Skip to content

fix(deps): update minor and patch updates#178

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/minor-and-patch-updates
Open

fix(deps): update minor and patch updates#178
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/minor-and-patch-updates

Conversation

@renovate

@renovate renovate Bot commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@anthropic-ai/claude-agent-sdk ~0.2.62~0.3.0 age confidence
@anthropic-ai/sdk ^0.78.0^0.102.0 age confidence
@clack/core (source) 1.0.11.4.1 age confidence
@clack/prompts (source) 1.0.11.5.1 age confidence
@hono/node-server 1.19.131.19.14 age confidence
@napi-rs/keyring 1.2.01.3.0 age confidence
@statelyai/inspect ^0.4.0^0.7.0 age confidence
@types/node (source) 22.19.722.19.20 age confidence
@types/opn 5.1.05.5.0 age confidence
@types/react (source) 19.2.1419.2.17 age confidence
@vitest/coverage-v8 (source) 4.0.184.1.8 age confidence
@vitest/ui (source) 4.0.184.1.8 age confidence
@workos-inc/node 8.7.08.13.0 age confidence
@workos/migrations 2.0.02.4.0 age confidence
@workos/openapi-spec ^0.1.0^0.6.0 age confidence
diff 8.0.38.0.4 age confidence
dotenv 17.3.117.4.2 age confidence
oxfmt (source) ^0.35.0^0.54.0 age confidence
oxlint (source) 1.50.01.69.0 age confidence
pnpm (source) 10.28.210.34.1 age confidence
react (source) 19.2.419.2.7 age confidence
semver 7.7.47.8.3 age confidence
tsx (source) 4.21.04.22.4 age confidence
uuid 13.0.113.0.2 age confidence
vitest (source) 4.1.04.1.8 age confidence
xstate (source) 5.28.05.32.0 age confidence
yaml (source) 2.8.32.9.0 age confidence
zod (source) 4.3.64.4.3 age confidence

Release Notes

anthropics/claude-agent-sdk-typescript (@​anthropic-ai/claude-agent-sdk)

v0.3.169

Compare Source

  • Added an experimental usage_EXPERIMENTAL_MAY_CHANGE_DO_NOT_RELY_ON_THIS_API_YET() method on Query returning structured session cost, plan rate-limit, and local usage-behaviors data
  • Added an sse option (SSEOptions) to BrowserQueryOptions as an alternative to websocket, for browser SDK consumers who prefer Server-Sent Events

v0.3.168

Compare Source

  • Updated to parity with Claude Code v2.1.168

v0.3.167

Compare Source

  • Updated to parity with Claude Code v2.1.167

v0.3.166

Compare Source

  • Fixed MCP resource tools not being injected for servers added at runtime via the mcp_set_servers control request

v0.3.165

Compare Source

  • Updated to parity with Claude Code v2.1.165

v0.3.163

Compare Source

  • stop_task control requests now return success when the target task is already gone (not_found or not_running), so SDK clients can reliably prune stale task chips
  • Fixed SDK hosts being unable to add builtin MCP servers (e.g. claude-in-chrome) via setMcpServers when the CLI was launched without them
  • Stop and SubagentStop hook events now support additionalContext in hookSpecificOutput, enabling non-error feedback that continues the turn

v0.3.162

Compare Source

  • Refusal error messages now carry stop_reason: "refusal" and stop_details on the assistant message and in session transcripts, so SDK consumers can detect refusals without text-matching the error content
  • Agent SDK sessions on native builds now default to fast embedded find/grep search in Bash, matching the interactive CLI, instead of always registering the dedicated Grep/Glob tools. To keep the dedicated tools (e.g. to intercept searches via canUseTool or hooks), name them in the tools option or reference them in allowedTools

v0.3.161

Compare Source

  • The initialize control request is now idempotent: a second initialize returns the same success payload instead of an Already initialized error. ControlResponse gains an optional pending_permission_requests field, mirroring ControlErrorResponse
  • applyFlagSettings now live-applies agent changes: switching the active agent (or passing null to reset) takes effect on the next turn in a running session

v0.3.160

Compare Source

  • Fixed SDK hook callbacks swallowing abort signals: aborting during a PostToolUse hook now ends the turn with a final result message instead of hanging the calling process

v0.3.159

Compare Source

  • Updated to parity with Claude Code v2.1.159

v0.3.158

Compare Source

  • Updated to parity with Claude Code v2.1.158

v0.3.157

Compare Source

  • Updated to parity with Claude Code v2.1.157

v0.3.156

Compare Source

  • Updated to parity with Claude Code v2.1.156

v0.3.154

Compare Source

  • Fixed stdio MCP servers being incorrectly restarted on every reconcile pass due to config-equality false positives

v0.3.153

Compare Source

  • Updated to parity with Claude Code v2.1.153

v0.3.152

Compare Source

  • SessionStart hooks can now return reloadSkills: true to trigger a skill re-scan, and set the session title via hookSpecificOutput.sessionTitle
  • Added a MessageDisplay hook event that lets hooks transform or hide assistant message text as it is displayed

v0.3.150

Compare Source

  • Updated to parity with Claude Code v2.1.150

v0.3.149

Compare Source

  • Fixed options.env dropping CLAUDE_AGENT_SDK_VERSION (used for User-Agent and telemetry) when a custom environment is supplied, and corrected the Options.env docs to state that the value replaces the subprocess environment rather than merging with process.env

v0.3.148

Compare Source

  • Updated to parity with Claude Code v2.1.148

v0.3.147

Compare Source

  • Updated to parity with Claude Code v2.1.147

v0.3.146

Compare Source

  • Updated to parity with Claude Code v2.1.146

v0.3.145

Compare Source

  • Updated to parity with Claude Code v2.1.145

v0.3.144

Compare Source

  • Assistant messages and StopFailure hooks now report error: 'model_not_found' when the selected model doesn't exist or isn't available, instead of the generic 'invalid_request'. The api_error_status field on result messages is now documented.
  • Added @anthropic-ai/claude-agent-sdk/extract export for bun build --compile consumers: import the platform native binary with with { type: 'file' }, call extractFromBunfs(binPath) to copy it out of the compiled executable's virtual filesystem, and pass the result to options.pathToClaudeCodeExecutable

v0.3.143

Compare Source

  • @anthropic-ai/sdk and @modelcontextprotocol/sdk are now peerDependencies instead of dependencies. Runtime is unaffected (both are bundled); npm/bun/pnpm auto-install them. yarn classic users should add them explicitly for full TypeScript type resolution

v0.3.142

Compare Source

  • Breaking: Removed the v2 session API (unstable_v2_createSession, unstable_v2_resumeSession, unstable_v2_prompt, SDKSession, SDKSessionOptions), deprecated since 0.2.133. Use query() — pass an AsyncIterable<SDKUserMessage> for multi-turn, or options.resume to continue a session.
  • Breaking: MCP servers now connect in the background by default; sessions start immediately and slow servers report status: "pending" in init until ready. Set MCP_CONNECTION_NONBLOCKING=0 to restore the old behavior of waiting up to 5s before the first query, or mark a server alwaysLoad: true to require it in turn 1.
  • Breaking: Headless and SDK sessions now use Task tools (TaskCreate / TaskUpdate / TaskGet / TaskList) instead of TodoWrite, deprecated since 0.2.136. Tool consumers should accumulate by task ID instead of replacing a snapshot list.
  • Surfaced request_id, subagent_type, and task_description on SDK message types and task system events
  • Headless --sdk-url sessions now exit non-zero with a stderr diagnostic when the remote transport closes permanently (401/403/404 or WS permanent close), instead of silently exiting 0

v0.2.141

Compare Source

  • TaskCreateInput, TaskCreateOutput, TaskGetInput, TaskGetOutput, TaskUpdateInput, TaskUpdateOutput, TaskListInput, and TaskListOutput types are now exported from @anthropic-ai/claude-agent-sdk/sdk-tools and included in the ToolInputSchemas/ToolOutputSchemas unions
  • Aligned @anthropic-ai/sdk dependency to ^0.93.0

v0.2.140

Compare Source

  • Updated to parity with Claude Code v2.1.140

v0.2.139

Compare Source

  • Updated to parity with Claude Code v2.1.139

v0.2.138

Compare Source

  • Updated to parity with Claude Code v2.1.138

v0.2.137

Compare Source

  • Updated to parity with Claude Code v2.1.137

v0.2.136

Compare Source

  • Added resolveSettings() (alpha) to inspect effective merged settings without spawning the Claude CLI; reads MDM (plist/HKLM/HKCU) for parity with CLI startup
  • Deprecated TodoWrite tool — future versions will switch to Task tools (TaskCreate, TaskGet, TaskUpdate, TaskList)

v0.2.133

Compare Source

  • Deprecated the unstable V2 session API (unstable_v2_createSession / unstable_v2_resumeSession / unstable_v2_prompt) — use query() instead
  • Deprecated passing 'Skill' in allowedTools — use the skills option instead
  • Updated to parity with Claude Code v2.1.133

v0.2.132

Compare Source

  • Documented applyFlagSettings() in the TypeScript Agent SDK reference and added support for null on top-level keys to clear flag-settings overrides
  • Updated to parity with Claude Code v2.1.132

v0.2.131

Compare Source

  • Updated to parity with Claude Code v2.1.131

v0.2.129

Compare Source

  • Updated to parity with Claude Code v2.1.129

v0.2.128

Compare Source

  • Updated to parity with Claude Code v2.1.128

v0.2.126

  • Added origin to result messages (SDKResultSuccess / SDKResultError) — forwards the triggering message's SDKMessageOrigin so consumers can distinguish user-prompted results from task-notification followups

v0.2.124

  • Updated to parity with Claude Code v2.1.124

v0.2.123

Compare Source

  • Updated to parity with Claude Code v2.1.123

v0.2.122

Compare Source

  • Updated to parity with Claude Code v2.1.122

v0.2.121

Compare Source

  • Added updatedToolOutput to PostToolUseHookSpecificOutput for replacing tool output on all tools. updatedMCPToolOutput is deprecated.

v0.2.120

Compare Source

  • Added skills option (string[] | 'all') to control which Skills are loaded into the main session, matching the Python SDK

v0.2.119

Compare Source

  • Added forwardSubagentText option to stream subagent text deltas to SDK consumers
  • excludeDynamicSections now keeps static auto-memory instructions in the cacheable system-prompt block; only the per-user memory directory path and per-machine environment values are relocated to the first user message
  • Long-running SDK sessions now reconnect claude.ai-proxied MCP servers after a transport-stream abort
  • SessionStore.append() failures are now retried up to 3 times with short backoff before the batch is dropped and mirror_error is emitted

v0.2.118

Compare Source

  • Added Options.managedSettings for embedders to pass policy-tier settings to the spawned CLI in-memory, honored below IT-controlled managed sources

v0.2.117

Compare Source

  • Updated to parity with Claude Code v2.1.117

v0.2.116

Compare Source

  • Updated to parity with Claude Code v2.1.116

v0.2.114

Compare Source

  • Updated to parity with Claude Code v2.1.114

v0.2.113

Compare Source

  • Changed the SDK to spawn a native Claude Code binary (via a per-platform optional dependency) instead of bundled JavaScript
  • Added sessionStore option (alpha) to query() and session helpers for mirroring session transcripts to external storage, with SessionStore/SessionKey/SessionStoreEntry types, InMemorySessionStore reference implementation, and importSessionToStore() for migrating existing sessions
  • Added deleteSession() for removing a session from disk or a SessionStore
  • Added SDKMirrorErrorMessage (subtype: 'mirror_error') to the SDKMessage union — emitted when a sessionStore.append() batch fails
  • Breaking: options.env once again replaces process.env for the CLI subprocess instead of overlaying it. To add or override individual variables, pass env: { ...process.env, MY_VAR: "x" }
  • Added title option to query() — sets the session title and skips auto-generation
  • Added OpenTelemetry trace context propagation — the caller's active trace context is forwarded to the CLI subprocess so spans parent under your distributed trace

v0.2.112

Compare Source

  • Updated to parity with Claude Code v2.1.112

v0.2.111

Compare Source

  • Opus 4.7 is now available! This version of the SDK is required to use it.
  • mcp_set_servers control request: remote (http/sse) server entries can now carry per-tool permission_policy values, which are applied to the session's allow/deny rules
  • startup() and WarmQuery are now part of the public TypeScript API
  • Changed options.env to overlay the inherited process.env instead of replacing it

v0.2.110

Compare Source

  • Fixed unstable_v2_createSession not respecting cwd, settingSources, and allowDangerouslySkipPermissions options
  • Added optional shouldQuery field to SDKUserMessage — set to false to append a user message without triggering an assistant turn; fixed shouldQuery: false messages incorrectly triggering auto-title generation, prompt suggestions, and UserPromptSubmit hooks
  • Auto session-title generation now respects CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC and CLAUDE_CODE_DISABLE_TERMINAL_TITLE

v0.2.109

Compare Source

  • Updated to parity with Claude Code v2.1.109

v0.2.108

Compare Source

  • SDKStatus now includes 'requesting'; when includePartialMessages is enabled, a {type:'system', subtype:'status', status:'requesting'} message is emitted before each API request in the stream

v0.2.107

Compare Source

  • Updated to parity with Claude Code v2.1.107

v0.2.105

Compare Source

  • Added system/memory_recall event and memory_paths on system/init for SDK renderers to surface memory operations
  • Fixed error_max_structured_output_retries being emitted when the final retry attempt succeeded, discarding valid structured output

v0.2.104

Compare Source

v0.2.101

  • Security: bumped @anthropic-ai/sdk to ^0.81.0 and @modelcontextprotocol/sdk to ^1.29.0 to resolve GHSA-5474-4w2j-mq4c and transitive hono advisories
  • Fixed resume-session temp directory leaking on Windows when subprocess file handles weren't released before cleanup, and on macOS/APFS when await using disposal raced its own cleanup callback
  • Fixed MaxListenersExceededWarning when running 11+ concurrent query() calls

v0.2.100

  • Updated to parity with Claude Code v2.1.100

v0.2.98

Compare Source

  • Updated to parity with Claude Code v2.1.98

v0.2.97

Compare Source

  • Updated to parity with Claude Code v2.1.97

v0.2.96

Compare Source

  • Updated to parity with Claude Code v2.1.96

v0.2.94

Compare Source

  • Fixed getContextUsage() to include agents passed via options.agents in the agents breakdown
  • Fixed CJK and other multibyte text being corrupted with U+FFFD in stream-json input/output when chunk boundaries split a UTF-8 sequence
  • Fixed MCP server child processes not being cleaned up when an SDK query() session ends
  • Fixed a failed error-report write crashing the SDK process with unhandledRejection
  • Updated to parity with Claude Code v2.1.94

v0.2.92

Compare Source

  • Updated to parity with Claude Code v2.1.92

v0.2.91

Compare Source

  • Added optional terminal_reason field to result messages, exposing why the query loop terminated (completed, aborted_tools, max_turns, blocking_limit, etc.)
  • Added 'auto' to the public PermissionMode type
  • Changed sandbox option to default failIfUnavailable to true when enabled: true is passed — query() will emit an error result and exit if sandbox dependencies are missing, instead of silently running unsandboxed. Set failIfUnavailable: false to allow graceful degradation.
  • Updated to parity with Claude Code v2.1.91

v0.2.90

Compare Source

  • Updated to parity with Claude Code v2.1.90

v0.2.89

Compare Source

  • Added startup() to pre-warm the CLI subprocess before query(), making the first query ~20x faster when startup cost can be paid upfront
  • Added includeSystemMessages option to getSessionMessages() to optionally include system messages in session history
  • Added listSubagents() and getSubagentMessages() functions to retrieve subagent conversation history from sessions
  • Added includeHookEvents option to enable hook lifecycle messages (hook_started, hook_progress, hook_response) for all hook event types
  • Fixed ERR_STREAM_WRITE_AFTER_END errors when single-turn queries with SDK MCP servers or hooks have control responses arriving after the result message
  • Fixed Zod v4 field .describe() metadata being dropped from createSdkMcpServer tool schemas
  • Fixed side_question returning null on resume before the first turn completes
  • Fixed settingSources empty array causing --setting-sources "" to consume the next CLI flag
  • Fixed error result messages (error_during_execution, error_max_turns, error_max_budget_usd) to correctly set is_error: true with descriptive messages
  • Fixed MCP servers getting permanently stuck in a failed state after a connection race — they now retry on the next message

v0.2.87

Compare Source

  • Updated to parity with Claude Code v2.1.87

v0.2.86

Compare Source

  • Added getContextUsage() control method to retrieve a breakdown of context window usage by category
  • Made session_id optional in SDKUserMessage type — callers no longer need to provide a session ID when sending user messages, as the SDK assigns one automatically
  • Fixed TypeScript types resolving to any by adding @anthropic-ai/sdk and @modelcontextprotocol/sdk as dependencies
  • Updated to parity with Claude Code v2.1.86

v0.2.85

Compare Source

  • Added reloadPlugins() SDK method to reload plugins and receive refreshed commands, agents, and MCP server status
  • Fixed PreToolUse hooks with permissionDecision: "ask" being ignored in SDK mode
  • Updated to parity with Claude Code v2.1.85

v0.2.84

Compare Source

  • Added taskBudget option for API-side token budget awareness, allowing the model to pace tool use within a token limit
  • Added enableChannel() method and capabilities field on McpServerStatus for SDK-driven MCP channel activation
  • Exported EffortLevel type ('low' | 'medium' | 'high' | 'max') for consumers to reference effort values directly
  • Fixed showing "[Request interrupted by user]" for errors that were not caused by user interruption
  • Updated to parity with Claude Code v2.1.84

v0.2.83

Compare Source

  • Added seed_read_state control subtype to seed readFileState with {path, mtime} so Edit works after the originating Read was removed from context
  • Changed session_state_changed events to opt-in: set CLAUDE_CODE_EMIT_SESSION_STATE_EVENTS=1 to receive them
  • Updated to parity with Claude Code v2.1.83

v0.2.81

Compare Source

  • Fixed canUseTool not providing a working addRules suggestion when a write under .claude/skills/{name}/ hits the bypass-immune safety check
  • Updated to parity with Claude Code v2.1.81

v0.2.80

Compare Source

  • Fixed getSessionMessages() dropping parallel tool results — sessions with parallel tool calls now return all tool_use/tool_result pairs
  • Updated to parity with Claude Code v2.1.80

v0.2.79

Compare Source

  • Added 'resume' to the ExitReason type for distinguishing resume-triggered session ends in hooks
  • Updated to parity with Claude Code v2.1.79

v0.2.78

Compare Source

  • Updated to parity with Claude Code v2.1.78

v0.2.77

Compare Source

  • Added api_retry system messages when retrying transient API errors, exposing attempt count, max retries, delay, and error status
  • Updated to parity with Claude Code v2.1.77

v0.2.76

Compare Source

  • Added forkSession(sessionId, opts?) for branching conversations from a point
  • Added cancel_async_message control subtype to drop a queued user message by UUID before execution
  • Added planFilePath field to ExitPlanMode tool input for hooks and SDK consumers
  • Added MCP elicitation hook types and SDKElicitationCompleteMessage system message for handling MCP server input requests programmatically
  • Updated to parity with Claude Code v2.1.76

v0.2.75

Compare Source

  • Added tag and createdAt fields to SDKSessionInfo
  • Added getSessionInfo(sessionId, opts?) for single-session metadata lookup
  • Added offset option to listSessions for pagination
  • Added tagSession(sessionId, tag, opts?) for tagging session files
  • Added queued_to_running status to AgentToolOutput — returned when Agent({resume}) targets a still-running agent
  • Improved error messages when the Claude Code subprocess returns an error result — the SDK now surfaces the actual error text instead of a generic "process exited with code 1"
  • Updated to parity with Claude Code v2.1.75

v0.2.74

Compare Source

  • Added renameSession(sessionId, title, opts?) for renaming session files
  • Fixed import type from @anthropic-ai/claude-agent-sdk/sdk-tools failing under NodeNext/Bundler module resolution (missing exports map entry since v0.2.69)
  • Fixed skills with user-invocable: false being included in supportedCommands() and the system:init message's slash_commands / skills lists
  • Updated to parity with Claude Code v2.1.74

v0.2.73

Compare Source

  • Fixed options.env being overridden by the ~/.claude/settings.json env block when not using user as a settingSources option
  • Updated to parity with Claude Code v2.1.73

v0.2.72

Compare Source

  • Added agentProgressSummaries option to enable periodic AI-generated progress summaries for running subagents (foreground and background), emitted on task_progress events via the new summary field
  • Added getSettings() applied section with runtime-resolved model and effort values
  • Fixed toggleMcpServer and reconnectMcpServer failing with "Server not found" for servers passed via query({mcpServers})
  • Updated to parity with Claude Code v2.1.72

v0.2.71

Compare Source

  • Updated to parity with Claude Code v2.1.71

v0.2.70

Compare Source

  • Fixed type: "http" MCP servers failing with HTTP 406 "Not Acceptable" on Streamable HTTP servers that strictly enforce the Accept: application/json, text/event-stream header
  • Changed AgentToolInput.subagent_type to optional — defaults to the general-purpose agent when omitted
  • Updated to parity with Claude Code v2.1.70

v0.2.69

Compare Source

  • Added toolConfig.askUserQuestion.previewFormat option to configure the content format ('markdown' or 'html') for the preview field on AskUserQuestion tool options. The preview field and annotations output are now exposed in the public SDK types.
  • Added supportsFastMode field to ModelInfo indicating whether a model supports fast mode
  • Added agent_id (for subagents) and agent_type (for subagents and --agent) fields to hook events
  • Fixed SDK-mode MCP servers (registered via sdkMcpServers in the initialize control request) getting disconnected when background plugin installation refreshes project MCP config
  • Fixed breaking change: system:init and result events now emit 'Task' as the Agent tool name again (reverted from 'Agent', which was an unintentional breaking change in a patch release). The wire name will migrate to 'Agent' in the next minor release.
  • Fixed control responses with malformed updatedPermissions from SDK hosts blocking tool calls with a ZodError; the invalid field is now stripped and a warning is logged instead.
  • Improved memory usage of getSessionMessages() for large sessions with compacted history

v0.2.68

Compare Source

  • Updated to parity with Claude Code v2.1.68

v0.2.66

Compare Source

  • Updated to parity with Claude Code v2.1.66

v0.2.64

Compare Source

v0.2.63

Compare Source

  • SDK: Fixed pathToClaudeCodeExecutable failing when set to a bare command name (e.g., "claude") that should resolve via PATH
  • Added supportedAgents() method to the Query interface to view available subagents
  • Fixed MCP replacement tools being incorrectly denied in subagents when using unprefixed MCP tool names
anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.102.0

Compare Source

Full Changelog: sdk-v0.101.0...sdk-v0.102.0

Features
  • api: small updates to Managed Agents types (8ba4f92)
Bug Fixes
  • client: run middleware before request signing (#​45) (95f1a4a)

v0.101.0

Compare Source

Full Changelog: sdk-v0.100.1...sdk-v0.101.0

Features
  • client: add support for middleware (9b01120)
Bug Fixes
  • apply request timeout to inner fetch only, not middleware chain (#​40) (25c13f6)
  • streaming: carry stop_details through beta message_delta accumulation (ed3fec7)
  • streaming: correctly parse json numbers with scientific notation (#​9) (7d5e642)
Chores
  • internal: fix artifact url (925ec27)
  • internal: fix branch names (fa3cf2c)
  • internal: update private repo name (a8ac213)
Documentation
  • point security reports to Anthropic's HackerOne program (#​16) (5c7912c)

v0.100.1

Compare Source

Full Changelog: sdk-v0.100.0...sdk-v0.100.1

Bug Fixes
  • streaming: carry encrypted_content on beta compaction blocks (#​1025) (eccddf3)
Chores
  • client: update lockfiles to have proper dependencies on standardwebhooks (5e9b523)

v0.100.0

Compare Source

Full Changelog: sdk-v0.99.0...sdk-v0.100.0

Features
  • api: Add support for claude-opus-4-8, mid-conversation system blocks, and usage.output_tokens_details (bb0bf27)
Documentation
  • replace literal newlines (66ba142)

v0.99.0

Compare Source

Full Changelog: sdk-v0.98.1...sdk-v0.99.0

Features
Bug Fixes
  • streaming: carry stop_details t

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • "on the 15th day of the month before 12pm"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@greptile-apps

greptile-apps Bot commented Jun 15, 2026

Copy link
Copy Markdown

Greptile Summary

This Renovate-generated PR bumps 27 dependencies with minor and patch updates, the most notable being @anthropic-ai/claude-agent-sdk from ~0.2.62 to ~0.3.0 and @anthropic-ai/sdk from ^0.78.0 to ^0.102.0.

  • @anthropic-ai/claude-agent-sdk ~0.3.0 introduces three documented breaking changes: removal of the deprecated v2 session API, a switch from TodoWrite to Task tools, and MCP servers now connecting in the background by default. The codebase already uses query() (not the removed v2 API) and does not reference TodoWrite, so only the MCP background-connection behaviour is a concern (flagged in a prior review).
  • sdkEnv construction ({ ...process.env, ... }) in agent-interface.ts is compatible with v0.3.x's requirement that options.env fully replaces the subprocess environment, because the spread already carries the full inherited env.
  • All other bumps (@workos-inc/node, @workos/migrations, @workos/openapi-spec, xstate, zod, vitest, oxlint, pnpm, etc.) are routine minor/patch updates with no API surface changes visible in the changed files.

Confidence Score: 4/5

Safe to merge with awareness of the MCP background-connection behaviour change already flagged in a prior review thread.

The @anthropic-ai/claude-agent-sdk v0.3.0 upgrade carries real breaking changes, but the two that could silently regress (v2 session API removal, TodoWrite → Task tools) do not touch any code path in this repository. The MCP background-connection behaviour is the remaining open question and was raised in a previous review; the rest of the 26 bumps are low-risk minor/patch changes.

package.json — specifically the @anthropic-ai/claude-agent-sdk version pin and the unresolved MCP background-connection concern from the prior review thread.

Important Files Changed

Filename Overview
package.json Bumps 27 dependencies including the major @anthropic-ai/claude-agent-sdk upgrade from ~0.2.62 to ~0.3.0 (which contains breaking changes); all other package bumps are minor/patch. The codebase's query()-based usage and sdkEnv: { ...process.env, ... } spread pattern are already compatible with the v0.3.x breaking-change requirements.
pnpm-lock.yaml Lockfile regenerated to reflect the updated dependency resolutions; no manual edits, consistent with the package.json changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["agent-interface.ts\nuses query() from\n@anthropic-ai/claude-agent-sdk"] --> B["sdkEnv = { ...process.env, overrides }"]
    B --> C["query({ env: sdkEnv, mcpServers, ... })"]
    C --> D["@anthropic-ai/claude-agent-sdk\nv0.3.0"]
    D --> E["MCP servers connect\nin background (new default)"]
    D --> F["v2 session API removed\n(not used in codebase)"]
    D --> G["TodoWrite deprecated → Task tools\n(not used in codebase)"]
    E --> H["@workos/mcp-docs-server\nmay be pending on turn 1"]
    C --> I["@anthropic-ai/sdk\nv0.102.0\n(middleware support, bug fixes)"]
    J["catalog.ts\nrequire.resolve('@workos/openapi-spec/spec')"] --> K["@workos/openapi-spec\nv0.6.0"]
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A["agent-interface.ts\nuses query() from\n@anthropic-ai/claude-agent-sdk"] --> B["sdkEnv = { ...process.env, overrides }"]
    B --> C["query({ env: sdkEnv, mcpServers, ... })"]
    C --> D["@anthropic-ai/claude-agent-sdk\nv0.3.0"]
    D --> E["MCP servers connect\nin background (new default)"]
    D --> F["v2 session API removed\n(not used in codebase)"]
    D --> G["TodoWrite deprecated → Task tools\n(not used in codebase)"]
    E --> H["@workos/mcp-docs-server\nmay be pending on turn 1"]
    C --> I["@anthropic-ai/sdk\nv0.102.0\n(middleware support, bug fixes)"]
    J["catalog.ts\nrequire.resolve('@workos/openapi-spec/spec')"] --> K["@workos/openapi-spec\nv0.6.0"]
Loading

Reviews (2): Last reviewed commit: "fix(deps): update minor and patch update..." | Re-trigger Greptile

Comment thread package.json
@@ -45,15 +45,15 @@
}
},

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 MCP background-connection breaking change from v0.3.0

In @anthropic-ai/claude-agent-sdk v0.3.142 (included in ~0.3.0), MCP servers now connect in the background by default — sessions start immediately and slow servers are reported as status: "pending" in the init event until ready. Previously the SDK waited up to 5 s for servers to connect before starting the first turn.

The agent configures a single, critical MCP server (@workos/mcp-docs-server) that provides the WorkOS documentation used throughout the integration workflow. Under the new default, the agent can begin its first turn before that server is ready, meaning WorkOS MCP tools may be absent or pending on turn 1. The existing AgentSignals.ERROR_MCP_MISSING guard only fires if the agent explicitly emits the [ERROR-MCP-MISSING] signal string — it will not fire for a pending-state MCP tool failure, so the regression could be silent.

To preserve the previous behaviour, either set MCP_CONNECTION_NONBLOCKING=0 in sdkEnv or add alwaysLoad: true to the workos MCP server entry in src/lib/agent-interface.ts.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

@renovate renovate Bot force-pushed the renovate/minor-and-patch-updates branch from fda5371 to cfd85d1 Compare June 16, 2026 01:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

0 participants