This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryPool HTTP/2 connections in the s2s transport and enable it on Bun >=1.3.11 and Deno >=2.7.5.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Re-enable HTTP/2 (s2s) transport on Bun >= 1.3.11 Re-enable HTTP/2 (s2s) transport on Bun >= 1.3.11 Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Enable HTTP/2 (s2s) transport on Deno >= 2.7.5 Enable HTTP/2 (s2s) transport on Deno >= 2.7.5 Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Performance | Medium |
Pool HTTP/2 connections in the s2s transport, sharing one connection per endpoint with up to 100 concurrent requests Pool HTTP/2 connections in the s2s transport, sharing one connection per endpoint with up to 100 concurrent requests Source: llm_adapter@2026-07-14 Confidence: high |
— |
Full changelog
Patch Changes
- 46abdc9: Re-enable the HTTP/2 (s2s) transport on Bun >= 1.3.11, where Bun's
node:http2connection-level flow control is fixed (oven-sh/bun#26917). Older Bun versions keep the fetch transport fallback. - 5cba2c2: Enable the HTTP/2 (s2s) transport on Deno >= 2.7.5. Buffers response body chunks until headers arrive, working around Deno's
node:http2emittingdatabeforeresponse; older Deno versions keep the fetch transport fallback. - 51e38a7: Pool HTTP/2 connections in the s2s transport: all streams targeting the same endpoint now share one connection, opened lazily on the first request, instead of one connection per
S2Streamhandle. Each connection carries up to 100 concurrent requests; beyond that, additional connections are opened. Connections are closed when the last stream handle using the endpoint is closed.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About s2-streamstore/s2-sdk-typescript
Official MCP server for the S2.dev serverless stream platform.
Related context
Related tools
Earlier breaking changes
- v@s2-dev/[email protected] Removes generated API.BasinScope as spec no longer defines it.
- v@s2-dev/[email protected] Removes root export BasinScope; introduces LocationName instead.
- v@s2-dev/[email protected] Replaces BasinInfo.scope with location field.
- v@s2-dev/[email protected] Replaces EnsureBasinInput.scope with location field.
- v@s2-dev/[email protected] Replaces CreateBasinInput.scope with location field.
Beta — feedback welcome: [email protected]