chore(deps): bump the all-dependencies group with 103 updates

[dependabot]

Bumps the all-dependencies group with 103 updates:

Package	From	To
@modelcontextprotocol/sdk	1.29.0	1.30.0
@toon-format/toon	4.0.0	4.1.0
es-toolkit	1.49.0	1.50.0
fastmcp	4.8.0	4.12.1
js-yaml	5.2.1	5.2.2
smol-toml	1.7.0	1.7.1
@anthropic-ai/claude-agent-sdk	0.3.218	0.3.220
@openrouter/sdk	1.0.12	1.1.22
@types/node	26.1.1	26.1.2
lint-staged	17.1.1	17.2.0
oxfmt	0.60.0	0.61.0
oxlint	1.75.0	1.76.0
resend	6.18.0	6.18.1
tsdown	0.22.13	0.22.14
@anthropic-ai/claude-agent-sdk-darwin-arm64	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-darwin-x64	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-linux-arm64-musl	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-linux-arm64	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-linux-x64-musl	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-linux-x64	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-win32-arm64	0.3.218	0.3.220
@anthropic-ai/claude-agent-sdk-win32-x64	0.3.218	0.3.220
@hono/node-server	1.19.14	2.0.12
@oxfmt/binding-android-arm-eabi	0.60.0	0.61.0
@oxfmt/binding-android-arm64	0.60.0	0.61.0
@oxfmt/binding-darwin-arm64	0.60.0	0.61.0
@oxfmt/binding-darwin-x64	0.60.0	0.61.0
@oxfmt/binding-freebsd-x64	0.60.0	0.61.0
@oxfmt/binding-linux-arm-gnueabihf	0.60.0	0.61.0
@oxfmt/binding-linux-arm-musleabihf	0.60.0	0.61.0
@oxfmt/binding-linux-arm64-gnu	0.60.0	0.61.0
@oxfmt/binding-linux-arm64-musl	0.60.0	0.61.0
@oxfmt/binding-linux-ppc64-gnu	0.60.0	0.61.0
@oxfmt/binding-linux-riscv64-gnu	0.60.0	0.61.0
@oxfmt/binding-linux-riscv64-musl	0.60.0	0.61.0
@oxfmt/binding-linux-s390x-gnu	0.60.0	0.61.0
@oxfmt/binding-linux-x64-gnu	0.60.0	0.61.0
@oxfmt/binding-linux-x64-musl	0.60.0	0.61.0
@oxfmt/binding-openharmony-arm64	0.60.0	0.61.0
@oxfmt/binding-win32-arm64-msvc	0.60.0	0.61.0
@oxfmt/binding-win32-ia32-msvc	0.60.0	0.61.0
@oxfmt/binding-win32-x64-msvc	0.60.0	0.61.0
@oxlint/binding-android-arm-eabi	1.75.0	1.76.0
@oxlint/binding-android-arm64	1.75.0	1.76.0
@oxlint/binding-darwin-arm64	1.75.0	1.76.0
@oxlint/binding-darwin-x64	1.75.0	1.76.0
@oxlint/binding-freebsd-x64	1.75.0	1.76.0
@oxlint/binding-linux-arm-gnueabihf	1.75.0	1.76.0
@oxlint/binding-linux-arm-musleabihf	1.75.0	1.76.0
@oxlint/binding-linux-arm64-gnu	1.75.0	1.76.0
@oxlint/binding-linux-arm64-musl	1.75.0	1.76.0
@oxlint/binding-linux-ppc64-gnu	1.75.0	1.76.0
@oxlint/binding-linux-riscv64-gnu	1.75.0	1.76.0
@oxlint/binding-linux-riscv64-musl	1.75.0	1.76.0
@oxlint/binding-linux-s390x-gnu	1.75.0	1.76.0
@oxlint/binding-linux-x64-gnu	1.75.0	1.76.0
@oxlint/binding-linux-x64-musl	1.75.0	1.76.0
@oxlint/binding-openharmony-arm64	1.75.0	1.76.0
@oxlint/binding-win32-arm64-msvc	1.75.0	1.76.0
@oxlint/binding-win32-ia32-msvc	1.75.0	1.76.0
@oxlint/binding-win32-x64-msvc	1.75.0	1.76.0
@yuku-codegen/binding-darwin-arm64	0.7.4	0.8.1
@yuku-codegen/binding-darwin-x64	0.7.4	0.8.1
@yuku-codegen/binding-freebsd-x64	0.7.4	0.8.1
@yuku-codegen/binding-linux-arm-gnu	0.7.4	0.8.1
@yuku-codegen/binding-linux-arm-musl	0.7.4	0.8.1
@yuku-codegen/binding-linux-arm64-gnu	0.7.4	0.8.1
@yuku-codegen/binding-linux-arm64-musl	0.7.4	0.8.1
@yuku-codegen/binding-linux-x64-gnu	0.7.4	0.8.1
@yuku-codegen/binding-linux-x64-musl	0.7.4	0.8.1
@yuku-codegen/binding-win32-arm64	0.7.4	0.8.1
@yuku-codegen/binding-win32-x64	0.7.4	0.8.1
@yuku-parser/binding-darwin-arm64	0.7.4	0.8.1
@yuku-parser/binding-darwin-x64	0.7.4	0.8.1
@yuku-parser/binding-freebsd-x64	0.7.4	0.8.1
@yuku-parser/binding-linux-arm-gnu	0.7.4	0.8.1
@yuku-parser/binding-linux-arm-musl	0.7.4	0.8.1
@yuku-parser/binding-linux-arm64-gnu	0.7.4	0.8.1
@yuku-parser/binding-linux-arm64-musl	0.7.4	0.8.1
@yuku-parser/binding-linux-x64-gnu	0.7.4	0.8.1
@yuku-parser/binding-linux-x64-musl	0.7.4	0.8.1
@yuku-parser/binding-win32-arm64	0.7.4	0.8.1
@yuku-parser/binding-win32-x64	0.7.4	0.8.1
@yuku-toolchain/types	0.7.4	0.8.1
axios	1.18.1	1.19.0
body-parser	2.2.2	2.3.0
express-rate-limit	8.5.2	8.6.1
fast-uri	3.1.2	3.1.4
hono	4.12.25	4.12.32
ip-address	10.2.0	10.3.1
jose	6.2.3	6.2.5
mcp-proxy	6.5.4	6.5.5
media-typer	1.1.0	1.1.1
qs	6.15.2	6.15.3
range-parser	1.2.1	1.3.0
rolldown-plugin-dts	0.27.13	0.27.14
undici	7.28.0	7.29.0
verkit	0.1.2	0.3.1
yargs	18.0.0	18.1.0
yoctocolors	2.1.2	2.2.0
yuku-ast	0.7.4	0.8.1
yuku-codegen	0.7.4	0.8.1
yuku-parser	0.7.4	0.8.1

Updates @modelcontextprotocol/sdk from 1.29.0 to 1.30.0

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.30.0

What's Changed

• fix(server): prioritize zod issues and format them by @​mozmo15 in modelcontextprotocol/typescript-sdk#1503
• chore(ci): switch publish to OIDC trusted publishing by @​felixweinberger in modelcontextprotocol/typescript-sdk#1839
• Add end-to-end test suite by @​felixweinberger in modelcontextprotocol/typescript-sdk#2167
• v1 stdio buffer limit by @​KKonstantinov in modelcontextprotocol/typescript-sdk#2239
• fix: support Zod 3.25 method literals by @​mattzcarey in modelcontextprotocol/typescript-sdk#2368
• Validate Content-Type by parsed media type instead of substring match (v1.x) by @​felixweinberger in modelcontextprotocol/typescript-sdk#2444
• fix: send SSE keep-alive comment frames from Streamable HTTP server transport (v1.x) by @​mattzcarey in modelcontextprotocol/typescript-sdk#2538
• fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 by @​arimu1 in modelcontextprotocol/typescript-sdk#2549
• Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x) by @​felixweinberger in modelcontextprotocol/typescript-sdk#2547
• chore: bump version to 1.30.0 by @​felixweinberger in modelcontextprotocol/typescript-sdk#2563

New Contributors

• @​mozmo15 made their first contribution in modelcontextprotocol/typescript-sdk#1503
• @​arimu1 made their first contribution in modelcontextprotocol/typescript-sdk#2549

Full Changelog: modelcontextprotocol/typescript-sdk@v1.29.0...1.30.0

Commits

• 2d889f2 chore: bump version to 1.30.0 (#2563)
• e3f3daa Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport (v1.x)...
• bb5a718 fix(deps): widen @​hono/node-server past GHSA-frvp-7c67-39w9 (#2549)
• 1dad263 fix: send SSE keep-alive comment frames from Streamable HTTP server transport...
• 69749aa Validate Content-Type by parsed media type instead of substring match (v1.x) ...
• 369513d fix: support Zod 3.25 method literals (#2368)
• e7ee57c v1 stdio buffer limit (#2239)
• c36e1ef Add end-to-end test suite (#2167)
• bf1e022 chore(ci): switch publish to OIDC trusted publishing (#1839)
• 9edbab7 fix(server): prioritize zod issues and format them (#1503)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​modelcontextprotocol/sdk since your current version.

Updates @toon-format/toon from 4.0.0 to 4.1.0

Release notes

Sourced from @​toon-format/toon's releases.

v4.1.0

   🚀 Features

• benchmarks:
  • Add keyed and nested-group datasets covering v4 tabular forms  -  by @​johannschopplich (ebe80)
  • Corrupt encoded text for structural-validation datasets  -  by @​johannschopplich (1de7b)
  • Add wilson 95% intervals to accuracy tables  -  by @​johannschopplich (ac638)
• encode:
  • rawString marker and escapeString export for verbatim replacer output  -  by @​yilmazhasan in toon-format/toon#321 (b36f8)

   🐞 Bug Fixes

• Accept the indentSize option named by the spec  -  by @​johannschopplich (b41d5)
• benchmarks:
  • Normalize non-ISO dates in local time to avoid timezone-dependent day shifts  -  by @​johannschopplich (c7b6f)
  • Pin faker reference date so regenerated datasets stay reproducible  -  by @​johannschopplich (d7d78)
  • Split accuracy report into csv-excluded and flat-only tracks  -  by @​johannschopplich (911ba)
  • Floor grok-4.5 reasoning at low  -  by @​johannschopplich (7c792)
• cli:
  • Error on ill-formed UTF-8 input in strict mode  -  by @​johannschopplich (5f04e)
• decode:
  • Strip a byte-order mark and trailing spaces, and stop truncating at a declared [N]  -  by @​johannschopplich (d8ca3)
  • Keep a quoted colon inside an unquoted key  -  by @​johannschopplich (41c92)
  • Omit leaf fields that have no cell instead of yielding undefined  -  by @​johannschopplich (c2c25)
  • Reject a bare token line outside root primitive position  -  by @​johannschopplich (ea050)
• encode:
  • Reject unpaired surrogates and invalid delimiters  -  by @​johannschopplich (db67c)

    View changes on GitHub

Commits

• 51e7f2b chore: release v4.1.0
• 4c8c892 chore: upgrade spec
• 17bee38 chore: upgrade dependencies
• 52653ce docs: document decoder number precision (#331)
• 20142e7 Add Corvus.JsonSchema implementation for C# (#318)
• 43ad711 docs: add TYPO3 implementation to community list (#320)
• bd787e5 docs: bump the spec badge to v4.1
• dcfae7e chore: add jsdoc/multiline-blocks rule
• 51570fa refactor: unify error message wording across the library and the CLI
• dbc0a0b refactor(cli): drop the string-chunk path that only the test mock reached
• Additional commits viewable in compare view

Updates es-toolkit from 1.49.0 to 1.50.0

Release notes

Sourced from es-toolkit's releases.

v1.50.0

Released on July 24th, 2026.

