Skip to content

feat(deps): Bump the minor group across 1 directory with 18 updates - #1102

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-530b2390ff
Open

feat(deps): Bump the minor group across 1 directory with 18 updates#1102
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-530b2390ff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor group with 6 updates in the / directory:

Package From To
@anthropic-ai/claude-agent-sdk 0.3.257 0.3.261
@anthropic-ai/sdk 0.122.0 0.124.0
@types/node 26.4.0 26.4.1
eslint 10.9.1 10.10.0
hono 4.13.5 4.13.7
jose 6.2.10 6.2.12

Updates @anthropic-ai/claude-agent-sdk from 0.3.257 to 0.3.261

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.261

What's changed

  • Added pluginDelivery: 'initialize' to send plugins over stdin so the launch command line no longer grows with the plugin count (fixes Windows start failures with many plugins)
  • Fixed query() throwing "Object not disposable" in runtimes without a native Symbol.dispose, such as Node ≤22 vm contexts (Jest's node environment, vitest vmThreads/vmForks) and Node <18.18
  • Updated to parity with Claude Code v2.1.261

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.261
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.261
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.261
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.261

v0.3.260

What's changed

  • Added optional user_message_uuid to thinking_tokens system messages, linking thinking progress to the user message that triggered the turn
  • Added optional first_content_frame_ms, first_stream_post_ms, first_stream_post_ack_ms and first_stream_post_wall_ms fields to the success result message for remote-session latency breakdowns
  • Fixed managedSettings disableAutoMode: "disable" (either spelling) being dropped by the restrictive-only filter instead of turning auto mode off for the spawned session
  • Fixed rewindFiles() reporting success when no files could be restored (for example when checkpoint backups are missing); it now fails
  • Changed error_max_structured_output_retries results to append the last StructuredOutput tool error; validation errors now name the offending key, allowed values, and actual length or count
  • Changed rate_limit_event to also re-emit during an exceeded window on repeat 429s (about once per 30 seconds per limit window), so stream consumers can refresh stale rate-limit state
  • Updated to parity with Claude Code v2.1.260

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.260
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.260
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.260
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.260

v0.3.259

What's changed

  • Added user_message_uuids beside user_message_uuid on a turn's first reply frame and result: every user message the turn answered, so a reply to several merged messages can be matched to each
  • Added permissionPrompts: 'none' option to auto-deny permission prompts in sessions with nobody to answer them, without disabling auto mode's classifier
  • Updated to parity with Claude Code v2.1.259

Update

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.261

  • Added pluginDelivery: 'initialize' to send plugins over stdin so the launch command line no longer grows with the plugin count (fixes Windows start failures with many plugins)
  • Fixed query() throwing "Object not disposable" in runtimes without a native Symbol.dispose, such as Node ≤22 vm contexts (Jest's node environment, vitest vmThreads/vmForks) and Node <18.18
  • Updated to parity with Claude Code v2.1.261

0.3.260

  • Added optional user_message_uuid to thinking_tokens system messages, linking thinking progress to the user message that triggered the turn
  • Added optional first_content_frame_ms, first_stream_post_ms, first_stream_post_ack_ms and first_stream_post_wall_ms fields to the success result message for remote-session latency breakdowns
  • Fixed managedSettings disableAutoMode: "disable" (either spelling) being dropped by the restrictive-only filter instead of turning auto mode off for the spawned session
  • Fixed rewindFiles() reporting success when no files could be restored (for example when checkpoint backups are missing); it now fails
  • Changed error_max_structured_output_retries results to append the last StructuredOutput tool error; validation errors now name the offending key, allowed values, and actual length or count
  • Changed rate_limit_event to also re-emit during an exceeded window on repeat 429s (about once per 30 seconds per limit window), so stream consumers can refresh stale rate-limit state
  • Updated to parity with Claude Code v2.1.260

0.3.259

  • Added user_message_uuids beside user_message_uuid on a turn's first reply frame and result: every user message the turn answered, so a reply to several merged messages can be matched to each
  • Added permissionPrompts: 'none' option to auto-deny permission prompts in sessions with nobody to answer them, without disabling auto mode's classifier
  • Updated to parity with Claude Code v2.1.259

0.3.258

  • Updated to parity with Claude Code v2.1.258
Commits

Updates @anthropic-ai/sdk from 0.122.0 to 0.124.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.124.0

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

sdk: v0.123.0

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
  • api: manual updates (c6f0bda)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

  • keep credential file access out of non-Node bundles (ab6a4b2)

Chores

  • internal: codegen related update (788ea8b)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.124.0 (2026-09-04)

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

  • api: add Claude Tag category and user breakdowns to usage reports (669ff22)
  • api: add named types for organization compliance settings state (54be8da)
  • api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

  • repair custom-code merge in messages resources (#455) (7ac43b9)
  • tools: create agent-toolset files and directories owner-only (#485) (a9c2298)

Chores

  • internal: bundle the mock server spec and update breaking-change detection (8752d02)
  • internal: codegen related update (a63afbc)
  • tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

  • api: update a few doc strings (2ef3d59)

0.123.0 (2026-09-01)

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

  • api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
  • api: manual updates (c6f0bda)
  • api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

  • keep credential file access out of non-Node bundles (ab6a4b2)

Chores

  • internal: codegen related update (788ea8b)

Documentation

... (truncated)

Commits
  • ba14b1f Merge pull request #1177 from anthropics/release-please--branches--main--chan...
  • f99c1a7 chore: release main
  • 54be8da feat(api): add named types for organization compliance settings state
  • 999bee5 chore(tests): reword the skip reason on the path-level query param tests
  • a9c2298 fix(tools): create agent-toolset files and directories owner-only (#485)
  • 2637d11 chore(examples): refresh platform model IDs (#376)
  • 669ff22 feat(api): add Claude Tag category and user breakdowns to usage reports
  • a9090af Build SDK
  • 8752d02 chore(internal): bundle the mock server spec and update breaking-change detec...
  • a63afbc chore(internal): codegen related update
  • Additional commits viewable in compare view

Updates @types/node from 26.4.0 to 26.4.1

Commits

Updates eslint from 10.9.1 to 10.10.0

Release notes

Sourced from eslint's releases.

v10.10.0

Features

  • 264b434 feat: add d and v flags to no-unexpected-multiline (#21305) (Gihyeon Jeong / 정기현)
  • c6cc6c5 feat: check Object.prototype property names in new-cap (#21269) (crimsonjay0)
  • 5661fa6 feat: no-extra-bind false negatives with class fields and static blocks (#21260) (synthex-byte)

Bug Fixes

  • bb47dc6 fix: update dependency file-entry-cache to v11 (#20801) (Milos Djermanovic)
  • 427ac0a fix: use format strings in debug calls (#21247) (Francesco Trotta)
  • 9d81532 fix: support __proto__ in /* exported */ comments (#21261) (sethamus)
  • 87e0a08 fix: prefer-object-has-own autofix breaks when Object is shadowed (#21282) (김채영)
  • 8e2cb14 fix: new-cap false positive for UTC calls with properties: false (#21275) (Pixel)
  • 9f4a364 fix: Ignore static imports in no-unreachable (#21276) (Taha Kotil)

Documentation

  • 2417cad docs: Update README (GitHub Actions Bot)
  • 9cecb8a docs: document \c control letter escapes in no-control-regex (#21286) (한국)
  • 8724829 docs: update compat table links (#21263) (fnx)
  • 5634542 docs: Clarify eqeqeq suggestion behavior (#21256) (Müslüm Yılmaz)

Chores

  • b3d876b chore: disable npm audit in ecosystem tests (#21306) (Francesco Trotta)
  • 1696682 ci: restore EMFILE test on Node.js 26 (#21297) (Marry (Subin Yang))
  • 2c7f5d6 chore: update github/codeql-action action to v4.37.9 (#21296) (renovate[bot])
  • 3c753f1 chore: update eslint (#21289) (renovate[bot])
  • 1c73469 chore: update ecosystem plugins (#21280) (ESLint Bot)
  • 08a02be test: add error locations to no-extra-boolean-cast (#21266) (lumir)
  • 77bb1db chore: update github/codeql-action action to v4.37.8 (#21270) (renovate[bot])
  • 007e81a ci: skip EMFILE test on Node.js 26 (#21265) (lumir)
  • 0430280 chore: improve ecosystem tests compatibility on Windows (#21178) (crimsonjay0)
Commits

Updates @anthropic-ai/claude-agent-sdk-darwin-arm64 from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-darwin-x64 from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-linux-arm64 from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-linux-arm64-musl from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-linux-x64 from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-linux-x64-musl from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-win32-arm64 from 0.3.257 to 0.3.261

Updates @anthropic-ai/claude-agent-sdk-win32-x64 from 0.3.257 to 0.3.261

Updates @eslint/plugin-kit from 0.7.2 to 0.7.3

Release notes

Sourced from @​eslint/plugin-kit's releases.

plugin-kit: v0.7.3

0.7.3 (2026-09-01)

Bug Fixes

  • preserve __proto__ in ConfigCommentParser results (#501) (18773d9)
Changelog

Sourced from @​eslint/plugin-kit's changelog.

0.7.3 (2026-09-01)

Bug Fixes

  • preserve __proto__ in ConfigCommentParser results (#501) (18773d9)
Commits
  • a4466ca chore: release main (#504)
  • f83339d docs: clarify parameter description in getText (#505)
  • 714ffde docs: Update README sponsors
  • 18773d9 fix: preserve __proto__ in ConfigCommentParser results (#501)
  • caffae7 docs: Update README sponsors
  • ae1ba25 docs: Update README sponsors
  • 50051c6 docs: Update README sponsors
  • ea83524 docs: Update README sponsors
  • 29956ae docs: Update README sponsors
  • f6d5bdf docs: Update README sponsors
  • Additional commits viewable in compare view

Updates file-entry-cache from 8.0.0 to 11.1.5

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for file-entry-cache since your current version.


