Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 3 updates - #53

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-09f2988b4c
Closed

chore(deps): bump the npm-minor-and-patch group across 1 directory with 3 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-09f2988b4c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 3 updates in the / directory: @anthropic-ai/sdk, @modelcontextprotocol/sdk and @types/node.

Updates @anthropic-ai/sdk from 0.128.0 to 0.135.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.135.0

Features

  • api: add between_tools to thinking types in model capabilities
  • api: add the speed parameter and usage.speed to Messages
  • api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

  • client: close streams dropped without being read to the end
  • client: keep an unread JSONL response open while it is held

Chores

  • ci: speed up breaking change detection
  • docs: describe headers on Managed Agents and telemetry endpoints

Documentation

  • api: note that some models need a beta header to use speed

sdk-v0.134.0

Features

  • api: add execution_identity to Managed Agents agents

  • api: add organization_type_not_supported error to spend limit lists

  • api: add telemetry destination test endpoint

  • api: add telemetry destinations to the Admin API

  • client: add native support for OpenTelemetry tracing

    If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass openTelemetry: false to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

  • api: rename telemetry destination test response model
  • client: close an unread stream that was dropped while tracing is on
  • client: don't follow redirects on token requests
  • client: treat proxy-authorization as a sensitive header

Bug Fixes

  • streaming: tolerate unknown event types in MessageStream and BetaMessageStream
  • streaming: stop throwing "Unexpected event order" for an event before message_start
  • streaming: yield events that arrive before message_start when iterating MessageStream and BetaMessageStream

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.135.0 (2026-10-15)

Features

  • api: add between_tools to thinking types in model capabilities
  • api: add the speed parameter and usage.speed to Messages
  • api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

  • client: close streams dropped without being read to the end
  • client: keep an unread JSONL response open while it is held

Chores

  • ci: speed up breaking change detection
  • docs: describe headers on Managed Agents and telemetry endpoints

Documentation

  • api: note that some models need a beta header to use speed

0.134.0 (2026-10-14)

Features

  • api: add execution_identity to Managed Agents agents

  • api: add organization_type_not_supported error to spend limit lists

  • api: add telemetry destination test endpoint

  • api: add telemetry destinations to the Admin API

  • client: add native support for OpenTelemetry tracing

    If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass openTelemetry: false to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

  • api: rename telemetry destination test response model
  • client: close an unread stream that was dropped while tracing is on
  • client: don't follow redirects on token requests
  • client: treat proxy-authorization as a sensitive header

Bug Fixes

  • streaming: tolerate unknown event types in MessageStream and BetaMessageStream
  • streaming: stop throwing "Unexpected event order" for an event before message_start

... (truncated)

Commits
  • 04a4c28 release: 0.135.0
  • 69dbe62 Merge pull request #935 from anthropics/synced/published
  • b61a531 feat(helpers): retry a rate-limited fast fallback at standard speed (#943)
  • 38d0ab4 feat(api): add between_tools to thinking types in model capabilities
  • 366b53b chore(docs): describe headers on Managed Agents and telemetry endpoints
  • ca50812 docs(api): note that some models need a beta header to use speed
  • 03f6012 fix(helpers): honor speed overrides from fallback entries when streaming (#942)
  • 88bf034 docs(changelog): shorten the OpenTelemetry tracing note (#941)
  • 7c807a0 fix(client): close streams dropped without being read to the end
  • 64758f6 feat(api): add the speed parameter and usage.speed to Messages
  • Additional commits viewable in compare view

Updates @modelcontextprotocol/sdk from 1.30.0 to 1.32.1

Release notes

Sourced from @​modelcontextprotocol/sdk's releases.

1.32.1

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.0...1.32.1

1.32.0

Upgrade notes

  • Redirects: the HTTP client transports now follow a redirect only when it stays on the same origin (same scheme, host and port; http to https on the same host is allowed). A deployment whose endpoint redirects to another host or port either configures the final URL or sets redirectPolicy: 'follow' on StreamableHTTPClientTransport or SSEClientTransport. In browsers, a redirected request fails unless that option is set.
  • New options, both off unless you set them: maxToolInputElements on McpServer limits the number of array elements and object members in a tool call's arguments. expectedResource on requireBearerAuth accepts only tokens issued for this server (the token's audience).

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.31.0...1.32.0

1.31.0

Upgrade notes

  • Stored OAuth tokens and client information now include an issuer field. Storage that rejects unknown fields needs to allow it.
  • Pass expectedIssuer when constructing ClientCredentialsProvider, PrivateKeyJwtProvider or StaticPrivateKeyJwtProvider. Constructing them without it is deprecated.

What's Changed

Full Changelog: modelcontextprotocol/typescript-sdk@1.30.1...1.31.0

1.30.1

What's Changed

New Contributors

... (truncated)

Commits
  • ff07b00 chore: bump version to 1.32.1 (#2954)
  • 8a74d50 [v1.x] docs: point the README at v2 and say what v1.x supports (#2942)
  • a8cf503 [v1.x] docs: state the principles in CLAUDE.md (#2939)
  • 32549b0 chore: bump version to 1.32.0 (#2935)
  • 588d51d [v1.x] test(e2e): cover tools/call and prompts/get without arguments (#2931)
  • 5a0724d [v1.x] feat(auth): add expectedResource to requireBearerAuth (#2930)
  • 0ca0b62 [v1.x] fix(server): accept tools/call and prompts/get requests that omit argu...
  • fd26801 [v1.x] feat(server): add maxToolInputElements option to limit the number of e...
  • 727075b [v1.x] fix(tasks): keep tasks of the in-memory task store within the session ...
  • 0ff6377 [v1.x] examples: close idle sessions and cap the session map (#2914)
  • Additional commits viewable in compare view

Updates @types/node from 22.20.4 to 22.20.5

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-09f2988b4c branch from 05e6197 to 5b98120 Compare October 10, 2026 10:54
@dependabot
chore(deps): bump the npm-minor-and-patch group across 1 directory wi…
85ae481 
…th 3 updates

Bumps the npm-minor-and-patch group with 3 updates in the / directory: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript), [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `@anthropic-ai/sdk` from 0.128.0 to 0.135.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.128.0...sdk-v0.135.0)

Updates `@modelcontextprotocol/sdk` from 1.30.0 to 1.32.1
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)
- [Commits](modelcontextprotocol/typescript-sdk@1.30.0...1.32.1)

Updates `@types/node` from 22.20.4 to 22.20.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.131.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@modelcontextprotocol/sdk"
  dependency-version: 1.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 22.20.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-09f2988b4c branch from 5b98120 to 85ae481 Compare October 27, 2026 10:13
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

The group that created this PR has been removed from your configuration.

@dependabot dependabot Bot closed this Oct 27, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-09f2988b4c branch October 27, 2026 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants