Merge pull request #699 from RooCodeInc/release/v0.17.0

Promote v0.17.0 to production

Author: mrubens

.docker/app/Dockerfile

@@ -84,8 +84,10 @@ COPY apps/worker ./apps/worker/
 
 ARG R_APP_ENV
 ARG RELEASE_VERSION
+ARG RELEASE_PRODUCT_VERSION
 ENV R_APP_ENV=${R_APP_ENV}
 ENV RELEASE_VERSION=${RELEASE_VERSION}
+ENV RELEASE_PRODUCT_VERSION=${RELEASE_PRODUCT_VERSION}
 
 # ---------------------------------------------------------------------------
 # web: Next.js standalone build. The placeholder env values only satisfy
@@ -271,8 +273,10 @@ RUN chmod +x /roomote/.docker/app/entrypoint.sh
 
 ARG R_APP_ENV
 ARG RELEASE_VERSION
+ARG RELEASE_PRODUCT_VERSION
 ENV R_APP_ENV=${R_APP_ENV}
 ENV RELEASE_VERSION=${RELEASE_VERSION}
+ENV RELEASE_PRODUCT_VERSION=${RELEASE_PRODUCT_VERSION}
 ENV NODE_ENV=production
 ENV NEXT_TELEMETRY_DISABLED=1
 ENV HOME=/tmp

.github/workflows/publish-ghcr.yml

@@ -34,6 +34,7 @@ jobs:
       docs_only: ${{ steps.changed-paths.outputs.docs_only }}
       owner: ${{ steps.vars.outputs.owner }}
       version: ${{ steps.vars.outputs.version }}
+      product_version: ${{ steps.vars.outputs.product_version }}
       app_env: ${{ steps.vars.outputs.app_env }}
       extra_tag: ${{ steps.vars.outputs.extra_tag }}
     steps:
@@ -134,8 +135,20 @@ jobs:
               ;;
           esac
 
+          # The product (changelog) version is baked alongside the image tag
+          # so channel builds (develop-<sha>/main-<sha>) still know which
+          # product release they contain (used by the in-app release notices).
+          product_version="$(jq -r .version package.json)"
+          case "$product_version" in
+            ''|null)
+              echo "Failed to read product version from package.json" >&2
+              exit 1
+              ;;
+          esac
+
           echo "owner=$owner" >> "$GITHUB_OUTPUT"
           echo "version=$version" >> "$GITHUB_OUTPUT"
+          echo "product_version=$product_version" >> "$GITHUB_OUTPUT"
           echo "app_env=$app_env" >> "$GITHUB_OUTPUT"
           echo "extra_tag=$extra_tag" >> "$GITHUB_OUTPUT"
 
@@ -300,6 +313,7 @@ jobs:
           build-args: |
             R_APP_ENV=${{ needs.prepare.outputs.app_env }}
             RELEASE_VERSION=${{ needs.prepare.outputs.version }}
+            RELEASE_PRODUCT_VERSION=${{ needs.prepare.outputs.product_version }}
 
       - name: Export digest
         shell: bash

.roomote/environments/roomote.yaml

@@ -40,10 +40,6 @@ repositories:
         run: mise install && pnpm install
         timeout: 600
         continue_on_error: false
-      - name: Install Mintlify CLI for docs
-        run: mise install node@22.20.0 && mise exec node@22.20.0 -- npm install -g mint
-        timeout: 600
-        continue_on_error: true
       - name: Write local env overrides
         run: printf 'DATABASE_URL=postgresql://postgres@localhost:5432/roomote_development\nREDIS_URL=redis://localhost:16379\nR_APP_ENV=development\nWEB_DEV_LOGIN_ENABLED=true\n' > .env.local
         timeout: 600
@@ -107,7 +103,8 @@ repositories:
         detached: true
         logfile: /tmp/roomote-controller.log
       - name: Start Mintlify docs preview
-        run: cd apps/docs && mise exec node@22.20.0 -- mint dev --port 3333 --no-open
+        # Mint is needed only for this optional final service.
+        run: mise install node@22.20.0 && mise exec node@22.20.0 -- npm install -g mint && cd apps/docs && mise exec node@22.20.0 -- mint dev --port 3333 --no-open
         timeout: 600
         continue_on_error: true
         detached: true

CHANGELOG.md

@@ -2,6 +2,29 @@
 
 This file tracks product releases for Roomote (single monorepo version). Automated release entries are prepended by `pnpm run version`.
 
+## 0.17.0 (2026-07-22)
+
+Managed deployments gain stronger access and credential protections, while users get safer account controls and more reliable links, notices, and Discord updates.
+
+### Highlights
+
+- Keep managed deployments readable while pausing new tasks when access becomes read-only.
+- Run managed sandboxes through a broker without storing shared Modal credentials in tenant deployments.
+- Change email-and-password credentials from a dedicated Personal Settings flow.
+- Get browser-reachable artifact links, reliable release notices, and clearer Discord task updates.
+
+### Minor changes
+
+- Add a brokered compute backend so managed deployments can run sandboxes without storing shared Modal credentials.
+- Add managed deployment access controls that keep existing data readable while pausing new tasks when a deployment becomes read-only.
+- Let email-and-password users change their password from a dedicated Personal Settings flow.
+
+### Patch changes
+
+- Use the public Roomote URL for cloud task artifact links so shared links open outside the deployment network.
+- Keep Discord task footers on the latest reply and display pull-request titles cleanly.
+- Show in-app release notices on deployments running channel builds by baking the product version into published images and reading it for the what's-new and update-available notices.
+
 ## 0.16.0 (2026-07-21)
 
 Custom automations and wider CI triage coverage help teams automate more recurring work, with reliability improvements across task startup and integrations.

apps/api/package.json

@@ -43,7 +43,7 @@
     "@sentry/node": "10.45.0",
     "@trpc/client": "^11.15.0",
     "@trpc/server": "^11.15.0",
-    "hono": "4.12.25",
+    "hono": "4.12.27",
     "jose": "^6.2.3",
     "p-map": "^7.0.4",
     "snowflake-sdk": "^2.4.3",