Skip to content

Skillscript

v0.37.0 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents dsl llm mcp skills workflow

Summary

AI summary

Refined timeout advisory guidance and made RemoteMcpConnector honor cancellation signals.

Full changelog

Upgrade impact: none (additive). No lint codes added/removed and no behavior change to existing skills — a lint advisory's guidance changed, and RemoteMcpConnector now honors the cancellation signal it previously ignored.

Sharpens how you bound external work, after a real autonomous gather (perry-brief-gather) hung ~2 min on a slow remote leg. The levers were already there — this makes the framework point at the right one.

  • The unbounded-no-deadline advisory was steering authors to the wrong lever. It nudged toward # Deadline: — a whole-run, uncatchable cap that aborts every leg including healthy ones — even for a partial-tolerant gather, and even when a leg was already bounded. Reframed: a $ leg carrying its own timeout=N (catchable, per-leg) or a skill with # Timeout: no longer trips it, and the message/remediation now lead with per-op timeout=N + (fallback:) as the everyday bound, framing # Deadline: as the separate hard-total-ceiling tool. help({topic: "frontmatter"}) / lint-codes reworked to the two-levers distinction.
  • timeout=N works on any $ connector op — it always has (the runtime enforces it regardless of whether the remote tool's own schema lists a timeout; the kwarg is consumed by the runtime, not forwarded), now documented so it's discoverable. A timed-out leg throws a catchable error, so (fallback:) degrades gracefully and the rest of the run continues — the right tool for a partial-tolerant gather.
  • RemoteMcpConnector honors cancellation. An aborted dispatch (per-op timeout= or run # Deadline:) now cancels the in-flight RPC promptly instead of leaving it pending on the subprocess until the connector's internal callTimeoutMs — matters for a serial-subprocess connector where a hung request could delay the next dispatch.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Skillscript

Get notified when new releases ship.

Sign up free

About Skillscript

All releases →

Related context

Earlier breaking changes

  • v0.35.0 Editing `# Deadline:` on an approved skill drops it to Draft (signature invalidates).

Beta — feedback welcome: [email protected]