Updates flat-cache from 4.0.1 to 6.1.23

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for flat-cache since your current version.


Updates hono from 4.13.5 to 4.13.7

Release notes

Sourced from hono's releases.

v4.13.7

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv


Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

What's Changed

Full Changelog: honojs/hono@v4.13.5...v4.13.6

Commits

Updates jose from 6.2.10 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)
Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

  • clarify and shorten public API guidance (be62530)

Refactor

  • simplify JWS and JWE operation cores (92e9640)

Performance

  • avoid copying AES-GCM output (6925d43)
  • deduplicate pending jwks key imports (bf5138b)
  • encode single-signature JWS input once (7bc9a33)
  • normalize General JWE shared headers once (78637bd)
  • normalize jwks selection metadata once (fd3ae3f)
  • use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

  • render subpath indexes as tables (94589ee)
  • shorten API index descriptions (681482f)

Refactor

  • model JWE key management modes (e01dda6)
  • types: reduce declaration repetition (55b970f)
Commits
  • 505a55b chore(release): 6.2.12
  • 7bc9a33 perf: encode single-signature JWS input once
  • 78637bd perf: normalize General JWE shared headers once
  • bf5138b perf: deduplicate pending jwks key imports
  • b23a6f3 perf: use native encoding for larger ASCII strings
  • fd3ae3f perf: normalize jwks selection metadata once
  • 6925d43 perf: avoid copying AES-GCM output
  • be62530 docs: clarify and shorten public API guidance
  • 1b41312 build: preserve README when generation fails
  • 0b51829 build: check tree-shaking for every public binding
  • Additional commits viewable in compare view

Updates keyv from 4.5.4 to 5.6.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 7, 2026
Bumps the minor group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.257` | `0.3.261` |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.122.0` | `0.124.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.4.1` |
| [eslint](https://github.com/eslint/eslint) | `10.9.1` | `10.10.0` |
| [hono](https://github.com/honojs/hono) | `4.13.5` | `4.13.7` |
| [jose](https://github.com/panva/jose) | `6.2.10` | `6.2.12` |



Updates `@anthropic-ai/claude-agent-sdk` from 0.3.257 to 0.3.261
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.257...v0.3.261)

Updates `@anthropic-ai/sdk` from 0.122.0 to 0.124.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.122.0...sdk-v0.124.0)

Updates `@types/node` from 26.4.0 to 26.4.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.9.1 to 10.10.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.9.1...v10.10.0)

Updates `@anthropic-ai/claude-agent-sdk-darwin-arm64` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-darwin-x64` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-linux-arm64` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-linux-arm64-musl` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-linux-x64` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-linux-x64-musl` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-win32-arm64` from 0.3.257 to 0.3.261

Updates `@anthropic-ai/claude-agent-sdk-win32-x64` from 0.3.257 to 0.3.261

Updates `@eslint/plugin-kit` from 0.7.2 to 0.7.3
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/plugin-kit/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/plugin-kit-v0.7.3/packages/plugin-kit)

Updates `file-entry-cache` from 8.0.0 to 11.1.5
- [Release notes](https://github.com/jaredwray/cacheable/releases)
- [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/file-entry-cache)

Updates `flat-cache` from 4.0.1 to 6.1.23
- [Release notes](https://github.com/jaredwray/cacheable/releases)
- [Commits](https://github.com/jaredwray/cacheable/commits/HEAD/packages/flat-cache)

Updates `hono` from 4.13.5 to 4.13.7
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.5...v4.13.7)

Updates `jose` from 6.2.10 to 6.2.12
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.10...v6.2.12)

Updates `keyv` from 4.5.4 to 5.6.0
- [Release notes](https://github.com/jaredwray/keyv/releases)
- [Commits](https://github.com/jaredwray/keyv/commits)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.261
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-darwin-arm64"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-darwin-x64"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-linux-arm64"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-linux-arm64-musl"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-linux-x64"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-linux-x64-musl"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-win32-arm64"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/claude-agent-sdk-win32-x64"
  dependency-version: 0.3.261
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.123.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: "@eslint/plugin-kit"
  dependency-version: 0.7.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: "@types/node"
  dependency-version: 26.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: eslint
  dependency-version: 10.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: file-entry-cache
  dependency-version: 11.1.5
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: minor
- dependency-name: flat-cache
  dependency-version: 6.1.23
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: minor
- dependency-name: hono
  dependency-version: 4.13.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: jose
  dependency-version: 6.2.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: keyv
  dependency-version: 5.6.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/minor-530b2390ff branch from 0f40a3e to c5449ad Compare September 8, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants