Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

run@2.1.8

Patch Changes

• 1b28a18: Add limits.cpuTimeoutMs (default 10 seconds), which bounds the time the worker spends running guest JavaScript in one invocation. Time spent awaiting asynchronous host functions or blocked in synchronous host functions and module loaders does not count, and each continuation resume starts with a fresh budget. Exceeding it fails with the new RunCpuTimeoutError (RUN_CPU_TIMEOUT), even when an interruption is pending. The limit only takes effect when it is lower than timeoutMs.

  This replaces the hidden 10,000 interrupt-check cap, which stopped long loops and large host-function workloads after about a second of guest work, regardless of timeoutMs, and surfaced as RUN_TIMEOUT or InternalError: interrupted. timeoutMs keeps its meaning as the wall-clock ceiling for the whole invocation.

@run/website@0.0.12

Patch Changes

• Updated dependencies [1b28a18]
  • run@2.1.8

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
run	Ready	Preview, v0	Oct 12, 2026 1:44am UTC

[auto-maintain]

🤖 auto-maintain review

Automated, advisory triage for @github-actions[bot]'s PR. Facts below are read from the GitHub API.

Check	Result
Author's merged PRs (this repo)	11
Account established	✅ (age 2995d · 0 followers · 0 public repos)
Commits signed/verified	✅ 1/1
Changeset included	⚠️

Review panel: 🟢 low highest severity

run maintainer code review: 🟢 low

The release version, changelogs, and consumed changeset are consistent; no actionable issues found.

General code review: 🟢 low

Version bumps and generated changelog updates are consistent with the changeset and prior releases.

QuickJS capability boundary: 🟢 low

Release-automation-only PR: consumes the cpu-timeout changeset, bumps run to 2.1.8 and @run/website to 0.0.12, and appends matching CHANGELOG entries. No source, worker, bridge, or sandbox-boundary code is touched, the changelog text matches the cpuTimeoutMs/RunCpuTimeoutError implementation already present in the base commit, and the website dependency uses workspace:* so no stale version pin results. No capability-boundary findings.

Continuation and replay integrity: 🟢 low

Release metadata only; no continuation or replay integrity issues found.

Worker concurrency and resource limits: 🟢 low

No actionable concurrency, lifecycle, or resource-limit issues; this PR only updates release metadata and package versions.

_{Posted by auto-maintain. This automated code review is advisory; a human maintainer makes the call.}

[chopraj]

@aayush-kapoor Can we get this in? I have fix that requires this and I would rather not pin the sha of the package