[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the development-dependencies group with 4 updates in the / directory: @anthropic-ai/claude-agent-sdk, @anthropic-ai/sdk, @types/bun and prettier.

Updates @anthropic-ai/claude-agent-sdk from 0.2.141 to 0.3.296

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.296

What's changed

• Added claude_code_version to the initialize control response so clients know the CLI version before the first turn
• Added autoCompactWindow to AgentDefinition, so a subagent can auto-compact earlier than the main conversation's window
• Fixed the sandbox option discarding an inline settings.sandbox block: the two now merge, the option's values win, and deny and credential lists from both sides are combined
• Changed the default limit on MCP tool descriptions sent up front and on MCP server instructions, in-process SDK servers included, from 2,048 to 4,096 characters
• Changed permission answers that arrive after a restart to be parsed like live ones: over 4,096 updatedPermissions entries count as a denial, and a malformed list is ignored as a whole
• Updated to parity with Claude Code v2.1.296

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.296
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.296
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.296
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.296

v0.3.295

What's changed

• Added overageEnabled to SDKRateLimitInfo: on usage-limit warnings, whether the account has extra usage turned on
• Fixed an MCP server added with mcp_set_servers sometimes keeping an outdated tool list when another server in the same request connected later
• Fixed assistant text blocks losing their citations in streamed responses
• Fixed Claude being told "disabled by the user" about an in-process MCP server that was switched off with toggleMcpServer()
• Fixed rate_limit_event with status allowed_warning omitting overageStatus, overageResetsAt and overageDisabledReason, which allowed and rejected events already carry
• Changed MCP tool descriptions the model loads through tool search, including those from in-process SDK servers, to be cut at 16,384 characters instead of 2,048
• Changed a permission answer whose updatedPermissions holds over 4,096 updates, rules and directories to count as a denial
• Changed tool_result_meta[].non_execution_kind to be absent when a mod withheld the result of a tool that ran without error; it was permission-rule
• Changed pasted_content on user messages to be ignored when it holds over 1,000 entries and blocks in all
• Changed how the SDK passes option values to Claude Code: the values of its named options are now sent in the same argument as their flag (--flag=value)
• Changed tool_use_result for MCP Apps tools: structuredContent or _meta over 8,388,608 JSON characters is left off, and _meta.ui with no ui:// resource no longer lifts the ordinary caps
• Changed tool_use_result for MCP tools: when a long result is saved to a file, or cut because it could not be, the text kept past 500,000 characters is dropped, with a note of how much
• Changed tool_use_result for MCP tools: a result _meta over 1,048,576 JSON characters is left off, except for SDK-server tools; so is text blocks' _meta that totals over 65,536
• Updated to parity with Claude Code v2.1.295

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.295
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.295
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.295
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.295
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.296

• Added claude_code_version to the initialize control response so clients know the CLI version before the first turn
• Added autoCompactWindow to AgentDefinition, so a subagent can auto-compact earlier than the main conversation's window
• Fixed the sandbox option discarding an inline settings.sandbox block: the two now merge, the option's values win, and deny and credential lists from both sides are combined
• Changed the default limit on MCP tool descriptions sent up front and on MCP server instructions, in-process SDK servers included, from 2,048 to 4,096 characters
• Changed permission answers that arrive after a restart to be parsed like live ones: over 4,096 updatedPermissions entries count as a denial, and a malformed list is ignored as a whole
• Updated to parity with Claude Code v2.1.296

0.3.295

• Added overageEnabled to SDKRateLimitInfo: on usage-limit warnings, whether the account has extra usage turned on
• Fixed an MCP server added with mcp_set_servers sometimes keeping an outdated tool list when another server in the same request connected later
• Fixed assistant text blocks losing their citations in streamed responses
• Fixed Claude being told "disabled by the user" about an in-process MCP server that was switched off with toggleMcpServer()
• Fixed rate_limit_event with status allowed_warning omitting overageStatus, overageResetsAt and overageDisabledReason, which allowed and rejected events already carry
• Changed MCP tool descriptions the model loads through tool search, including those from in-process SDK servers, to be cut at 16,384 characters instead of 2,048
• Changed a permission answer whose updatedPermissions holds over 4,096 updates, rules and directories to count as a denial
• Changed tool_result_meta[].non_execution_kind to be absent when a mod withheld the result of a tool that ran without error; it was permission-rule
• Changed pasted_content on user messages to be ignored when it holds over 1,000 entries and blocks in all
• Changed how the SDK passes option values to Claude Code: the values of its named options are now sent in the same argument as their flag (--flag=value)
• Changed tool_use_result for MCP Apps tools: structuredContent or _meta over 8,388,608 JSON characters is left off, and _meta.ui with no ui:// resource no longer lifts the ordinary caps
• Changed tool_use_result for MCP tools: when a long result is saved to a file, or cut because it could not be, the text kept past 500,000 characters is dropped, with a note of how much
• Changed tool_use_result for MCP tools: a result _meta over 1,048,576 JSON characters is left off, except for SDK-server tools; so is text blocks' _meta that totals over 65,536
• Updated to parity with Claude Code v2.1.295

0.3.294

• Updated to parity with Claude Code v2.1.294

0.3.293

• Added an optional subagent_type to background_tasks_changed task entries, so hosts can name each subagent's type without pairing with task_started
• Updated to parity with Claude Code v2.1.293

