release: 0.5.0 by stainless-app[bot] · Pull Request #13 · kernel/hypeman-ts

stainless-app · 2026-04-23T03:59:22Z

Automated Release PR

0.5.0 (2026-07-29)

Full Changelog: v0.4.0...v0.5.0

Features

Add design proposal: Rosetta x86-64 emulation for vz Linux guests (4ed6797)
Add instance health checks (a14bf8c)
Add instance restart policy (adb5d8c)
Add POST /instances/{id}/auto-standby/reset (588987e)
Make an auto-standby hold replace the previous deadline (4c90b67)
Model template as an instance state instead of a separate registry (09a28d5)
Revert template state model (549ddec)
stlc: configurable CI runner and private-production-repo support in workflow templates (ffbb89c)
support setting headers via env (8c41637)
Track per-phase duration on each instance (8da2e87)

Bug Fixes

ci: bump @arethetypeswrong/cli to ^0.18.0 and run CI workflows on Node 24 (4db99ac)
client: send content-type header for requests with an omitted optional body (0b1bd07)
remove incorrect setup-bun input — project uses pnpm (2c9abc9)
typescript: upgrade tsc-multi so that it works with Node 26 (c543e44)

Chores

format: run eslint and prettier separately (035aa83)
internal: codegen related update (c8083ea)
internal: more robust bootstrap script (a369af6)
redact api-key headers in debug logs (a985151)
tests: remove redundant File import (85aa1c8)

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

Note

Medium Risk
SDK and HTTP client changes affect all API consumers; omitted-body Content-Type and env-driven headers can change request behavior in production integrations.

Overview
Release 0.5.0 bumps the package and OpenAPI metadata (53 endpoints) and ships generated SDK updates from the latest Hypeman API spec.

Instance API surface expands with health-check and restart-policy types on instances, plus client.instances.autoStandby.hold for the new auto-standby hold endpoint. api.md and exports reflect those additions.

HTTP client behavior now applies default headers from HYPEMAN_CUSTOM_HEADERS (newline-separated name: value lines), sends Content-Type when a body key is present but the optional body was omitted, and redacts API-key headers in debug logs.

Tooling and CI move lint/format to separate Prettier and ESLint runs (drops eslint-plugin-prettier), pins GitHub Actions to commit SHAs, runs Node 24 in workflows, and uses Depot runners for any stainless-sdks/* repo. Dev deps bump @arethetypeswrong/cli and tsc-multi; postprocess-files fixes // @ts-ignore placement in emitted .d.ts files.

^{Reviewed by Cursor Bugbot for commit 4798d91. Bugbot is set up for automated code reviews on this repo. Configure here.}

firetiger-agent · 2026-04-23T03:59:51Z

Firetiger deploy monitoring skipped

This PR didn't match the auto-monitor filter configured on your GitHub connection:

Any PR that changes the kernel API. Monitor changes to API endpoints (packages/api/cmd/api/) and Temporal workflows (packages/api/lib/temporal) in the kernel repo

Reason: This is an automated release PR with only internal bootstrap script changes, not a modification to kernel API endpoints or Temporal workflows.

To monitor this PR anyway, reply with @firetiger monitor this.

stainless-app · 2026-04-23T03:59:56Z

🧪 Testing

To try out this version of the SDK:

npm install 'https://pkg.stainless.com/s/hypeman-typescript/4c90b67f2dfb826f6c33421124d3f9aac2fd8b6c/dist.tar.gz'

Expires at: Fri, 28 Aug 2026 17:17:11 GMT
Updated at: Wed, 29 Jul 2026 17:17:11 GMT

cursor · 2026-04-28T04:38:26Z

+        }
+      }
+      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };
+    }


Object spread breaks non-Record defaultHeaders types

Medium Severity

When HYPEMAN_CUSTOM_HEADERS is set, the new code merges env headers into options.defaultHeaders via object spread. However, HeadersLike accepts a Headers instance, an array of header tuples, or a branded NullableHeaders — none of which spread into a plain object correctly. A user-supplied Headers instance is silently dropped (no enumerable own properties); arrays produce numeric-key objects; NullableHeaders exposes its internal values/nulls/brand fields. Downstream buildHeaders/iterateHeaders then treats the result as a record and corrupts the headers.

