Skip to content

deps: bump the dev-dependencies group across 1 directory with 5 updates - #198

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-ad8dee71f6
Open

deps: bump the dev-dependencies group across 1 directory with 5 updates#198
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/dev-dependencies-ad8dee71f6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the dev-dependencies group with 5 updates in the / directory:

Package From To
@agentclientprotocol/sdk 1.7.0 2.0.2
@anthropic-ai/claude-agent-sdk 0.3.286 0.3.310
@biomejs/biome 2.5.15 2.6.3
@types/node 26.6.3 26.6.5
vitest 5.0.3 5.0.5

Updates @agentclientprotocol/sdk from 1.7.0 to 2.0.2

Release notes

Sourced from @​agentclientprotocol/sdk's releases.

v2.0.2

2.0.2 (2026-10-23)

Bug Fixes

  • http: handle CR line endings in SSE streams (#306) (fd86335)
  • isolate request-scoped HTTP POST failures (#307) (d9db04d)

v2.0.1

2.0.1 (2026-10-22)

Bug Fixes

  • http: Isolate session stream conflicts from shared transport (#303) (ad220c7)

v2.0.0

2.0.0 (2026-10-19)

⚠ BREAKING CHANGES

  • AgentSideConnection, ClientSideConnection, Agent, Client, LegacyAgentFactory, createLegacyAgent, and their extension aliases and connector helper have been removed. Use agent()/client() apps and peer-context request()/notify() calls. Compiled tests, fixtures, and examples are no longer published. See MIGRATION_STABLE_UNSTABLE.md for migration instructions.
  • Default v1 and experimental v2 imports now expose only stable-feature schemas. Unstable v1 features require @​agentclientprotocol/sdk/unstable; unstable v2 features require @​agentclientprotocol/sdk/experimental/v2/unstable. Both v2 entrypoints remain experimental. SDK 2.0 does not switch the default protocol from ACP v1. The unversioned JSON schema export is removed; use the versioned schema/v1 or schema/v2 exports. All legacy v1 integrations must migrate to agent()/client() apps regardless of feature profile; opting into /unstable does not restore the removed connection classes or connector helper. See https://github.com/agentclientprotocol/typescript-sdk/blob/main/MIGRATION_STABLE_UNSTABLE.md for migration instructions.

Features

  • make stable protocol bindings the default (6caf469)
  • retire legacy connection APIs and publish production-only builds (#294) (52edc15)

Bug Fixes

  • enforce supported Zod floor and patch generator YAML parser (#296) (f0cab19)
  • import zod as a namespace so bundlers can tree-shake it (#291) (60619a4)

v1.9.0

1.9.0 (2026-10-16)

Features

  • isolate NES behind an experimental entrypoint (#284) (e3678c2)
  • update schemas to v1.26.0 and v2.0.0-alpha.9 (#285) (93599f3)

Bug Fixes

  • accept omitted and null params for optional requests (#282) (a2fbbb9)

... (truncated)

Changelog

Sourced from @​agentclientprotocol/sdk's changelog.

2.0.2 (2026-10-23)

Bug Fixes

  • http: handle CR line endings in SSE streams (#306) (fd86335)
  • isolate request-scoped HTTP POST failures (#307) (d9db04d)

2.0.1 (2026-10-22)

Bug Fixes

  • http: Isolate session stream conflicts from shared transport (#303) (ad220c7)

2.0.0 (2026-10-19)

⚠ BREAKING CHANGES

  • AgentSideConnection, ClientSideConnection, Agent, Client, LegacyAgentFactory, createLegacyAgent, and their extension aliases and connector helper have been removed. Use agent()/client() apps and peer-context request()/notify() calls. Compiled tests, fixtures, and examples are no longer published. See MIGRATION_STABLE_UNSTABLE.md for migration instructions.
  • Default v1 and experimental v2 imports now expose only stable-feature schemas. Unstable v1 features require @​agentclientprotocol/sdk/unstable; unstable v2 features require @​agentclientprotocol/sdk/experimental/v2/unstable. Both v2 entrypoints remain experimental. SDK 2.0 does not switch the default protocol from ACP v1. The unversioned JSON schema export is removed; use the versioned schema/v1 or schema/v2 exports. All legacy v1 integrations must migrate to agent()/client() apps regardless of feature profile; opting into /unstable does not restore the removed connection classes or connector helper. See https://github.com/agentclientprotocol/typescript-sdk/blob/main/MIGRATION_STABLE_UNSTABLE.md for migration instructions.

Features

  • make stable protocol bindings the default (6caf469)
  • retire legacy connection APIs and publish production-only builds (#294) (52edc15)

Bug Fixes

  • enforce supported Zod floor and patch generator YAML parser (#296) (f0cab19)
  • import zod as a namespace so bundlers can tree-shake it (#291) (60619a4)

1.9.0 (2026-10-16)

Features

  • isolate NES behind an experimental entrypoint (#284) (e3678c2)
  • update schemas to v1.26.0 and v2.0.0-alpha.9 (#285) (93599f3)

Bug Fixes

  • accept omitted and null params for optional requests (#282) (a2fbbb9)
  • examples: report v2 turn failures on idle (#279) (28b1291)
  • preserve outgoing v2 initialize payloads (#283) (b98857b)
  • v2: align protocol version negotiation (#286) (4197b89)
  • v2: decouple session updates from prompt completion (#280) (0154528)

... (truncated)

Commits
  • f2f218d chore(main): release 2.0.2 (#309)
  • d9db04d fix: isolate request-scoped HTTP POST failures (#307)
  • fd86335 fix(http): handle CR line endings in SSE streams (#306)
  • 46d6197 ci: resolve latest Node LTS patches before using runner cache (#308)
  • 2ab6151 chore(main): release 2.0.1 (#305)
  • ad220c7 fix(http): Isolate session stream conflicts from shared transport (#303)
  • 810f46a chore(deps): bump markdown-it and vitest for security advisories (#304)
  • c2b1a86 chore(main): release 2.0.0 (#302)
  • a37f0dd ci: use manifest-driven release configuration (#301)
  • 8129b47 chore: restore the last published release baseline (#299)
  • Additional commits viewable in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.286 to 0.3.310

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.310

What's changed

  • Updated to parity with Claude Code v2.1.310

Update

npm install @anthropic-ai/[email protected]
# or
yarn add @anthropic-ai/[email protected]
# or
pnpm add @anthropic-ai/[email protected]
# or
bun add @anthropic-ai/[email protected]

v0.3.309

What's changed

  • Fixed host-supplied managedSettings dropping disableAllHooks, disableSkillShellExecution and empty allowedHttpHookUrls / httpHookAllowedEnvVars lists
  • Changed extractFromBunfs() to extract the embedded CLI into its own per-user temp directory (claude-agent-sdk-<uid>, or claude-agent-sdk on Windows) instead of Claude Code's temp root
  • Changed extractFromBunfs() to reuse an already-extracted file only when its bytes match the embedded binary, replacing it otherwise
  • Updated to parity with Claude Code v2.1.309

Update

npm install @anthropic-ai/[email protected]
# or
yarn add @anthropic-ai/[email protected]
# or
pnpm add @anthropic-ai/[email protected]
# or
bun add @anthropic-ai/[email protected]

v0.3.308

What's changed

  • Updated to parity with Claude Code v2.1.308

Update

npm install @anthropic-ai/[email protected]
# or
yarn add @anthropic-ai/[email protected]
# or
pnpm add @anthropic-ai/[email protected]
</tr></table>

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.310

  • Updated to parity with Claude Code v2.1.310

0.3.309

  • Fixed host-supplied managedSettings dropping disableAllHooks, disableSkillShellExecution and empty allowedHttpHookUrls / httpHookAllowedEnvVars lists
  • Changed extractFromBunfs() to extract the embedded CLI into its own per-user temp directory (claude-agent-sdk-<uid>, or claude-agent-sdk on Windows) instead of Claude Code's temp root
  • Changed extractFromBunfs() to reuse an already-extracted file only when its bytes match the embedded binary, replacing it otherwise
  • Updated to parity with Claude Code v2.1.309

0.3.308

  • Updated to parity with Claude Code v2.1.308

0.3.307

  • Added wakeup_source to the command_lifecycle started frame of a scheduled wakeup or task, and scheduled_for for a wakeup (capability lifecycle_wakeup_source_v1), so a host can tell which one fired
  • Added supportedDialogKinds to browser SDK query(), sent on initialize; a non-empty list requires onUserDialog
  • Updated to parity with Claude Code v2.1.307

0.3.306

  • Updated to parity with Claude Code v2.1.306

0.3.305

  • Added recommendations and fix to the get_usage response's behavior windows
  • Fixed servers set with setMcpServers being replaced later in the session by a same-named server from the user's own settings
  • Fixed startup() with initializeTimeoutMs: null counting time spent in SessionStart or Setup hooks against its 60-second limit; null now works like leaving the option out
  • Changed the startup() and prewarm() timeout error for a start with no open SessionStart or Setup hook: it lists possible causes and no longer says to check authentication and network
  • Updated to parity with Claude Code v2.1.305

0.3.304

  • Added suspendSseStream(query) and resumeSseStream(query) to the browser SDK: close a query's event stream and reopen it later without ending the query
  • Added stable row ids to getContextUsage(), and, when the CLI answers on its own stdio, plugin ids, agent and skill file paths, and per-server MCP instruction token shares
  • Fixed startup() timing out while a SessionStart or Setup command hook was running when no initializeTimeoutMs is passed: up to 10 minutes of that time no longer counts toward the 60-second limit, and the timeout error now says what the process reported
  • Fixed startup() keeping every hook_progress message of a running SessionStart or Setup hook in memory until it resolved; it now keeps only the newest one for each hook
  • Updated to parity with Claude Code v2.1.304

0.3.303

  • Updated to parity with Claude Code v2.1.303

0.3.302

  • Fixed structured output results delivering a response's output as structured_output when the API refused that response; the result is now an error with no payload
  • Changed an omitted permissionMode to start in default mode on third-party providers, with telemetry off or on a fresh install; pass permissionMode: 'auto' to keep auto mode
  • Changed fork subagents (subagent_type: "fork") to be on by default in SDK sessions, as in the terminal; run_in_background is still offered, and CLAUDE_CODE_FORK_SUBAGENT=0 turns them off

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/claude-agent-sdk since your current version.


Updates @biomejs/biome from 2.5.15 to 2.6.3

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.3

2.6.3

Patch Changes

  • #12275 807e616 Thanks @​dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.

    const minimum = array.toSorted((a, b) => a - b)[0];

  • #12432 cf61682 Thanks @​dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.

  • #12304 b4654c5 Thanks @​dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.

    for (const name of users.map((user) => user.name)) {
  console.log(name);
}

  • #12121 66c3791 Thanks @​dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").

  • #12316 34b520d Thanks @​dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.

    <table bgcolor="#ffffff" cellpadding="5"></table>

  • #12258 cce2385 Thanks @​dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.

    const fullPath = __dirname + "/foo.js"; // reported

  • #12287 e12ad78 Thanks @​dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.

    await page.locator("button").first().click();

  • #12343 62ad123 Thanks @​vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.

    @layer components {
  @layer components {
    .button {
      color: red;
    }

... (truncated)

Commits

Updates @types/node from 26.6.3 to 26.6.5

Commits

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the dev-dependencies group across 1 directory with 5 updates
223dc71 
Bumps the dev-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@agentclientprotocol/sdk](https://github.com/agentclientprotocol/typescript-sdk) | `1.7.0` | `2.0.2` |
| [@anthropic-ai/claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-typescript) | `0.3.286` | `0.3.310` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |



Updates `@agentclientprotocol/sdk` from 1.7.0 to 2.0.2
- [Release notes](https://github.com/agentclientprotocol/typescript-sdk/releases)
- [Changelog](https://github.com/agentclientprotocol/typescript-sdk/blob/main/CHANGELOG.md)
- [Commits](agentclientprotocol/typescript-sdk@v1.7.0...v2.0.2)

Updates `@anthropic-ai/claude-agent-sdk` from 0.3.286 to 0.3.310
- [Release notes](https://github.com/anthropics/claude-agent-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-typescript@v0.3.286...v0.3.310)

Updates `@biomejs/biome` from 2.5.15 to 2.6.3
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome)

Updates `@types/node` from 26.6.3 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

---
updated-dependencies:
- dependency-name: "@agentclientprotocol/sdk"
  dependency-version: 2.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-dependencies
- dependency-name: "@anthropic-ai/claude-agent-sdk"
  dependency-version: 0.3.310
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the dependencies Updates a dependency (Dependabot) label Oct 31, 2026
@dependabot
dependabot Bot requested a review from cto-syed as a code owner October 31, 2026 14:13
@dependabot dependabot Bot added the javascript Updates npm dependencies (Dependabot) label Oct 31, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cto-syed cto-syed Awaiting requested review from cto-syed cto-syed is a code owner

Assignees

No one assigned

Labels

dependencies Updates a dependency (Dependabot) javascript Updates npm dependencies (Dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants