vercel · github-actions · Jul 15, 2026
diff --git a/.changeset/author-is-system.md b/.changeset/author-is-system.md
diff --git a/.changeset/calm-users-email.md b/.changeset/calm-users-email.md
diff --git a/.changeset/gchat-endpoint-url-audience.md b/.changeset/gchat-endpoint-url-audience.md
diff --git a/.changeset/state-pg-set-if-not-exists-ttl.md b/.changeset/state-pg-set-if-not-exists-ttl.md
diff --git a/.changeset/teams-author-email.md b/.changeset/teams-author-email.md
diff --git a/.changeset/teams-streaming-placeholder.md b/.changeset/teams-streaming-placeholder.md
diff --git a/.changeset/telegram-mention-regex-abortable-sleep.md b/.changeset/telegram-mention-regex-abortable-sleep.md
diff --git a/packages/adapter-discord/CHANGELOG.md b/packages/adapter-discord/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/discord
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/discord",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Discord adapter for Chat SDK — HTTP interactions, Gateway events, slash commands, and embeds",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-gchat/CHANGELOG.md b/packages/adapter-gchat/CHANGELOG.md
@@ -1,5 +1,47 @@
 # @chat-adapter/gchat
 
+## 4.35.0
+
+### Patch Changes
+
+- 270b1c2: fix(gchat): accept `endpointUrl` as a direct-webhook verifier and verify each token type correctly
+
+  When a Google Chat app's connection setting **Authentication audience** is set
+  to **HTTP endpoint URL** — Google's recommended option for HTTP-hosted apps
+  not behind Cloud Run IAM, and the only mode available for Workspace Add-on
+  Chat apps — incoming tokens are Google OIDC ID tokens whose `aud` is the
+  endpoint URL rather than the GCP project number. Previously the adapter only
+  verified against `googleChatProjectNumber`, so URL-audience tokens always
+  failed with 401 Unauthorized. The adapter now accepts `endpointUrl` as a
+  direct-webhook verifier (including in the constructor's fail-closed check),
+  validating the OIDC token's audience plus the Google Chat issuer email claims
+  (`chat@system.gserviceaccount.com`, or the
+  `service-{projectNumber}@gcp-sa-gsuiteaddons.iam.gserviceaccount.com` service
+  identity for Workspace Add-on Chat apps) with `email_verified: true` — a
+  public endpoint URL audience alone is not sufficient to forge a request.
+
+  Project-number-audience tokens are now verified per Google's reference
+  implementation: they are JWTs self-signed by
+  `chat@system.gserviceaccount.com`, so the adapter checks them against that
+  service account's X.509 certificates with issuer
+  `chat@system.gserviceaccount.com` (previously it used `verifyIdToken`, which
+  only accepts Google OIDC issuers and certs and therefore rejected every real
+  project-number token). When both verifiers are configured, either token type
+  is accepted.
+
+  The adapter still infers an endpoint URL from incoming requests for
+  button-click action routing only — that inferred value is never used as a
+  JWT verification audience, and inference now only happens after a request
+  has passed verification (or verification was explicitly disabled), because
+  `request.url` derives from the attacker-controllable `Host` header in
+  serverless runtimes.
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/gchat",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Google Chat adapter for Chat SDK — service account auth, Card v2, dialogs, and Workspace Events",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-github/CHANGELOG.md b/packages/adapter-github/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/github
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/github",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "GitHub adapter for Chat SDK — respond to @mentions in pull request and issue comment threads",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-linear/CHANGELOG.md b/packages/adapter-linear/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/linear
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/linear",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Linear adapter for Chat SDK — @mentions in issue comments and Linear agent sessions",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-messenger/CHANGELOG.md b/packages/adapter-messenger/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/messenger
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/messenger",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Facebook Messenger adapter for Chat SDK — Send API webhooks, templates, and quick replies",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-shared/CHANGELOG.md b/packages/adapter-shared/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @chat-adapter/shared
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/shared",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Shared utilities for Chat SDK platform adapters",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-slack/CHANGELOG.md b/packages/adapter-slack/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @chat-adapter/slack
 
+## 4.35.0
+
+### Patch Changes
+
+- 80def3a: Add optional `isSystem` field to the normalized message `Author` type to distinguish platform-generated messages from humans and bots. The Slack adapter now sets `isSystem: true` for messages authored by Slack's reserved `USLACK` user (e.g. "@user archived the channel" notifications in DMs), so consumers no longer need to hard-code Slack-specific user IDs.
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/slack",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Slack adapter for Chat SDK — webhooks, Block Kit cards, OAuth, slash commands, and AI streaming",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-teams/CHANGELOG.md b/packages/adapter-teams/CHANGELOG.md
@@ -1,5 +1,21 @@
 # @chat-adapter/teams
 
+## 4.35.0
+
+### Minor Changes
+
+- 46681f5: Expose Microsoft Graph email addresses on normalized incoming Teams message authors. Resolved user profiles are cached in the state adapter (1 hour, failed lookups 5 minutes) so the lookup doesn't add a Graph call per message.
+
+### Patch Changes
+
+- 3895ab3: Fall back to Microsoft Graph's user principal name when a Teams user has no mail address.
+- 93a58af: Show explicitly configured progress as a native Teams DM status while preserving native streaming.
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/teams",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Microsoft Teams adapter for Chat SDK — Bot Framework webhooks, Adaptive Cards, and Graph API",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-telegram/CHANGELOG.md b/packages/adapter-telegram/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @chat-adapter/telegram
 
+## 4.35.0
+
+### Patch Changes
+
+- 0701679: Cache the compiled bot-mention regex in `isBotMentioned` instead of recompiling it per message, and make the protected `sleep` helper accept an optional `AbortSignal` so `stopPolling()` interrupts the polling backoff delay immediately.
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/telegram",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Telegram adapter for Chat SDK — Bot API webhooks, inline keyboards, reactions, and streaming",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-twilio/CHANGELOG.md b/packages/adapter-twilio/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/twilio
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Patch Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/twilio",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Twilio adapter for Chat SDK — SMS and MMS bots with Messaging webhooks and the Messages API",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-web/CHANGELOG.md b/packages/adapter-web/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/web
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@chat-adapter/web",
-  "version": "4.34.0",
+  "version": "4.35.0",
   "description": "Web adapter for Chat SDK — browser chat UI via the AI SDK useChat stream protocol",
   "type": "module",
   "engines": {

diff --git a/packages/adapter-whatsapp/CHANGELOG.md b/packages/adapter-whatsapp/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @chat-adapter/whatsapp
 
+## 4.35.0
+
+### Patch Changes
+
+- Updated dependencies [80def3a]
+- Updated dependencies [46681f5]
+- Updated dependencies [93a58af]
+  - chat@4.35.0
+  - @chat-adapter/shared@4.35.0
+
 ## 4.34.0
 
 ### Minor Changes