306a079479
chore: Stainless SDK methods for V2 public-run APIs
...
Stainless-Generated-From: 0c767292f9a7937b0d09cb8261ae2c873a41ce2d
2026-07-16 15:15:00 +00:00
8b1dff9a1e
fix: patch 6 high-severity security alerts ( #42 )
...
## Security Alert Patch
Resolves all 6 open high-severity Dependabot alerts in the Maven
dependency graph.
### Packages Updated
| Package | Resolved change | Strategy | Scope | CVEs resolved |
|---|---|---|---|---|
| com.fasterxml.jackson.core:jackson-databind | 2.15.3 -> 2.18.8; 2.21.0
-> 2.21.4 | Parent bump for Palantir plus constrained Dokka classpaths |
Build/dev only | CVE-2026-54512, CVE-2026-54513 |
| org.bouncycastle:bcpg-jdk18on | 1.80 -> 1.84 | Constraint on Kotlin
publishing validation | Build/dev only | CVE-2026-3505 |
| org.codehaus.plexus:plexus-utils | 4.0.2 -> 4.0.3 | Constraint on
Shadow plugin classpath | Test/build only | CVE-2025-67030 |
### Strategy Notes
- Palantir Java Format moves from 2.89.0 to 2.93.0, the first release
that declares patched Jackson 2.21.4.
- Dokka 2.2.0 is the latest release and still declares Jackson 2.15.3,
so its buildscript and worker configurations are constrained to 2.18.8.
Remove the constraint when Dokka publishes a patched dependency graph.
- Kotlin publishing validation selects Bouncy Castle 1.80 internally, so
that isolated configuration is constrained to 1.84.
- Shadow 8.3.8 still declares Plexus Utils 4.0.2. Shadow 9.4.3 was
assessed but failed the repository R8 compatibility test, so the plugin
remains at 8.3.8 with a buildscript-only Plexus constraint.
### Advisory Details
- CVE-2026-54512 / GHSA-j3rv-43j4-c7qm: Jackson polymorphic type
validator bypass via generic type parameters.
- CVE-2026-54513 / GHSA-rmj7-2vxq-3g9f: Jackson array subtype allowlist
bypass.
- CVE-2026-3505 / GHSA-cj8j-37rh-8475: Bouncy Castle uncontrolled
resource consumption.
- CVE-2025-67030 / GHSA-6fmv-xxpf-w3cw: Plexus Utils directory traversal
in extractFile.
### Linear Tickets
No matching open Linear tickets found.
### Verification
- [x] All project dependency reports contain no affected vulnerable
versions
- [x] Kotlin and Java lint pass
- [x] Full Gradle test suite passes
- [x] ProGuard and R8 compatibility checks pass
- [x] Dokka Javadoc generation passes
- [x] git diff --check passes
2026-07-16 11:55:45 +02:00
e639046090
fix: patch remaining Java security alerts ( #38 )
...
## Summary
Patch the remaining open Java/Maven Dependabot alerts on the Stainless
next branch.
## Changes
- Upgrade Jackson modules from 2.22.0 to 2.22.1.
- Pin vulnerable test dependencies to patched versions:
- Bouncy Castle modules: 1.84
- Log4j Core: 2.25.4
- Plexus Utils: 4.0.3
- Commons Lang: 3.18.0
- Use explicit versions for the test dependencies so the dependency
graph recognizes the fixes.
## Security Alerts
Resolves the affected alerts for Jackson Databind/Core, Bouncy Castle,
Log4j Core, Plexus Utils, and Commons Lang, including:
- GHSA-5jmj-h7xm-6q6v
- GHSA-5hh8-q8hv-fr38
- GHSA-9fxm-vc8v-hj55
- GHSA-hgj6-7826-r7m5
- GHSA-rmj7-2vxq-3g9f
- GHSA-j3rv-43j4-c7qm
- GHSA-rcqc-6cw3-h962
- GHSA-cj8j-37rh-8475
- GHSA-c3fc-8qff-9hwx
- GHSA-wg6q-6289-32hp
- GHSA-445c-vh5m-36rj
- GHSA-6hg6-v5c8-fphq
- GHSA-3pxv-7cmr-fjr4
- GHSA-vc5p-v9hr-52mj
- GHSA-6fmv-xxpf-w3cw
- GHSA-72hv-8253-57qq
## Verification
- Core test suite passed.
- Kotlin formatting passed.
- Gradle dependency resolution confirms Jackson Databind 2.22.1.
- Diff check passed.
2026-07-14 01:56:47 -07:00
3bc6173328
feat(smith-sdks): expose threads and traces v2 endpoints in public SDK
...
Stainless-Generated-From: 2c83167dfb83a332ca7f2df2729a3a69f237b0f0
2026-07-07 10:30:49 +00:00
d71cff9f59
feat(stainless)!: skip sessions resource for python and typescript
...
Stainless-Generated-From: 43e94bbe9420618dc2c99ff41a91606f550319b6
2026-07-07 10:16:41 +00:00
6b52583c7c
Bump vulnerable dependency versions ( #27 )
...
## Summary
- bump Jackson, Spring Boot example, WireMock/Jetty test dependencies,
and vulnerable transitive constraints
- update Spring Boot 3 annotation import and dependency security notes
## Testing
- mise x java@temurin-21.0.11+10.0.LTS -- sfw ./gradlew test
2026-07-02 09:28:27 +02:00
48b3b08984
ci(stlc): show a clear message when SDK preview build hits a code conflict
...
Stainless-Generated-From: 8ddeeb1a988a3c864df094292e3a925f3bcccea6
2026-07-01 16:36:24 +00:00
b86e854687
feat(backend): allow retrieving and storing V2 charts in database [LSO-2799]
...
Stainless-Generated-From: a6e52cd3ade297b9840fb679d25dc80e62a1eece
2026-06-12 16:15:49 +00:00
77d19d3241
feat: add online evaluator endpoints to stainless config
...
Stainless-Generated-From: 6cc6df8d86158cf1cf863f95233a383508ee383f
2026-06-11 16:03:03 +00:00
ad6daecac9
Revert "Build SDK"
...
This reverts commit 6b25ea38a8
2026-06-03 21:20:47 +02:00
6b25ea38a8
Build SDK
...
Stainless-Generated-From: 3a0cd98377fb09f5d85dba3ea691f3849ba02263
2026-06-03 21:19:39 +02:00
744987978d
release: 0.1.0-beta.7 ( #156 )
...
* chore(internal): renormalize gradlew.bat line endings
* fix(go): avoid panic when http.DefaultTransport is wrapped
defaultHTTPClient performed an unchecked type assertion on
http.DefaultTransport, which panicked for any caller that had wrapped
the global transport (e.g. otelhttp.NewTransport for distributed
tracing). When the assertion fails, fall back to the wrapped
RoundTripper as-is — preserving the caller's wrapping at the cost of
ResponseHeaderTimeout, which is strictly better than panicking.
* feat(api): api update
* docs: clarify forwards compat behavior
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* chore: remove duplicated dokka setup
* codegen metadata
* codegen metadata
* codegen metadata
* perf(client): create one json mapper
* feat(api): api update
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(client): support proxy authentication
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(sdk): add hub directories endpoints to Stainless config
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* feat(api): api update
* fix(go): avoid panic when http.DefaultTransport is wrapped
defaultHTTPClient performed an unchecked type assertion on
http.DefaultTransport, which panicked for any caller that had wrapped
the global transport (e.g. otelhttp.NewTransport for distributed
tracing). When the assertion fails, fall back to the wrapped
RoundTripper as-is — preserving the caller's wrapping at the cost of
ResponseHeaderTimeout, which is strictly better than panicking.
* feat(api): api update
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* codegen metadata
* chore(internal): codegen related update
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* feat(api): api update
* feat(api): api update
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* fix: restore dokka-javadoc plugin application to subprojects (#157 )
* fix: restore dokka-javadoc plugin application to subprojects
Commit b1af8d8noreply@anthropic.com >
* chore: fix double blank lines flagged by ktfmt lint
Remove spurious extra blank lines between `logLevel` and `apiKey` in
three Builder classes. ktfmt (--kotlinlang-style) disallows consecutive
blank lines inside a class body.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
* release: 0.1.0-beta.7
---------
Co-authored-by: meorphis <eric@stainless.com >
Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>
Co-authored-by: Kiewan Villatel <kiewan@langchain.dev >
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-27 14:32:52 +00:00
14634be733
release: 0.1.0-beta.0 ( #132 )
...
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): sandbox apis
add sandbox apis
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* feat(api): api update
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* chore(deps): bump the minor-and-patch group across 1 directory with 5 updates (#123 )
* chore(deps): bump the minor-and-patch group with 5 updates
Bumps the minor-and-patch group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [org.jetbrains.dokka](https://github.com/Kotlin/dokka ) | `2.0.0` | `2.2.0` |
| [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin ) | `2.0.21` | `2.3.20` |
| [com.vanniktech:gradle-maven-publish-plugin](https://github.com/vanniktech/gradle-maven-publish-plugin ) | `0.28.0` | `0.36.0` |
| [jvm](https://github.com/JetBrains/kotlin ) | `2.0.21` | `2.3.20` |
| [com.vanniktech.maven.publish](https://github.com/vanniktech/gradle-maven-publish-plugin ) | `0.28.0` | `0.36.0` |
Updates `org.jetbrains.dokka` from 2.0.0 to 2.2.0
- [Release notes](https://github.com/Kotlin/dokka/releases )
- [Commits](https://github.com/Kotlin/dokka/compare/v2.0.0...v2.2.0 )
Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.0.21 to 2.3.20
- [Release notes](https://github.com/JetBrains/kotlin/releases )
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md )
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.0.21...v2.3.20 )
Updates `com.vanniktech:gradle-maven-publish-plugin` from 0.28.0 to 0.36.0
- [Release notes](https://github.com/vanniktech/gradle-maven-publish-plugin/releases )
- [Changelog](https://github.com/vanniktech/gradle-maven-publish-plugin/blob/main/CHANGELOG.md )
- [Commits](https://github.com/vanniktech/gradle-maven-publish-plugin/compare/0.28.0...0.36.0 )
Updates `jvm` from 2.0.21 to 2.3.20
- [Release notes](https://github.com/JetBrains/kotlin/releases )
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md )
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.0.21...v2.3.20 )
Updates `com.vanniktech.maven.publish` from 0.28.0 to 0.36.0
- [Release notes](https://github.com/vanniktech/gradle-maven-publish-plugin/releases )
- [Changelog](https://github.com/vanniktech/gradle-maven-publish-plugin/blob/main/CHANGELOG.md )
- [Commits](https://github.com/vanniktech/gradle-maven-publish-plugin/compare/0.28.0...0.36.0 )
---
updated-dependencies:
- dependency-name: org.jetbrains.dokka
dependency-version: 2.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin
dependency-version: 2.3.20
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: com.vanniktech:gradle-maven-publish-plugin
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: jvm
dependency-version: 2.3.20
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: com.vanniktech.maven.publish
dependency-version: 0.36.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix build failures from dependency bumps
Remove SonatypeHost reference removed in gradle-maven-publish-plugin
0.34.0+ (publishToMavenCentral() defaults to Central Portal).
Bump proguard-gradle 7.6.0 → 7.9.0 to support Kotlin 2.3.x metadata.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* Revert Kotlin to 2.3.0 to match Gradle 9.4.1 embedded version
Kotlin 2.3.20 is not yet supported by CodeQL and conflicts with
the kotlin-dsl plugin's embedded Kotlin 2.3.0. Keeping the Kotlin
version aligned with the Gradle wrapper avoids both issues.
Bump proguard-gradle to 7.8.0 (from 7.6.0) to support Kotlin 2.3.0
metadata. 7.9.0 has a null pointer regression; 7.8.x is the sweet spot.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* feat(evaluators): add list evaluators (GET /api/v1/runs/rules)
Exposes `GET /api/v1/runs/rules`.
Will result in `client.evaluators.list()` in the Go SDK.
The endpoint returns online evaluators (internally called "run rules") — automated rules that trigger on incoming runs to apply LLM/code evaluators, add runs to annotation queues, trigger webhooks, etc. The `runs/rules` URL path is an implementation detail; `evaluators` matches the user-facing branding.
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* feat: support setting headers via env
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat: Add autobatch tracing mode (#134 )
* Add autobatch mode
* Fix
* Update signature
* Add async impl
* Fix optin
* Fix
* Fix
* Fix tests
* Add test
* Refactor to be more idiomatic
* Feedback
* Use explicit lock, add to AGENTS.md
* Remove test script
* codegen metadata
* feat: Merge enqueued posts and patches to optimize batching (#135 )
* Merge enqueued posts and patches to optimize batching
* Exclude patched inputs by default
* Logs
* Fix import order
* Feedback
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat: Make autobatch queue denote batches by payload size, add aggregation delay (#137 )
* Make autobatch queue denote batches by payload size, add aggregation delay
* Fully drain queue when batch delay is hit
* Feedback on locks
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat: Add multipart batching (#138 )
* Add multipart batching
* Handle 404s better
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* codegen metadata
* feat(api): api update
* codegen metadata
* codegen metadata
* feat(api): add workspaces
* feat(api): manual updates
* codegen metadata
* feat(api): manual updates
* codegen metadata
* codegen metadata
* codegen metadata
* feat: Add zstd compression to runs service (#136 )
* Add zstd compression
* Merge
* Fix
* nits
* Feedback
* Fix build
* codegen metadata
* release: 0.1.0-beta.0
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com >
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: Jacob Lee <jacoblee93@gmail.com >
2026-04-30 17:23:03 +00:00
bb060d0897
feat(api): api update
2026-03-25 17:36:20 +00:00
a2520117a5
feat(api): manual updates
2026-03-25 17:36:20 +00:00
0871a9da0f
chore(internal): upgrade AssertJ
2026-02-20 15:53:03 +00:00
b34611a2d6
chore: test on Jackson 2.14.0 to avoid encountering FasterXML/jackson-databind#3240 in tests
...
fix: date time deserialization leniency
2026-01-23 16:38:33 +00:00
070629d380
feat(api): api update
2025-12-10 22:13:47 +00:00
fbba779511
feat(api): api update
2025-12-10 22:13:47 +00:00
b50bd7233c
feat(api): api update
2025-12-10 22:13:47 +00:00
364329ec65
feat(api): manual updates
2025-12-10 22:13:47 +00:00
32eabcac91
feat(api): api update
2025-12-10 22:13:47 +00:00
21969a61f9
fix: lint, build, test
2025-11-10 15:41:18 -05:00
1967627dd4
feat(api): enable /api/v1/runs/query
2025-11-10 13:01:27 +00:00
02d5b724de
feat(api): enable /examples
2025-11-10 12:50:47 +00:00
5f71223bac
feat(api): manual updates
2025-11-07 19:33:42 +00:00
a5dc27ed22
feat(api): removing methods
...
Removing methods that are not in Python SDK
2025-11-07 15:51:05 +00:00
40e12e4c9a
feat(api): disabling charts and org-charts
...
Reason: generates misc warnings and not part of P0
2025-11-06 12:09:50 -05:00
b780052150
fix(api): excluding post /api/v1/prompts*
...
They generate lots of `Schema/CannotInferName` warnings and not part of P0. Let's fix that later.
2025-11-06 12:09:50 -05:00
22881d97b2
chore: use langsmith-java as Maven artifact id
2025-11-05 20:33:19 +00:00
stlc-bot