Skip to content

Release v2026.10.1 - #287

Merged
sasagar merged 13 commits into
mainfrom
dev
Oct 14, 2026
Merged

sasagar merged 13 commits into
mainfrom
dev

Conversation

@sasagar

@sasagar sasagar commented Oct 14, 2026

Copy link
Copy Markdown
Member

Release v2026.10.1

Promote dev to main for the v2026.10.1 patch release (packages: 1.10.1).

Highlights since v2026.10.0

Upgrade notes for self-hosters (docker compose)

  • docker/compose.yml no longer runs Dragonfly with --cache_mode=true. If you keep your own compose file, remove that flag so queued deliveries are not evicted under memory pressure.
  • If your .env was copied from .env.example and sets REDIS_URL=redis://localhost:6379, remove it inside compose so the backend uses DRAGONFLY_URL.

Merging this PR triggers auto-tag to create v2026.10.1 and the GitHub release. This is also the first release where the release.yml guard should skip the auto-tag tag.

https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv

sasagar and others added 13 commits October 14, 2026 08:40
auto-tag pushes tags with RELEASE_PAT, which also triggers release.yml.
Both workflows then created the same release and raced on the SBOM
upload. Add a guard job that skips push events whose annotated tag was
created by github-actions[bot]; hand-pushed tags and workflow_dispatch
are unaffected.

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
fix: skip Manual Release for tags pushed by auto-tag
Node.js 20 reached end-of-life on 2026-04-30. Node is only used in the
devcontainer to install the Claude Code CLI via npm.

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
- Add lib/redis.ts with shared URL resolution, protocol: 2 and a
  never-give-up reconnect strategy (capped at 5s) for both the cache
  adapter and the delivery queue
- Wait up to 15s for the first ready event instead of failing on the
  first connection error, so a late Dragonfly start no longer disables
  the queue and cache for the process lifetime
- Log a warning once per outage and an info message on recovery
- Generate job IDs from a SHA-256 digest with a d- prefix: no
  collisions between deliveries and never integer-like (rejected by
  BullMQ)

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
#281)

- Drop --cache_mode=true so Dragonfly never evicts queue keys; every
  cache entry already sets a TTL
- Start the backend only after Dragonfly is healthy
- Comment out REDIS_URL in .env.example so a copied .env does not
  override the DRAGONFLY_URL set by compose and the devcontainer

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
@simplewebauthn/server v14 exports AuthenticatorTransport itself.

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
auto-tag now adds an "[auto-tag]" marker to the tag message and the
release.yml guard checks for it, so the two workflows no longer depend
on the git user.name string alone. The tagger check remains as a
fallback for tags created before the marker.

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
The startup timeout error included the raw REDIS_URL/DRAGONFLY_URL,
which can contain a password and is logged at warn level.

Claude-Session: https://claude.ai/code/session_01Y29fBeRP344FME6de48wUv
…de24

chore: bump devcontainer Node.js from 20 to 24
fix: Redis/Dragonfly connection resilience and job ID collisions
fix: mark auto-tag tags explicitly for the release guard
@coderabbitai

coderabbitai Bot commented Oct 14, 2026

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 56 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Repository: Love-Rox/rox/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a6de3c94-f60e-4ea9-a0e6-0de3a1dde12c
📥 Commits

Reviewing files that changed from the base of the PR and between fdf0127 and 7fbf8cd.

⛔ Files ignored due to path filters: 1
  • bun.lock is excluded by !**/*.lock
📒 Files selected for processing: 18
  • .claude/rules/devcontainer.md
  • .devcontainer/compose.yml
  • .devcontainer/devcontainer.json
  • .env.example
  • .github/workflows/auto-tag.yml
  • .github/workflows/release.yml
  • docker/compose.dev.yml
  • docker/compose.yml
  • package.json
  • packages/backend/package.json
  • packages/backend/src/adapters/cache/DragonflyCacheAdapter.ts
  • packages/backend/src/lib/redis.ts
  • packages/backend/src/services/PasskeyService.ts
  • packages/backend/src/services/ap/ActivityDeliveryQueue.ts
  • packages/backend/src/tests/unit/ActivityDeliveryQueue.test.ts
  • packages/backend/src/tests/unit/redis.test.ts
  • packages/frontend/package.json
  • packages/shared/package.json
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sasagar
sasagar merged commit 755969e into main Oct 14, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant