release: 0.39.0

[stainless-app]

Automated Release PR

0.39.0 (2026-05-01)

Full Changelog: v0.38.0...v0.39.0

Features

• api: api update (d4b2496)
• support setting headers via env (0e3b514)

Chores

• avoid formatting file that gets changed during releases (cf52108)
• format: run eslint and prettier separately (43ec88d)
• internal: codegen related update (f6cdc59)
• internal: more robust bootstrap script (dd48b06)
• internal: update docs ordering (9ac7b35)
• restructure docs search code (8a752b4)
• update SDK settings (5f5049a)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

[stainless-app]

🧪 Testing

To try out this version of the SDK:

npm install 'https://pkg.stainless.com/s/hyperspell-typescript/cf52108cf3114d0cd27cc613089e3d7f05bfa3fe/dist.tar.gz'

Expires at: Sat, 30 May 2026 08:02:44 GMT
Updated at: Thu, 30 Apr 2026 08:02:44 GMT

[canaries-inc]

🐤 Canary Summary

This is an automated release PR with no UI/UX changes:

• Version bumped from 0.38.0 to 0.38.1 across all package files
• Updated npm publishing workflow authentication from OIDC to token-based
• Modified release scripts to use NPM_TOKEN environment variable
• Updated changelog and configuration metadata
• No user-facing UI components, styling, or application logic affected

---

---

View PR tests on Canary

[canaries-inc]

🐤 Canary Proposed Tests

No testable user journeys found for this PR.

[entelligence-ai-pr-reviews]

---

Confidence Score: 5/5 - Safe to Merge

Safe to merge — this appears to be a standard release bump to version 0.38.1 with no identified logic, security, or correctness issues surfaced during review. The automated analysis found zero critical, significant, or medium-severity issues across the reviewed files. While only 4 of 13 changed files received coverage, the absence of any flagged concerns and the nature of a patch release (typically containing minor fixes or version metadata updates) supports a clean merge.

Key Findings:

• No new review comments were generated, indicating no obvious logic bugs, security vulnerabilities, or correctness issues were detected in the analyzed code.
• The PR is a patch release (0.38.1), which typically involves version string updates, changelog entries, and minor bug fixes rather than high-risk architectural changes.
• Zero unresolved pre-existing comments were carried into this review, meaning there is no backlog of known issues being deferred.
• 4 of 13 changed files were reviewed by the heuristic analysis — the unreviewed files represent a minor blind spot, but for a release PR this risk is generally low.

[entelligence-ai-pr-reviews]

EntelligenceAI PR Summary

Releases v0.39.0 with npm publishing migrated to token-based auth, Prettier decoupled from ESLint as a standalone lint step, and a new recency_half_life_days parameter added to the memories search API.

• Auth: Removed OIDC workflow permissions and dynamic npm install; NPM_TOKEN now required directly in publish-npm, release-doctor, and check-release-environment
• New feature: HYPERSPELL_CUSTOM_HEADERS env var support in src/client.ts for injecting default HTTP headers
• New API param: recency_half_life_days (nullable number) added to MemorySearchParams.Options in src/resources/memories.ts, MCP server, and tests
• Tooling: eslint-plugin-prettier removed; prettier --check added to scripts/lint; scripts/format and scripts/fast-format refactored
• Fixes: Bootstrap script hardened with ${SKIP_BREW:-}; postprocess-files.cjs converts inline @ts-ignore JSDoc to line comments in declaration files
• MCP server: Code example ordering standardized to ts→py→go→cli→http; EMBEDDED_READMES reordered

---

Confidence Score: 4/5 - Mostly Safe

Safe to merge — this release PR cleanly packages v0.39.0 with well-scoped changes across CI/CD auth migration, linting decoupling, and a new recency_half_life_days parameter in the memories search API. The shift from OIDC workflow permissions to direct NPM_TOKEN-based auth in publish-npm, release-doctor, and check-release-environment is a straightforward and common pattern. The addition of HYPERSPELL_CUSTOM_HEADERS env var support in src/client.ts for injecting default HTTP headers is a contained feature with no review comments flagging concerns. No automated review comments were generated across the 16 reviewed files, and no pre-existing unresolved issues are noted.

Key Findings:

• The NPM publishing auth migration from OIDC/dynamic install to static NPM_TOKEN in CI workflows is a standard, well-understood pattern that reduces complexity without introducing new attack surface.
• The recency_half_life_days parameter addition to the memories search API appears to be an additive, non-breaking change consistent with the SDK's versioning approach for v0.39.0.
• Prettier being decoupled from ESLint as a standalone lint step is a best-practice CI improvement that has no runtime impact on the SDK itself.
• 16 of 27 changed files were reviewed with zero issues flagged, and the unreviewd files are likely generated or config files typical of an SDK release commit.

Files requiring special attention

• src/client.ts
• .github/workflows/publish-npm.yml
• src/resources/memories.ts