andrewzolotukhin · Oct 9, 2026 · Oct 9, 2026
diff --git a/.changeset/callable-compiled-queries.md b/.changeset/callable-compiled-queries.md
diff --git a/.changeset/circular-object-hashing.md b/.changeset/circular-object-hashing.md
diff --git a/.changeset/close-rejected-subscriptions.md b/.changeset/close-rejected-subscriptions.md
diff --git a/.changeset/composable-typed-queries.md b/.changeset/composable-typed-queries.md
diff --git a/.changeset/connection-independent-queries.md b/.changeset/connection-independent-queries.md
diff --git a/.changeset/cors-preflight.md b/.changeset/cors-preflight.md
diff --git a/.changeset/durable-job-execution.md b/.changeset/durable-job-execution.md
diff --git a/.changeset/immutable-query-major.md b/.changeset/immutable-query-major.md
diff --git a/.changeset/modular-implementations-and-error-policies.md b/.changeset/modular-implementations-and-error-policies.md
diff --git a/.changeset/object-storage-s3.md b/.changeset/object-storage-s3.md
diff --git a/.changeset/polymorphic-write-lifecycle.md b/.changeset/polymorphic-write-lifecycle.md
diff --git a/.changeset/preserve-column-default-changes.md b/.changeset/preserve-column-default-changes.md
diff --git a/.changeset/projection-aware-synchronous-mapping.md b/.changeset/projection-aware-synchronous-mapping.md
diff --git a/.changeset/property-definition-navigation.md b/.changeset/property-definition-navigation.md
diff --git a/.changeset/schema-aware-read-predicates.md b/.changeset/schema-aware-read-predicates.md
diff --git a/.changeset/schema-boundaries.md b/.changeset/schema-boundaries.md
diff --git a/.changeset/secure-v5-release-readiness.md b/.changeset/secure-v5-release-readiness.md
diff --git a/.changeset/server-form-validation.md b/.changeset/server-form-validation.md
diff --git a/.changeset/subscription-empty-history.md b/.changeset/subscription-empty-history.md
diff --git a/.changeset/typed-idempotent-operations.md b/.changeset/typed-idempotent-operations.md
diff --git a/.changeset/typed-multipart-json-documents.md b/.changeset/typed-multipart-json-documents.md
diff --git a/libs/async/CHANGELOG.md b/libs/async/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @cleverbrush/async
 
+## 5.0.0
+
+### Major Changes
+
+- d916566: Make Framework query builders immutable and infer row schemas automatically.
+
+  Retain returned query builders, return synchronous builders from scopes and grouped predicates, and supply an explicit Framework object output schema for opaque raw SELECTs. Ordinary, aliased, polymorphic and ORM queries expose their row schemas directly. Projections replace scalar selections, and projected/aggregate/raw queries cannot perform entity writes. Reads and write-returning rows consistently preserve exact decimal/bigint strings, Date objects and SQL nulls.
+
+  All published Framework packages advance together to the next major version. Tracked entity objects remain mutable.
+
+  ### Migrating from v4.x to v5
+
+  Remove `withRowSchema()` calls and retain each configured query instead of relying on mutation. Replace raw base-query overloads with explicit output contracts. See `libs/knex-schema/MIGRATION-v5.md` for the complete migration guide.
+- c5b4dbc: Require Node.js 24+ consistently across all published packages. Correct the root and all published-package license files to BSD-3-Clause, matching package metadata and documentation, and verify license consistency in source and npm tarballs. See docs/MIGRATION-v5.md for migration guidance.
+
+  Harden JWT key/algorithm and claim validation, cookie parsing/serialization, and request-body lifecycle handling. Require explicit authorization scope for bounded server idempotency; coalesce concurrent retries and capture full response bodies. Bound response caching and bypass private, no-store and cookie-setting responses.
+
+  Preserve DI scope validation through factories and propagate registered optional-service failures. Fix batch response status/header capture, timeout abort-listener cleanup, concurrent deduplication response cloning, CLI database cleanup on validation/production-guard failures, and the missing client idempotency JavaScript export. Update security-sensitive dependencies and ensure OpenTelemetry disable flags override SDK defaults.
+
+  Add regression tests, package-consumer smoke checks, package-level unit coverage floors, migration/security documentation and release validation gates.
+
 ## 4.5.0
 
 ## 4.4.3

diff --git a/libs/async/package.json b/libs/async/package.json
@@ -41,5 +41,5 @@
     },
     "type": "module",
     "types": "./dist/index.d.ts",
-    "version": "4.5.0"
+    "version": "5.0.0"
 }