Skip to content

chore(deps): update all dependencies#15

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all
Open

chore(deps): update all dependencies#15
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented Apr 25, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@anthropic-ai/claude-agent-sdk 0.2.1260.3.177 age adoption passing confidence peerDependencies minor
@anthropic-ai/claude-agent-sdk ^0.2.132^0.3.0 age adoption passing confidence devDependencies minor
@openai/codex-sdk (source) 0.130.00.139.0 age adoption passing confidence peerDependencies minor
@openai/codex-sdk (source) 0.130.00.139.0 age adoption passing confidence devDependencies minor
actions/checkout v6.0.2v6.0.3 age adoption passing confidence action patch
actions/dependency-review-action v4v5.0.0 age adoption passing confidence action major

Release Notes

anthropics/claude-agent-sdk-typescript (@​anthropic-ai/claude-agent-sdk)

v0.3.177

Compare Source

  • Updated to parity with Claude Code v2.1.177

v0.3.176

Compare Source

  • Fixed turn result messages being dropped when multiple turns complete while a background agent or workflow is running
  • Fixed background agent, remote agent, and MCP task state not being restored when resuming a session via the SDK

v0.3.175

Compare Source

  • Updated to parity with Claude Code v2.1.175

v0.3.174

Compare Source

  • SDK consumers now receive the system/model_fallback message for all fallback triggers — overloaded, server_error, and last_resort in addition to model_not_found and permission_denied — and the message's trigger field gained the server_error and last_resort values

v0.3.173

Compare Source

  • Updated to parity with Claude Code v2.1.173

v0.3.172

Compare Source

  • SDK plugins option now accepts skipMcpDiscovery: true per plugin, so a host that manages a plugin's MCP connections itself can load skills/hooks from the plugin path without the engine re-reading its .mcp.json
  • Fixed slash-followed-by-whitespace input (e.g. / add tests) being silently dropped instead of treated as a plain prompt

v0.3.170

Compare Source

v0.3.169

Compare Source

  • Added an experimental usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET() method on Query returning structured session cost, plan rate-limit, and local usage-behaviors data
  • Added an sse option (SSEOptions) to BrowserQueryOptions as an alternative to websocket, for browser SDK consumers who prefer Server-Sent Events

v0.3.168

Compare Source

  • Updated to parity with Claude Code v2.1.168

v0.3.167

Compare Source

  • Updated to parity with Claude Code v2.1.167

v0.3.166

Compare Source

  • Fixed MCP resource tools not being injected for servers added at runtime via the mcp_set_servers control request

v0.3.165

Compare Source

  • Updated to parity with Claude Code v2.1.165

v0.3.163

Compare Source

  • stop_task control requests now return success when the target task is already gone (not_found or not_running), so SDK clients can reliably prune stale task chips
  • Fixed SDK hosts being unable to add builtin MCP servers (e.g. claude-in-chrome) via setMcpServers when the CLI was launched without them
  • Stop and SubagentStop hook events now support additionalContext in hookSpecificOutput, enabling non-error feedback that continues the turn

v0.3.162

Compare Source

  • Refusal error messages now carry stop_reason: "refusal" and stop_details on the assistant message and in session transcripts, so SDK consumers can detect refusals without text-matching the error content
  • Agent SDK sessions on native builds now default to fast embedded find/grep search in Bash, matching the interactive CLI, instead of always registering the dedicated Grep/Glob tools. To keep the dedicated tools (e.g. to intercept searches via canUseTool or hooks), name them in the tools option or reference them in allowedTools

v0.3.161

Compare Source

  • The initialize control request is now idempotent: a second initialize returns the same success payload instead of an Already initialized error. ControlResponse gains an optional pending_permission_requests field, mirroring ControlErrorResponse
  • applyFlagSettings now live-applies agent changes: switching the active agent (or passing null to reset) takes effect on the next turn in a running session

v0.3.160

Compare Source

  • Fixed SDK hook callbacks swallowing abort signals: aborting during a PostToolUse hook now ends the turn with a final result message instead of hanging the calling process

v0.3.159

Compare Source

  • Updated to parity with Claude Code v2.1.159

v0.3.158

Compare Source

  • Updated to parity with Claude Code v2.1.158

v0.3.157

Compare Source

  • Updated to parity with Claude Code v2.1.157

v0.3.156

Compare Source

  • Updated to parity with Claude Code v2.1.156

v0.3.154

Compare Source

  • Fixed stdio MCP servers being incorrectly restarted on every reconcile pass due to config-equality false positives

v0.3.153

Compare Source

  • Updated to parity with Claude Code v2.1.153

v0.3.152

Compare Source

  • SessionStart hooks can now return reloadSkills: true to trigger a skill re-scan, and set the session title via hookSpecificOutput.sessionTitle
  • Added a MessageDisplay hook event that lets hooks transform or hide assistant message text as it is displayed

v0.3.150

Compare Source

  • Updated to parity with Claude Code v2.1.150

v0.3.149

Compare Source

  • Fixed options.env dropping CLAUDE_AGENT_SDK_VERSION (used for User-Agent and telemetry) when a custom environment is supplied, and corrected the Options.env docs to state that the value replaces the subprocess environment rather than merging with process.env

v0.3.148

Compare Source

  • Updated to parity with Claude Code v2.1.148

v0.3.147

Compare Source

  • Updated to parity with Claude Code v2.1.147

v0.3.146

Compare Source

  • Updated to parity with Claude Code v2.1.146

v0.3.145

Compare Source

  • Updated to parity with Claude Code v2.1.145

v0.3.144

Compare Source

  • Assistant messages and StopFailure hooks now report error: 'model_not_found' when the selected model doesn't exist or isn't available, instead of the generic 'invalid_request'. The api_error_status field on result messages is now documented.
  • Added @anthropic-ai/claude-agent-sdk/extract export for bun build --compile consumers: import the platform native binary with with { type: 'file' }, call extractFromBunfs(binPath) to copy it out of the compiled executable's virtual filesystem, and pass the result to options.pathToClaudeCodeExecutable

v0.3.143

Compare Source

  • @anthropic-ai/sdk and @modelcontextprotocol/sdk are now peerDependencies instead of dependencies. Runtime is unaffected (both are bundled); npm/bun/pnpm auto-install them. yarn classic users should add them explicitly for full TypeScript type resolution

v0.3.142

Compare Source

  • Breaking: Removed the v2 session API (unstable_v2_createSession, unstable_v2_resumeSession, unstable_v2_prompt, SDKSession, SDKSessionOptions), deprecated since 0.2.133. Use query() — pass an AsyncIterable<SDKUserMessage> for multi-turn, or options.resume to continue a session.
  • Breaking: MCP servers now connect in the background by default; sessions start immediately and slow servers report status: "pending" in init until ready. Set MCP_CONNECTION_NONBLOCKING=0 to restore the old behavior of waiting up to 5s before the first query, or mark a server alwaysLoad: true to require it in turn 1.
  • Breaking: Headless and SDK sessions now use Task tools (TaskCreate / TaskUpdate / TaskGet / TaskList) instead of TodoWrite, deprecated since 0.2.136. Tool consumers should accumulate by task ID instead of replacing a snapshot list.
  • Surfaced request_id, subagent_type, and task_description on SDK message types and task system events
  • Headless --sdk-url sessions now exit non-zero with a stderr diagnostic when the remote transport closes permanently (401/403/404 or WS permanent close), instead of silently exiting 0

v0.2.141

Compare Source

  • TaskCreateInput, TaskCreateOutput, TaskGetInput, TaskGetOutput, TaskUpdateInput, TaskUpdateOutput, TaskListInput, and TaskListOutput types are now exported from @anthropic-ai/claude-agent-sdk/sdk-tools and included in the ToolInputSchemas/ToolOutputSchemas unions
  • Aligned @anthropic-ai/sdk dependency to ^0.93.0

v0.2.140

Compare Source

  • Updated to parity with Claude Code v2.1.140

v0.2.139

Compare Source

  • Updated to parity with Claude Code v2.1.139

v0.2.138

Compare Source

  • Updated to parity with Claude Code v2.1.138

v0.2.137

Compare Source

  • Updated to parity with Claude Code v2.1.137

v0.2.136

Compare Source

  • Added resolveSettings() (alpha) to inspect effective merged settings without spawning the Claude CLI; reads MDM (plist/HKLM/HKCU) for parity with CLI startup
  • Deprecated TodoWrite tool — future versions will switch to Task tools (TaskCreate, TaskGet, TaskUpdate, TaskList)

v0.2.133

Compare Source

  • Deprecated the unstable V2 session API (unstable_v2_createSession / unstable_v2_resumeSession / unstable_v2_prompt) — use query() instead
  • Deprecated passing 'Skill' in allowedTools — use the skills option instead
  • Updated to parity with Claude Code v2.1.133

v0.2.132

Compare Source

  • Documented applyFlagSettings() in the TypeScript Agent SDK reference and added support for null on top-level keys to clear flag-settings overrides
  • Updated to parity with Claude Code v2.1.132

v0.2.131

Compare Source

  • Updated to parity with Claude Code v2.1.131

v0.2.129

Compare Source

  • Updated to parity with Claude Code v2.1.129

v0.2.128

Compare Source

  • Updated to parity with Claude Code v2.1.128
actions/checkout (actions/checkout)

v6.0.3

Compare Source

actions/dependency-review-action (actions/dependency-review-action)

v5.0.0: 5.0.0

Compare Source

This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security

socket-security Bot commented Apr 25, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​anthropic-ai/​claude-agent-sdk@​0.2.132 ⏵ 0.3.17774 -210092 +610070
Updated@​openai/​codex-sdk@​0.130.0 ⏵ 0.139.074 +1100100 +1100100

View full report

@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.120 chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.120 - autoclosed Apr 25, 2026
@renovate renovate Bot closed this Apr 25, 2026
@renovate renovate Bot deleted the renovate/all branch April 25, 2026 05:13
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.120 - autoclosed chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.121 Apr 28, 2026
@renovate renovate Bot reopened this Apr 28, 2026
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from 3bba6ab to 4c18f9b Compare April 28, 2026 06:15
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.121 chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.122 Apr 28, 2026
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.122 chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.123 Apr 29, 2026
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.123 chore(deps): update all dependencies Apr 30, 2026
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from 8677236 to 15024f3 Compare May 1, 2026 02:29
@renovate renovate Bot changed the title chore(deps): update all dependencies chore(deps): update all dependencies - autoclosed May 1, 2026
@renovate renovate Bot closed this May 1, 2026
@renovate renovate Bot changed the title chore(deps): update all dependencies - autoclosed chore(deps): update dependency zod to v4.4.2 May 2, 2026
@renovate renovate Bot reopened this May 2, 2026
@renovate renovate Bot force-pushed the renovate/all branch 3 times, most recently from 0d7cc52 to b7fb154 Compare May 4, 2026 09:55
@renovate renovate Bot changed the title chore(deps): update dependency zod to v4.4.2 chore(deps): update dependency zod to v4.4.3 May 4, 2026
@renovate renovate Bot force-pushed the renovate/all branch from b7fb154 to 1b486b4 Compare May 5, 2026 01:52
@renovate renovate Bot changed the title chore(deps): update dependency zod to v4.4.3 chore(deps): update all dependencies May 5, 2026
@renovate renovate Bot force-pushed the renovate/all branch 4 times, most recently from 02f9883 to 4b933ec Compare May 14, 2026 01:05
@socket-security

socket-security Bot commented May 14, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@renovate renovate Bot force-pushed the renovate/all branch 9 times, most recently from d243a65 to e5e2e2e Compare May 28, 2026 02:45
@renovate renovate Bot force-pushed the renovate/all branch 11 times, most recently from bacb951 to 48d4970 Compare June 4, 2026 01:59
@renovate renovate Bot force-pushed the renovate/all branch 8 times, most recently from 3972d8e to 79f4a37 Compare June 10, 2026 00:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants