Skip to content

Bump the smooai group across 1 directory with 2 updates#63

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/smooai-4feb153082
Open

Bump the smooai group across 1 directory with 2 updates#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/smooai-4feb153082

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the smooai group with 2 updates in the / directory: smooai-config and smooai-ui.

Updates smooai-config from 6.0.1 to 6.8.0

Release notes

Sourced from smooai-config's releases.

v6.8.0

Minor Changes

  • 23e6577: bootstrapFetch now honors a SMOOAI_HARNESS_<KEY> env override (e.g. SMOOAI_HARNESS_DATABASE_URL, SMOOAI_HARNESS_RLS_DATABASE_URL) that short-circuits the HTTP fetch entirely — the same §15 escape hatch packages/db drizzleClient.resolveDbUrl already honors at runtime. This makes the prod-script override work uniformly across ALL cold-start config consumers (db-migrate and friends), not just the runtime drizzle client. Previously bootstrapFetch ignored the override and fell through to env='development' when no SST stage was set, silently fetching the wrong environment's value.

v6.7.0

Minor Changes

  • ad2c77f: SMOODEV-1526: Port the ESO manifest generator (buildClusterSecretStore + buildExternalSecret) to the Go, Python, Rust, and C# SDKs for language parity with the TypeScript reference. Each emits the same ClusterSecretStore (webhook → real api.smoo.ai config-values endpoint) and per-workload ExternalSecret (secret-tier config keys → UPPER_SNAKE_CASE env vars, with overrides + duplicate guard), using each language's native snakecase util. Epic SMOODEV-1522.
  • ad2c77f: SMOODEV-1526: Port the ESO bearer-token refresher core (the refresh algorithm + SecretWriter abstraction) to the Go, Python, Rust, and C# SDKs for parity with the TypeScript reference. Each mirrors the same behavior — invalidate-then-mint each cycle so the bootstrap Secret always holds a near-full-TTL token, fail-loud initial write, non-fatal loop-tick retries — driven by the language's own TokenProvider and unit-tested with a fake writer (no live cluster). The k8s-backed writer is intentionally an optional adapter so base SDK consumers don't pull a heavy k8s client; the TypeScript sidecar remains the canonical deployable. Epic SMOODEV-1522.

v6.6.0

Minor Changes

  • bb64793: SMOODEV-1524: Add an ESO manifest generator (@smooai/config/eso-manifests). buildClusterSecretStore() emits a ClusterSecretStore whose webhook provider points at the real api.smoo.ai config-values endpoint (org + environment baked in, bearer from the bootstrap Secret the eso-refresher keeps fresh), and buildExternalSecret() emits a per-workload ExternalSecret mapping secret-tier config keys to env-var names (UPPER_SNAKE_CASE by default, with per-key overrides like DASHSCOPE_API_KEYalibabaModelStudioApiKey). Replaces the hand-maintained ESO YAML and makes ESO sync a first-class output of the config system. Epic SMOODEV-1522.

v6.5.0

Minor Changes

  • 8fe21bd: SMOODEV-1523: Add an ESO bearer-token refresher (@smooai/config/eso-refresher + smooai-config-eso-refresher bin). It re-mints the OAuth2 client_credentials access token on a short interval (reusing TokenProvider) and writes it into the ExternalSecrets bootstrap Kubernetes Secret, so ESO's webhook provider always reads a fresh, non-expired bearer. This is what lets workload secrets sync via ESO instead of being Pulumi-baked at SST deploy time — decoupling @smooai/config secret-value changes from the ~1h platform deploy (epic SMOODEV-1522).

v6.4.0

Minor Changes

  • 2bff2d9: SMOODEV-1494: Add container/runtime mode to the Rust SDK (smooai_config::container) — parity with the TypeScript reference (SMOODEV-1490) and the five-language contract (SMOODEV-1489).

    Container mode makes the HTTP config API the first-class, fail-loud path for long-lived containers (EKS/ECS) instead of the Lambda-oriented baked blob:

    • init_container_config(InitContainerConfigOptions) -> Result<ContainerConfigHandle, ConfigError> — validates the container env contract, mints an M2M OAuth token, and performs an initial config fetch so auth/network/missing-env failures surface at startup (not first read). Missing/blank required env returns ConfigError::Bootstrap(ConfigBootstrapError { missing }) listing exactly which vars are absent.

    • Fail-loud reads — handle.secret_config()/public_config()/feature_flag() each expose get(key).await and get_sync(key) that return Err(ConfigError::KeyUnresolved(ConfigKeyUnresolvedError { key, env, tried_tiers })) for a required key that resolves absent, instead of silently returning Ok(None) (the SMOODEV-1478 CrashLoop class). optional_keys opts specific keys out (returning Ok(None)).

    • config_health(&handle) / handle.health() -> ConfigHealth — non-failing status for Kubernetes readiness/liveness probes; serves last-good within the 30s cache TTL, reports Unhealthy { reason } past hard-expiry.

    • select_mode(Option<SelectModeInputs>) -> Mode — mode selection (explicit SMOOAI_CONFIG_MODE=container, blob/file present → Default, or auto-select on M2M creds).

    • Typed errors ConfigBootstrapError, ConfigKeyUnresolvedError, and ConfigTier (blob|env|http|file) mirror the TS shapes/fields; constants DEFAULT_CACHE_TTL (30s) and DEFAULT_TOKEN_REFRESH_BUFFER_SECONDS (60). On a 401 the token is invalidated and the request retried once.

      README gains a "Container / Runtime Mode" section linking the shared docs/Container-Runtime-Mode.md.

v6.3.0

Minor Changes

  • 68a1737: SMOODEV-1491: Add container/runtime mode to the .NET SDK (SmooAI.Config.Container) — brings the C# client to parity with the TypeScript reference (SMOODEV-1490) of the five-language contract (SMOODEV-1489).

    Container mode makes the HTTP config API the first-class, fail-loud path for long-lived containers (EKS/ECS) instead of the Lambda-oriented baked blob:

... (truncated)

Changelog

Sourced from smooai-config's changelog.

6.8.0

Minor Changes

  • 23e6577: bootstrapFetch now honors a SMOOAI_HARNESS_<KEY> env override (e.g. SMOOAI_HARNESS_DATABASE_URL, SMOOAI_HARNESS_RLS_DATABASE_URL) that short-circuits the HTTP fetch entirely — the same §15 escape hatch packages/db drizzleClient.resolveDbUrl already honors at runtime. This makes the prod-script override work uniformly across ALL cold-start config consumers (db-migrate and friends), not just the runtime drizzle client. Previously bootstrapFetch ignored the override and fell through to env='development' when no SST stage was set, silently fetching the wrong environment's value.

6.7.0

Minor Changes

  • ad2c77f: SMOODEV-1526: Port the ESO manifest generator (buildClusterSecretStore + buildExternalSecret) to the Go, Python, Rust, and C# SDKs for language parity with the TypeScript reference. Each emits the same ClusterSecretStore (webhook → real api.smoo.ai config-values endpoint) and per-workload ExternalSecret (secret-tier config keys → UPPER_SNAKE_CASE env vars, with overrides + duplicate guard), using each language's native snakecase util. Epic SMOODEV-1522.
  • ad2c77f: SMOODEV-1526: Port the ESO bearer-token refresher core (the refresh algorithm + SecretWriter abstraction) to the Go, Python, Rust, and C# SDKs for parity with the TypeScript reference. Each mirrors the same behavior — invalidate-then-mint each cycle so the bootstrap Secret always holds a near-full-TTL token, fail-loud initial write, non-fatal loop-tick retries — driven by the language's own TokenProvider and unit-tested with a fake writer (no live cluster). The k8s-backed writer is intentionally an optional adapter so base SDK consumers don't pull a heavy k8s client; the TypeScript sidecar remains the canonical deployable. Epic SMOODEV-1522.

6.6.0

Minor Changes

  • bb64793: SMOODEV-1524: Add an ESO manifest generator (@smooai/config/eso-manifests). buildClusterSecretStore() emits a ClusterSecretStore whose webhook provider points at the real api.smoo.ai config-values endpoint (org + environment baked in, bearer from the bootstrap Secret the eso-refresher keeps fresh), and buildExternalSecret() emits a per-workload ExternalSecret mapping secret-tier config keys to env-var names (UPPER_SNAKE_CASE by default, with per-key overrides like DASHSCOPE_API_KEYalibabaModelStudioApiKey). Replaces the hand-maintained ESO YAML and makes ESO sync a first-class output of the config system. Epic SMOODEV-1522.

6.5.0

Minor Changes

  • 8fe21bd: SMOODEV-1523: Add an ESO bearer-token refresher (@smooai/config/eso-refresher + smooai-config-eso-refresher bin). It re-mints the OAuth2 client_credentials access token on a short interval (reusing TokenProvider) and writes it into the ExternalSecrets bootstrap Kubernetes Secret, so ESO's webhook provider always reads a fresh, non-expired bearer. This is what lets workload secrets sync via ESO instead of being Pulumi-baked at SST deploy time — decoupling @smooai/config secret-value changes from the ~1h platform deploy (epic SMOODEV-1522).

