[dependabot]

Bumps @anthropic-ai/sdk from 0.128.0 to 0.137.0.

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.137.0

Features

• api: add org webhook endpoints and user profile enforcement events

Chores

• ci: run the changelog check on a standard runner
• tests: make credential tests independent of the caller's environment

sdk-v0.136.0

Features

• api: add data_refreshed_at and has_more to analytics report pages
• api: add workspace rate-limit updates to the Admin API
• api: make User Profiles generally available
• client: yield server-sent events with unrecognized event names
• tools: accept every tool definition field in the tool helpers

Bug Fixes

• client: treat x-amz-security-token as a sensitive header
• tools: keep $ sequences literal in memory tool str_replace

Chores

• ci: skip the changelog check on draft pull requests
• docs: add credential expiry descriptions to the Managed Agents API reference
• docs: add Messages API request descriptions
• docs: correct plugin manifest_version and reach descriptions
• docs: improve Managed Agents memory store descriptions
• docs: improve Managed Agents vault and credential descriptions
• internal: bump playwright-core in the browser ecosystem tests
• tests: cover OpenTelemetry failures, propagation and environment variables

sdk-v0.135.0

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

• client: close streams dropped without being read to the end
• client: keep an unread JSONL response open while it is held

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.137.0 (2026-10-20)

Features

• api: add org webhook endpoints and user profile enforcement events

Chores

• ci: run the changelog check on a standard runner
• tests: make credential tests independent of the caller's environment

0.136.0 (2026-10-20)

Features

• api: add data_refreshed_at and has_more to analytics report pages
• api: add workspace rate-limit updates to the Admin API
• api: make User Profiles generally available
• client: yield server-sent events with unrecognized event names
• tools: accept every tool definition field in the tool helpers

Bug Fixes

• client: treat x-amz-security-token as a sensitive header
• tools: keep $ sequences literal in memory tool str_replace

Chores

• ci: skip the changelog check on draft pull requests
• docs: add credential expiry descriptions to the Managed Agents API reference
• docs: add Messages API request descriptions
• docs: correct plugin manifest_version and reach descriptions
• docs: improve Managed Agents memory store descriptions
• docs: improve Managed Agents vault and credential descriptions
• internal: bump playwright-core in the browser ecosystem tests
• tests: cover OpenTelemetry failures, propagation and environment variables

0.135.0 (2026-10-15)

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

... (truncated)

Commits

• 9c65624 release: 0.137.0
• 04151db Merge pull request #970 from anthropics/synced/published
• 5aae8ce feat(api): add org webhook endpoints and user profile enforcement events
• 261ead0 codegen metadata
• 20d7c14 codegen metadata
• a7736e6 chore(ci): run the changelog check on a standard runner
• 48ecaa4 Merge branch 'main'
• accbdd8 release: packages/aws-sdk 0.9.0, packages/bedrock-sdk 0.36.0, packages/vertex...
• b00aefc Merge pull request #968 from anthropics/synced/published
• 521ffc1 Merge branch 'main'
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[muxreview]

muxreview did not approve this Dependabot PR by rule: package.json: @anthropic-ai/sdk 0.128.0 -> 0.137.0 changes the minor version below 1.0.0.

A person can still review and merge it. Ask again with @muxreview review after a new push, or once any date above has passed.