chore: upgrade @objectstack/* dependencies from ^3.0.8 to ^3.2.5

[Copilot]

All @objectstack/* upstream packages (published from objectstack-ai/spec) released v3.2.5 on 2026-03-10; the monorepo was still pinning them at ^3.0.8.

Version bumps

@objectstack/* — ^3.0.8 → ^3.2.5 across 25 package.json files:

• Root — cli, core, plugin-auth, plugin-hono-server, studio
• Foundation — core, types, platform-node, plugin-security, plugin-workflow, plugin-formula, plugin-query, plugin-validator, plugin-optimizations, plugin-multitenancy
• Drivers — memory, sql, mongo, redis, excel, fs, sdk, turso, pg-wasm, sqlite-wasm
• Protocols — graphql, json-rpc, odata-v4
• Tools — cli

@objectql/driver-memory (root) — ^4.2.0 → ^4.2.2 to align with workspace package versions.

Notes

• workspace:* internal references are untouched.
• AuthPlugin in objectstack.config.ts remains commented out — the camelCase/snake_case field naming issue persists and requires upstream resolution in @objectstack/plugin-auth or a normalization layer in the engine.
• ROADMAP.md version references updated to reflect v3.2.5.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• fastdl.mongodb.org
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/objectql/objectql/node_modules/.bin/../vitest/vitest.mjs run sh -c s inux-64/bin/turbo tools/pnpm/10.28.2_tmp_4110_0/node_modules/pnpm/dist/node-gyp-bin/sh -r napi || nodegrep ./packages/toolsphysical id /.bin/node sh -c e-objectql extension yet' bash tools/pnpm/10.28.2/bin/pnpm --noprofile (dns block)
• fonts.googleapis.com
  • Triggering command: /opt/hostedtoolcache/node/24.14.0/x64/bin/node /opt/hostedtoolcache/node/24.14.0/x64/bin/node /home/REDACTED/work/objectql/objectql/node_modules/.pnpm/next@16.1.6_react-dom@19.2.4_react@19.2.4__react@19.2.4/node_modules/next/dist/compiled/jest-worker/processChild.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Context

The @objectstack/* upstream packages (published from objectstack-ai/spec) have been released at v3.2.5 as of 2026-03-10. The objectql monorepo is currently pinning all @objectstack/* dependencies at ^3.0.8, which is outdated.

Task

Upgrade ALL @objectstack/* dependency version specifiers across the entire monorepo from ^3.0.8 to ^3.2.5, and adjust any code or imports that need to align with the latest protocol.

1. Root package.json

Current versions to upgrade (all currently ^3.0.8):

• @objectstack/cli → ^3.2.5
• @objectstack/core → ^3.2.5
• @objectstack/plugin-auth → ^3.2.5
• @objectstack/plugin-hono-server → ^3.2.5
• @objectstack/studio → ^3.2.5

Also upgrade @objectql/driver-memory from ^4.2.0 to ^4.2.2 (to match workspace packages).

2. Foundation Layer packages

packages/foundation/core/package.json (@objectql/core):

• @objectstack/core: ^3.0.8 → ^3.2.5
• @objectstack/objectql: ^3.0.8 → ^3.2.5
• @objectstack/runtime: ^3.0.8 → ^3.2.5
• @objectstack/spec: ^3.0.8 → ^3.2.5

packages/foundation/types/package.json (@objectql/types):

• @objectstack/spec (devDependency): ^3.0.8 → ^3.2.5

packages/foundation/platform-node/package.json (@objectql/platform-node):

• @objectstack/objectql: ^3.0.8 → ^3.2.5
• @objectstack/spec: ^3.0.8 → ^3.2.5

packages/foundation/plugin-security/package.json (@objectql/plugin-security):

• @objectstack/core: ^3.0.8 → ^3.2.5
• @objectstack/spec: ^3.0.8 → ^3.2.5

packages/foundation/plugin-workflow/package.json (@objectql/plugin-workflow):

• @objectstack/core: ^3.0.8 → ^3.2.5
• @objectstack/spec: ^3.0.8 → ^3.2.5

Other foundation plugins (plugin-formula, plugin-query, plugin-validator, plugin-optimizations, plugin-multitenancy, plugin-sync, edge-adapter) — check each for @objectstack/* deps and upgrade similarly.

3. Drivers Layer packages

All drivers that have @objectstack/spec: "^3.0.8" must be upgraded to ^3.2.5:

• packages/drivers/memory/package.json (@objectql/driver-memory)
• packages/drivers/sql/package.json (@objectql/driver-sql)
• packages/drivers/mongo/package.json (@objectql/driver-mongo)
• packages/drivers/redis/package.json (@objectql/driver-redis)
• packages/drivers/excel/package.json (@objectql/driver-excel)
• packages/drivers/fs/package.json (@objectql/driver-fs)
• packages/drivers/sdk/package.json (@objectql/sdk)
• packages/drivers/turso/package.json (@objectql/driver-turso)
• packages/drivers/pg-wasm/package.json (@objectql/driver-pg-wasm)
• packages/drivers/sqlite-wasm/package.json (@objectql/driver-sqlite-wasm)

4. Protocol/Tools packages

Check packages/protocols/ and packages/tools/ for any @objectstack/* dependencies and upgrade them similarly.

5. Config file alignment

The objectstack.config.ts imports from @objectstack/plugin-hono-server, @objectstack/plugin-auth, @objectstack/core. Verify that the imports and API usage still match the v3.2.5 protocol. Specifically, the AuthPlugin is currently commented out due to camelCase vs snake_case field naming issues — check if the new version resolves this.

6. Important Rules

• This is a search-and-replace operation across all package.json files: replace "^3.0.8" with "^3.2.5" for all @objectstack/* entries.
• Do NOT change workspace:* references (those are internal monorepo links).
• Do NOT modify the @objectql/* package versions themselves (they stay at 4.2.2).
• Run pnpm install conceptually — ensure the lockfile would be consistent.
• After upgrading, review any TypeScript source files that import from @objectstack/* to ensure API compatibility.

Summary of version changes

Package	Current	Target
@objectstack/core	^3.0.8	^3.2.5
@objectstack/cli	^3.0.8	^3.2.5
@objectstack/spec	^3.0.8	^3.2.5
@objectstack/runtime	^3.0.8	^3.2.5
@objectstack/objectql	^3.0.8	^3.2.5
@objectstack/plugin-auth	^3.0.8	^3.2.5
@objectstack/plugin-hono-server	^3.0.8	^3.2.5
@objectstack/studio	^3.0.8	^3.2.5
@objectql/driver-memory (root)	^4.2.0	^4.2.2

The following is the prior conversation context from the user's chat exploration (may be truncated):

User: @objectstack 升级到最新版，并按照最新的协议调整代码和 driver

Assistant:

I'll start by understanding the current state of the repository and then research what needs to be upgraded.

Assistant: Now I have a comprehensive understanding of the monorepo. Let me check the @objectstack/spec repo to understand the latest protocol, and also look at the @objectstack-ai GitHub org for the latest spec releases.

Assistant: Now I have a clear picture. The @objectstack/* packages in the objectstack-ai/spec repo have been released at v3.2.5 (published today, ...

This pull request was created from Copilot chat.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectql	Ready	Preview, Comment	Mar 10, 2026 9:14am

[Copilot]

Pull request overview

This PR upgrades all @objectstack/* upstream dependencies from ^3.0.8 to ^3.2.5 across the entire ObjectQL monorepo, along with bumping the root @objectql/driver-memory from ^4.2.0 to ^4.2.2 to match workspace package versions. The ROADMAP.md version references are updated accordingly, and the pnpm-lock.yaml reflects the resolved dependency tree with the new versions.

Changes:

• Bumped all @objectstack/* dependency specifiers from ^3.0.8 to ^3.2.5 across 25 package.json files (root + foundation + drivers + protocols + tools layers).
• Bumped root @objectql/driver-memory from ^4.2.0 to ^4.2.2 and updated pnpm-lock.yaml with the resolved dependency tree (including transitive upgrades to better-auth@1.5.4, hono@4.12.6, etc.).
• Updated all version references in ROADMAP.md from v3.0.8 to v3.2.5.

Reviewed changes

Copilot reviewed 26 out of 27 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
package.json	Root: bump @objectstack/* to ^3.2.5, @objectql/driver-memory to ^4.2.2
packages/foundation/core/package.json	Bump @objectstack/core, objectql, runtime, spec to ^3.2.5
packages/foundation/types/package.json	Bump @objectstack/spec devDep to ^3.2.5
packages/foundation/platform-node/package.json	Bump @objectstack/objectql, spec to ^3.2.5
packages/foundation/plugin-security/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/foundation/plugin-workflow/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/foundation/plugin-validator/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/foundation/plugin-query/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/foundation/plugin-optimizations/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/foundation/plugin-multitenancy/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/foundation/plugin-formula/package.json	Bump @objectstack/core, spec to ^3.2.5
packages/drivers/memory/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/sql/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/mongo/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/redis/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/excel/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/fs/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/sdk/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/turso/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/pg-wasm/package.json	Bump @objectstack/spec to ^3.2.5
packages/drivers/sqlite-wasm/package.json	Bump @objectstack/spec to ^3.2.5
packages/protocols/graphql/package.json	Bump @objectstack/spec, core to ^3.2.5
packages/protocols/json-rpc/package.json	Bump @objectstack/spec, core to ^3.2.5
packages/protocols/odata-v4/package.json	Bump @objectstack/spec, core to ^3.2.5
packages/tools/cli/package.json	Bump @objectstack/objectql to ^3.2.5
ROADMAP.md	Update all v3.0.8 references to v3.2.5
pnpm-lock.yaml	Resolved dependency tree reflecting all version bumps

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

[Copilot]

The section heading was updated from Post v3.0.8 Upgrade to Post v3.2.5 Upgrade, but the corresponding Table of Contents link on line 29 still references Post v3.0.4 Upgrade (a pre-existing issue, but now the anchor is further mismatched). The ToC anchor #immediate-next-steps-post-v304-upgrade won't resolve to this heading anymore — it should be updated to match #immediate-next-steps-post-v325-upgrade.