^{Reviewed by Cursor Bugbot for commit f31252b. Configure here.}

cursor · 2026-05-01T04:57:34Z

+      const parsed: Record<string, string> = {};
+      for (const line of customHeadersEnv.split('\n')) {
+        const colon = line.indexOf(':');
+        if (colon >= 0) {


Empty header name allowed when line starts with colon

Low Severity

The HYPEMAN_CUSTOM_HEADERS parser uses colon >= 0 which accepts lines starting with :, producing a header with an empty-string name (""). Using colon > 0 would correctly skip such malformed lines, since HTTP header names cannot be empty.

^{Reviewed by Cursor Bugbot for commit 2f48827. Configure here.}

Pin all GitHub Actions referenced in generated workflows (both first-party `actions/*` and third-party) to immutable commit SHAs. Updating pinned actions is now a deliberate codegen-side bump rather than implicit on every workflow run.

cursor · 2026-06-09T15:03:36Z

+    // line as the type declaration, which doesn't work. So we convert to // @ts-ignore
+    // on its own line to properly suppresses errors.
+    if (file.endsWith('.d.ts') || file.endsWith('.d.mts') || file.endsWith('.d.cts')) {
+      transformed = transformed.replace(/\/\*\* @ts-ignore\b[^*]*\*\/ /gm, '// @ts-ignore\n');


Postprocess misplaces ts-ignore line

Medium Severity

The new declaration post-pass rewrites collapsed /** @ts-ignore */ comments to a standalone // @ts-ignore, but the regex only consumes text through the first */ when a /* prettier-ignore */ suffix sits on the same line. That inserts // @ts-ignore immediately above the prettier-ignore comment, so suppression applies to that comment line instead of the following type alias where the emitter actually needs it.

^{Reviewed by Cursor Bugbot for commit c846491. Configure here.}

…tional body

…n Node 24

cursor

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

There are 4 total unresolved issues (including 3 from previous reviews).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit ff55cae. Configure here.}

cursor · 2026-07-11T02:28:04Z

    "": {
      "name": "@onkernel/hypeman",
-      "version": "0.4.0",
+      "version": "0.5.0",


Stale npm lockfile dependencies

Medium Severity

This release updates package.json devDependencies (@arethetypeswrong/cli ^0.18.0, tsc-multi v1.1.11, and removal of eslint-plugin-prettier) but package-lock.json still lists the old versions and the removed plugin. npm ci against the lockfile can fail or install tooling that no longer matches what CI runs via pnpm-lock.yaml.

Additional Locations (1)

package.json#L33-L53

^{Reviewed by Cursor Bugbot for commit ff55cae. Configure here.}

…t in workflow templates

pnpm owns the lockfile format and rewrites it on install, so prettier --check (added to scripts/lint in 035aa83) fails on it on every branch. Matches the upstream Stainless SDK template, which lists pnpm-lock.yaml in .prettierignore alongside the same prettier --check lint step.

stainless-app · 2026-08-04T19:49:47Z

🤖 Release is at https://github.com/kernel/hypeman-ts/releases/tag/v0.5.0 🌻

stainless-app Bot added the autorelease: pending label Apr 23, 2026

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from d3308ac to f31252b Compare April 28, 2026 04:35

stainless-app Bot changed the title ~~release: 0.4.1~~ release: 0.5.0 Apr 28, 2026

cursor Bot reviewed Apr 28, 2026

View reviewed changes

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch 3 times, most recently from 34cdd30 to 1e1dd24 Compare April 29, 2026 19:15

cursor Bot reviewed Apr 29, 2026

View reviewed changes

Comment thread scripts/format

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch 2 times, most recently from 8796aae to 2f48827 Compare May 1, 2026 04:53

cursor Bot reviewed May 1, 2026

View reviewed changes

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 2f48827 to dd4d2d3 Compare May 8, 2026 05:21

cursor Bot reviewed May 8, 2026

View reviewed changes

Comment thread scripts/fast-format

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from dd4d2d3 to 4c8ba35 Compare May 12, 2026 12:40

stainless-app Bot added 8 commits May 12, 2026 17:33

chore(internal): more robust bootstrap script

a369af6

chore(internal): codegen related update

c8083ea

feat: support setting headers via env

8c41637

chore(format): run eslint and prettier separately

035aa83

codegen metadata

26d50bf

codegen metadata

d235365

chore: redact api-key headers in debug logs

a985151

feat: Track per-phase duration on each instance

8da2e87

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 4c8ba35 to 76b4242 Compare May 12, 2026 17:33

ci: pin GitHub Actions to commit SHAs

9f2da88

Pin all GitHub Actions referenced in generated workflows (both first-party `actions/*` and third-party) to immutable commit SHAs. Updating pinned actions is now a deliberate codegen-side bump rather than implicit on every workflow run.

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 76b4242 to 2618405 Compare May 13, 2026 04:07

feat: Model template as an instance state instead of a separate registry

09a28d5

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 2618405 to 750e597 Compare May 14, 2026 16:00

feat: Revert template state model

549ddec

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 750e597 to 2c7bcbe Compare May 18, 2026 14:39

feat: Add instance health checks

a14bf8c

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 2c7bcbe to 9ca9e66 Compare May 18, 2026 15:04

stainless-app Bot added 3 commits May 18, 2026 15:16

feat: Add instance restart policy

adb5d8c

chore(tests): remove redundant File import

85aa1c8

fix(typescript): upgrade tsc-multi so that it works with Node 26

c543e44

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 9ca9e66 to 8405ea9 Compare May 19, 2026 03:16

feat: Add design proposal: Rosetta x86-64 emulation for vz Linux guests

4ed6797

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 8405ea9 to c846491 Compare June 9, 2026 15:01

cursor Bot reviewed Jun 9, 2026

View reviewed changes

fix(client): send content-type header for requests with an omitted op…

0b1bd07

…tional body

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from c846491 to a38888c Compare June 17, 2026 02:18

fix(ci): bump @arethetypeswrong/cli to ^0.18.0 and run CI workflows o…

4db99ac

…n Node 24

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from a38888c to ff55cae Compare July 11, 2026 02:25

cursor Bot reviewed Jul 11, 2026

View reviewed changes

feat(stlc): configurable CI runner and private-production-repo suppor…

ffbb89c

…t in workflow templates

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from ff55cae to 6fa26f2 Compare July 18, 2026 02:16

feat: Add POST /instances/{id}/auto-standby/reset

588987e

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 6fa26f2 to 0212822 Compare July 28, 2026 19:44

stainless-app Bot added 2 commits July 29, 2026 17:16

feat: Make an auto-standby hold replace the previous deadline

4c90b67

release: 0.5.0

575fd0c

stainless-app Bot force-pushed the release-please--branches--main--changes--next--components--hypeman branch from 0212822 to 575fd0c Compare July 29, 2026 17:16

sjmiller609 approved these changes Aug 4, 2026

View reviewed changes

stainless-app Bot merged commit 1035dd8 into main Aug 4, 2026
11 checks passed

stainless-app Bot added autorelease: tagged and removed autorelease: pending labels Aug 4, 2026

Navigation Menu

Uh oh!

release: 0.5.0 - #13

release: 0.5.0#13
stainless-app[bot] merged 23 commits into
mainfrom
release-please--branches--main--changes--next--components--hypeman

stainless-app Bot commented Apr 23, 2026 •

edited by cursor Bot

Loading

Uh oh!

firetiger-agent Bot commented Apr 23, 2026

Uh oh!

stainless-app Bot commented Apr 23, 2026 •

edited

Loading

Uh oh!

cursor Bot Apr 28, 2026

Uh oh!

Uh oh!

cursor Bot May 1, 2026

Uh oh!

Uh oh!

cursor Bot Jun 9, 2026

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Jul 11, 2026

Uh oh!

Uh oh!

stainless-app Bot commented Aug 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

stainless-app Bot commented Apr 23, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Automated Release PR

0.5.0 (2026-07-29)

Features

Bug Fixes

Chores

Uh oh!

firetiger-agent Bot commented Apr 23, 2026

Uh oh!

stainless-app Bot commented Apr 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot Apr 28, 2026

Choose a reason for hiding this comment

Object spread breaks non-Record defaultHeaders types

Uh oh!

Uh oh!

cursor Bot May 1, 2026

Choose a reason for hiding this comment

Empty header name allowed when line starts with colon

Uh oh!

Uh oh!

cursor Bot Jun 9, 2026

Choose a reason for hiding this comment

Postprocess misplaces ts-ignore line

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Jul 11, 2026

Choose a reason for hiding this comment

Stale npm lockfile dependencies

Uh oh!

Uh oh!

stainless-app Bot commented Aug 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

stainless-app Bot commented Apr 23, 2026 •

edited by cursor Bot

Loading

stainless-app Bot commented Apr 23, 2026 •

edited

Loading

Object spread breaks non-Record `defaultHeaders` types