Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

run@2.1.1

Patch Changes

• 3a2f001: Add a fail-closed banned-pattern security check and update unsafe object, error, bridge, and worker patterns to conform.
• 9d787ca: Generalize continuation replay ledgers to record synchronous host functions and native module-loader operations, allowing runs that use either capability to create and resume continuations without repeating recorded side effects.

@run/website@0.0.5

Patch Changes

• Updated dependencies [3a2f001]
• Updated dependencies [9d787ca]
  • run@2.1.1

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
run	Ready	Preview, v0	Aug 31, 2026 2:13pm

[auto-maintain]

🤖 auto-maintain review

Automated, advisory triage for @github-actions[bot]'s PR. Facts below are read from the GitHub API.

Check	Result
Author's merged PRs (this repo)	4
Account established	✅ (age 2954d · 0 followers · 0 public repos)
Commits signed/verified	✅ 1/1
Changeset included	⚠️

Review panel: 🟢 low highest severity

run maintainer code review: 🟢 low

Release metadata correctly versions run to 2.1.1 and records both unreleased patch changes.

General code review: 🟢 low

No actionable issues found in the release metadata and version updates.

QuickJS capability boundary: 🟢 low

Release-only diff: changeset files consumed, CHANGELOG entries appended, and run/website versions bumped to 2.1.1/0.0.5. No changes to sandbox source, host-function bridge, worker lifecycle, or any runtime code, so there is no new attack surface at the QuickJS capability boundary; workspace:* dependents need no version edits and no lockfile churn is expected.

Continuation and replay integrity: 🟢 low

No continuation or replay integrity issues found in the release-only diff.

Worker concurrency and resource limits: 🟢 low

No concurrency, lifecycle, or resource-limit defects found in this release-only diff.

_{Posted by auto-maintain. This automated code review is advisory; a human maintainer makes the call.}