0.3.292

• Added agent_id to the assistant and user messages a subagent produces; it equals the task_id on that subagent's task events and stays the same when the subagent is resumed
• Added parent_task_id to task_started events and background_tasks_changed entries, naming the subagent task that launched a task
• Added run_id to background task events and origin.runId to task notifications, so a host can tell a resumed task's runs apart
• Added typed sections and notes to the ListAgents tool's tool_use_result, so hosts can list agents without parsing its text
• Added recipient_kind to SendMessage tool_use inputs on assistant messages, and their top-level approve is now always a boolean, so hosts no longer infer them from the raw input
• Added two optional fields to the ReadNotifications tool output: read_at, when the tool read the session's queued notifications, and arrived_at on each notification, when it reached the session
• Fixed subagents with a declared auto permission mode having their tool calls decided by the auto-mode classifier instead of the canUseTool callback when auto mode is unavailable
• Changed background_tasks_changed for a finishing background task to arrive after that task's task_updated and task_notification
• Changed canUseTool options to carry suppressAlwaysAllowRule: true for connector tools that an organization set to require approval, so hosts can hide their "always allow" choice
• Updated to parity with Claude Code v2.1.292

0.3.291

... (truncated)

Commits

• 85d8f8e chore: Update CHANGELOG.md
• da321bb chore: Update CHANGELOG.md
• 799dc78 chore: Update CHANGELOG.md
• 5dc91fb chore: Update CHANGELOG.md
• d4f0435 chore: Update CHANGELOG.md
• b95045e chore: Update CHANGELOG.md
• aef4ecc chore: Update CHANGELOG.md
• 16cf0a7 chore: Update CHANGELOG.md
• 36836f0 chore: Update CHANGELOG.md
• 9d8cb9c chore: Update CHANGELOG.md
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/claude-agent-sdk since your current version.

Updates @anthropic-ai/sdk from 0.78.0 to 0.133.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.133.0

Features

• api: add types for the Chat and Cowork unified analytics metrics
• api: add workflows, multiagent configuration and thread status filtering to Managed Agents

Chores

• internal: remove the next branch rule from CLAUDE.md

sdk-v0.132.1

Bug Fixes

• client: throw before sending a request with an empty path parameter

Chores

• ci: check that pull requests update the changelog
• ci: publish every package from the publish workflow
• docs: note that listing Claude Console spend limits is in early access

Documentation

• split CLAUDE.md into shared, TypeScript, and repository rules

sdk: v0.132.0

0.132.0 (2026-10-07)

Full Changelog: sdk-v0.131.0...sdk-v0.132.0

Features

• api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1fd8261)
• api: add disabled to thinking types in model capabilities (2b75b49)
• api: add display_name to RBAC roles and deprecate name (7735ac3)
• api: add include_default parameter to list workspaces (c4019df)
• api: add lifecycle stage fields and filter to /v1/models (fe8a762)
• api: add line to model objects (018aed4)
• api: add url_sources to the Managed Agents web_fetch tool config (2b75b49)
• api: add web search and code execution support to model capabilities (2b75b49)

Bug Fixes

• api: send the beta header by default when listing spend limits (8f58ca4)
• client: throw when a JSONL stream is iterated twice (a34266c)
• tools: keep a local edit made after a memory upload whose response was lost (#893) (2b75b49)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.133.0 (2026-10-09)

Features

• api: add types for the Chat and Cowork unified analytics metrics
• api: add workflows, multiagent configuration and thread status filtering to Managed Agents

Chores

• internal: remove the next branch rule from CLAUDE.md

0.132.1 (2026-10-08)

Bug Fixes

• client: throw before sending a request with an empty path parameter

Chores

• ci: check that pull requests update the changelog
• ci: publish every package from the publish workflow
• docs: note that listing Claude Console spend limits is in early access

Documentation

• split CLAUDE.md into shared, TypeScript, and repository rules

0.132.0 (2026-10-07)

Full Changelog: sdk-v0.131.0...sdk-v0.132.0

Features

• api: add claude-haiku-5-5 and typed computer and browser toolset tool calls (1fd8261)
• api: add disabled to thinking types in model capabilities (2b75b49)
• api: add display_name to RBAC roles and deprecate name (7735ac3)
• api: add include_default parameter to list workspaces (c4019df)
• api: add lifecycle stage fields and filter to /v1/models (fe8a762)
• api: add line to model objects (018aed4)
• api: add url_sources to the Managed Agents web_fetch tool config (2b75b49)
• api: add web search and code execution support to model capabilities (2b75b49)

Bug Fixes

• api: send the beta header by default when listing spend limits (8f58ca4)
• client: throw when a JSONL stream is iterated twice (a34266c)

... (truncated)

Commits

• 2979ed5 release: . 0.133.0
• 8486d9b Merge pull request #908 from anthropics/synced/published
• e0995e4 feat(api): add workflows, multiagent configuration and thread status filterin...
• 31eb3be codegen metadata
• 5127b32 codegen metadata
• f702a46 codegen metadata
• d64e976 codegen metadata
• 9f75465 codegen metadata
• 6ec2ea1 chore(internal): remove the next branch rule from CLAUDE.md
• 373c33d codegen metadata
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.

Updates @types/bun from 1.4.2 to 1.4.3

Commits

• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[dependabot]

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.