Skip to content

test: bump the agents group across 1 directory with 6 updates - #187

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/test/agents/agents-9d5fbbd113
Open

test: bump the agents group across 1 directory with 6 updates#187
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/test/agents/agents-9d5fbbd113

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the agents group with 6 updates in the /test/agents directory:

Package From To
@anthropic-ai/claude-code 2.1.292 2.1.316
@github/copilot 1.0.93 1.0.105
@google/gemini-cli 0.63.0 0.66.0
@openai/codex 0.160.1 0.166.0
@qwen-code/qwen-code 0.25.0 0.26.5
@xai-official/grok 1.0.46 1.0.70

Updates @anthropic-ai/claude-code from 2.1.292 to 2.1.316

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.316

What's changed

  • Added CLAUDE_CODE_DISABLE_ULTRATHINK, which turns the ultrathink keyword off
  • Added pooled group budgets to the Claude apps gateway: one monthly budget that a group's members share, on top of each member's own limit, set with pooled_budget on the spend limits admin API
  • Added CLAUDE_CODE_DISABLE_LOOPED_CROSS_CERT_DROP to keep system cross-certificates that certify each other in a loop, for servers whose private CA needs one
  • Added CLAUDE_CODE_SUBAGENT_EFFORT to set the effort level subagents run at when nothing else names one, instead of inheriting the session's
  • Added managed.policy_mode: layered to the Claude apps gateway: every policy that matches a developer applies, each merged over the ones listed below it, not only the first
  • Added guardrail.input_tagging on Claude apps gateway Bedrock upstreams, which wraps prompts in the input tags that an Amazon Bedrock guardrail's prompt attacks filter needs; all_messages_and_system also tags the system prompt
  • Deprecated fast mode for Opus 4.8 as of October 30, 2026; it will be removed on November 30, 2026. After removal, fast mode requests on Opus 4.8 return an error and do not fall back to standard Opus 4.8. Migrate to Opus 5.5 to keep the speedup
  • Fixed shell commands being left running on macOS and Linux when Claude Code exits by itself, for example when credentials are refused or a cloud session is archived
  • Fixed bash aliases with line breaks in their value (except in Git Bash), and functions whose names start with a dash, being garbled or lost in the Bash tool's shell
  • Fixed bash scripts started from the Bash tool stopping after their first command when SHELLOPTS is exported
  • Fixed PowerShell hooks not blocking on exit code 2 when the command begins with a type cast, param, using or an attribute
  • Fixed some network requests hanging when a compressed response was cut off or corrupted
  • Fixed sonnet, opus and haiku on Vertex AI and Amazon Bedrock showing an error mid-session instead of switching to an older model when the newest is not yet available to the account or region
  • Fixed the Claude apps gateway not checking every model a request names against availableModels, deniedModels and models; a request that names a blocked model now gets a 400 naming the field
  • Fixed claude auth login refusing to run where managed settings require a Claude apps gateway; in a terminal it now shows the gateway sign-in
  • Fixed --restricted sessions uploading files from outside the working directories when a Read allow rule covered them
  • Fixed prompts containing invisible characters needing a second Enter to send; plain prompts now send cleaned on the first Enter, and commands still wait for review
  • Fixed sub-agents that inherited a parent sub-agent's model moving to the main model when a background job or message woke them
  • Fixed a managed autoMode.allow list without "$defaults" getting the built-in exceptions back from a host app's --settings, a first rule added in /permissions, or /auto-mode-setup
  • Fixed cloud sessions and cloud scheduled tasks not being marked as failed when auto mode stopped a turn because the server returned no safety verdict
  • Fixed claude -p text output sometimes not saying why auto mode stopped a turn when a background agent was still running
  • Fixed CLAUDE_CODE_AUTO_MODE_SERVER=1 being ignored in sessions started by a host application (such as Claude Desktop) behind a proxy or LLM gateway with experimental betas turned off
  • Fixed plugin MCP headersHelper scripts receiving a corrupted CLAUDE_PLUGIN_ROOT and server URL when a credential-named environment variable was set to a switch value such as 1
  • Fixed the SDK register_repo_root control request not loading the CLAUDE.md of a directory outside the working directory (with CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1)
  • Fixed the Artifact tool showing ? for artifact database access rules at the self level, and not quoting those rules back when it refuses a republish that would drop them
  • Fixed /model <id> not warning when the model isn't recognized by this version and auto-compact will assume a 200K context window
  • Fixed the "hold space to speak" hint using up its three showings in one session, and showing an empty key when push-to-talk is unbound
  • Fixed Grep and Glob never returning when the search process is killed at the timeout but does not exit, seen on Windows
  • Fixed a rare case where resuming a conversation did not restore its plan, when /clear or /resume had been run while part of that conversation was still being saved
  • Fixed first-run setup dropping words from the security notes and the terminal-setup explanation in narrow terminals
  • Fixed the Enterprise survey card taking a typed 1 or 0 after a short pause; a typed answer now needs Enter
  • Self-hosted runner: Fixed a message sent while Claude was working being answered after a Stop, once the session's process had been replaced
  • Self-hosted runner: Fixed an MCP server's on/off switch sometimes being lost when a session moved to a new machine
  • Windows: Fixed the Bash tool losing your aliases and functions in Git Bash when the rc file sets errexit and pipefail and only winpty aliases, or none, are defined
  • Improved /code-review started from the Code tab in Claude Desktop or on the web: cloud and claude remote-control sessions now show the findings card, not a plain-text list
  • Improved /diff on large repositories: each refresh usually runs one fewer full-repository git command, and refreshes are spaced out when git is slow
  • Improved the messages shown when /ultrareview, a cloud session or a cloud agent finds no GitHub remote: they now say to create a repository at https://github.com/new, and /ultrareview no longer suggests a gh command that gh rejects
  • Improved SSL certificate errors to name the likely causes, among them a server that leaves out an intermediate certificate, and the fix for each
  • Changed auto mode so that an autoMode.allow list without "$defaults" no longer removes the built-in rule on scheduled-task prompts
  • Changed server-managed settings for Team and Enterprise logins: settings fetched from Anthropic's API now apply without an approval prompt, and a stored copy that doesn't verify is refused
  • [VSCode] Added sign-in to a Claude apps gateway from the chat panel, with no terminal needed
  • [VSCode] Changed ultrathink to run its turn at xhigh effort and show in a rainbow in the chat box, as in the terminal
  • [VSCode] Fixed the missing Effort slider, Ultracode switch and model name when the model setting has the [1m] tag, such as opus[1m]
  • [VSCode] Fixed saved /btw side-question history being deleted too early while a settings file has errors
  • [VSCode] Fixed a conversation coming back in Auto mode after a reload or restart when its plan was approved with "Yes, and manually approve edits"
  • [Cloud sessions] Added a form card to cloud sessions, so you can fill in or decline a form an MCP server asks for instead of the request being canceled without you seeing it
  • [Cloud sessions] Added a "Catching up…" line that shows while a cloud or Remote Control session you switch back to is still bringing its messages up to date

... (truncated)

Commits
  • 80c6959 chore: Update CHANGELOG.md and feed.xml
  • d4dfed4 chore: Update mods/
  • b3f291d chore: Update CHANGELOG.md and feed.xml
  • e32e331 chore: Update mods/
  • 58d6da1 chore: Update mods/
  • 0e1f478 chore: Update CHANGELOG.md and feed.xml
  • f03f778 Merge pull request #105303 from anthropics/redirect-plugins-to-official
  • aef1f31 Install code-review from claude-plugins-official too
  • 10a5141 Install marketplace plugins from claude-plugins-official
  • 08c6a4f chore: Update CHANGELOG.md and feed.xml
  • Additional commits viewable in compare view

Updates @github/copilot from 1.0.93 to 1.0.105

Release notes

Sourced from @​github/copilot's releases.

1.0.105

2026-10-27

  • Selecting Copilot Fusion High or Max in /model now works from long-context sessions

1.0.105-1

Fixes and changes

1.0.105-0

Fixed

  • Selecting Copilot Fusion High or Max in /model now works from long-context sessions

1.0.104

2026-10-27

  • Managed model "fusion" now starts sessions on Auto and applies fusionTier settings
  • Interactive and SDK Autopilot sessions keep waiting for attached background tasks instead of stopping after COPILOT_TASK_WAIT_TIMEOUT_SECONDS; -p --autopilot still honors it
  • When a saved Auto preference is no longer available, Auto falls back to its default preference instead of failing each turn
  • Assisted Permissions are available without enabling experimental mode.

1.0.104-4

Fixes and changes

1.0.104-3

Fixes and changes

1.0.104-2

Fixed

  • Managed model "fusion" now starts sessions on Auto and applies fusionTier settings
  • Interactive and SDK Autopilot sessions keep waiting for attached background tasks instead of stopping after COPILOT_TASK_WAIT_TIMEOUT_SECONDS; -p --autopilot still honors it

1.0.104-1

Fixes and changes

1.0.104-0

Improved

  • Assisted Permissions are available without enabling experimental mode.

Fixed

  • When a saved Auto preference is no longer available, Auto falls back to its default preference instead of failing each turn

1.0.103

2026-10-22

  • Clicking a completed response code block copies its original code when enabled.
  • ACP sessions now honor saved sandbox settings and --sandbox/--no-sandbox flags, including on resume.
  • Cloud replies keep full text when the CLI reconnects after a dropped connection
  • Sessions browser shows a session's recorded title instead of a generic Session N fallback when available
  • Model-specific default Responses verbosity now applies correctly for GPT-5 models unless session verbosity is explicitly set
  • Allow dnx commands to use existing .NET and NuGet sandbox grants when developer-tool access is enabled

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.105 - 2026-10-27

  • Selecting Copilot Fusion High or Max in /model now works from long-context sessions

1.0.104 - 2026-10-27

  • Managed model "fusion" now starts sessions on Auto and applies fusionTier settings
  • Interactive and SDK Autopilot sessions keep waiting for attached background tasks instead of stopping after COPILOT_TASK_WAIT_TIMEOUT_SECONDS; -p --autopilot still honors it
  • When a saved Auto preference is no longer available, Auto falls back to its default preference instead of failing each turn
  • Assisted Permissions are available without enabling experimental mode.

1.0.103 - 2026-10-22

  • Clicking a completed response code block copies its original code when enabled.
  • ACP sessions now honor saved sandbox settings and --sandbox/--no-sandbox flags, including on resume.
  • Cloud replies keep full text when the CLI reconnects after a dropped connection
  • Sessions browser shows a session's recorded title instead of a generic Session N fallback when available
  • Model-specific default Responses verbosity now applies correctly for GPT-5 models unless session verbosity is explicitly set
  • Allow dnx commands to use existing .NET and NuGet sandbox grants when developer-tool access is enabled
  • Windows dev-tool shims like npm.cmd now receive the same sandbox grants as npm.
  • Gemini tool calls now avoid 400 schema validation errors for nullable and enum fields
  • Resume sessions under mandatory managed model defaults without rejecting saved preferences
  • Hash mention suggestions refresh automatically when the GitHub client becomes ready
  • Reuse cached local MCP tool snapshots across registered Git worktrees in one repository
  • Improve remote launch options with clearer hosting/connection flags and retire legacy --remote/--no-remote startup flags

1.0.102 - 2026-10-21

  • Prompt mode now honors managed Auto model selection for -p and piped stdin runs
  • Subagents honor custom and MCP tool approvals, avoiding duplicate permission prompts and allowing inherited workflows to run
  • Plugin marketplaces accept git-subdir sources and long plugin descriptions
  • Fish shell completion works when aliases include option aliases like --effort
  • Chats no longer get blocked by organization plugin preparation while sending messages
  • Long-running sandboxed commands continue running reliably past 10 seconds
  • Replies cut off by a provider overload error retry with backoff and show the provider's message and request ID
  • Sandboxed network traffic now honors NO_PROXY and ALL_PROXY when inheriting host proxy settings

1.0.101 - 2026-10-20

  • Add native structured output for dynamic workflow subagents on supported models
  • Add assistedApprovalInstructions setting to guide Assisted Permissions confirmation decisions
  • Shell commands that create and then enter a directory now request path approval instead of being denied early.
  • Headless and SDK sessions without an OAuth handler skip MCP connections when saved tokens require sign-in, while renewable grants still connect.
  • macOS sandboxed commands can connect directly to localhost TCP services when local access is enabled and no host filters apply.
  • Local models and loopback providers in providers.json no longer block Auto, your saved model or the default model when signed in to Copilot
  • Explicit Entra MCP sign-in now recovers from rejected cached tokens by continuing to interactive sign-in.
  • Switching only reasoning effort no longer forces compaction in over-budget sessions.
  • Copy keys now reliably copy mouse selections even when pressed immediately after dragging.
  • Cancel abandoned Microsoft sign-in flows so retries start cleanly
  • Configured MCP inventory reads no longer fail when startup state is unchanged

... (truncated)

Commits
  • 8f18bec Update changelog.md for version 1.0.104
  • 7ea98df Update changelog.md for version 1.0.103
  • 17631dc Update changelog.md for version 1.0.102
  • c66d206 Update changelog.md for version 1.0.101
  • 84a2bd3 Update changelog.md for version 1.0.100
  • c01c663 Update changelog.md for version 1.0.98
  • 76c3172 Update changelog.md for version 1.0.97
  • a3f560e Update changelog.md for version 1.0.96
  • dcdc027 Update changelog.md for version 1.0.95
  • a7ae5b0 Update changelog.md for version 1.0.94
  • Additional commits viewable in compare view

Updates @google/gemini-cli from 0.63.0 to 0.66.0

Release notes

Sourced from @​google/gemini-cli's releases.

