September 2025 monthly summary for speakeasy-api/sdk-generation-action: Focused on security hardening of the npm install flow within SDK publish and workflow executor. Implemented a fix to prevent npm install from running pre/post scripts, mitigating the risk of malware execution. The change was delivered via a single commit 811899dbb28217161f283d7061bb991bda584a54 with a descriptive message referencing the Shai-Hulud malware attack. This work reduces attack surface, improves build determinism, and strengthens CI/CD safety for SDK generation.

August 2025 highlights for speakeasy-api/sdk-generation-action: Implemented automated SDK changelog generation with opt-in control, default enablement, and standardized environment variable naming across workflows to manage changelog inclusion in releases and PRs. Enhanced the release workflow to be prerelease-aware, publishing prerelease versions with appropriate distribution tags and ensuring they are not marked as the latest release. Turned on changelog for all clients and renamed env variables to improve consistency across the CI/CD process.

March 2025 monthly summary – OpenAPI tooling upgrade and cross-language repository improvements. Key feature delivered: upgraded OpenAPI generation library from v2.544.0 to v2.545.1 with corresponding go.mod/go.sum updates, enabling newer API specs and more robust client generation. Ancillary improvements in the same change set include README updates for the Ruby SDK, updates to MCP server custom resources, and enhancements to MCP extension extensibility. A PHP pagination issue fix was included as part of the same commit, reducing a known paging bug. These efforts improve API client reliability, reduce tooling risk, and strengthen cross-language support across the Speakeasy repo.