Skip to content

chore(deps): update all dependencies#15

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all
Open

chore(deps): update all dependencies#15
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 25, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@anthropic-ai/claude-agent-sdk 0.2.126 → 0.3.150 age adoption passing confidence peerDependencies minor
@anthropic-ai/claude-agent-sdk ^0.2.132 → ^0.3.0 age adoption passing confidence devDependencies minor
@openai/codex-sdk (source) 0.130.0 → 0.133.0 age adoption passing confidence peerDependencies minor
@openai/codex-sdk (source) 0.130.0 → 0.133.0 age adoption passing confidence devDependencies minor
actions/dependency-review-action v4 → v5.0.0 age adoption passing confidence action major

Release Notes

anthropics/claude-agent-sdk-typescript (@​anthropic-ai/claude-agent-sdk)

v0.3.150

Compare Source

  • Updated to parity with Claude Code v2.1.150

v0.3.149

Compare Source

  • Fixed options.env dropping CLAUDE_AGENT_SDK_VERSION (used for User-Agent and telemetry) when a custom environment is supplied, and corrected the Options.env docs to state that the value replaces the subprocess environment rather than merging with process.env

v0.3.148

Compare Source

  • Updated to parity with Claude Code v2.1.148

v0.3.147

Compare Source

  • Updated to parity with Claude Code v2.1.147

v0.3.146

Compare Source

  • Updated to parity with Claude Code v2.1.146

v0.3.145

Compare Source

  • Updated to parity with Claude Code v2.1.145

v0.3.144

Compare Source

  • Assistant messages and StopFailure hooks now report error: 'model_not_found' when the selected model doesn't exist or isn't available, instead of the generic 'invalid_request'. The api_error_status field on result messages is now documented.
  • Added @anthropic-ai/claude-agent-sdk/extract export for bun build --compile consumers: import the platform native binary with with { type: 'file' }, call extractFromBunfs(binPath) to copy it out of the compiled executable's virtual filesystem, and pass the result to options.pathToClaudeCodeExecutable

v0.3.143

Compare Source

  • @anthropic-ai/sdk and @modelcontextprotocol/sdk are now peerDependencies instead of dependencies. Runtime is unaffected (both are bundled); npm/bun/pnpm auto-install them. yarn classic users should add them explicitly for full TypeScript type resolution

v0.3.142

Compare Source

  • Breaking: Removed the v2 session API (unstable_v2_createSession, unstable_v2_resumeSession, unstable_v2_prompt, SDKSession, SDKSessionOptions), deprecated since 0.2.133. Use query() — pass an AsyncIterable<SDKUserMessage> for multi-turn, or options.resume to continue a session.
  • Breaking: MCP servers now connect in the background by default; sessions start immediately and slow servers report status: "pending" in init until ready. Set MCP_CONNECTION_NONBLOCKING=0 to restore the old behavior of waiting up to 5s before the first query, or mark a server alwaysLoad: true to require it in turn 1.
  • Breaking: Headless and SDK sessions now use Task tools (TaskCreate / TaskUpdate / TaskGet / TaskList) instead of TodoWrite, deprecated since 0.2.136. Tool consumers should accumulate by task ID instead of replacing a snapshot list.
  • Surfaced request_id, subagent_type, and task_description on SDK message types and task system events
  • Headless --sdk-url sessions now exit non-zero with a stderr diagnostic when the remote transport closes permanently (401/403/404 or WS permanent close), instead of silently exiting 0

v0.2.141

Compare Source

  • TaskCreateInput, TaskCreateOutput, TaskGetInput, TaskGetOutput, TaskUpdateInput, TaskUpdateOutput, TaskListInput, and TaskListOutput types are now exported from @anthropic-ai/claude-agent-sdk/sdk-tools and included in the ToolInputSchemas/ToolOutputSchemas unions
  • Aligned @anthropic-ai/sdk dependency to ^0.93.0

v0.2.140

Compare Source

  • Updated to parity with Claude Code v2.1.140

v0.2.139

Compare Source

  • Updated to parity with Claude Code v2.1.139

v0.2.138

Compare Source

  • Updated to parity with Claude Code v2.1.138

v0.2.137

Compare Source

  • Updated to parity with Claude Code v2.1.137

v0.2.136

Compare Source

  • Added resolveSettings() (alpha) to inspect effective merged settings without spawning the Claude CLI; reads MDM (plist/HKLM/HKCU) for parity with CLI startup
  • Deprecated TodoWrite tool — future versions will switch to Task tools (TaskCreate, TaskGet, TaskUpdate, TaskList)

v0.2.133

Compare Source

  • Deprecated the unstable V2 session API (unstable_v2_createSession / unstable_v2_resumeSession / unstable_v2_prompt) — use query() instead
  • Deprecated passing 'Skill' in allowedTools — use the skills option instead
  • Updated to parity with Claude Code v2.1.133

v0.2.132

Compare Source

  • Documented applyFlagSettings() in the TypeScript Agent SDK reference and added support for null on top-level keys to clear flag-settings overrides
  • Updated to parity with Claude Code v2.1.132

v0.2.131

Compare Source

  • Updated to parity with Claude Code v2.1.131

v0.2.129

Compare Source

  • Updated to parity with Claude Code v2.1.129

v0.2.128

Compare Source

  • Updated to parity with Claude Code v2.1.128
actions/dependency-review-action (actions/dependency-review-action)

v5.0.0: 5.0.0

Compare Source

This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 25, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​anthropic-ai/​claude-agent-sdk@​0.2.132 ⏵ 0.3.15062 -810092 +610070
Updated@​openai/​codex-sdk@​0.130.0 ⏵ 0.133.074 +1100100 +1100100

View full report

@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.120 chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.120 - autoclosed Apr 25, 2026
@renovate renovate Bot closed this Apr 25, 2026
@renovate renovate Bot deleted the renovate/all branch April 25, 2026 05:13
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.120 - autoclosed chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.121 Apr 28, 2026
@renovate renovate Bot reopened this Apr 28, 2026
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from 3bba6ab to 4c18f9b Compare April 28, 2026 06:15
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.121 chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.122 Apr 28, 2026
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.122 chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.123 Apr 29, 2026
@renovate renovate Bot changed the title chore(deps): update dependency @anthropic-ai/claude-agent-sdk to v0.2.123 chore(deps): update all dependencies Apr 30, 2026
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from 8677236 to 15024f3 Compare May 1, 2026 02:29
@renovate renovate Bot changed the title chore(deps): update all dependencies chore(deps): update all dependencies - autoclosed May 1, 2026
@renovate renovate Bot closed this May 1, 2026
@renovate renovate Bot changed the title chore(deps): update all dependencies - autoclosed chore(deps): update dependency zod to v4.4.2 May 2, 2026
@renovate renovate Bot reopened this May 2, 2026
@renovate renovate Bot force-pushed the renovate/all branch 3 times, most recently from 0d7cc52 to b7fb154 Compare May 4, 2026 09:55
@renovate renovate Bot changed the title chore(deps): update dependency zod to v4.4.2 chore(deps): update dependency zod to v4.4.3 May 4, 2026
@renovate renovate Bot force-pushed the renovate/all branch from b7fb154 to 1b486b4 Compare May 5, 2026 01:52
@renovate renovate Bot changed the title chore(deps): update dependency zod to v4.4.3 chore(deps): update all dependencies May 5, 2026
@renovate renovate Bot force-pushed the renovate/all branch 4 times, most recently from 02f9883 to 4b933ec Compare May 14, 2026 01:05
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 14, 2026 •
edited
Loading

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm @anthropic-ai/claude-agent-sdk is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: package.json → npm/@anthropic-ai/claude-agent-sdk@0.3.150

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@anthropic-ai/claude-agent-sdk@0.3.150. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot force-pushed the renovate/all branch 8 times, most recently from 11c87f7 to 0406246 Compare May 21, 2026 05:00
@renovate renovate Bot force-pushed the renovate/all branch 4 times, most recently from fbb63ec to 2fe0cbb Compare May 23, 2026 00:57
@renovate renovate Bot force-pushed the renovate/all branch from 2fe0cbb to 6b3c211 Compare May 23, 2026 06:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants