Skip to content

Conversation

@salmanmkc
Copy link

Summary

Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates.

Changes

Action Old Version(s) New Version Release Files
aws-actions/configure-aws-credentials v4 v5 Release ci.yml, images.yml
peter-evans/create-pull-request v5 v8 Release i18n.yml
softprops/action-gh-release v1 v2 Release publish-python-sdk.yml, publish-ts-sdk.yml

Why upgrade?

Keeping GitHub Actions up to date ensures:

  • Security: Latest security patches and fixes
  • Features: Access to new functionality and improvements
  • Compatibility: Better support for current GitHub features
  • Performance: Optimizations and efficiency improvements

Security Note

Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references.

Testing

These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging.

icecrasher321 and others added 30 commits December 18, 2025 16:23
…dioai#2481)

The realtime service network policy was missing the custom egress rules section
that allows configuration of additional egress rules via values.yaml. This caused
the realtime pods to be unable to connect to external databases (e.g., PostgreSQL
on port 5432) when using external database configurations.

The app network policy already had this section, but the realtime network policy
was missing it, creating an inconsistency and preventing the realtime service
from accessing external databases configured via networkPolicy.egress values.

This fix adds the same custom egress rules template section to the realtime
network policy, matching the app network policy behavior and allowing users to
configure database connectivity via values.yaml.
…ext menu (simstudioai#2672)

* feat(logs-context-menu): consolidated logs utils and types, added logs record context menu (simstudioai#2659)

* feat(email): welcome email; improvement(emails): ui/ux (simstudioai#2658)

* feat(email): welcome email; improvement(emails): ui/ux

* improvement(emails): links, accounts, preview

* refactor(emails): file structure and wrapper components

* added envvar for personal emails sent, added isHosted gate

* fixed failing tests, added env mock

* fix: removed comment

---------

Co-authored-by: waleed <walif6@gmail.com>

* fix(logging): hitl + trigger dev crash protection (simstudioai#2664)

* hitl gaps

* deal with trigger worker crashes

* cleanup import strcuture

* feat(imap): added support for imap trigger (simstudioai#2663)

* feat(tools): added support for imap trigger

* feat(imap): added parity, tested

* ack PR comments

* final cleanup

* feat(i18n): update translations (simstudioai#2665)

Co-authored-by: waleedlatif1 <waleedlatif1@users.noreply.github.com>

* fix(grain): updated grain trigger to auto-establish trigger (simstudioai#2666)

Co-authored-by: aadamgough <adam@sim.ai>

* feat(admin): routes to manage deployments (simstudioai#2667)

* feat(admin): routes to manage deployments

* fix naming fo deployed by

* feat(time-picker): added timepicker emcn component, added to playground, added searchable prop for dropdown, added more timezones for schedule, updated license and notice date (simstudioai#2668)

* feat(time-picker): added timepicker emcn component, added to playground, added searchable prop for dropdown, added more timezones for schedule, updated license and notice date

* removed unused params, cleaned up redundant utils

* improvement(invite): aligned styling (simstudioai#2669)

* improvement(invite): aligned with rest of app

* fix(invite): error handling

* fix: addressed comments

---------

Co-authored-by: Emir Karabeg <78010029+emir-karabeg@users.noreply.github.com>
Co-authored-by: Vikhyath Mondreti <vikhyathvikku@gmail.com>
Co-authored-by: waleedlatif1 <waleedlatif1@users.noreply.github.com>
Co-authored-by: Adam Gough <77861281+aadamgough@users.noreply.github.com>
Co-authored-by: aadamgough <adam@sim.ai>
…ion, autoconnect improvements, billing fixes
…loyment status, chat fixes, reducto and pulse OCR, linear fixes
waleedlatif1 and others added 7 commits January 20, 2026 00:34
…i#2909)

* fix(google): wrap primitive tool responses for Gemini API compatibility (simstudioai#2900)

* fix(canonical): copilot path + update parent (simstudioai#2901)

* fix(rss): add top-level title, link, pubDate fields to RSS trigger output (simstudioai#2902)

* fix(rss): add top-level title, link, pubDate fields to RSS trigger output

* fix(imap): add top-level fields to IMAP trigger output

* improvement(browseruse): add profile id param (simstudioai#2903)

* improvement(browseruse): add profile id param

* make request a stub since we have directExec

* improvement(executor): upgraded abort controller to handle aborts for loops and parallels (simstudioai#2880)

* improvement(executor): upgraded abort controller to handle aborts for loops and parallels

* comments

* improvement(files): update execution for passing base64 strings (simstudioai#2906)

* progress

* improvement(execution): update execution for passing base64 strings

* fix types

* cleanup comments

* path security vuln

* reject promise correctly

* fix redirect case

* remove proxy routes

* fix tests

* use ipaddr

* feat(tools): added textract, added v2 for mistral, updated tag dropdown (simstudioai#2904)

* feat(tools): added textract

* cleanup

* ack pr comments

* reorder

* removed upload for textract async version

* fix additional fields dropdown in editor, update parser to leave validation to be done on the server

* added mistral v2, files v2, and finalized textract

* updated the rest of the old file patterns, updated mistral outputs for v2

* updated tag dropdown to parse non-operation fields as well

* updated extension finder

* cleanup

* added description for inputs to workflow

* use helper for internal route check

* fix tag dropdown merge conflict change

* remove duplicate code

---------

Co-authored-by: Vikhyath Mondreti <vikhyath@simstudio.ai>

* fix(ui): change add inputs button to match output selector (simstudioai#2907)

* fix(canvas): removed invite to workspace from canvas popover (simstudioai#2908)

* fix(canvas): removed invite to workspace

* removed unused props

* fix(copilot): legacy tool display names (simstudioai#2911)

* fix(a2a): canonical merge  (simstudioai#2912)

* fix canonical merge

* fix empty array case

* fix(change-detection): copilot diffs have extra field (simstudioai#2913)

* improvement(logs): improved logs ui bugs, added subflow disable UI (simstudioai#2910)

* improvement(logs): improved logs ui bugs, added subflow disable UI

* added duplicate to action bar for subflows

* feat(broadcast): email v0.5 (simstudioai#2905)

---------

Co-authored-by: Vikhyath Mondreti <vikhyathvikku@gmail.com>
Co-authored-by: Vikhyath Mondreti <vikhyath@simstudio.ai>
Co-authored-by: Emir Karabeg <78010029+emir-karabeg@users.noreply.github.com>
…tudioai#2928)

* fix(zustand): updated to useShallow from deprecated createWithEqualityFn (simstudioai#2919)

* fix(logger): use direct env access for webpack inlining (simstudioai#2920)

* fix(notifications): text overflow with line-clamp (simstudioai#2921)

* chore(helm): add env vars for Vertex AI, orgs, and telemetry (simstudioai#2922)

* fix(auth): improve reset password flow and consolidate brand detection (simstudioai#2924)

* fix(auth): improve reset password flow and consolidate brand detection

* fix(auth): set errorHandled for EMAIL_NOT_VERIFIED to prevent duplicate error

* fix(auth): clear success message on login errors

* chore(auth): fix import order per lint

* fix(action-bar): duplicate subflows with children (simstudioai#2923)

* fix(action-bar): duplicate subflows with children

* fix(action-bar): add validateTriggerPaste for subflow duplicate

* fix(resolver): agent response format, input formats, root level (simstudioai#2925)

* fix(resolvers): agent response format, input formats, root level

* fix response block initial seeding

* fix tests

* fix(messages-input): fix cursor alignment and auto-resize with overlay (simstudioai#2926)

* fix(messages-input): fix cursor alignment and auto-resize with overlay

* fixed remaining zustand warnings

* fix(stores): remove dead code causing log spam on startup (simstudioai#2927)

* fix(stores): remove dead code causing log spam on startup

* fix(stores): replace custom tools zustand store with react query cache

* improvement(ui): use BrandedButton and BrandedLink components (simstudioai#2930)

- Refactor auth forms to use BrandedButton component
- Add BrandedLink component for changelog page
- Reduce code duplication in login, signup, reset-password forms
- Update star count default value

* fix(custom-tools): remove unsafe title fallback in getCustomTool (simstudioai#2929)

* fix(custom-tools): remove unsafe title fallback in getCustomTool

* fix(custom-tools): restore title fallback in getCustomTool lookup

Custom tools are referenced by title (custom_${title}), not database ID.
The title fallback is required for client-side tool resolution to work.

* fix(null-bodies): empty bodies handling (simstudioai#2931)

* fix(null-statuses): empty bodies handling

* address bugbot comment

* fix(token-refresh): microsoft, notion, x, linear (simstudioai#2933)

* fix(microsoft): proactive refresh needed

* fix(x): missing token refresh flag

* notion and linear missing flag too

* address bugbot comment

* fix(auth): handle EMAIL_NOT_VERIFIED in onError callback (simstudioai#2932)

* fix(auth): handle EMAIL_NOT_VERIFIED in onError callback

* refactor(auth): extract redirectToVerify helper to reduce duplication

* fix(workflow-selector): use dedicated selector for workflow dropdown (simstudioai#2934)

* feat(workflow-block): preview (simstudioai#2935)

* improvement(copilot): tool configs to show nested props (simstudioai#2936)

* fix(auth): add genericOAuth providers to trustedProviders (simstudioai#2937)

---------

Co-authored-by: Vikhyath Mondreti <vikhyathvikku@gmail.com>
Co-authored-by: Emir Karabeg <78010029+emir-karabeg@users.noreply.github.com>
…lution consolidation, helm updates (simstudioai#2946)

* improvement(workflow-item): stabilize avatar layout and fix name truncation (simstudioai#2939)

* improvement(workflow-item): stabilize avatar layout and fix name truncation

* fix(avatars): revert overflow bg to hardcoded color for contrast

* fix(executor): stop parallel execution when block errors (simstudioai#2940)

* improvement(helm): add per-deployment extraVolumes support (simstudioai#2942)

* fix(gmail): expose messageId field in read email block (simstudioai#2943)

* fix(resolver): consolidate reference resolution  (simstudioai#2941)

* fix(resolver): consolidate code to resolve references

* fix edge cases

* use already formatted error

* fix multi index

* fix backwards compat reachability

* handle backwards compatibility accurately

* use shared constant correctly

* feat(router): expose reasoning output in router v2 block (simstudioai#2945)

* fix(copilot): always allow, credential masking (simstudioai#2947)

* Fix always allow, credential validation

* Credential masking

* Autoload

* fix(executor): handle condition dead-end branches in loops (simstudioai#2944)

---------

Co-authored-by: Vikhyath Mondreti <vikhyathvikku@gmail.com>
Co-authored-by: Siddharth Ganesan <33737564+Sg312@users.noreply.github.com>
…imstudioai#2973)

* fix(subflows): tag dropdown + resolution logic (simstudioai#2949)

* fix(subflows): tag dropdown + resolution logic

* fixes;

* revert parallel change

* chore(deps): bump posthog-js to 1.334.1 (simstudioai#2948)

* fix(idempotency): add conflict target to atomicallyClaimDb query + remove redundant db namespace tracking (simstudioai#2950)

* fix(idempotency): add conflict target to atomicallyClaimDb query

* delete needs to account for namespace

* simplify namespace filtering logic

* fix cleanup

* consistent target

* improvement(kb): add document filtering, select all, and React Query migration (simstudioai#2951)

* improvement(kb): add document filtering, select all, and React Query migration

* test(kb): update tests for enabledFilter and removed userId params

* fix(kb): remove non-null assertion, add explicit guard

* improvement(logs): trace span, details (simstudioai#2952)

* improvement(action-bar): ordering

* improvement(logs): details, trace span

* feat(blog): v0.5 release post (simstudioai#2953)

* feat(blog): v0.5 post

* improvement(blog): simplify title and remove code block header

- Simplified blog title from Introducing Sim Studio v0.5 to Introducing Sim v0.5
- Removed language label header and copy button from code blocks for cleaner appearance

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* ack PR comments

* small styling improvements

* created system to create post-specific components

* updated componnet

* cache invalidation

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* feat(admin): add credits endpoint to issue credits to users (simstudioai#2954)

* feat(admin): add credits endpoint to issue credits to users

* fix(admin): use existing credit functions and handle enterprise seats

* fix(admin): reject NaN and Infinity in amount validation

* styling

* fix(admin): validate userId and email are strings

* improvement(copilot): fast mode, subagent tool responses and allow preferences (simstudioai#2955)

* Improvements

* Fix actions mapping

* Remove console logs

* fix(billing): handle missing userStats and prevent crashes (simstudioai#2956)

* fix(billing): handle missing userStats and prevent crashes

* fix(billing): correct import path for getFilledPillColor

* fix(billing): add Number.isFinite check to lastPeriodCost

* fix(logs): refresh logic to refresh logs details (simstudioai#2958)

* fix(security): add authentication and input validation to API routes (simstudioai#2959)

* fix(security): add authentication and input validation to API routes

* moved utils

* remove extraneous commetns

* removed unused dep

* improvement(helm): add internal ingress support and same-host path consolidation (simstudioai#2960)

* improvement(helm): add internal ingress support and same-host path consolidation

* improvement(helm): clean up ingress template comments

Simplify verbose inline Helm comments and section dividers to match the
minimal style used in services.yaml.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(helm): add missing copilot path consolidation for realtime host

When copilot.host equals realtime.host but differs from app.host,
copilot paths were not being routed. Added logic to consolidate
copilot paths into the realtime rule for this scenario.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* improvement(helm): follow ingress best practices

- Remove orphan comments that appeared when services were disabled
- Add documentation about path ordering requirements
- Paths rendered in order: realtime, copilot, app (specific before catch-all)
- Clean template output matching industry Helm chart standards

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* feat(blog): enterprise post (simstudioai#2961)

* feat(blog): enterprise post

* added more images, styling

* more content

* updated v0-5 post

* remove unused transition

---------

Co-authored-by: Vikhyath Mondreti <vikhyath@simstudio.ai>

* fix(envvars): resolution standardized (simstudioai#2957)

* fix(envvars): resolution standardized

* remove comments

* address bugbot

* fix highlighting for env vars

* remove comments

* address greptile

* address bugbot

* fix(copilot): mask credentials fix (simstudioai#2963)

* Fix copilot masking

* Clean up

* Lint

* improvement(webhooks): remove dead code (simstudioai#2965)

* fix(webhooks): subscription recreation path

* improvement(webhooks): remove dead code

* fix tests

* address bugbot comments

* fix restoration edge case

* fix more edge cases

* address bugbot comments

* fix gmail polling

* add warnings for UI indication for credential sets

* fix(preview): subblock values (simstudioai#2969)

* fix(child-workflow): nested spans handoff (simstudioai#2966)

* fix(child-workflow): nested spans handoff

* remove overly defensive programming

* update type check

* type more code

* remove more dead code

* address bugbot comments

* fix(security): restrict API key access on internal-only routes (simstudioai#2964)

* fix(security): restrict API key access on internal-only routes

* test(security): update function execute tests for checkInternalAuth

* updated agent handler

* move session check higher in checkSessionOrInternalAuth

* extracted duplicate code into helper for resolving user from jwt

* fix(copilot): update copilot chat title (simstudioai#2968)

* fix(hitl): fix condition blocks after hitl (simstudioai#2967)

* fix(notes): ghost edges (simstudioai#2970)

* fix(notes): ghost edges

* fix deployed state fallback

* fallback

* remove UI level checks

* annotation missing from autoconnect source check

* improvement(docs): loop and parallel var reference syntax (simstudioai#2975)

* fix(blog): slash actions description (simstudioai#2976)

* improvement(docs): loop and parallel var reference syntax

* fix(blog): slash actions description

* fix(auth): copilot routes (simstudioai#2977)

* Fix copilot auth

* Fix

* Fix

* Fix

* fix(copilot): fix edit summary for loops/parallels (simstudioai#2978)

* fix(integrations): hide from tool bar (simstudioai#2544)

* fix(landing): ui (simstudioai#2979)

* fix(edge-validation): race condition on collaborative add (simstudioai#2980)

* fix(variables): boolean type support and input improvements (simstudioai#2981)

* fix(variables): boolean type support and input improvements

* fix formatting

---------

Co-authored-by: Vikhyath Mondreti <vikhyathvikku@gmail.com>
Co-authored-by: Emir Karabeg <78010029+emir-karabeg@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Siddharth Ganesan <33737564+Sg312@users.noreply.github.com>
Co-authored-by: Vikhyath Mondreti <vikhyath@simstudio.ai>
Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
@vercel
Copy link

vercel bot commented Jan 25, 2026

@salmanmkc is attempting to deploy a commit to the Sim Team on Vercel.

A member of the Team first needs to authorize it.

@greptile-apps
Copy link
Contributor

greptile-apps bot commented Jan 25, 2026

Greptile Summary

Updated three GitHub Actions to their latest versions across five workflow files for security patches, bug fixes, and new features.

  • aws-actions/configure-aws-credentials v4→v5 in ci.yml and images.yml
  • peter-evans/create-pull-request v5→v8 in i18n.yml
  • softprops/action-gh-release v1→v2 in publish-python-sdk.yml and publish-ts-sdk.yml

The changes are minimal version bumps with no configuration changes, maintaining backward compatibility with existing workflow parameters.

Confidence Score: 5/5

  • Safe to merge - straightforward dependency updates with no breaking changes
  • All changes are simple version bumps to well-maintained GitHub Actions. No workflow configuration changes were needed, indicating backward compatibility. The actions maintain the same API surface and parameters.
  • No files require special attention

Important Files Changed

Filename Overview
.github/workflows/ci.yml Updated aws-actions/configure-aws-credentials from v4 to v5 for AWS authentication
.github/workflows/i18n.yml Updated peter-evans/create-pull-request from v5 to v8 for automated translation PRs
.github/workflows/images.yml Updated aws-actions/configure-aws-credentials from v4 to v5 for AWS authentication
.github/workflows/publish-python-sdk.yml Updated softprops/action-gh-release from v1 to v2 for creating GitHub releases
.github/workflows/publish-ts-sdk.yml Updated softprops/action-gh-release from v1 to v2 for creating GitHub releases

Sequence Diagram

sequenceDiagram
    participant GH as GitHub
    participant CI as CI Workflow
    participant AWS as AWS Configure v5
    participant I18N as I18N Workflow
    participant PR as Create PR v8
    participant SDK as SDK Workflows
    participant Release as GH Release v2

    Note over GH,Release: Main CI/CD Pipeline

    GH->>CI: Push to main/staging
    CI->>AWS: Configure AWS credentials
    AWS->>CI: Return ECR registry access
    CI->>CI: Build and push Docker images

    GH->>I18N: Weekly schedule or manual trigger
    I18N->>I18N: Run translations
    I18N->>PR: Create pull request with changes
    PR->>GH: Submit automated translation PR

    GH->>SDK: Push to main (SDK changes)
    SDK->>SDK: Run tests and build
    SDK->>Release: Create GitHub release
    Release->>GH: Publish new SDK version
Loading

@greptile-apps
Copy link
Contributor

greptile-apps bot commented Jan 25, 2026

Greptile's behavior is changing!

From now on, if a review finishes with no comments, we will not post an additional "statistics" comment to confirm that our review found nothing to comment on. However, you can confirm that we reviewed your changes in the status check section.

This feature can be toggled off in your Code Review Settings by deselecting "Create a status check for each PR".

@vercel
Copy link

vercel bot commented Jan 25, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
docs Ready Ready Preview, Comment Jan 25, 2026 5:16am

Request Review

@waleedlatif1
Copy link
Collaborator

@salmanmkc please rebase now that I've changed the head to staging instead of main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants