`](https://github.com/vercel/workflow/commit/170ea9659a2b9c26e611bab8bb5131f9c6cdc14d) Thanks [@pranaygp](https://github.com/pranaygp)! - Cache the compiled workflow-bundle `vm.Script` per process so replays reuse the compiled bundle instead of re-parsing it on every iteration.
+
+- [#2472](https://github.com/vercel/workflow/pull/2472) [`0a5e2aa`](https://github.com/vercel/workflow/commit/0a5e2aa247bc8e4e45d389a2af839110723ce863) Thanks [@pranaygp](https://github.com/pranaygp)! - Memoize hydrated step return values across inline replay iterations, turning the per-invocation step-result decrypt+parse cost from O(N²) to O(N) for sequential workflows. Only primitive results are cached, so deterministic replay is preserved.
+
+- Updated dependencies [[`ab24408`](https://github.com/vercel/workflow/commit/ab244082447eb60ad24faaad91ff4745af2481c5), [`f9119d4`](https://github.com/vercel/workflow/commit/f9119d4b6a39f93df8d97c338c62eb0b6bccad8d), [`db8a2c4`](https://github.com/vercel/workflow/commit/db8a2c49820530f7a331bb4c1f0a803e03547831), [`b06fa65`](https://github.com/vercel/workflow/commit/b06fa657f5e216fd3281534de96619a1d502ef4c), [`2a688f0`](https://github.com/vercel/workflow/commit/2a688f0a037e8d72bbc7164adc9f3be0924c62a3), [`2a688f0`](https://github.com/vercel/workflow/commit/2a688f0a037e8d72bbc7164adc9f3be0924c62a3)]:
+  - @workflow/world-local@4.2.1
+  - @workflow/world-vercel@4.5.0
+  - @workflow/world@4.2.1
+  - @workflow/errors@4.1.4
+
 ## 4.5.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/core",
-  "version": "4.5.0",
+  "version": "4.6.0",
   "description": "Core runtime and engine for Workflow SDK",
   "type": "module",
   "main": "dist/index.js",

@@ -77,25 +77,29 @@ describe('getRunCapabilities', () => {
 
     it.each([
       // pre-cutoff: encryption introduced in 4.2.0-beta.64; framing ships
-      // in the stable 4.5.0 release, so any earlier 4.x version is too old
+      // in the stable 4.6.0 release, so any earlier 4.x version is too old
       '4.2.0-beta.64',
       '4.2.0',
       '4.4.0',
+      // the 4.5.0 release predates framing — it has no unframing support,
+      // so it must read as raw
+      '4.5.0',
+      '4.5.1',
       // betas published before framing shipped must read as raw —
       // a false positive here means framed writes to a consumer that
       // cannot unframe them
-      '4.5.0-beta.14',
+      '4.6.0-beta.14',
     ])('is false for pre-framing version %s', (version) => {
       expect(getRunCapabilities(version).framedByteStreams).toBe(false);
     });
 
-    it('is true at the exact cutoff version (4.5.0)', () => {
-      expect(getRunCapabilities('4.5.0').framedByteStreams).toBe(true);
+    it('is true at the exact cutoff version (4.6.0)', () => {
+      expect(getRunCapabilities('4.6.0').framedByteStreams).toBe(true);
     });
 
     it.each([
-      '4.5.1',
-      '4.6.0',
+      '4.6.1',
+      '4.7.0',
       '5.0.0',
       '6.0.0',
     ])('is true for post-framing version %s', (version) => {