From 5d5ea4b4a76c553d3e3ae3f1896740875aa93a7c Mon Sep 17 00:00:00 2001
From: sawradip <sawradip0@gmail.com>
Date: Fri, 14 Nov 2025 00:22:39 +0600
Subject: [PATCH 1/2] chore: update TypeScript release workflow to enhance
 security

- Added step to remove injected npm auth token after publishing.
- Cleared NODE_AUTH_TOKEN environment variable to prevent token leakage.
---
 .github/workflows/typescript-release.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/typescript-release.yml b/.github/workflows/typescript-release.yml
index eb13a3e..cf1b0f5 100644
--- a/.github/workflows/typescript-release.yml
+++ b/.github/workflows/typescript-release.yml
@@ -96,9 +96,14 @@ jobs:
           fi
           echo "package_name=$PACKAGE_NAME" >> "$GITHUB_OUTPUT"
 
+      - name: Remove injected npm auth token (use OIDC)
+        run: npm config delete //registry.npmjs.org/:_authToken || true
+
       - name: Publish package to npm
         if: steps.check-npm.outputs.should_publish == 'true'
         run: npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ""
 
       - name: Skip publish (already exists)
         if: steps.check-npm.outputs.should_publish != 'true'

From c635e60b4120c8ecd5f374bf9e9b57f44bfa86cf Mon Sep 17 00:00:00 2001
From: sawradip <sawradip0@gmail.com>
Date: Fri, 14 Nov 2025 00:22:48 +0600
Subject: [PATCH 2/2] chore: bump version to v0.1.29

- Updated all SDK versions to 0.1.29
- Generated changelog with git-cliff
---
 CHANGELOG.md                      | 9 +++------
 pyproject.toml                    | 6 +++---
 runagent-go/runagent/version.go   | 2 +-
 runagent-rust/runagent/Cargo.toml | 2 +-
 runagent-ts/package-lock.json     | 4 ++--
 runagent-ts/package.json          | 2 +-
 runagent/__init__.py              | 2 +-
 runagent/__version__.py           | 2 +-
 8 files changed, 13 insertions(+), 16 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index decd763..c583285 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,14 +1,11 @@
 # Changelog
 All notable changes to this project's latest version.
 
-## [0.1.27] - 2025-11-13
+## [0.1.28] - 2025-11-13
 
 ### Miscellaneous Tasks
 
-- Bump version to v0.1.27
-
-### Refactor
-
-- Update GitHub Actions workflow and enhance TypeScript SDK
+- Update GitHub Actions permissions for release jobs
+- Bump version to v0.1.28
 
 <!-- generated by git-cliff -->
diff --git a/pyproject.toml b/pyproject.toml
index 5041e5d..12a0626 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -5,7 +5,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "runagent"
-version = "0.1.28"
+version = "0.1.29"
 description = "A command-line tool and SDK for deploying, managing, and interacting with AI agents"
 readme = "README.md"
 requires-python = ">=3.9"
@@ -103,7 +103,7 @@ line_length = 88
 skip = ["docs"]
 
 [tool.mypy]
-python_version = "0.1.28"
+python_version = "0.1.29"
 warn_return_any = true
 warn_unused_configs = true
 disallow_untyped_defs = true
@@ -159,7 +159,7 @@ fail_under = 80
 
 [tool.ruff]
 line-length = 88
-target-version = "0.1.28"
+target-version = "0.1.29"
 select = [
     "E",   # pycodestyle errors
     "W",   # pycodestyle warnings
diff --git a/runagent-go/runagent/version.go b/runagent-go/runagent/version.go
index e67e040..1431181 100644
--- a/runagent-go/runagent/version.go
+++ b/runagent-go/runagent/version.go
@@ -1,4 +1,4 @@
 package runagent
 
 // Version represents the current version of the RunAgent Go SDK
-const Version = "0.1.28"
+const Version = "0.1.29"
diff --git a/runagent-rust/runagent/Cargo.toml b/runagent-rust/runagent/Cargo.toml
index 4c3db2d..bec1621 100644
--- a/runagent-rust/runagent/Cargo.toml
+++ b/runagent-rust/runagent/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "runagent"
-version = "0.1.28"
+version = "0.1.29"
 edition = "2021"
 description = "RunAgent SDK for Rust - Client SDK for interacting with deployed AI agents"
 license = "MIT"
diff --git a/runagent-ts/package-lock.json b/runagent-ts/package-lock.json
index ca464ca..83cb179 100644
--- a/runagent-ts/package-lock.json
+++ b/runagent-ts/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "runagent",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "runagent",
-      "version": "0.1.28",
+      "version": "0.1.29",
       "dependencies": {
         "better-sqlite3": "^12.2.0"
       },
diff --git a/runagent-ts/package.json b/runagent-ts/package.json
index 4a92520..df8f531 100644
--- a/runagent-ts/package.json
+++ b/runagent-ts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "runagent",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "type": "module",
   "files": [
     "dist"
diff --git a/runagent/__init__.py b/runagent/__init__.py
index 1f82c72..2213a6e 100644
--- a/runagent/__init__.py
+++ b/runagent/__init__.py
@@ -5,7 +5,7 @@
 built with frameworks like LangGraph, LangChain, and LlamaIndex.
 """
 
-__version__ = "0.1.28"
+__version__ = "0.1.29"
 
 from .client import RunAgentClient
 
diff --git a/runagent/__version__.py b/runagent/__version__.py
index f7ee773..a5f3762 100644
--- a/runagent/__version__.py
+++ b/runagent/__version__.py
@@ -1 +1 @@
-__version__ = "0.1.28"
+__version__ = "0.1.29"