- Random bump (#18178)
- Random bump (#18178)
-
Security remediation for the 2026-06-17 "easy-day-js" supply-chain incident. Patch bump to publish clean versions and move the
latestdist-tag forward, superseding the compromised versions that declared the maliciouseasy-day-jsdependency. (#18056) -
Updated dependencies [
339c57c,1dd4117,2b11d1f,77a2351,b7dff0a,02087e1,49af8df,30ce559,c241b92,7d6ff70,ab975d4,9d6aa1b]:- @mastra/core@1.44.0
-
Security remediation for the 2026-06-17 "easy-day-js" supply-chain incident. Patch bump to publish clean versions and move the
latestdist-tag forward, superseding the compromised versions that declared the maliciouseasy-day-jsdependency. (#18056) -
Updated dependencies [
77a2351]:- @mastra/core@1.43.1-alpha.0
-
dependencies updates: (#17384)
- Updated dependency
@blaxel/core@^0.2.86↗︎ (from^0.2.78, independencies)
- Updated dependency
-
dependencies updates: (#17809)
- Updated dependency
@blaxel/core@^0.2.87↗︎ (from^0.2.86, independencies)
- Updated dependency
-
Updated dependencies [
d468acb,575f815,34839c1,053735a,306909a,5191af8,43bd3d4,e6fa79e,904bcdf,7f5ee1d,1e9aab5,2bccba4,bf8eb6d,e9be4e7,493a328,d53cfc2,65799d4,c268c89,34839c1,014e00f,029a414,d468acb,b147b29,d371ac1,2bccba4,0c72f03,cf182b7,3b45ea9,a049c2a,f084be1,b147b29,2a96528,f2ab060,5d302c8,34839c1,a952852,2656d9c,63e3fe1,1d4ce8d,8c68372]:- @mastra/core@1.42.0
- dependencies updates: (#17809)
- Updated dependency
@blaxel/core@^0.2.87↗︎ (from^0.2.86, independencies)
- Updated dependency
- Updated dependencies [
575f815,306909a,5191af8,43bd3d4,e6fa79e,904bcdf,7f5ee1d,1e9aab5,bf8eb6d,493a328,029a414,b147b29,d371ac1,cf182b7,a049c2a,b147b29,2a96528,2656d9c,63e3fe1,1d4ce8d,8c68372]:- @mastra/core@1.42.0-alpha.4
- dependencies updates: (#17384)
- Updated dependency
@blaxel/core@^0.2.86↗︎ (from^0.2.78, independencies)
- Updated dependency
- Updated dependencies [
d468acb,e9be4e7,d53cfc2,65799d4,c268c89,d468acb,0c72f03,3b45ea9,f084be1]:- @mastra/core@1.42.0-alpha.0
- Added region support to Blaxel sandboxes:
new BlaxelSandbox({ region: 'eu-west-1' }). When omitted, Mastra falls back toBL_REGIONand thenauto. (#16555)
- Updated dependencies [
fa63872,d779de3,1750c97,9283971,f07b646,d8838ae,40f9297,19a8658,850af77,0f0d1ba,a18775a,1baf2d1,8c31bcd,0e32507,95b14cd,07c3de7,0bf2d93,7b0d34c,a659a77,aa36be2,3332be9,212c635,d8838ae,9aa5a73,f73c789,8bd16da,c8630f8,94dfef6,47f71dc,50ceae2,a122f79,8cdde58,3a081c1,49f8abc,847ff1e,0c1ed1d,259d409,9e16c68,cefca33,d00e8c5,36fa7e2,87e9774,65a72e7,fe9eacd,4c02027,0f77241,849efb9,92ff509,3fce5e7,a763592,db79c86,6855012,80c7737,7fef31c,7fef31c,3f1cf47]:- @mastra/core@1.38.0
- Added region support to Blaxel sandboxes:
new BlaxelSandbox({ region: 'eu-west-1' }). When omitted, Mastra falls back toBL_REGIONand thenauto. (#16555)
- Updated dependencies [
8ace89d,fa63872,f07b646,d8838ae,40f9297,0f0d1ba,8c31bcd,95b14cd,aa36be2,212c635,d8838ae,9aa5a73,f73c789,8bd16da,c8630f8,47f71dc,50ceae2,8cdde58,847ff1e,259d409,9e16c68,cefca33,d00e8c5,36fa7e2,87e9774,65a72e7,0f77241,92ff509,3fce5e7,a763592,80c7737,3f1cf47]:- @mastra/core@1.38.0-alpha.3
-
Added S3 prefix (subdirectory) mount support. You can now mount a specific folder within an S3 bucket instead of the entire bucket by setting the
prefixoption on your S3 filesystem. (#15171)Example:
const fs = new S3Filesystem({ bucket: 'my-bucket', region: 'us-east-1', prefix: 'workspace/data', accessKeyId: process.env.AWS_ACCESS_KEY_ID!, secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY!, });
When mounted in a sandbox, only the contents under
workspace/data/in the bucket will be visible at the mount path. This uses the s3fsbucket:/pathsyntax under the hood.Closes #15147.
-
Added S3 prefix (subdirectory) mount support. You can now mount a specific folder within an S3 bucket instead of the entire bucket by setting the
prefixoption on your S3 filesystem. (#15171)Example:
const fs = new S3Filesystem({ bucket: 'my-bucket', region: 'us-east-1', prefix: 'workspace/data', accessKeyId: process.env.AWS_ACCESS_KEY_ID!, secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY!, });
When mounted in a sandbox, only the contents under
workspace/data/in the bucket will be visible at the mount path. This uses the s3fsbucket:/pathsyntax under the hood.Closes #15147.
- dependencies updates: (#15086)
- Updated dependency
@blaxel/core@^0.2.78↗︎ (from^0.2.74, independencies)
- Updated dependency
- Updated dependencies [
f32b9e1,7d6f521,a50d220,665477b,4cc2755,ac7baf6,ed425d7,1371703,0df8321,98f8a8b,ba6f7e9,7eb2596,1805ddc,fff91cf,61109b3,33f1ead]:- @mastra/core@1.23.0
- dependencies updates: (#15086)
- Updated dependency
@blaxel/core@^0.2.78↗︎ (from^0.2.74, independencies)
- Updated dependency
- Updated dependencies [
665477b,4cc2755]:- @mastra/core@1.23.0-alpha.7
-
Added provider-specific
blaxelgetter to access the underlying BlaxelSandboxInstancedirectly. Deprecated the genericinstancegetter in favor of the newblaxelgetter for better IDE discoverability and consistency with other sandbox providers. (#14166)// Before const blaxelSandbox = sandbox.instance; // After const blaxelSandbox = sandbox.blaxel;
-
Use provider-native string process IDs directly as
ProcessHandle.pid, removing the previousparseInt()workaround. (#13591)const handle = await sandbox.processes.spawn('node server.js'); handle.pid; // string — the Blaxel SDK's native process ID
-
dependencies updates: (#13591)
- Updated peerDependency
@mastra/coreto>=1.12.0-0 <2.0.0-0
- Updated peerDependency
-
Updated dependencies [
cddf895,9cede11,a59f126,ed8fd75,c510833,c4c7dad,45c3112,7296fcc,00c27f9,5e7c287,7e17d3f,ee19c9b]:- @mastra/core@1.12.0
-
Added provider-specific
blaxelgetter to access the underlying BlaxelSandboxInstancedirectly. Deprecated the genericinstancegetter in favor of the newblaxelgetter for better IDE discoverability and consistency with other sandbox providers. (#14166)// Before const blaxelSandbox = sandbox.instance; // After const blaxelSandbox = sandbox.blaxel;
-
Use provider-native string process IDs directly as
ProcessHandle.pid, removing the previousparseInt()workaround. (#13591)const handle = await sandbox.processes.spawn('node server.js'); handle.pid; // string — the Blaxel SDK's native process ID
-
dependencies updates: (#13591)
- Updated peerDependency
@mastra/coreto>=1.12.0-0 <2.0.0-0
- Updated peerDependency
-
Updated dependencies [
9cede11,a59f126,c510833,7296fcc,00c27f9,ee19c9b]:- @mastra/core@1.12.0-alpha.1
- dependencies updates: (#13795)
- Updated dependency
@blaxel/core@^0.2.71↗︎ (from^0.2.66, independencies)
- Updated dependency
- Updated dependencies [
4f71b43,a070277,b628b91,332c014,6b63153,4246e34,b8837ee,866cc2c,5d950f7,28c85b1,e9a08fb,1d0a8a8,631ffd8,6bcbf8a,aae2295,aa61f29,7ff3714,18c3a90,41d79a1,f35487b,6dc2192,eeb3a3f,e673376,05f8d90,b2204c9,a1bf1e3,b6f647a,0c57b8b,b081f27,4b8da97,0c09eac,6b9b93d,31b6067,797ac42,0bc289e,9b75a06,4c3a1b1,256df35,85cc3b3,97ea28c,d567299,716ffe6,8296332,4df2116,2219c1a,17c4145]:- @mastra/core@1.11.0
- dependencies updates: (#13795)
- Updated dependency
@blaxel/core@^0.2.71↗︎ (from^0.2.66, independencies)
- Updated dependency
- Updated dependencies [
4f71b43,a070277,b628b91,332c014,6b63153,4246e34,b8837ee,5d950f7,28c85b1,e9a08fb,631ffd8,aae2295,aa61f29,7ff3714,41d79a1,e673376,b2204c9,a1bf1e3,b6f647a,0c57b8b,b081f27,0c09eac,6b9b93d,31b6067,797ac42,0bc289e,9b75a06,4c3a1b1,85cc3b3,97ea28c,d567299,716ffe6,8296332,4df2116,2219c1a,17c4145]:- @mastra/core@1.11.0-alpha.0
-
Abort signal support in sandbox commands (#13597)
- Sandbox commands can now be cancelled via
abortSignalin command options - Partial stdout/stderr output is now preserved when a command is aborted or times out
- Sandbox commands can now be cancelled via
-
Added background process management support for Blaxel sandboxes. Agents can now spawn, monitor, and kill long-running processes using the standard
ProcessHandleinterface. (79177b1)Example usage:
const sandbox = new BlaxelSandbox({ timeout: '5m' }); const workspace = new Workspace({ sandbox }); // Process manager is available via sandbox.processes const handle = await sandbox.processes.spawn('python server.py'); // Monitor output handle.onStdout(data => console.log(data)); // Check status const info = await sandbox.processes.list(); // Kill when done await handle.kill();
Note: Process stdin is not supported in Blaxel sandboxes.
Additional improvements:
- Fixed detection of expired sandboxes, ensuring operations automatically retry when a sandbox has timed out
-
Fixed command timeouts in Blaxel sandboxes so long-running commands now respect configured limits. (#13520)
Changed the default Blaxel image to
blaxel/ts-app:latest(Debian-based), which supports both S3 and GCS mounts out of the box.Added distro detection for mount scripts so S3 mounts work on Alpine-based images (e.g.
blaxel/node:latest) viaapk, and GCS mounts give a clear error on Alpine since gcsfuse is unavailable.Removed working directory from sandbox instructions to avoid breaking prompt caching.
-
Remove internal
processesfield from sandbox provider options (#13597)The
processesfield is no longer exposed in constructor options for E2B, Daytona, and Blaxel sandbox providers. This field is managed internally and was not intended to be user-configurable. -
Updated dependencies [
504fc8b,f9c150b,88de7e8,edee4b3,3790c75,e7a235b,d51d298,6dbeeb9,d5f0d8d,09c3b18,b896379,85c84eb,a89272a,ee9c8df,77b4a25,276246e,08ecfdb,d5f628c,524c0f3,c18a0e9,4bd21ea,115a7a4,22a48ae,3c6ef79,9311c17,7edf78f,1c4221c,d25b9ea,fe1ce5c,b03c0e0,0a8366b,85664e9,bc79650,9257d01,3a3a59e,3108d4e,0c33b2c,191e5bd,f77cd94,e8135c7,daca48f,257d14f,352f25d,93477d0,31c78b3,0bc0720,36516ac,e947652,3c6ef79,9257d01,ec248f6]:- @mastra/core@1.9.0
-
Abort signal support in sandbox commands (#13597)
- Sandbox commands can now be cancelled via
abortSignalin command options - Partial stdout/stderr output is now preserved when a command is aborted or times out
- Sandbox commands can now be cancelled via
-
Added background process management support for Blaxel sandboxes. Agents can now spawn, monitor, and kill long-running processes using the standard
ProcessHandleinterface. (79177b1)Example usage:
const sandbox = new BlaxelSandbox({ timeout: '5m' }); const workspace = new Workspace({ sandbox }); // Process manager is available via sandbox.processes const handle = await sandbox.processes.spawn('python server.py'); // Monitor output handle.onStdout(data => console.log(data)); // Check status const info = await sandbox.processes.list(); // Kill when done await handle.kill();
Note: Process stdin is not supported in Blaxel sandboxes.
Additional improvements:
- Fixed detection of expired sandboxes, ensuring operations automatically retry when a sandbox has timed out
-
Fixed command timeouts in Blaxel sandboxes so long-running commands now respect configured limits. (#13520)
Changed the default Blaxel image to
blaxel/ts-app:latest(Debian-based), which supports both S3 and GCS mounts out of the box.Added distro detection for mount scripts so S3 mounts work on Alpine-based images (e.g.
blaxel/node:latest) viaapk, and GCS mounts give a clear error on Alpine since gcsfuse is unavailable.Removed working directory from sandbox instructions to avoid breaking prompt caching.
-
Remove internal
processesfield from sandbox provider options (#13597)The
processesfield is no longer exposed in constructor options for E2B, Daytona, and Blaxel sandbox providers. This field is managed internally and was not intended to be user-configurable. -
Updated dependencies [
504fc8b,f9c150b,88de7e8,edee4b3,3790c75,e7a235b,d51d298,6dbeeb9,d5f0d8d,09c3b18,b896379,85c84eb,a89272a,ee9c8df,77b4a25,276246e,08ecfdb,d5f628c,524c0f3,c18a0e9,4bd21ea,115a7a4,22a48ae,3c6ef79,9311c17,7edf78f,1c4221c,d25b9ea,fe1ce5c,b03c0e0,0a8366b,85664e9,bc79650,9257d01,3a3a59e,3108d4e,0c33b2c,191e5bd,f77cd94,e8135c7,daca48f,257d14f,352f25d,93477d0,31c78b3,0bc0720,36516ac,e947652,3c6ef79,9257d01,ec248f6]:- @mastra/core@1.9.0-alpha.0
-
Adds Blaxel cloud sandbox provider (#13015)
-
Updated dependencies [
df170fd,ae55343,c290cec,f03e794,aa4a5ae,de3f584,d3fb010,702ee1c,f495051,e622f1d,861f111,00f43e8,1b6f651,96a1702,cb9f921,114e7c1,1b6f651,72df4a8]:- @mastra/core@1.8.0
-
Adds Blaxel cloud sandbox provider (#13015)
-
Updated dependencies [
df170fd,ae55343,c290cec,f03e794,aa4a5ae,de3f584,d3fb010,702ee1c,f495051,e622f1d,861f111,00f43e8,1b6f651,96a1702,cb9f921,114e7c1,1b6f651,72df4a8]:- @mastra/core@1.8.0-alpha.0
-
Added
@mastra/blaxelpackage providing Blaxel cloud sandbox integration for Mastra workspaces. Supports S3 and GCS filesystem mounting via FUSE inside sandboxes.import { BlaxelSandbox } from '@mastra/blaxel'; const sandbox = new BlaxelSandbox({ timeout: '5m' });