• Added the es-toolkit/types entrypoint: a declaration-only module of compile-time type utilities TypeScript lacks natively — ValueOf, Simplify, Writable, NonEmptyArray, DeepPartial, and DeepReadonly. ([Follow up Kilo Code upstream updates: skills.paths config key, SKILL.md frontmatter drift, subagent permission type #1818])
• Added flow to es-toolkit/fp, a reusable data-last composition built on pipe. ([feat(takt): map the output-contracts facet via takt.facet override #1812])

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

• Fixed compat/intersectionBy to dedupe a single array (including by the iteratee) and to keep results consistent with Lodash. ([Follow-ups from PR #1912: add grokcli global-mode e2e skills case and discovery-source notes #1935])

• Fixed compat/findIndex and compat/findLastIndex to coerce a NaN fromIndex to 0 and to convert fromIndex to an integer. ([feat(skills): support global scope for Replit Agent Skills #1828], [feat(antigravity-ide): emit project-root AGENTS.md for the root rule #1834], [Follow up Amp upstream updates: Plugin API (hooks via .amp/plugins/*.ts) #1938])

• Fixed compat/lastIndexOf to coerce fromIndex like Lodash. ([feat(augmentcode): declare argument-hint and model command frontmatter fields #1832])

• Fixed compat/every to treat a falsy, non-nullish doesMatch as a _.property shorthand instead of identity. ([Follow up Qwen Code upstream updates: .qwen/rules/ path-based context rules #1940])

• Fixed compat/nth to support string inputs. ([feat(opencode): register non-root rules in opencode.json instructions #1833])

• Fixed compat/inRange to not throw on a lone negative bound. ([feat(factorydroid): add permissions adapter (commandAllowlist/commandDenylist) #1835])

• Fixed compat/toArray to convert Sets to arrays like Lodash. ([feat(antigravity-cli): add .geminiignore ignore adapter #1840])

• Fixed compat/values to treat sparse array holes as undefined. ([generate --check for codexcli rules fails when another target owns AGENTS.md #1894])

• Fixed compat/maxBy and compat/minBy to restore Lodash-compatible comparison. ([feat(kiro): split kiro target into kiro-cli and kiro-ide #1893])

• Fixed compat/includes to exclude the length property when matching array-like values. ([Follow up Takt upstream updates: provider_profiles permission modes (design decision) #1886])

• Fixed the case functions to split ordinal numbers like Lodash, and to count string size and padding by code points for multi-byte characters. ([feat(deepagents): add context.offload hook event and global scope for rules/subagents/skills #1836], [chore(deps): bump the all-dependencies group with 231 updates #1852], [fix: correct Zed web search tool name to search_web #1853])

• Fixed compat/unset to not treat an own literal dotted key as a deep path. ([Follow-ups from PR #1802 review: symlink following in findFilesByGlobs (cycle dedup, comment fix, boundary check, tests, docs) #1808])

• Moved compat/flattenDepth's flattening logic out of flatten. ([Add Cline hooks adapter (executable per-event scripts; needs multi-file output + executable-bit plumbing) #1847])

• Restored the standalone eq and templateSettings entry points. ([feat(codexcli): add PostCompact hook event and preserve prompt frontmatter #1895])

• Fixed deburr to remove all combining diacritical marks, matching Lodash. ([chore(release): v8.27.0 #1807])

• Fixed partition to accept any predicate return value, like Array.prototype.filter. ([Follow up Kilo Code upstream updates: plugin export shape and config-import locations (plugin/ dir, .kilo/kilo.jsonc) #1937])

• Fixed has and hasIn to prioritize nullish literal keys over paths. ([fix(codexcli): scope :workspace extends to workspace-wide writes and import extends-only profiles #1810])

• Fixed invokeMap to normalize a string path via toPath for this binding. ([Follow up Gemini CLI upstream updates: project-scope permissions land in the non-functional Workspace policy tier #1814])

• Fixed isDeepKey to detect deep keys with stricter patterns. ([fix(codexcli): address review findings from #1602 #1621])

• Fixed unzipWith to return an empty array instead of throwing on empty input. ([Follow up Factory Droid upstream updates: command permissions (commandAllowlist/commandDenylist) #1816])

• Improved documentation, JSDoc accuracy, and internal refactoring across compat and fp. ([Follow up OpenCode upstream updates: register non-root rules in opencode.json instructions #1817], [Follow up Google Antigravity CLI upstream updates: root AGENTS.md rules and .geminiignore #1820], [Follow up AugmentCode upstream updates: command model/argument-hint frontmatter #1822], [Follow up Goose upstream updates: MCP extensions, Agent Skills, and recipes (commands/subagents) #1823], [Follow up Warp upstream updates: agent permissions (settings.toml profiles) and non-standard .warp/memories rules path #1825], [feat(ignore): generate brand-aligned .devinignore for Devin Desktop #1829], [Follow-up: doc/gitignore sync gaps from PR #1766 (Codex .agents/skills path & hook events) #1830], [feat(goose): add MCP extensions adapter (global config.yaml) #1842], [feat(junie): model the full subagent frontmatter field set #1845], [ci(deps): bump anomalyco/opencode from 1.15.13 to 1.17.3 in the all-actions group #1851], [test(generate): add regression tests for execution-order constraints on shared output files #1858], [test: extend processor schema-vs-factory parity checks to all processors #1867], [Follow up Codex CLI upstream updates: PostCompact hook event and prompt frontmatter (description/argument-hint) #1879])

... (truncated)

Changelog

Sourced from es-toolkit's changelog.

Version v1.50.0

Released on July 24th, 2026.

• Added the es-toolkit/types entrypoint: a declaration-only module of compile-time type utilities TypeScript lacks natively — ValueOf, Simplify, Writable, NonEmptyArray, DeepPartial, and DeepReadonly. (#1818)
• Added flow to es-toolkit/fp, a reusable data-last composition built on pipe. (#1812)

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected edge cases now matches Lodash, so results may differ if you relied on the previous output.

• Fixed compat/intersectionBy to dedupe a single array (including by the iteratee) and to keep results consistent with Lodash. (#1935)

• Fixed compat/findIndex and compat/findLastIndex to coerce a NaN fromIndex to 0 and to convert fromIndex to an integer. (#1828, #1834, #1938)

• Fixed compat/lastIndexOf to coerce fromIndex like Lodash. (#1832)

• Fixed compat/every to treat a falsy, non-nullish doesMatch as a _.property shorthand instead of identity. (#1940)

• Fixed compat/nth to support string inputs. (#1833)

• Fixed compat/inRange to not throw on a lone negative bound. (#1835)

• Fixed compat/toArray to convert Sets to arrays like Lodash. (#1840)

• Fixed compat/values to treat sparse array holes as undefined. (#1894)

• Fixed compat/maxBy and compat/minBy to restore Lodash-compatible comparison. (#1893)

• Fixed compat/includes to exclude the length property when matching array-like values. (#1886)

• Fixed the case functions to split ordinal numbers like Lodash, and to count string size and padding by code points for multi-byte characters. (#1836, #1852, #1853)

• Fixed compat/unset to not treat an own literal dotted key as a deep path. (#1808)

• Moved compat/flattenDepth's flattening logic out of flatten. (#1847)

• Restored the standalone eq and templateSettings entry points. (#1895)

• Fixed deburr to remove all combining diacritical marks, matching Lodash. (#1807)

• Fixed partition to accept any predicate return value, like Array.prototype.filter. (#1937)

• Fixed has and hasIn to prioritize nullish literal keys over paths. (#1810)

• Fixed invokeMap to normalize a string path via toPath for this binding. (#1814)

• Fixed isDeepKey to detect deep keys with stricter patterns. (#1621)

• Fixed unzipWith to return an empty array instead of throwing on empty input. (#1816)

• Improved documentation, JSDoc accuracy, and internal refactoring across compat and fp. (#1817, #1820, #1822, #1823, #1825, #1829, #1830, #1842, #1845, #1851, #1858, #1867, #1879)

We sincerely thank @​Antoliny0919, @​raon0211, @​dayongkr, @​spokodev, @​sarathfrancis90, @​mayur-shenoy, @​mahirhir, @​kojesung, @​Hprogram, @​BangDori, and everyone else who contributed. We appreciate your great efforts!

Commits

• a443efd v1.50.0
• 9232c57 test(check-dist): skip declaration-only ./types in CJS/ESM check (#1949)
• 4bac390 fix(types): register ./types entrypoint in check-dist test (#1948)
• 8ea1291 feat(types): add es-toolkit/types module with compile-time type utilities (#1...
• b854e15 fix(partition): accept any predicate return value like Array.prototype.filter...
• 953920b fix(compat/findIndex): convert fromIndex to an integer like lodash (#1938)
• 9b92739 fix(compat/every): treat falsy doesMatch as property shorthand, not identity ...
• 278b4fe build(deps): bump github/codeql-action/upload-sarif (#1942)
• 9d05639 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#1944)
• ffea687 fix(compat/intersectionBy): resolve Lodash compatibility issues (#1935)
• Additional commits viewable in compare view

Updates fastmcp from 4.8.0 to 4.12.1

Release notes

Sourced from fastmcp's releases.

v4.12.1

4.12.1 (2026-07-27)

Bug Fixes

• export SessionError and FastMCPError from the package root (#298) (8041340), closes #407

v4.12.0

4.12.0 (2026-07-25)

Features

• add FastMCP.connect for custom transports — closes #176 (8f6b751)

v4.11.0

4.11.0 (2026-07-25)

Features

• expose progress message, document streamContent as non-spec — closes #198 (0687e3b)

v4.10.0

4.10.0 (2026-07-25)

Features

• add jsonSchemaAdapter for plain JSON Schema support — closes #54 (#244) (dcddc98)

v4.9.2

4.9.2 (2026-07-25)

Bug Fixes

• avoid client capability warning in stateless mode (#267) (13e4fc4)

v4.9.1

4.9.1 (2026-07-25)

Bug Fixes

• auth: persist OAuth proxy state (#286) (81bad14)

v4.9.0

4.9.0 (2026-07-24)

... (truncated)

Commits

• 8041340 fix: export SessionError and FastMCPError from the package root (#298)
• 8f6b751 feat: add FastMCP.connect for custom transports — closes #176
• 9bcde68 docs: correct progress message revision and client behavior claims
• 0687e3b feat: expose progress message, document streamContent as non-spec — closes #198
• dcddc98 feat: add jsonSchemaAdapter for plain JSON Schema support — closes #54 (#244)
• 13e4fc4 fix: avoid client capability warning in stateless mode (#267)
• 81bad14 fix(auth): persist OAuth proxy state (#286)
• 61a156b chore: update code example with current get-jwks and fast-jwt API (#252)
• da227b7 feat: add non-interactive tool calls to fastmcp dev (#280)
• a87f791 fix(stdio): add stdin close/end listeners to prevent zombie/orphan processes ...
• See full diff in compare view

Updates js-yaml from 5.2.1 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

• Quote flow scalars where a colon precedes a flow indicator, #773.

Security

• Avoid exponential parsing time for nested flow sequence pairs.

Commits

• 3c29559 5.2.2 released
• 3e5240f parser: avoid reparsing flow sequence pair keys
• bd7ebb2 fix: quote flow scalars where a colon precedes a flow indicator (#773)
• See full diff in compare view

Updates smol-toml from 1.7.0 to 1.7.1

Release notes

Sourced from smol-toml's releases.

v1.7.1

This release includes flagging internal functions as @internal to strip them from the emitted type declarations.

Full Changelog: squirrelchat/smol-toml@v1.7.0...v1.7.1

Commits

• 3e978a9 chore: bump versions
• 30f5c36 chore: add some @internal annotations
• f0e0399 chore(README.md): npmx, use star import
• See full diff in compare view

Updates @anthropic-ai/claude-agent-sdk from 0.3.218 to 0.3.220

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.220

What's changed

• Updated to parity with Claude Code v2.1.220

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.220
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.220
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.220
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.220

v0.3.219

What's changed

• Added opt-in cancel_queued to the interrupt control request (capability interrupt_cancel_queued_v1): cancels queued and pending-dispatch messages alongside the abort
• Added fast_mode_disabled_reason to result and init messages so SDK hosts can explain why fast mode is off
• Added DirectoryAdded lifecycle hook event to the control protocol, fired when a new working directory is registered mid-session
• Fixed the initialize response reporting fast_mode_state from the spawn-time model after a model switch
• Added sandbox.network.strictAllowlist to SDK settings types for deterministically denying non-allowlisted hosts in sandboxed commands
• Added workflowSizeGuideline to SDK settings types for setting the advisory dynamic-workflow size guideline

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.219
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.219
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.219
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.219

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.220

• Updated to parity with Claude Code v2.1.220

0.3.219

• Added opt-in cancel_queued to the interrupt control request (capability interrupt_cancel_queued_v1): cancels queued and pending-dispatch messages alongside the abort
• Added fast_mode_disabled_reason to result and init messages so SDK hosts can explain why fast mode is off
• Added DirectoryAdded lifecycle hook event to the control protocol, fired when a new working directory is registered mid-session
• Fixed the initialize response reporting fast_mode_state from the spawn-time model after a model switch
• Added sandbox.network.strictAllowlist to SDK settings types for deterministically denying non-allowlisted hosts in sandboxed commands
• Added workflowSizeGuideline to SDK settings types for setting the advisory dynamic-workflow size guideline

Commits

• 71c804d chore: Update CHANGELOG.md
• c74106a chore: Update CHANGELOG.md
• See full diff in compare view

Updates @openrouter/sdk from 1.0.12 to 1.1.22

Release notes

Sourced from @​openrouter/sdk's releases.

typescript - v1.1.22 - 2026-07-29 22:56:24

Generated by Speakeasy CLI

@​openrouter/sdk 1.1.22

Typescript SDK Changes:

• openrouter.videoGeneration.listVideosModels(): response.data[].supportedSizes[] Changed

Generated with Speakeasy CLI 1.787.0

Publishing Completed

typescript - v1.1.21 - 2026-07-29 21:46:09

Generated by Speakeasy CLI

@​openrouter/sdk 1.1.21

Typescript SDK Changes:

• openrouter.beta.responses.send():
  • request.responsesRequest.plugins[] Changed
• openrouter.chat.send():
  • request.chatRequest.plugins[] Changed
• openrouter.presets.createPresetsChatCompletions():
  • request.chatRequest.plugins[] Changed
• openrouter.presets.createPresetsMessages():
  • request.messagesRequest.plugins[] Changed
• openrouter.presets.createPresetsResponses():
  • request.responsesRequest.plugins[] Changed
• openrouter.responses.send():
  • request.responsesRequest.plugins[] Changed

Generated with Speakeasy CLI 1.787.0

Publishing Completed

typescript - v1.1.20 - 2026-07-29 20:54:23

Generated by Speakeasy CLI

@​openrouter/sdk 1.1.20

Typescript SDK Changes:

• openrouter.embeddings.listModels(): response.data[].aliasTarget Added
• openrouter.models.get(): response.data.aliasTarget Added
• openrouter.models.list(): response.data[].aliasTarget Added
• openrouter.models.listForUser(): response.data[].aliasTarget Added
• openrouter.workspaces.list(): response.data[].includeByokInBudgets Added
• openrouter.workspaces.create(): response.data.includeByokInBudgets Added
• openrouter.workspaces.get(): response.data.includeByokInBudgets Added
• openrouter.workspaces.update(): response.data.includeByokInBudgets Added
• openrouter.workspaces.listBudgets(): response.includeByokInBudgets Added
• openrouter.workspaces.setBudget():
  • request.upsertWorkspaceBudgetRequest.includeByokInBudgets Added
  • response.includeByokInBudgets Added

... (truncated)

Changelog

Sourced from @​openrouter/sdk's changelog.

2025-08-22 16:09:25

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.606.2 (2.687.1) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.1.2] .

2025-09-23 21:23:27

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.622.2 (2.711.4) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.2] .

Releases

• [NPM v0.0.0-beta.2] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.2 - .

2025-10-01 17:53:43

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.631.5 (2.716.16) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.17] .

Releases

• [NPM v0.0.0-beta.17] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.17 - .

2025-10-18 05:44:43

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.637.0 (2.727.4) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.41] .

Releases

• [NPM v0.0.0-beta.41] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.41 - .

2025-10-18 19:30:25

Changes

Based on:

• OpenAPI Doc
• Speakeasy CLI 1.637.0 (2.727.4) https://github.com/speakeasy-api/speakeasy

Generated

• [typescript v0.0.0-beta.42] .

Releases

• [NPM v0.0.0-beta.42] https://www.npmjs.com/package/@​openrouter/sdk/v/0.0.0-beta.42 - .

... (truncated)

Commits

• da0f734 chore: 🐝 Update SDK - Generate (spec change merged) 1.1.22 (#725)
• fde55d9 chore: update OpenAPI spec from monorepo (#724)
• 327653d chore: 🐝 Update SDK - Generate (spec change merged) 1.1.21 (#722)
• 412c802 chore: update OpenAPI spec from monorepo (#721)
• 421f7d0 chore: 🐝 Update SDK - Generate (spec change merged) 1.1.20 (#720)
• 82fb36f chore: update OpenAPI spec from monorepo (#719)
• dc37cf5 chore: 🐝 Update SDK - Generate (spec change merged) 1.1.19 (#715)
• 5bf06ef chore: update OpenAPI spec from monorepo (#714)
• d130e75 chore: 🐝 Update SDK - Generate (spec change merged) 1.1.18 (#713)
• 69a8231 chore: update OpenAPI spec from monorepo (#712)
• Additional commits viewable in compare view

Updates @types/node from 26.1.1 to 26.1.2

Commits

• See full diff in compare view

Updates lint-staged from 17.1.1 to 17.2.0

Release notes

Sourced from lint-staged's releases.

v17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
  };

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    "*.js": {
      title: "Log staged JS files to console",
      task: async (files) => {
        console.log("Staged JS files:", files);
      },
    },
  };

Changelog

Sourced from lint-staged's changelog.

17.2.0

Minor Changes

• #1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

  /** @type {import('lint-staged').Configuration} */
  export default {
    '*.ts': () => 'tsc', // Run "tsc" when any TS file is changed (for entire project)
  }

  Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

  Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

  /** @type {import('lint-staged').Configuration} */
  export default {
    '*.js': {
      title: 'Log staged JS files to console',
      task: async (files) => {
        console.log('Staged JS files:', files)
      },
    },
  }

Commits

• fb540fb Merge pull request #1824 from lint-staged/changeset-release/main
• dc0a738 chore(changeset): release
• 60cbb88 Merge pull request #1823 from lint-staged/reimplement-chunk-files
• 2354dc4 build(deps): update dependencies
• 0516e7f docs: adjust debug logs
• e22f6ed style: run oxfmt on README.md
• 37e8e1a fix: restore chunking of git add command after running tasks
• 2c75f1d chore: remove unused file
• ee156cc feat: add improved lazy-chunking of command strings
• baa7c98 feat: remove current chunkFiles implementation
• See full diff in compare view

Updates oxfmt from 0.60.0 to 0.61.0

Commits

• 65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
• See full diff in

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.