Skip to content

Version Packages - #24

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
changeset-release/main
Open

github-actions[bot] wants to merge 1 commit into
mainfrom
changeset-release/main

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 18, 2026 •

Copy link
Copy Markdown
Contributor

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@pungrumpy/cursor-action@2.0.0

Major Changes

  • eb34fe0: Enforce the permissions input through the Cursor SDK's tool restrictions. read-only (the default) now offers the agent read, search, and web tools only; read-write removes shell and task from the default toolset; full leaves the SDK default. Workflows that relied on read-only not restricting anything must set permissions: full. Pin uses: PunGrumpy/cursor-action@v2 to pick this up; @v1 keeps the previous behaviour.

Patch Changes

  • 18f70f7: Collect the agent's answer from assistant stream events instead of thinking events. A cancelled or errored run's summary now holds the model's partial answer rather than its reasoning.
  • b13383c: Treat timeout as a hard deadline: after requesting cancellation the action waits at most ten seconds for the run to stop, then fails the step as cancelled instead of waiting indefinitely. The agent is now released (Symbol.asyncDispose) when the run ends on every path, bounded by its own fifteen-second limit.
  • 5bbf814: Publish the agent's answer verbatim in summary. An answer that happened to be a JSON object was previously reduced to its response, summary, result, output, or text field, a leftover from the CLI's --output-format json era; workflows that ask for structured output now receive the whole object.
  • abf9133: Update @cursor/sdk to 1.0.38 and refresh the transitive undici pin. The SDK release drops @connectrpc/connect-node, and the newer undici clears the remaining advisory npm audit reported for the action's runtime dependency tree.

@vercel

vercel Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
cursor-action Ready Ready Preview Oct 18, 2026 11:46am UTC

@coderabbitai

coderabbitai Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: fb04aedd-7aeb-4b52-98ee-503fc887e237

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch was successfully deployed

1 active deployment
Preview — 0f0d569c Deployed Oct 18, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants