Repository navigation
fix(deps): update all non-major dependencies (patch) - #3030
shunkakinoki wants to merge 1 commit into
Conversation
|
Warning This organization's free trial has ended, so Indent couldn't start this review. Manage billing to resume reviews on this repository.
Select any unchecked box below to run or rerun that agent. Pending (1)
Full resultsIndent Review Agent
|
|
Note Reviews pausedIt looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the Use the following commands to manage reviews:
Use the checkboxes below for quick actions:
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Summary
Merge Risk: ⚪ Minimal · up to
|
| Check name | Status | Explanation |
|---|---|---|
| Docstring Coverage |  |
No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0… |
| Linked Issues check | |
Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | |
Check skipped because no linked issues were found for this pull request. |
| Title check | |
The title clearly identifies a patch-level update to non-major dependencies, which matches the changeset. |
| Description check | |
The description directly documents the dependency updates and includes relevant release notes, matching the changeset. |
✨ Finishing Touches 💡 1
-
🛠️ Fix failing CI checks 💡
-
- Commit to this branch
- Create a new PR
🧪 Generate unit tests (beta)
-
- Commit to this branch
- Create a new PR
-
- Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
A rabbit checks the versions in a row
New numbers mark the tools that grow
Claude’s packages match across the ground
Graphifyy and Ruff get updates found
Then hops away, with carrots to go
Comment @coderabbitai help to get the list of available commands.
![pullfrog[bot]](https://avatars.githubusercontent.com/in/1768019?s=60&v=4){kind=small}
There was a problem hiding this comment.
✅ No new issues found.
Reviewed changes
This PR updates patch versions of dependencies across three files:
- package.json: 28 Node.js dependencies bumped (e.g.,
@anthropic-ai/claude-code2.1.283→2.1.285,@biomejs/biome2.5.12→2.5.14,@github/copilot1.0.83→1.0.89,@oh-my-pi/pi-coding-agent18.1.15→18.1.22,cline3.0.61→3.0.65,mcp-remote0.8.5→0.8.7,turbo2.10.12→2.10.13, etc.)- pyproject.toml: 2 Python dependencies bumped (
graphifyy0.9.56→0.9.72,ruff0.16.6→0.16.9)- bun.lock: Lock file regenerated
All version changes are patch-level (third digit only), consistent with the PR title "update all non-major dependencies (patch)". No source code changes — this is a mechanical dependency refresh.
free ｜ 𝕏
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
2bf45b9 to
b4d879d
Compare
There was a problem hiding this comment.
Reviewed changes
All changes are patch-level version bumps across three files:
- package.json: 28 Node.js dependencies bumped (e.g.,
@anthropic-ai/claude-code2.1.283→2.1.287,@biomejs/biome2.5.12→2.5.15,@github/copilot1.0.83→1.0.91,@oh-my-pi/pi-coding-agent18.1.15→18.1.22,cline3.0.61→3.0.67,mcp-remote0.8.5→0.8.7,turbo2.10.12→2.10.13, etc.) - pyproject.toml: 2 Python dependencies bumped (
graphifyy0.9.56→0.9.73,ruff0.16.6→0.16.10) - bun.lock: Lock file regenerated
All changes are patch-level (third semver digit only) or date-based (openclaw 2026.9.5→2026.9.7) — no behavioral surface area. No new issues introduced.
free ｜ 𝕏
3539ea2 to
7c2fa42
Compare
There was a problem hiding this comment.
This PR updates several dependencies to newer versions as part of ongoing dependency maintenance. Key changes include:
- Updated
@anthropic-ai/claude-codefrom 2.1.283 to 2.1.290 - Updated
@biomejs/biomefrom 2.5.12 to 2.5.15 - Updated
@higgsfield/clifrom 1.1.24 to 1.1.26 - Added
@pulumi/pulumi(3.261.0) - Added
@railway/cli(5.49.6) - Added
@schpet/linear-cli(2.6.0) - Added
@sentry/cli(3.7.0) - Added
@steipete/bird(0.8.0) - Updated
@oh-my-pi/pi-coding-agentand@oh-my-pi/pi-nativesfrom 18.1.15 to 18.1.22
These are standard dependency updates to keep the project up-to-date with newer versions of its dependencies.
free ｜ 𝕏
7c2fa42 to
11babbc
Compare
|
Closing: CI broken (see triage). |
Pull request was closed
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
^0.5.6→^0.5.7^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.1.283→^2.1.292^2.5.12→^2.5.15^1.0.83→^1.0.92^1.1.24→^1.1.26^18.1.15→^18.1.22^18.1.15→^18.1.22^0.18.1→^0.18.9^0.6.27→^0.6.37^4.0.6→^4.0.7^20.0.20→^20.0.26^0.1.34→^0.1.39^3.0.61→^3.0.68^2.3.9→^2.3.10>=0.9.56→>=0.9.79^0.8.5→^0.8.7^0.13.10→^0.13.13^2026.9.5→^2026.9.8^0.15.6→^0.15.7>=0.16.6→>=0.16.10^0.0.44→^0.0.45^2.10.12→^2.10.13^8.2.2→^8.2.4^0.3.1→^0.3.3Release Notes
anthropics/claude-code (@anthropic-ai/claude-code)
v2.1.292Compare Source
--marketplace <source>toclaude plugin install: adds the marketplace if needed, under the same policy checks asclaude plugin marketplace add, then installs the plugin from iteffortparameter to the Agent tool, so Claude runs a sub-agent at the effort level you ask forCLAUDE_CODE_OVERLOADED_RETRY_BASE_DELAY_MSenvironment variable to set a longer base delay for the backoff when retrying an overloaded (529) requestprompt.autocomplete, an event a mod hooks to add its own rows to the prompt box's autocomplete list$.model.completefor mods:promptandsystemtake blocks of text, andcache: trueon a block caches the request up to itagent.spawnmod hook, with their run and index, so a mod can refuse thempermissionMode: autoentering auto mode when auto mode is unavailable (disabled by settings, circuit breaker, or a model that doesn't support it)/ultrareviewuploads under~/.claude/seed-adminrm -rfon the 8.3 short name or another alternate Windows spelling of the home folder or a drive not being treated as removing itallowed-toolsrule coming back in a later turn when you leave auto mode or plan mode partway through that turnNO_PROXYbeing ignored for Claude Code's own API requests (sign-in, policy, feedback, artifacts) whenHTTPS_PROXYis setclaude plugincommands such asmarketplace addandinstallrunning before an organization's managed settings had loaded on a first runclaude -pand Agent SDK runs stopping a background command 5 seconds after the final result, and one-shotclaude -pruns dropping a scheduled wakeup; both are now waited forclaude --resumesession picker or with/resume/resume,/branchor/clearnever firing, and saved tasks ignoring later creates and deletes after two writes to the tasks file milliseconds apart/loopsilently stopping when the session's process restarted (for example after a crash), because its pending wakeup was lostpageswas a list such as "6,9,15"; it now returns an error saying to read each page or range separately/bug,/shareand/feedback <text>starting over after Ctrl+O or Ctrl+Z while a report was being sent, and closing as cancelled after it had been sent/remote-envreplacing your saved default environment when you pressed Enter right away: the list now opens on your default, and no row has a check mark when no default is in effectf/t/F/T/;/,jumping to, or deleting up to, a match on another line of the prompt/add-dirpath box letting Shift+Enter or a paste add a line break, and treating fast-typed "tab", "up" or "down" as those keys!leaving the row selected/cdor a permission change, and added a transcript line when a nested one isn't loaded/nameletting Claude invoke a skill that is reserved for the user$.statecalls through one const taking minutes to load or validateclaude plugin validatelisting a matcher or state value for a hooks module that the engine reads from elsewhereclaude plugin validatelisting a$.statevalue read through a top-levelvarthat was declared again or reassigned; such a module is now refused$method restarting the hook origin, which could run a guard hook with a.catchabove it again without endconfig.set,state.set,env.setoragent.spawnhook that denies after callingnext(e)being answered as a refusal: the hook is now reported as failed, by name/theme, the/configTheme menu and the first-run theme step saving a theme before a plugin'sconfig.sethook was askedtool.checkhook answering allow running a tool that requires your answer (a question, a plan approval) without showing its dialognext(e)and then failed while the turn was interrupted letting the call through; the call is now rejected$name that a user-installed mod had added; the mod is now unloaded insteadtool.callhooks seeing some tool calls before misnamed parameters were repaired; a hook now sees the arguments the tool will run with.catchbeing skipped silently for calls another mod's hook makes beneath the guard's own$call; its.catchis now askedclaude -pand SDK sessions: the first turn no longer waits for HTTP and SSE MCP servers to answerresources/list<system-reminder>tags written in a hook's output are escaped before they reach Claudefile_pathforpath, and Write, WebFetch and Read ignore a few stray parameters instead of failing the callFOO=bar python3 app.pyruns unpromptedMCP_PROTOCOL_NEGOTIATION=legacyopts outclaude plugin test: a failedexpectinside a hook the test registered, or a stub answer the engine refuses, now fails the test instead of passing silentlynamelonger than that is ignored@Claude !statusin a channel to say when Claude has stopped reading its untagged messages, why, and that an @-mention starts it reading again!forkto a card showing where it came from, the request, and who asked, with a link to the original threadv2.1.291Compare Source
v2.1.290Compare Source
serverToolUsesto the result of a mod'sturn.stephook: the tool calls the API ran itself (the advisor), each with its id, name, input, start and endagentIdto thetool.checkevent of plugin hooks, so a hook can tell a subagent's permission check from the main session'sceilingto the question and verdict a mod'stool.checkhook reads, naming the approval an organization requires for a toolThemeKeyandColortypes to the plugin hooks typings, so an editor lists the theme colors a mod's drawing can nameclaude plugin validate: each hook a mod registers at a gating site is listed with whether it has a.catch(gatingHooksunder--json)claude attach <name>andclaude logs <name>: part of a session name works in place of the id/claude-api managed-agents-onboard <url>to set up the Managed Agents pattern a page describes asant applyfiles/claude-api managed-agents-onboard <quickstart-name>to build a Console quickstart template, such asdeep-researcher, with theantCLIoffsetto read on/rewindnot listing a prompt sent while Claude was still working/loopwith an interval, reminders) silently not coming back on resume once the conversation was compacted; covers compactions made from this version on/backgroundhand-off, and recurring ones firing an extra run on every resume, respawn or fork--json-schemaruns exiting non-zero withis_error: trueon asuccessresult when the connection dropped after the structured output was already deliveredCLAUDE.md, rule orAGENTS.mdsymlinked outside the working directories loading underpermissions.blockReadsOutsideWorkingDirectoriesor aReaddeny rulexn--host label matching differently from one process to the next/ultrareviewdropping uncommitted changes without a warning on Windows whengit stash createfailed, and refusing them after agit add -Nfile was deleted or movedplansDirectorysetting's project-root check for paths that contain a backslash on macOS and Linuxclaude daemon runandclaude daemon logs; they now show as\uXXXXescapes.catchbeing unloaded, and its.catchskipped, when the hook kept the hooks worker busy on a prompt or tool callturn.stepresult listing a tool call that a mid-response model fallback had discardedclaude plugin validateand plugin loading refusing a hooks module that destructures an option named like one of its top-level functions/ultrareviewfailing to upload uncommitted changes whencore.safecrlf=trueis set in git's configuration!shell blocks in skills and commands failing when the file is saved with CRLF line endings/permissionstab was clicked while searching in fullscreen modeansweronturn.completefor a subagent that hands its report back in auto modeprompt.submithook that drops a prompt after callingnext(e)being ignored silently: the hook is now reported as failed, by namedisableClaudeAiConnectorsandallowedMcpServersURL rules not being applied to some MCP entries declared in.mcp.json, plugins or agents@-mention under the read block or--restrictedbeing able to read a file outside the working directories through a link changed mid-read/looprun count, countdown and live status line after the session enters a worktree that it createsclaude agentssessions in manual permission mode asking for approval to read an image pasted into a reply or a new agent's promptdeclare,typeset,exportorreadonlylanguagesettingclaude respawnre-sending an earlier message to a backgrounded session that has no saved transcript instead of starting it with an empty conversationn:or Ctrl+F search in the agents view moving focus to a section header, where Ctrl+X twice would delete every session in the sectionclaude agentssaving a slash command it could not deliver to a stopped session and then running it by itself the next time that session restarted/ultrareviewuploading uncommitted changes unfiltered for files under a git filter driver namedunsetorunspecified; the upload now stops and asks you to rename the driverclaude --teleportand/teleportdeleting the files in a folder that had replaced a tracked file of the same name when you chose to stash: the stash is now refused, and says why/looprun count freezing and its countdown disappearing after/clear; the count now restarts with the new conversation--channelspermission relay: a reply ID that repeats within a session is now ignored instead of approving a different prompt/chrome"Reconnect extension" not restoring browser tools after a failed Chrome connection, and added an explanation when it can't (#98135)ANTHROPIC_BASE_URLwithANTHROPIC_AUTH_TOKEN) and have no Anthropic accountclaude agentsjust after a background session crashed being refused after 2 seconds: they are now retried for up to 12 seconds while the session restartsclaude agentscould not deliver to a running session being saved and sent by themselves the next time it was restartedcat <<EOF | python3) asking for approval on every runclaude agentsfailing with "Couldn't restart the background service" and background sessions stopping after a Homebrew upgrade (takes effect from the upgrade after this one)rgorgit grep) whose arguments the shell would still expand as wildcards; these now prompt for approvalclaude plugin testrefusing to run after an upgrade because of an out-of-date saved settinggit cloneoption keeping the sandbox exemption from a git pattern such asgit *insandbox.excludedCommands; it is now treated like the long form/ultrareviewof a local branch silently leaving uncommitted work out of the upload in a repository that keeps its branches outside.git(git 2.54+); it now refuses with an explanation/loopwakeup or scheduled task; Claude is now told and can schedule it againstore.postgres_urlcan't be parsed; the error now names the setting and says what the URL may hold/sandboxConfig tab on Linux and WSL when a sandbox read rule such as~/**/.envcovers a large folderclaude -prun from the Bash tool)--continueor--resume <session-id>in the terminal/rewind) freezing for hundreds of milliseconds per keypress when the conversation contains a very large pasted stack trace or source fileCLAUDE_CODE_USER_DIALOG_TIMEOUT_MS=5mbeing read as 5 ms and cancelling remote dialogs at once; values with a unit suffix now fall back todialogExpiry--restricted(andCLAUDE_CODE_RESTRICTED=1) sessions opening the cross-session messaging socket--allow-dangerously-skip-permissionson respawn without the bypass-permissions disclaimer having been acceptedclaude auth loginor with a credentials file already in the config directory/loginreporting success when the keychain refused the new login and kept an old one it could not remove--include-partial-messagesseeing a reply stay open after the turn ended when its stream was cut, interrupted or fell back to non-streamingConfigChangehooks and reloading settings mid-command when.claude/settings.jsonor.claude/settings.local.jsondoes not exist/loopand other recurring session-only scheduled tasks running an extra time after a sandboxed Bash command on Linux or after.claude/scheduled_tasks.jsonwas deletedplugin-authoringskill: Claude now gives the one command another person runs to install a mod you made, and writes it in a README's install section/pluginin the desktop app's Code tab: it now says where to install and manage plugins thereclaude auth loginand /login and no longer blames API-key authentication/ultrareviewupload: it is about half as long and says what kind of file is the problem/ultrareviewupload refuses a checkout: each known cause now has its own message, with a way to fix itbrowser_batchcall now gets 90 seconds, up from 60, before it is reported as timed outCLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFICto also skip the startup connection warm-up--chrome,/chromeor your user settingspyright, which is no longer treated as a read-only command$.process.spawnrejects with when another mod denies it after the child ran: it now says the call ran and a plugin withheld its result!shell command that contains raw control characters other than tab and newline, with a message that shows where they are/artifacts: opening an artifact in your browser now closes the listpscommand ask for approval instead of running without asking/ultrareviewupload fails at a git step: they name the step and what to try, and no longer repeat git's own error text/code-reviewat medium effort to also report cleanup and CLAUDE.md conventions findings on models without tuned review settings, including Opus 5.5 and Sonnet 5.5agent_idin Agent results to its agent ID (itsname@teamaddress stays inteammate_id); TeammateIdle hooks no longer fire from its subagents or forks/loop): they are now left running through updates and low memory, where being restarted or shut down could silently lose the wakeup/model,/effortand/renamesent fromclaude agentsto a busy background session to apply right away, without a confirmation, instead of when the turn endsCLAUDE_CODE_WEB_SEARCH_REFILLS_PER_HOURsets the rate, 0 turns it off) instead of ending after 200 callsCLAUDE_CODE_DISABLE_ATTACHMENTSso a repository's.claude/settings.jsonor.claude/settings.local.jsoncan no longer set it; shell, user and managed settings still canclaude plugin updateon a plugin loaded from a directory to print just its reason, without the "Failed to update plugin" prefix, as for built-in pluginsgh apiin cloud sessions: a host other than github.com set inGH_HOSTorGH_REPOis now refused (use--hostnameor a full URL), and stderr notes requests to other hostsclaude-apiskill's Managed Agents examples to turn off the web tools unless the agent needs them and to use theautopermission policyclaude --environment <id>to create its session through the current Sessions API; printed and JSON session ids keep their session_… form!fastto switch a thread to fast mode, moving it to Opus if needed, and!fast offto switch back; replies show (fast) while it's onv2.1.289Compare Source
<script>tags or deeply nested${substitutionsReaddeny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlinkclaude auth statusthat may have made sign-outs more frequentplugin list,plugin evalandplugin updateshowing a stale copy of a plugin installed from a local folder marketplace, and hot reload for a symlinked--plugin-dir@in its path, an uppercase host or afile:pathTZ="$HOME" rm -rf build) when the sandbox auto-allows commandsclaude plugin validateskipping the plugin when the folder also holds a marketplace manifestagent.spawnfor teammates, one agent id across plugin hook events, and idle and waiting states in$.agent.list()ui.renderhook wrote made a row throw while drawn; the engine now draws its own row instead[-], which now also keep one column in from the terminal's edgeClientthat fails while drawn taking down everything the mod drew around it; it now fails alone and raisesui.faultclaude plugin validatefailing an Anthropic marketplace's own plugin and listing a cleanplugin.jsonin--json