Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@senderkit/sdk@0.10.0

Minor Changes

• 1fe3c66: Add the blocked message status introduced by the outbound abuse scanner.

  senderkit-app now runs outbound anti-phishing detection over email and SMS
  content. A flagged send is halted and the message lands in a new terminal
  blocked state with a human-readable blockedReason. This brings the SDK,
  CLI, and MCP surface back in lockstep with the app's messageStatusEnum.

  • MESSAGE_STATUSES now includes blocked (between opted_out and
    canceled), mirroring the app enum. The senderkit_messages_list.status
    MCP/CLI filter is a strict z.enum(MESSAGE_STATUSES), so before this change
    it rejected status: "blocked" as invalid input — callers can now filter for
    blocked messages.
  • Message.blockedReason is documented on the message type (optional
    string | null), alongside a note that blocked is set by the abuse scanner.

@senderkit/cli@0.6.3

Patch Changes

• 505e36c: Resolve pnpm audit advisories by bumping vulnerable transitive dependencies.

  • hono → >=4.12.25 (pnpm override). Pulled in at runtime via
    @modelcontextprotocol/sdk; clears 5 advisories (GHSA-wwfh-h76j-fc44,
    GHSA-j6c9-x7qj-28xf, GHSA-rv63-4mwf-qqc2, GHSA-wgpf-jwqj-8h8p,
    GHSA-88fw-hqm2-52qc).
  • js-yaml → >=4.2.0 (pnpm override). Dev-only, via @changesets/cli
    (GHSA-h67p-54hq-rp68).
  • vite → ^8.0.16, pinned as a direct devDependency in the three
    test packages. Dev-only, via vitest (GHSA-fx2h-pf6j-xcff,
    GHSA-v6wh-96g9-6wx3). An override alone doesn't move it because vite is
    both a dependency and a peerDependency of vitest, so the version is pinned
    where the peer is consumed instead.

  pnpm audit --audit-level=moderate now reports no known vulnerabilities.

• 1fe3c66: Add the blocked message status introduced by the outbound abuse scanner.

  senderkit-app now runs outbound anti-phishing detection over email and SMS
  content. A flagged send is halted and the message lands in a new terminal
  blocked state with a human-readable blockedReason. This brings the SDK,
  CLI, and MCP surface back in lockstep with the app's messageStatusEnum.

  • MESSAGE_STATUSES now includes blocked (between opted_out and
    canceled), mirroring the app enum. The senderkit_messages_list.status
    MCP/CLI filter is a strict z.enum(MESSAGE_STATUSES), so before this change
    it rejected status: "blocked" as invalid input — callers can now filter for
    blocked messages.
  • Message.blockedReason is documented on the message type (optional
    string | null), alongside a note that blocked is set by the abuse scanner.

• Updated dependencies [1fe3c66]

  • @senderkit/sdk@0.10.0

@senderkit-examples/nextjs-basic@0.0.11

Patch Changes

• Updated dependencies [1fe3c66]
  • @senderkit/sdk@0.10.0

@senderkit-examples/node-basic@0.0.11

Patch Changes

• Updated dependencies [1fe3c66]
  • @senderkit/sdk@0.10.0