6.4.0

Minor Changes

  • 2bff2d9: SMOODEV-1494: Add container/runtime mode to the Rust SDK (smooai_config::container) — parity with the TypeScript reference (SMOODEV-1490) and the five-language contract (SMOODEV-1489).

    Container mode makes the HTTP config API the first-class, fail-loud path for long-lived containers (EKS/ECS) instead of the Lambda-oriented baked blob:

    • init_container_config(InitContainerConfigOptions) -> Result<ContainerConfigHandle, ConfigError> — validates the container env contract, mints an M2M OAuth token, and performs an initial config fetch so auth/network/missing-env failures surface at startup (not first read). Missing/blank required env returns ConfigError::Bootstrap(ConfigBootstrapError { missing }) listing exactly which vars are absent.
    • Fail-loud reads — handle.secret_config()/public_config()/feature_flag() each expose get(key).await and get_sync(key) that return Err(ConfigError::KeyUnresolved(ConfigKeyUnresolvedError { key, env, tried_tiers })) for a required key that resolves absent, instead of silently returning Ok(None) (the SMOODEV-1478 CrashLoop class). optional_keys opts specific keys out (returning Ok(None)).
    • config_health(&handle) / handle.health() -> ConfigHealth — non-failing status for Kubernetes readiness/liveness probes; serves last-good within the 30s cache TTL, reports Unhealthy { reason } past hard-expiry.
    • select_mode(Option<SelectModeInputs>) -> Mode — mode selection (explicit SMOOAI_CONFIG_MODE=container, blob/file present → Default, or auto-select on M2M creds).
    • Typed errors ConfigBootstrapError, ConfigKeyUnresolvedError, and ConfigTier (blob|env|http|file) mirror the TS shapes/fields; constants DEFAULT_CACHE_TTL (30s) and DEFAULT_TOKEN_REFRESH_BUFFER_SECONDS (60). On a 401 the token is invalidated and the request retried once.

    README gains a "Container / Runtime Mode" section linking the shared docs/Container-Runtime-Mode.md.

6.3.0

Minor Changes

... (truncated)

Commits
  • 319faeb 🦋 New version release (#113)
  • 23e6577 bootstrapFetch: honor SMOOAI_HARNESS_<KEY> override (uniform §15 escape hatch...
  • 72d7487 chore: glow up README — hero banner, marketing callout, diagrams (#111)
  • 5119041 chore: unify README + docs under Smoo AI brand and voice (#110)
  • 40c0833 SMOODEV-1526: cargo fmt the ESO parity Rust modules (green main) (#107)
  • 003a202 🦋 New version release (#108)
  • e022f58 SMOODEV-1526: Fix Python ruff lint on ESO parity modules (#106)
  • ad2c77f SMOODEV-1526: ESO manifest generator parity (Go/Python/Rust/C#) (#105)
  • 552eac2 🦋 New version release (#104)
  • bb64793 SMOODEV-1524: ESO manifest generator (@​smooai/config/eso-manifests) (#103)
  • Additional commits viewable in compare view

Updates smooai-ui from f230808 to c32f0cb

Commits
  • c32f0cb chore: glow up README — hero banner, marketing callout, diagrams (#4)
  • b41fffe chore: unify README + docs under Smoo AI brand and voice (#3)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jun 20, 2026
@changeset-bot

changeset-bot Bot commented Jun 20, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 61f4a00

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot dependabot Bot changed the title Bump the smooai group with 2 updates Bump the smooai group across 1 directory with 2 updates Jun 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/smooai-4feb153082 branch 10 times, most recently from 1edb6b3 to afe4c09 Compare June 27, 2026 02:36
@dependabot dependabot Bot force-pushed the dependabot/cargo/smooai-4feb153082 branch from afe4c09 to e932415 Compare July 1, 2026 16:59
Bumps the smooai group with 2 updates in the / directory: [smooai-config](https://github.com/SmooAI/config) and [smooai-ui](https://github.com/SmooAI/ui).


Updates `smooai-config` from 6.0.1 to 6.8.0
- [Release notes](https://github.com/SmooAI/config/releases)
- [Changelog](https://github.com/SmooAI/config/blob/main/CHANGELOG.md)
- [Commits](SmooAI/config@v6.0.1...v6.8.0)

Updates `smooai-ui` from `f230808` to `c32f0cb`
- [Commits](SmooAI/ui@f230808...c32f0cb)

---
updated-dependencies:
- dependency-name: smooai-config
  dependency-version: 6.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: smooai
- dependency-name: smooai-ui
  dependency-version: c32f0cbccd55bcf0bd446ed330ab3d76baa21e90
  dependency-type: direct:production
  dependency-group: smooai
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/smooai-4feb153082 branch from e932415 to 61f4a00 Compare July 2, 2026 02:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants