Version Packages (beta) (#2451)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

.changeset/pre.json

@@ -58,14 +58,17 @@
     "ast-directive-validation",
     "atomic-runs-publish",
     "attributes-mvp-plan",
+    "avoid-peer-major-bumps",
     "better-pets-reply",
     "blur-style-prop-compat",
     "bright-discovery-talk",
     "bright-hooks-share",
     "bright-pears-drum",
     "bright-waits-refresh",
     "builders-discovery-fixes",
+    "bump-astro-cve-2026-54299",
     "bump-esbuild-0-28-1",
+    "bump-hono-cve-2026-54290",
     "bump-undici-7-26",
     "bundle-aliased-project-local-helpers",
     "byte-stream-wire-framing",
@@ -76,20 +79,24 @@
     "clever-adults-ask",
     "clever-spans-search",
     "clever-wombats-drop",
+    "cli-url-deep-link",
     "cold-lands-boil",
+    "compression-telemetry-attributes",
     "cookbook-child-workflows-hook-resume",
     "cool-cups-greet",
     "corrupted-event-log-code",
     "cross-deployment-stream-keys",
     "curvy-dingos-cry",
     "cyan-impalas-drop",
+    "deployment-id-latest-noop-non-vercel",
     "dirty-bees-notice",
     "docs-rendered-link-lint",
     "docs-step-executed-multiple-times",
     "drain-pending-queue-on-completion",
     "drop-setup-command-input",
     "e2e-wait-for-hook",
     "early-cooks-accept",
+    "eleven-lilies-film",
     "empty-worlds-throw",
     "enable-tanstack-start-vercel-e2e",
     "error-subclass-serialization",
@@ -105,6 +112,7 @@
     "fix-builtin-externalize",
     "fix-ci-command-injection",
     "fix-community-world-specversion",
+    "fix-compression-cutoff-beta18",
     "fix-detail-panel-flicker",
     "fix-discovery-weakmap-cache",
     "fix-dom-exception-serialization",
@@ -118,6 +126,7 @@
     "fix-malformed-tool-call-input",
     "fix-message-only-error-block",
     "fix-next-esm-compat",
+    "fix-next-module-specifier-root",
     "fix-next-version-resolution",
     "fix-observability-getworld-import",
     "fix-provider-tool-identity",
@@ -140,19 +149,25 @@
     "getwritable-share-pipe",
     "green-streams-decode",
     "guard-step-consumer-events",
+    "gzip-ref-compression-core",
+    "gzip-ref-compression-world-vercel",
+    "gzip-ref-compression-world",
     "healthcheck-coreversion",
     "hook-conflict-web-reviver",
     "hook-get-conflict",
     "hook-sleep-replay-ordering",
     "idempotency-strategy-e2e",
     "ignore-generated-manifest",
     "inline-step-registration",
+    "jk-nav-autoscroll",
     "large-inline-sourcemap-remap",
     "large-regions-talk",
     "lazy-discovery-bare-specifiers",
     "lazy-discovery-default",
+    "lazy-discovery-hmr",
     "lazy-next-step-imports",
     "lazy-stream-key-request-diagnostics",
+    "little-sites-cover",
     "lucky-windows-smash",
     "many-peas-jog",
     "modern-penguins-peel",
@@ -171,6 +186,7 @@
     "no-eval-in-revive",
     "node-module-error-cross-file-dce",
     "o11y-run-ref-rendering",
+    "object-property-step-discovery",
     "old-towns-make",
     "optional-input-on-snapshots",
     "otel-linked-trace-mode",
@@ -180,6 +196,7 @@
     "preserve-step-fn-names",
     "pretty-log-format",
     "private-member-dce",
+    "proud-friends-decide",
     "queue-namespace-primitive",
     "queued-for-uses-first-step-started",
     "quiet-trace-viewer-duration",
@@ -230,19 +247,22 @@
     "stream-failure-diagnostics",
     "strong-cups-sip",
     "swc-arguments-not-closure",
+    "swc-destructuring-default-dce",
     "swc-gitignore-builder",
     "swc-lexical-this-capture",
     "swift-cobras-repair",
     "swift-parks-move",
     "sync-step-followup",
     "tagged-run-id",
+    "tame-coats-hug",
     "tanstack-start-workbench",
     "terminal-run-event-replay-main",
     "test-promise-race-prefix-determinism",
     "timeline-queued-connector",
     "tired-pigs-hug",
     "tired-spiders-rhyme",
     "trace-nav-tooltips",
+    "trace-span-markers",
     "trace-viewer-cleanup",
     "trace-viewer-load-more",
     "trace-viewer-loading-skeleton",
@@ -255,6 +275,7 @@
     "upset-ghosts-rush",
     "v2-combined-bundle",
     "v4-events-client",
+    "v4-lazy-list-refs",
     "validate-step-id-duplicates",
     "vast-oranges-fail",
     "vercel-world-custom-dispatcher",
@@ -275,6 +296,7 @@
     "world-vercel-reject-empty-ref-payload",
     "world-vercel-retry-parse-failures",
     "world-vercel-trusted-sources",
-    "yellow-pianos-relax"
+    "yellow-pianos-relax",
+    "zstd-web-decoder"
   ]
 }

packages/astro/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @workflow/astro
 
+## 5.0.0-beta.18
+
+### Patch Changes
+
+- [#2457](https://github.com/vercel/workflow/pull/2457) [`b92dfbb`](https://github.com/vercel/workflow/commit/b92dfbb94dabdeefd53bd9499a78174ac6bb2156) Thanks [@pranaygp](https://github.com/pranaygp)! - Bump the `astro` dev dependency to 6.4.6 to resolve CVE-2026-54299 (GHSA-2pvr-wf23-7pc7, host header SSRF in prerendered error page fetch).
+
+- Updated dependencies [[`7440244`](https://github.com/vercel/workflow/commit/744024458f44044c045fab188d46837347c3a998), [`da37349`](https://github.com/vercel/workflow/commit/da373493d211c09056f745332b18f55ef801da2b), [`53ede30`](https://github.com/vercel/workflow/commit/53ede3079c19494c53e181917f26c2499a19e012)]:
+  - @workflow/builders@5.0.0-beta.18
+  - @workflow/swc-plugin@5.0.0-beta.5
+  - @workflow/rollup@5.0.0-beta.18
+  - @workflow/vite@5.0.0-beta.18
+
 ## 5.0.0-beta.17
 
 ### Patch Changes

packages/astro/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/astro",
-  "version": "5.0.0-beta.17",
+  "version": "5.0.0-beta.18",
   "description": "Astro integration for Workflow SDK",
   "type": "module",
   "main": "dist/index.js",

packages/builders/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @workflow/builders
 
+## 5.0.0-beta.18
+
+### Patch Changes
+
+- [#2455](https://github.com/vercel/workflow/pull/2455) [`7440244`](https://github.com/vercel/workflow/commit/744024458f44044c045fab188d46837347c3a998) Thanks [@TooTallNate](https://github.com/TooTallNate)! - Fix Next.js lazy discovery workflow IDs for monorepo workspace packages by resolving module specifiers relative to the app package instead of the tracing root.
+
+- Updated dependencies [[`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`4b7a720`](https://github.com/vercel/workflow/commit/4b7a7203bf7093a435a9c4fc33a3af1060f010f7), [`3c79c56`](https://github.com/vercel/workflow/commit/3c79c56af257b4c327e4363c0cdb482149b55c73), [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`da37349`](https://github.com/vercel/workflow/commit/da373493d211c09056f745332b18f55ef801da2b), [`53ede30`](https://github.com/vercel/workflow/commit/53ede3079c19494c53e181917f26c2499a19e012)]:
+  - @workflow/core@5.0.0-beta.18
+  - @workflow/swc-plugin@5.0.0-beta.5
+  - @workflow/errors@5.0.0-beta.8
+
 ## 5.0.0-beta.17
 
 ### Patch Changes

packages/builders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/builders",
-  "version": "5.0.0-beta.17",
+  "version": "5.0.0-beta.18",
   "description": "Shared builder infrastructure for Workflow SDK",
   "type": "module",
   "main": "./dist/index.js",

packages/cli/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @workflow/cli
 
+## 5.0.0-beta.18
+
+### Minor Changes
+
+- [#2467](https://github.com/vercel/workflow/pull/2467) [`cb18139`](https://github.com/vercel/workflow/commit/cb181392b9d6282438c20a4fb6868bc3fd7bc886) Thanks [@pranaygp](https://github.com/pranaygp)! - Add a `--url` flag to `inspect`/`web` that prints the run's dashboard deep link to stdout and exits (no browser, no server), and fix the Vercel dashboard URL to use the current `…/workflows/runs/<id>?environment=<env>` route (respecting `--env`).
+
+### Patch Changes
+
+- Updated dependencies [[`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`4b7a720`](https://github.com/vercel/workflow/commit/4b7a7203bf7093a435a9c4fc33a3af1060f010f7), [`3c79c56`](https://github.com/vercel/workflow/commit/3c79c56af257b4c327e4363c0cdb482149b55c73), [`7440244`](https://github.com/vercel/workflow/commit/744024458f44044c045fab188d46837347c3a998), [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`da37349`](https://github.com/vercel/workflow/commit/da373493d211c09056f745332b18f55ef801da2b), [`53ede30`](https://github.com/vercel/workflow/commit/53ede3079c19494c53e181917f26c2499a19e012), [`6aa1ce0`](https://github.com/vercel/workflow/commit/6aa1ce0054d0af80c25bb47b7d6d726320f0e5b4)]:
+  - @workflow/core@5.0.0-beta.18
+  - @workflow/builders@5.0.0-beta.18
+  - @workflow/world-vercel@5.0.0-beta.17
+  - @workflow/world@5.0.0-beta.11
+  - @workflow/swc-plugin@5.0.0-beta.5
+  - @workflow/web@5.0.0-beta.18
+  - @workflow/errors@5.0.0-beta.8
+  - @workflow/world-local@5.0.0-beta.19
+
 ## 5.0.0-beta.17
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/cli",
-  "version": "5.0.0-beta.17",
+  "version": "5.0.0-beta.18",
   "description": "Command-line interface for Workflow SDK",
   "type": "module",
   "bin": {

packages/core/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @workflow/core
 
+## 5.0.0-beta.18
+
+### Minor Changes
+
+- [#2394](https://github.com/vercel/workflow/pull/2394) [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97) Thanks [@pranaygp](https://github.com/pranaygp)! - Compress serialized payloads (step inputs/outputs, workflow arguments/return values, errors, hook payloads) before storage using composable codec format prefixes. zstd is the preferred codec (markedly faster than gzip at an equal-or-better ratio, via `node:zlib`); gzip (`CompressionStream`) is the portable fallback when zstd is unavailable. Reads dispatch on the prefix, so both codecs are always decodable. Compression is applied before encryption, gated on run specVersion 5, and skipped for small or incompressible payloads. `WORKFLOW_DISABLE_COMPRESSION=1` disables writes; `WORKFLOW_COMPRESSION_CODEC=gzip` forces the portable codec.
+
+### Patch Changes
+
+- [#2394](https://github.com/vercel/workflow/pull/2394) [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97) Thanks [@pranaygp](https://github.com/pranaygp)! - Emit OpenTelemetry span attributes for payload compression on the serialize (write) and deserialize (read) paths: `workflow.serialization.{operation,compressed,uncompressed_bytes,stored_bytes,compression_ratio}`. Sizes are measured at the compression boundary (pre-encryption). Telemetry failures never affect serialization.
+
+- [#2397](https://github.com/vercel/workflow/pull/2397) [`4b7a720`](https://github.com/vercel/workflow/commit/4b7a7203bf7093a435a9c4fc33a3af1060f010f7) Thanks [@pranaygp](https://github.com/pranaygp)! - `start({ deploymentId: 'latest' })` is now a no-op in Worlds that don't support atomic deployments (local dev, Postgres) instead of throwing — it logs a warning and targets the current deployment, so workflows that use `'latest'` on Vercel still run locally.
+
+- [#2470](https://github.com/vercel/workflow/pull/2470) [`3c79c56`](https://github.com/vercel/workflow/commit/3c79c56af257b4c327e4363c0cdb482149b55c73) Thanks [@TooTallNate](https://github.com/TooTallNate)! - Fix the payload-compression capability cutoff: gzip/zstd are gated on `5.0.0-beta.18` (the first published version containing the compression read path) instead of `5.0.0-beta.16`. The previous cutoff would let a producer write compressed payloads to a beta.16/beta.17 target that cannot decode them.
+
+- Updated dependencies [[`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`5f0b845`](https://github.com/vercel/workflow/commit/5f0b845211152b6f2860c78d0dd4dccc9d4f0d97), [`6aa1ce0`](https://github.com/vercel/workflow/commit/6aa1ce0054d0af80c25bb47b7d6d726320f0e5b4)]:
+  - @workflow/world-vercel@5.0.0-beta.17
+  - @workflow/world@5.0.0-beta.11
+  - @workflow/errors@5.0.0-beta.8
+  - @workflow/world-local@5.0.0-beta.19
+
 ## 5.0.0-beta.17
 
 ### Minor Changes

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workflow/core",
-  "version": "5.0.0-beta.17",
+  "version": "5.0.0-beta.18",
   "description": "Core runtime and engine for Workflow SDK",
   "type": "module",
   "main": "dist/index.js",

packages/nest/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @workflow/nest
 
+## 5.0.0-beta.18
+
+### Patch Changes
+
+- Updated dependencies [[`7440244`](https://github.com/vercel/workflow/commit/744024458f44044c045fab188d46837347c3a998), [`da37349`](https://github.com/vercel/workflow/commit/da373493d211c09056f745332b18f55ef801da2b), [`53ede30`](https://github.com/vercel/workflow/commit/53ede3079c19494c53e181917f26c2499a19e012)]:
+  - @workflow/builders@5.0.0-beta.18
+  - @workflow/swc-plugin@5.0.0-beta.5
+
 ## 5.0.0-beta.17
 
 ### Patch Changes