release: 0.39.0

[stainless-app]

Automated Release PR

0.39.0 (2026-04-26)

Full Changelog: v0.38.0...v0.39.0

Features

• api: api update (d4b2496)

Chores

• internal: more robust bootstrap script (dd48b06)
• internal: update docs ordering (9ac7b35)
• update SDK settings (5f5049a)

---

This pull request is managed by Stainless's GitHub App.

The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.

For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.

🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions

[stainless-app]

🧪 Testing

To try out this version of the SDK:

npm install 'https://pkg.stainless.com/s/hyperspell-typescript/d4b24967ab4c8b0686d69bf7f0780b6b77ab7f58/dist.tar.gz'

Expires at: Tue, 26 May 2026 02:32:04 GMT
Updated at: Sun, 26 Apr 2026 02:32:04 GMT

[canaries-inc]

🐤 Canary Summary

This is an automated release PR with no UI/UX changes:

• Version bumped from 0.38.0 to 0.38.1 across all package files
• Updated npm publishing workflow authentication from OIDC to token-based
• Modified release scripts to use NPM_TOKEN environment variable
• Updated changelog and configuration metadata
• No user-facing UI components, styling, or application logic affected

---

---

View PR tests on Canary

[canaries-inc]

🐤 Canary Proposed Tests

No testable user journeys found for this PR.

[entelligence-ai-pr-reviews]

---

Confidence Score: 5/5 - Safe to Merge

Safe to merge — this appears to be a standard release bump to version 0.38.1 with no identified logic, security, or correctness issues surfaced during review. The automated analysis found zero critical, significant, or medium-severity issues across the reviewed files. While only 4 of 13 changed files received coverage, the absence of any flagged concerns and the nature of a patch release (typically containing minor fixes or version metadata updates) supports a clean merge.

Key Findings:

• No new review comments were generated, indicating no obvious logic bugs, security vulnerabilities, or correctness issues were detected in the analyzed code.
• The PR is a patch release (0.38.1), which typically involves version string updates, changelog entries, and minor bug fixes rather than high-risk architectural changes.
• Zero unresolved pre-existing comments were carried into this review, meaning there is no backlog of known issues being deferred.
• 4 of 13 changed files were reviewed by the heuristic analysis — the unreviewed files represent a minor blind spot, but for a release PR this risk is generally low.

[entelligence-ai-pr-reviews]

EntelligenceAI PR Summary

This PR releases version 0.39.0 of the @hyperspell/hyperspell SDK and @hyperspell/hyperspell-mcp packages, migrating npm publishing from OIDC to direct token authentication and adding a new memory search scoring parameter.

• Replaced OIDC-based npm authentication with NPM_TOKEN (via HYPERSPELL_NPM_TOKEN || NPM_TOKEN fallback) across publish workflow, release-doctor workflow, and publish scripts
• Added recency_half_life_days optional nullable parameter to MemorySearchParams.Options in src/resources/memories.ts and corresponding MCP server docs in packages/mcp-server/src/local-docs-search.ts
• Added pre-release validation for NPM_TOKEN presence in bin/check-release-environment
• Fixed potential unbound variable error in scripts/bootstrap using ${SKIP_BREW:-} shell expansion
• Corrected EMBEDDED_READMES array ordering in MCP server to cli, go, python, typescript
• Bumped version from 0.38.0 to 0.39.0 across all package manifests, version constants, and release configuration files
• Removed oidc from .gitignore following the deprecation of OIDC-based publishing

---

Confidence Score: 5/5 - Safe to Merge

Safe to merge — this PR cleanly accomplishes two well-scoped changes: migrating npm publishing from OIDC to token-based authentication using a HYPERSPELL_NPM_TOKEN || NPM_TOKEN fallback pattern, and adding the optional nullable recency_half_life_days parameter to MemorySearchParams.Options. No review comments were generated and no pre-existing unresolved issues are present. The changes are additive and backward-compatible, with the new parameter being optional and nullable, posing no risk to existing consumers.

Key Findings:

• The HYPERSPELL_NPM_TOKEN || NPM_TOKEN fallback in the publish workflow is a sensible and safe credential migration pattern that maintains backward compatibility with existing CI environments using the generic NPM_TOKEN secret.
• Adding recency_half_life_days as an optional nullable parameter to MemorySearchParams.Options is a non-breaking API extension — existing callers that omit the parameter are unaffected.
• No logic bugs, security vulnerabilities, or correctness issues were identified across the reviewed files, and the heuristic analysis found zero medium or higher severity issues.

Files requiring special attention

• .github/workflows/publish-npm.yml
• src/resources/memory/memory.ts