• #783 by @bobsingor – Use the document-scoped access endpoint for unlock requests. Add an opt-in docAffinityHeader option for routing document requests and bounded retries for server EngineBusy and EngineRestarting responses, including Retry-After handling and an onRetry callback.

• #783 by @bobsingor – Add a production Helm chart with validated SQLite and Postgres profiles, safety gates, smoke and crash drills, and OCI publishing tied to the server package version. Add Prometheus metrics, drain-aware bounded shutdown and readiness, serialized Postgres migrations, and fail-fast worker supervision.

  Add opt-in supervised engine-host process isolation with generation-fenced recovery, crash journaling, document quarantine enforcement, engine health reporting, and audited quarantine CLI commands. Repeated engine crashers can be observed or rejected with DocumentQuarantined, while native host crashes restart the engine without terminating the API server.

  Encode page renders, annotation appearances, and warm thumbnails inside engine workers by default so compressed images cross the engine boundary, with a temporary API-side encoding fallback. Add bounded interactive and background scheduling, per-host memory telemetry, controlled engine recycling, and deterministic engine sharding with per-shard readiness and metrics.

  Add POST /v1/docs/:docId/access as the document-scoped access endpoint while retaining POST /v1/access as a transitional alias. Head responses advertise the scoped endpoint, and path/body document ID mismatches are rejected. Allow the optional X-CloudPDF-Doc affinity header through CORS and expose retry and image metadata response headers to browser clients.

• #783 by @bobsingor – Add the *.renderEncoded wire kinds (pages.renderEncoded, document.renderPageFileEncoded, annotations.renderAppearancesEncoded) plus their RenderEncode / EncodedImageWire shapes — cloud-server surface (types only): the raster is encoded where it is produced and only the compressed image crosses the engine boundary.

  Make document access endpoints document-scoped by changing wirePaths.access to a wirePaths.access(docId) builder. Keep wirePaths.accessLegacy for transitional clients and allow the scoped endpoint to omit docId from the request body.

• #783 by @bobsingor – Add a public @embedpdf/engine-runtime/build-id subpath exposing the runtime's build identity (ENGINE_RUNTIME_VERSION, engineRuntimeTarget(), and engineRuntimeBuildId()) as a side-effect-free Node module. Supervisors and diagnostics can identify the version and resolved native target without loading the native addon.

• #783 by @bobsingor – WorkerHost accepts an optional injected WorkerImageEncoder (third constructor argument) and dispatches the new *.renderEncoded kinds through it on a narrowly-scoped async path. No new dependencies: the native encoder stays in the injecting package. Hosts without an encoder (browser/local workers) reject those kinds with NotImplemented; existing two-argument construction is unchanged.

• #779 by @bobsingor – Bind Stage surface measurement before browser paint so the initial viewport and camera placement settle before page surfaces become visible. React viewers no longer show a transient incorrectly positioned page while a document opens.

• #779 by @bobsingor – Keep page and scrollbar screen geometry hidden until initial viewport placement commits. Stage consumers no longer receive origin-based placeholder geometry while viewport, responsive settings, and camera state are being initialized, preventing pages from rendering at the top-left before their final placement.

• Fix Turbopack resolution through chained symlinks: #97825
• Add evals for whether agents actually use Next.js: #97816
• evals: judge behavior instead of matching source text: #97826
• Bump @vercel/agent-eval to 2.2.1: #97885
• feat(turbopack): resolve /-rooted imports from the project directory: #97799
• [ci] Use short-lived access tokens for preview-build uploads instead of static token: #97256
• Turbopack: correctly trace through TypeScript __importStar: #97697
• [turbopack] simplify ecmascript effect queue: #97771
• Update default Create Next App favicon: #97634

Huge thanks to @marcoshernanz, @gaojude, @sokra, @eps1lon, @mischnic, and @aurorascharff for helping!

• Upgrade to libvips v8.18.6 for upstream bug fixes.

• Bound resize dimensions to coordinate limit.

• Bound composite left and top to coordinate limit. #4564 @metsw24-max

• Round palette bit depth up for png and gif colours. #4569 @metsw24-max

• Ensure tiff.subifd input option is used. #4572 @metsw24-max

• Ensure info.pages is correct when limiting input page range. #4578 @metsw24-max

• Improve support for input Streams finishing before output is requested. #4584 @Jaybhade

See CHANGELOG.md for details.

Full Changelog: https://github.com/rari-build/rari/compare/@rari/lint@0.1.1...@rari/lint@0.1.2

Release 2026-08-25 21:28

• query-core: Avoid scheduling stale timeouts for disabled query observers (#11293) (a05df6aef) by @TkDodo

• examples,docs: replace deprecated 'prefetchQuery'/'fetchQuery' calls with 'query' (#11282) (8fbfc14d4) by @sukvvon
• scripts/create-github-release: fix release-notes diff range after 'Version Packages' PR is squash-merged (#11279) (bceba4a14) by @sukvvon

• @tanstack/angular-query-experimental@5.102.4
• @tanstack/eslint-plugin-query@5.102.4
• @tanstack/lit-query@0.2.16
• @tanstack/preact-query@5.102.4
• @tanstack/preact-query-devtools@5.102.4
• @tanstack/preact-query-persist-client@5.102.4
• @tanstack/query-async-storage-persister@5.102.4
• @tanstack/query-broadcast-client-experimental@5.102.4
• @tanstack/query-core@5.102.4
• @tanstack/query-devtools@5.102.4
• @tanstack/query-persist-client-core@5.102.4
• @tanstack/query-sync-storage-persister@5.102.4
• @tanstack/react-query@5.102.4
• @tanstack/react-query-devtools@5.102.4
• @tanstack/react-query-next-experimental@5.102.4
• @tanstack/react-query-persist-client@5.102.4
• @tanstack/solid-query@5.102.4
• @tanstack/solid-query-devtools@5.102.4
• @tanstack/solid-query-persist-client@5.102.4
• @tanstack/svelte-query@6.1.44
• @tanstack/svelte-query-devtools@6.1.44
• @tanstack/svelte-query-persist-client@6.1.44
• @tanstack/vue-query@5.102.4
• @tanstack/vue-query-devtools@6.1.44

Release 2026-08-25 21:28

• query-core: Avoid scheduling stale timeouts for disabled query observers (#11293) (a05df6aef) by @TkDodo

• examples,docs: replace deprecated 'prefetchQuery'/'fetchQuery' calls with 'query' (#11282) (8fbfc14d4) by @sukvvon
• scripts/create-github-release: fix release-notes diff range after 'Version Packages' PR is squash-merged (#11279) (bceba4a14) by @sukvvon

• @tanstack/angular-query-experimental@5.102.4
• @tanstack/eslint-plugin-query@5.102.4
• @tanstack/lit-query@0.2.16
• @tanstack/preact-query@5.102.4
• @tanstack/preact-query-devtools@5.102.4
• @tanstack/preact-query-persist-client@5.102.4
• @tanstack/query-async-storage-persister@5.102.4
• @tanstack/query-broadcast-client-experimental@5.102.4
• @tanstack/query-core@5.102.4
• @tanstack/query-devtools@5.102.4
• @tanstack/query-persist-client-core@5.102.4
• @tanstack/query-sync-storage-persister@5.102.4
• @tanstack/react-query@5.102.4
• @tanstack/react-query-devtools@5.102.4
• @tanstack/react-query-next-experimental@5.102.4
• @tanstack/react-query-persist-client@5.102.4
• @tanstack/solid-query@5.102.4
• @tanstack/solid-query-devtools@5.102.4
• @tanstack/solid-query-persist-client@5.102.4
• @tanstack/svelte-query@6.1.44
• @tanstack/svelte-query-devtools@6.1.44
• @tanstack/svelte-query-persist-client@6.1.44
• @tanstack/vue-query@5.102.4
• @tanstack/vue-query-devtools@6.1.44

• Updated dependencies []:
  • @tanstack/query-devtools@5.102.4
  • @tanstack/solid-query@5.102.4

• Updated dependencies [a05df6a]:
  • @tanstack/query-core@5.102.4

• Updated dependencies [a05df6a]:
  • @tanstack/query-core@5.102.4

• Updated dependencies []:
  • @tanstack/query-persist-client-core@5.102.4
  • @tanstack/svelte-query@6.1.44