Bump @mastra/core from 1.55.0 to 1.57.0 in /node/mastra

[dependabot]

Bumps @mastra/core from 1.55.0 to 1.57.0.

Release notes

Sourced from @​mastra/core's releases.

August 5, 2026

Highlights

Persistable Declarative Workflows (JSON graphs + rehydration)

Workflows can now be authored as data and round-trip through JSON via new declarative step entry types (agent, tool, mapping, plus composite entries), with toStorableGraph() and rehydrateWorkflow() enabling UI/LLM-built graphs that survive restarts and keep schema-typed chaining.

Stored Workflows End-to-End: HTTP APIs + Client SDK + DB Persistence

Stored workflows are now manageable over HTTP (POST/GET/DELETE /stored/workflows) with actionable validation at the API boundary, a new StoredWorkflow client resource in @mastra/client-js, and a new workflowDefinitions storage domain implemented across major DB adapters so stored definitions persist beyond in-memory core.

Declarative Predicate DSL + Nested Workflow Steps (storage-safe conditionals/loops)

Conditionals and loops can be persisted using a structural predicate DSL (instead of closure-only predicates), and nested workflows are now a first-class serialized step type (type: 'workflow') with reference resolution and cycle detection—unlocking stored workflow graphs that branch/loop and compose other workflows reliably.

Experiments & Evals Upgrades: finer scorer control, persistence controls, and safer tool policies

Dataset experiments gain item-level scorerIds, per-run persistence toggles (run targets/scorers without writing experiments/scores), scorer failure results via ScorerRunError, and unmockedToolPolicy to deny undeclared tool calls—plus a new awaited onEvent observer for ordered lifecycle events.

Observability & Streaming Reliability Improvements

Metric queries now support batch traceIds filtering across observability clients/stores, tool spans gain toolCallId for pairing calls/results, and bridges can release filtered spans via optional releaseSpan to prevent leaks; streaming stability also improves (multi-consumer streams no longer break when one disconnects, workflow streams emit final results on workflow-finish).

Breaking Changes

• @mastra/platform-workspace@1.0.0: removed MASTRA_PLATFORM_SECRET_KEY auth for workspace providers; use platform-injected MASTRA_PLATFORM_ACCESS_TOKEN or pass accessToken explicitly.

Changelog

@​mastra/core@1.56.0

Minor Changes

• Added item-level scorer selection for dataset experiments. (#20190)

  Dataset items now accept scorerIds. Experiments select one scorer source in this order: explicitly provided run-level scorers, item scorer IDs, then dataset scorer IDs. Use [] at the run or item level to select no scorers.

  await dataset.addItem({
    input: 'Evaluate this response',
    scorerIds: ['accuracy'],
  });
  await dataset.updateItem({
  itemId: 'item-id',
  scorerIds: null,
  });

  Omit scorerIds to inherit or preserve the current override, use [] to run no scorers for an item, and update with null to restore dataset inheritance. Missing item-level scorer IDs fail only the affected item before target execution.

  Run-level scorers now replace dataset-attached defaults instead of merging with them. Previously, this configuration ran both latency and the dataset's accuracy scorer:

  await dataset.startExperiment({
    targetType: 'agent',
    targetId: 'support-agent',

... (truncated)

Commits

• ca935ef chore: version - exit prerelease mode
• 8d2399b chore(deps): update ai sdk (#20149)
• f933ba3 fix(core): record provider-executed tool results when toolCallId differ (#157...
• fb561aa chore: regenerate providers and docs [skip ci]
• 9672fab feat(core): add transient option to agent signals (#18909)
• d8fa243 feat(core): add processToolResult processor lifecycle hook (#16012)
• d8d259c chore: version packages (alpha) (#20717)
• c848e65 fix(core): exempt memory-sourced messages from the resourceId guard in inputT...
• 8d1aeb8 fix(aiv5-adapter): pass through OpenAI Files API file IDs without corrupting ...
• e932ad2 docs: add Neon as built-in gateway (#20573)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: node. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud