vercel · github-actions · Aug 4, 2026
diff --git a/.changeset/scoped-agent-reads.md b/.changeset/scoped-agent-reads.md
diff --git a/.changeset/slack-stream-mention-resolution.md b/.changeset/slack-stream-mention-resolution.md
diff --git a/.changeset/slack-unfurl-url-bound.md b/.changeset/slack-unfurl-url-bound.md
diff --git a/.changeset/swift-otters-group.md b/.changeset/swift-otters-group.md
diff --git a/.changeset/teams-strip-html-tags.md b/.changeset/teams-strip-html-tags.md
diff --git a/.changeset/two-corners-rescue.md b/.changeset/two-corners-rescue.md
diff --git a/.changeset/whatsapp-context-variants.md b/.changeset/whatsapp-context-variants.md
diff --git a/.changeset/x-crc-token-shape.md b/.changeset/x-crc-token-shape.md
diff --git a/packages/adapter-discord/CHANGELOG.md b/packages/adapter-discord/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/discord
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/discord",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Discord adapter for Chat SDK — HTTP interactions, Gateway events, slash commands, and embeds",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-gchat/CHANGELOG.md b/packages/adapter-gchat/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/gchat
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/gchat",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Google Chat adapter for Chat SDK — service account auth, Card v2, dialogs, and Workspace Events",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-github/CHANGELOG.md b/packages/adapter-github/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/github
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/github",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "GitHub adapter for Chat SDK — respond to @mentions in pull request and issue comment threads",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-linear/CHANGELOG.md b/packages/adapter-linear/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/linear
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/linear",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Linear adapter for Chat SDK — @mentions in issue comments and Linear agent sessions",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-messenger/CHANGELOG.md b/packages/adapter-messenger/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/messenger
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/messenger",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Facebook Messenger adapter for Chat SDK — Send API webhooks, templates, and quick replies",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-shared/CHANGELOG.md b/packages/adapter-shared/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @chat-adapter/shared
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/shared",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Shared utilities for Chat SDK platform adapters",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-slack/CHANGELOG.md b/packages/adapter-slack/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @chat-adapter/slack
 
+## 4.37.0
+
+### Patch Changes
+
+- 6f0d2f0: Resolve outgoing @name mentions on the Slack native streaming path so streamed responses mention users consistently with the post-and-edit fallback. Committed renderer text is resolved incrementally, keeping fenced code literal and preserving the existing ambiguity semantics.
+- 4cc3445: Bound the length of bracketed URLs parsed from message text in the link-unfurl fallback, avoiding a quadratic scan on adversarial input. Valid links are unaffected.
+- c311827: Preserve the Slack channel ID when converting labeled channel tokens (`<#C123|general>` now becomes `#general (C123)`) so agents can pass the ID to channel tools, and normalize the commonly hallucinated `<label|url>` link order before Markdown conversion
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/slack",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Slack adapter for Chat SDK — webhooks, Block Kit cards, OAuth, slash commands, and AI streaming",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-teams/CHANGELOG.md b/packages/adapter-teams/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @chat-adapter/teams
 
+## 4.37.0
+
+### Patch Changes
+
+- 4cc3445: Harden Teams HTML-to-text conversion to strip tags until the output is stable, so nested or malformed markup can't leave a partial tag behind. `stripHtmlTags` is now shared across the format and Graph message converters.
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/teams",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Microsoft Teams adapter for Chat SDK — Bot Framework webhooks, Adaptive Cards, and Graph API",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-telegram/CHANGELOG.md b/packages/adapter-telegram/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @chat-adapter/telegram
 
+## 4.37.0
+
+### Patch Changes
+
+- 629e655: Combine incoming Telegram media groups into one message with ordered attachments and the shared caption.
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/telegram",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Telegram adapter for Chat SDK — Bot API webhooks, inline keyboards, reactions, and streaming",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-twilio/CHANGELOG.md b/packages/adapter-twilio/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/twilio
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/twilio",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Twilio adapter for Chat SDK — SMS and MMS bots with Messaging webhooks and the Messages API",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-web/CHANGELOG.md b/packages/adapter-web/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @chat-adapter/web
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/web",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Web adapter for Chat SDK — browser chat UI via the AI SDK useChat stream protocol",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-whatsapp/CHANGELOG.md b/packages/adapter-whatsapp/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @chat-adapter/whatsapp
 
+## 4.37.0
+
+### Minor Changes
+
+- 16879fd: Fix the `WhatsAppInboundMessage.context` type to model all documented webhook variants. The type previously declared `context?: { from: string; id: string }`, but Meta's Cloud API sends mutually exclusive context shapes: quoted replies carry `from`/`id`, forwarded messages carry only `forwarded` or `frequently_forwarded` (no `id`), and catalog product inquiries add `referred_product`. Code narrowed by the old type could dereference `context.id` and crash at runtime on forwarded messages. All context fields are now optional and the forwarded/product-inquiry fields are included. Consumers that dereference `context.from` or `context.id` without a guard will now see a type error, surfacing what was already a latent crash on forwarded messages.
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/whatsapp",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "WhatsApp adapter for Chat SDK — Business Cloud API webhooks, interactive messages, and templates",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-x/CHANGELOG.md b/packages/adapter-x/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @chat-adapter/x
 
+## 4.37.0
+
+### Patch Changes
+
+- b674923: Restrict the X CRC challenge to the opaque token shape X sends before signing it. The endpoint previously returned an HMAC over any `crc_token`, which let a caller have an arbitrary webhook body signed and replay that as `x-twitter-webhooks-signature` on a forged POST. A webhook body is JSON and can no longer pass the token check, so a CRC response can't double as a POST event signature.
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+  - @chat-adapter/shared@4.37.0
+
 ## 4.36.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/x",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "X (Twitter) adapter for Chat SDK: reply to mentions, send direct messages, and post from your bot account with the X API v2, plus encrypted XChat conversations from the @chat-adapter/x/chat subpath",
   "type": "module",
   "engines": {

diff --git a/packages/chat/CHANGELOG.md b/packages/chat/CHANGELOG.md
@@ -1,5 +1,13 @@
 # chat
 
+## 4.37.0
+
+### Minor Changes
+
+- 85e3d22: Close residual gaps in agent read-tool scoping. `createChatTools`'s read guard now wraps modal, assistant-thread, assistant-context, app-home, app-context, and member-joined dispatch so tools built in those handlers inherit the active conversation, and it logs a warning (instead of failing open silently) when a read runs with no resolvable scope. Scoping stays channel-level by default, so a thread scope still permits sibling threads in its channel. Pass the new `strictScope: true` to confine a thread scope to that thread alone, rejecting both sibling threads and the parent channel, which matters on platforms where a channel is the widest read available (a GitHub channel is an entire repo).
+
+  Note that reads inside those newly wrapped handlers were previously unscoped. An agent built in an `onModalSubmit`, `onAppHomeOpened`, or `onMemberJoinedChannel` handler that reads another channel will now be rejected. Pass an explicit `scope`, or `scope: false` for intentionally workspace-wide reads.
+
 ## 4.36.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "chat",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "Chat SDK — universal TypeScript toolkit for building multi-platform chat bots and AI agents on Slack, Teams, Google Chat, Discord, WhatsApp, and more",
   "type": "module",
   "engines": {

diff --git a/packages/state-ioredis/CHANGELOG.md b/packages/state-ioredis/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @chat-adapter/state-ioredis
 
+## 4.37.0
+
+### Patch Changes
+
+- Updated dependencies [85e3d22]
+  - chat@4.37.0
+
 ## 4.36.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/state-ioredis",
-  "version": "4.36.0",
+  "version": "4.37.0",
   "description": "ioredis state adapter for Chat SDK — production state with Redis Cluster and Sentinel support via ioredis",
   "type": "module",
   "engines": {