v0.122.1

What's new

Operator visibility

Gateway operators can now see when a run is waiting for a question or approval across the live stream, reconnects, run summaries, and question notifications. Waiting state is refreshed from the request registries, cleared when requests settle, and never overlays a terminal run; question notifications also link directly to the matching run. The operator contract is now 1.11.0, so the dashboard must be deployed in the same window. #1825

Reliability

The runtime-verification sweep can now verify repositories pinned to recent releases without oversized GitHub API responses. It compares the pin against preflight and reads the bounded ahead_by count, preserving the same verified/stale result while reducing the current-pin response from about 2.24 MB to 8.6 KB. #1821

Vitest 5 no longer discovers the repository-root config from package directories, which had silently bypassed shared HOME/XDG isolation and test exclusions. Package test commands now point to the shared config explicitly, and the workspace test image includes that config and its required scripts. #1816

Full changelog

0.122.1 (2026-10-13)

Build System

• deps: update dependency @fro.bot/systematic to v3.22.0 (#1818) (f76e3a2)
• deps: update dependency @fro.bot/systematic to v3.22.1 (#1822) (b7392f0)
• deps: update dependency @opencode-ai/sdk to v1.18.35 (#1808) (fa6ff73)
• deps: update dependency anomalyco/opencode to v1.19.0 (#1809) (a6040c3)

Bug Fixes

• deps: update dependency @aws-sdk/client-s3 to v3.1149.0 (#1819) (b8e3df3)
• gateway: reflect question and approval waits in operator run status (#1825) (a119ba4), references #1780 #1780 #1780 #1780 #1780 #1780 #1780 #1780 #1780 #1780 #1780 #1780
• scripts: keep current pins verifiable in the runtime-verification sweep (#1821) (b2323b2)

Continuous Integration

• deps: update google/osv-scanner-action action to v2.7.0 (#1797) (2951151)
• deps: update ossf/scorecard-action action to v2.5.0 (#1798) (0996182)
• drop the SBOM step that has not produced an artifact since the Bun migration (#1820) (7c5a266)

Miscellaneous Chores

• deps: drop the unused js-yaml devDependency (#1815) (5f153c9)
• dev: update dependency @types/node to v24.19.2 (#1812) (d116805)
• dev: update dependency prettier to v3.9.10 (#1824) (ef95377)
• dev: update Vitest to 5 and keep suites on the shared config (#1816) (bb3b17c)
• renovate: stop proposing majors for security-floor overrides (#1814) (6cb9444)