Release v0.66.0

What's Changed

New Contributors

Full Changelog: google-gemini/gemini-cli@v0.65.0...v0.66.0

Release v0.66.0-preview.0

What's Changed

... (truncated)

Commits
  • 9704132 chore(release): v0.66.0
  • 6d6b49e chore(release): v0.66.0-preview.0
  • b041de0 fix(core): support opt-in private network endpoints for MCP OAuth flows (#29844)
  • ac223e8 fix(core): prevent false positive matches in isAuthenticationError (#29835)
  • 5534eea fix(core): preserve user-level ~/.gitconfig in shell and git environments (#2...
  • afd56de chore: migrate gsutil usage to gcloud storage (#29839)
  • 76e4d7c fix(cli): decode streamed Node HTTP activity chunks with StringDecoder (#29827)
  • 3be3d44 fix(ui): preserve terminal scrollback during viewport refreshes (#29792)
  • ed96fae fix(cli): forward termination signals from bootstrap parent to child process ...
  • b792f21 fix(cli): support 'keys' array in keybindings.json (#29773)
  • Additional commits viewable in compare view

Updates @openai/codex from 0.160.1 to 0.166.0
Updates @qwen-code/qwen-code from 0.25.0 to 0.26.5

Release notes

Sourced from @​qwen-code/qwen-code's releases.

Qwen Code Desktop v0.26.5

What's Changed

... (truncated)

Changelog

Sourced from @​qwen-code/qwen-code's changelog.

0.26.5 - 2026-11-01

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

  • Adds bounded SQL history queries for Managed local H2 and Hosted MySQL, enabling paged recent messages, journal transactions, and exact operation or command lookups. (#15839) by @​doudouOUC
  • Enables Generated UI by default and lets users continue chatting with interactive card values attached as removable context above the composer. (#15856) by @​qqqys
  • feat(web-shell): keyboard shortcuts for Session Overview and Split View (#14179) by @​4ekuct25
  • Adds a Russian locale for the Web Shell Goal card and Goals dialog, with English fallback for untranslated strings. (#13685) by @​4ekuct25
  • Extends Web Shell one-click daemon updates to pnpm, yarn, bun, and sudo-prefixed npm installs, and shows manual steps when automatic update is unavailable. (#15849) by @​wenshao
  • Web Shell and Qwen Code Desktop now show active background agent counts in the status-bar task pill while agents are running. (#14002) by @​4ekuct25
  • Managed WebShell now reads the latest 100 live items directly and pages upward for older messages, while live updates continue. (#15865) by @​doudouOUC
  • The /verify-pr local flow now reuses the current working tree only when it is a clean checkout of the PR head and records round details. (#15913) by @​wenshao
  • Archived conversations in Settings now show Export conversation and Restore inline beside More, making archive management faster. (#15872) by @​deggs7
  • PR watch now merges a stale base before attempting fixes when CI failures may be caused by the branch being behind. (#15922) by @​wenshao
  • Adds an experimental one-command Helm deployment for Managed Agent with Hosted Harness, MySQL, local execution, and an authenticated gateway. (#15492) by @​doudouOUC
  • Adds --in-place mode to the PR-watch skill to co-drive in your checkout, push the branch, and reply on the PR. (#15929) by @​wenshao
  • Keeps skill slash-command argument hints visible while typing and shrinks them to missing arguments. (#15930) by @​wenshao
  • Makes context memory files in the Context Usage panel clickable to open read-only previews such as AGENTS.md. (#15932) by @​wenshao
  • Makes autofix-pr post a pull-request comment when a round is blocked, stating what was attempted, what blocks it, and what human action is needed. (#15978) by @​wenshao
  • Adds a retry budget to /autofix-pr so a check left failing after three fix pushes is handed to a human and shown in /autofix-pr status. (#15985) by @​wenshao
  • Adds a Workflow switch in Web Shell, split panes, and VS Code chat to update saved session Workflow preferences for the next turn without interrupting responses. (#15779) by @​qqqys
  • Enables channel adapters to expose tools to agent sessions and adds QQ moderation tools, including recall, mute, kick, and join approval, controlled by moderationTools. (#14348) by @​Eric-GoodBoy-Tech
  • Adds a batch request and SDK method to fetch live-session snapshots for up to 20 selected workspaces in one call. (#12513) by @​XIQIXIQIXIQI
  • feat(cli): support exact-version updates without npm discovery (#11486) by @​XIQIXIQIXIQI
  • Improves the bundled code-review skill by re-anchoring after head drift, running actionlint checks, accounting for blockers, and refusing retries. (#16001) by @​wenshao

Bug Fixes

  • Hardens the managed-agent upgrade command's check, backup, install, start, and verify phases, including cleanup after interrupted installs. (#15853) by @​wenshao
  • TUI CI now runs impact-selected checks and reserves full source TUI acceptance for nightly runs, manual dispatch, and high-risk changes. (#15864) by @​yiliang114
  • Main pushes now run one macOS E2E shard instead of two, while schedules, manual dispatch, and feat/e2e branches keep the two-shard matrix. (#15873) by @​yiliang114
  • The Web Shell floating approval card for tool approvals now uses a single scroll region, avoiding nested scrollbars in long diffs. (#14621) by @​4ekuct25
  • Release builds and eligible downstream jobs now use labelled runners on existing ECS hosts to reduce hosted-runner queue delays. (#15832) by @​yiliang114
  • CUA input, window selection, and session cleanup align with 0.27.0 across CUA SDK, Browser SDK, and Node REPL for more reliable sessions. (#15784) by @​LaZzyMan
  • Review command tests now pin ghApiAllNested pagination and response merging behavior to prevent regressions in GitHub API requests. (#12560) by @​indexGin
  • The No-workspace sessions header now matches Pinned, Workspaces, and Recent with consistent height, muted text, spacing, chevron, and hover/focus behavior. (#15897) by @​deggs7
  • E2E builds now use the same pool-first runner routing and disk gate as other jobs, reducing hosted queue delays for post-merge test signals. (#15885) by @​yiliang114
  • Web Shell browser smoke tests now run on isolated ubuntu-latest runners to avoid shared-runner network failures. (#15886) by @​yiliang114
  • Web Shell now hides the No-workspace sessions sidebar section when it loads empty, matching Pinned behavior. (#15916) by @​deggs7
  • fix(web-shell): keep "+ Add session" clickable when the catalog is empty (#15835) by @​2SinceJuly

... (truncated)

Commits
  • db0e4e2 chore(release): v0.26.5
  • fe30b5d test(managed-agent): pin lapsed-lease ledger writes and the IT's result-store...
  • 74bd584 fix(core): report a registry that kept changing as a PeerControllerError (#16...
  • 7bc00a3 feat(review): re-anchor on drift, run actionlint, account blockers, refuse re...
  • edde639 feat(cli): support exact-version updates without npm discovery (#11486)
  • 86f1338 feat(serve): batch workspace session live-state snapshots (#12513)
  • 2a8ae9b docs(managed-agent): record the ManagedAgentStore setter investigation (#16014)
  • 80273bd fix(core): extend built-in reasoning effort to DeepSeek-V4 and new Qwen prefi...
  • 6eef5d9 fix(cli): bind the PR badge when a --flag is glued to the number (#15989)
  • 94448d3 fix(verify-pr): keep the mutation matrix off the tree live cells measure on (...
  • Additional commits viewable in compare view

Updates @xai-official/grok from 1.0.46 to 1.0.70

@dependabot
dependabot Bot requested a review from SMKH-PRO as a code owner October 20, 2026 14:08
@dependabot dependabot Bot added dependencies Updates a dependency (Dependabot) javascript Updates npm dependencies (Dependabot) labels Oct 20, 2026
@SMKH-PRO
SMKH-PRO force-pushed the dependabot/npm_and_yarn/test/agents/agents-9d5fbbd113 branch from 16e99d2 to f62b305 Compare October 31, 2026 13:33
@dependabot
test: bump the agents group across 1 directory with 6 updates
3934f64 
---
updated-dependencies:
- dependency-name: "@anthropic-ai/claude-code"
  dependency-version: 2.1.302
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: agents
- dependency-name: "@github/copilot"
  dependency-version: 1.0.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: agents
- dependency-name: "@google/gemini-cli"
  dependency-version: 0.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: agents
- dependency-name: "@openai/codex"
  dependency-version: 0.163.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: agents
- dependency-name: "@qwen-code/qwen-code"
  dependency-version: 0.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: agents
- dependency-name: "@xai-official/grok"
  dependency-version: 1.0.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: agents
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/test/agents/agents-9d5fbbd113 branch from f62b305 to 3934f64 Compare November 3, 2026 14:07
@dependabot
dependabot Bot requested a review from cto-syed as a code owner November 3, 2026 14:07

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SMKH-PRO SMKH-PRO Awaiting requested review from SMKH-PRO
@cto-syed cto-syed Awaiting requested review from cto-syed cto-syed is a code owner

Assignees

No one assigned

Labels

dependencies Updates a dependency (Dependabot) javascript Updates npm dependencies (Dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants