Move typeutils into vercel-internal-core - #261
Merged
Merged
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
scotttrinh
approved these changes
Aug 7, 2026
scotttrinh
left a comment
scotttrinh
left a comment
Collaborator
There was a problem hiding this comment.
Changes look good, looks like there are some import ordering failures.
The annotation predicates and forward-reference resolution were private to vercel-queue, but they are not queue-specific, and the workflow codec wants the same reading of a signature. vercel-queue gains a dependency on vercel-internal-core, and ruff needs namespace-packages set to see that vercel._internal.core is shared internals rather than another project's privates.
msullivan
force-pushed
the
typeutil-shared
branch
from
August 7, 2026 01:33
2459cce to
84ef32f
Compare
nsidnev
added a commit
that referenced
this pull request
Aug 7, 2026
Release Packages vercel-internal-core -------------------- 0.1.2 - 2026-08-07 ------------------ Internal -------- - Key session service options by logical service so synchronous and asynchronous variants share configuration safely. (#242) - Absorb `typeutils` from `vercel-queue`: the annotation predicates and runtime forward-reference resolution now live in `vercel._internal.core.typeutils`, where more than one package can reach them. (#261) vercel-oidc ----------- 0.8.0 - 2026-08-07 ------------------ Features -------- - Add OIDC token signature verification. `vercel.oidc.verify_vercel_oidc_token` and its async twin `vercel.oidc.aio.verify_vercel_oidc_token` verify a Vercel OIDC token against the JWKS at `oidc.vercel.com`, pinning the issuer, requiring RS256, and checking the project, environment, owner, and audience claims. `vercel.oidc.extract_bearer_token` reads the credential out of request headers. Verification fails closed: when the expected project or environment cannot be resolved from the arguments or the environment, every token is rejected. (#205) - Claims are compared for equality only. There is no project wildcard: `"*"` is an ordinary string, so a token cannot widen its own scope to every project in a team. (#205) - The issuer is pinned to Vercel's OIDC service and is not configurable. Both the root issuer `https://oidc.vercel.com` and the team-scoped `https://oidc.vercel.com/<team>` are accepted, since Vercel mints both and one global key signs them; the JWKS URL is a constant, so a token can never influence where signing keys come from. (#205) - `vercel.oidc.resolve_vercel_oidc_token_identity`, and its async twin, return an opaque, stable identity for a token. A token is a signature over an identity plus an expiry, so one identity is issued many tokens over time; this is what to key identity-scoped client state on. The signature, issuer and expiry are verified before anything is read, but no claim is checked and none is returned, so it is not an authorization check. (#205) - This requires the new `verify` extra, which pulls in `pyjwt[crypto]`: (#205) - pip install "vercel-oidc[verify]" (#205) - The extra keeps `cryptography` off installs that do not verify tokens. (#205) Bug Fixes --------- - Record JWKS refetch outcomes before allowing another caller to fetch, avoiding duplicate requests under concurrency. (#242) vercel-connect -------------- 0.1.0 - 2026-08-07 ------------------ Features -------- - Add `vercel.connect`, a Python SDK for Vercel Connect: short-lived third-party credentials brokered through the deployment's Vercel OIDC identity, with token caching, authorization flows, connector metadata, and inbound trigger verification. (#205) vercel-internal-telemetry ------------------------- 0.7.2 - 2026-08-07 ------------------ - Update dependencies. vercel-queue ------------ 0.7.3 - 2026-08-07 ------------------ Internal -------- - Take `typeutils` from `vercel._internal.core` rather than carrying a private copy. Adds a dependency on `vercel-internal-core`. (#261) vercel-sandbox -------------- 0.4.0 - 2026-08-07 ------------------ Breaking Changes ---------------- - Require synchronous credential factories when configuring `vercel.sandbox.sync`; use asynchronous factories only with the async Sandbox API. (#242) - Replace the legacy `runtime` selector with `image` when creating sandboxes. Sandbox creation now uses API v3, defaults to `vercel/sandbox/universal:latest`, and supports custom Vercel Container Registry images. (#252) Internal -------- - Run Sandbox examples through the package-owned workspace Poe task. (#234) vercel-cache ------------ 0.7.2 - 2026-08-07 ------------------ - Update dependencies. vercel ------ 0.9.0 - 2026-08-07 ------------------ Breaking Changes ---------------- - The local workflow world now stores its `.workflow-data` files as JSON in the same format the TypeScript `@workflow/world-local` package uses, instead of CBOR. Runs, steps, hooks and events written by either SDK are now readable by the other. Existing `.workflow-data` directories are not readable in the new format and should be deleted. (#226) - Workflow payloads now use the devalue wire format of the TypeScript `@workflow/core` package. (#243) - Workflow steps now ride the `__wkf_workflow_*` queue as a `stepId` on the workflow invoke payload, matching the TypeScript SDK; the separate `__wkf_step_*` queue is gone. (#251) Features -------- - Workflow payloads can now carry native `Decimal`, `UUID`, `date`, `time`, `timedelta` and `Path`, and `@serializable` (or `register_serializable()`) is offered for custom classes. (#224) - Add sync and async clients with typed models for managing project-level routing rules and versions. (#219) Bug Fixes --------- - Allow workflows on Python 3.12 and earlier to import `uuid` by safely exposing `platform.system()` while continuing to block host-specific platform inspection. (#242) - Prevent errors when tasks waiting on steps or hooks are cancelled. (#250) - The Vercel world now honours `VERCEL_WORKFLOW_SERVER_URL` and `WORKFLOW_VERCEL_BACKEND_URL`, which previously had no effect in Python, so a preview deployment reaches the same workflow-server as its TypeScript peers. (#248) Internal -------- - Use a consistent isolated event-loop lifecycle for workflow execution on Python 3.10. (#242) - Run workflows on a dedicated event loop that advances execution when the loop becomes idle. (#242) - Avoid invoking the workflow event loop's idle hook after the loop begins stopping. (#242) vercel-apscheduler ------------------ 0.1.0 - 2026-08-07 ------------------ Features -------- - Add the durable Redis driver for running APScheduler schedules through delayed Vercel Queue messages. (#242) - Add Redis-backed APScheduler subscribers for Vercel Queues. The integration patches `scheduler.start()`, `scheduler.pause()`, and `scheduler.resume()` with durable, deployment-scoped lifecycle transitions and atomic single-chain fencing. Paused occurrences are skipped on resume, and interrupted successor publication is repaired on retry. Production schedules activate on the first request, and opted-in previews stop after a durable idle timeout. Jobs that do not choose a `misfire_grace_time` run their occurrences whenever the wake arrives: the stock one-second grace assumes in-process wakeup precision that queue delivery cannot meet. (#238) - Add a Vercel Runtime Cache backend and use it by default when Redis is not configured, so schedulers run with zero infrastructure. Jobs stay defined in code; the cache document only coordinates the chain (generation, start and wake bookkeeping, lifecycle flags). Because cache entries are evictable and per-region, the queue messages remain the authority: an evicted document is rebuilt from the arriving wake, idempotency keys still fence duplicate starts, and pause/resume flags additionally ride the start topic. Scheduler identity comes from the builder-assigned subscriber id, with a declared-subscriber lookup for web processes. Under `vercel dev` the backend falls back to a per-process in-memory cache and activates on the first request like production, using a stable deployment id derived from the project directory. (#245) Bug Fixes --------- - Fix the Runtime Cache backend to work under `vc dev`. (#253) vercel-celery ------------- 0.7.3 - 2026-08-07 ------------------ - Update dependencies. vercel-dramatiq --------------- 0.7.2 - 2026-08-07 ------------------ - Update dependencies.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The annotation predicates and forward-reference resolution were private to
vercel-queue, but they are not queue-specific, and the workflow codec wants
the same reading of a signature.
vercel-queue gains a dependency on vercel-internal-core, and ruff needs
namespace-packages set to see that vercel._internal.core is shared
internals rather than another project's privates.