chore(deps): update bump-dependencies - #76
Merged
Merged
Conversation
renovate
Bot
force-pushed
the
renovate.bump-dependencies
branch
from
October 5, 2026 10:57
3785eda to
484c16c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.283→2.1.2872.1.289(+1)0.159.2→0.160.05:29.8.1-1~debian.13~trixie→5:29.8.2-1~debian.13~trixie5.5.1-1~debian.13~trixie→5.6.0-1~debian.13~trixieWarning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
anthropics/claude-code (@anthropic-ai/claude-code)
v2.1.287Compare Source
/plugin enable cc-plugin-you-should-know@builtin(for first-party sessions with telemetry on)n:<text>filter to the agents view that matches session names and tasks; a filter now shows matches in collapsed sections and Enter opens the first matchprompt_textto the OpenTelemetryuser_promptevent, a copy ofpromptfor backends that nest dotted keys; drop or mask it wherever you drop or maskprompt(#70763)gh api(REST only) for sessions that use Anthropic-managed git on macOS and Linux machines where the GitHub CLI is not installedasyncRewakewaking Claude over and over with "found issues" notifications when the hook's script file is missing; the broken hook is now reported onceavailableModelslist, which could collapse/modelto one Opus row/modelon a claude.ai login saving the current version's id, so your saved default now follows the newest Fable like Opus and Sonnet do/model,opusplan) rewriting earlier MCP tool announcements, which could drop earlier extended thinkingrm(such as one on/or the home directory) losing its always-ask safeguard when the same command also redirected output to a~or wildcard pathclaude -pand SDK sessions repeating a model fallback on every later message after the model was switched while a reply was runningclaude agentsafter the agent exited and removed the worktree the session was started in/advisorpairing checks: Sonnet 5.5 can now advise Opus 4.7 and 4.8, and advisors the API would refuse are flagged up front instead of being silently dropped__proto__claude --teleportprogress screen, and an MCP form field while it is being checked, to the screen reader again on every spinner frameCLAUDE_CODE_DISABLE_EXPERIMENTAL_BETASnot removing the structured-output format from session-title and prompt-hook requests, which Bedrock-backed gateways reject--include-partial-messagessending a cut-short reply'smessage_stoplate or never, so apps could show the reply as still in progressclaude agentssometimes not showing the permission prompt a background session is waiting on/ultrareviewgiving advice about.git/info/attributeswhen the upload stops on a committed.gitattributesit cannot read, such as one saved as UTF-16claude remote-controlfailing to register behind an HTTP proxy with a misleading "Check your organization permissions" error (#97352)claude agentschanging every second in screen reader mode; they now change at most every 10 secondsAPI Error: 401instead of "OAuth token revoked"; in-pmode the error now starts with "Failed to authenticate"/ultrareviewupload refusals advising you to copy a variable named by a repository's settings file into your own user settings--output-format stream-jsonand the SDK not streaming the turns of acontext: forkskill run by typing/<skill>as the prompt, as they do for the Skill tool's forkclaude plugin marketplace add --sparseandgit-subdirplugin installs failing with "transport 'http' not allowed" when the repository is served over plain http--plugin-urldownload corrupting the session's cached copy of the plugin archive/desktopquoting partial output when opening Claude Desktop timed out or printed too much output; the error now names the causeclaude remote-controlstopping mid-turn when the Mac went to idle sleepclaudehanging or crashing with "Raw mode is not supported" when its input is piped or redirected; it now says why and exits (use-pfor piped input)CLAUDE_CODE_SKIP_*_AUTHsending a differentAuthorizationheader than real requests whenANTHROPIC_CUSTOM_HEADERSrepeats it/config: settings that cycle show ‹ › and step both ways with ←/→, narrow terminals stack each value under its label, and PgUp/PgDn page the list/memory: the left and right arrow keys now flip its on/off settings, such as Auto-memory/skillnames typed mid-message: Claude is now told they are skills, includingdisable-model-invocationones~target too[1m]suffix (CLAUDE_CODE_DISABLE_1M_CONTEXT=1keeps 200K)claude agentsto arrive as queued messages; slash commands other than/stopsent while a turn is running now run when it endsBashallow rules and allowing hooks to prompt for, not run, shell writes to files Claude Code's file tools refuse outright (the Anthropic profile store, the host credentials file)alwaysLoad: falseto defer all of that server's tools behind tool searchCLAUDE_AX_PREPARK_MS=50to restore the pause/usageor/contextcommand opening the extension's dialog instead of running when picked from the command menuv2.1.286Compare Source
claude --resumeand--continuesometimes losing every turn after a batch of parallel tool calls when the earlier session crashed or was killed/loginsucceeds in another Claude Code window when a leftover~/.claude/.credentials.jsonexistsclaude remote-control) staying connected after your organization's policy turns Remote Control off; they now disconnect with a notice--fallback-modelretries failing when the fallback model can't run fast; they now run at standard speed, with a one-time notice in interactive sessionsclaude auth statusreporting a Console sign-in's stored API key asclaude.ai; it now reportsapi_key, and the VS Code extension treats that session as an API key session/statuslisting an Anthropic profile beside an API key as if both were in effect; the profile is now marked as not in use), quotes,],&or a second@, or that runs past a/to a bracketed host such as[::1]in an ssh URL/feedbacksaves to disk containing invalid JSON lines after secret redaction/usagenot crediting an MCP server for a tool call made while that server was still connecting or had only just connected, such as right after a restart/compact,/clear, and/rewindtyped while viewing a background agent's or teammate's transcript silently acting on the main conversation: a dialog now names the target and asks first/plugin's Discover tab showing a marketplace name unquoted in its "Checking … for new plugins" line when its rows already show that name in quotesverify, Claude is now told to run it right before committing, except for docs-only and tests-only commits/hooks: the closing line of a hook's detail screen now says "this hook" instead of "it"-psessions when a host re-sends an MCP server enable for a server that is already connected/protocol: it now says not to reject unknown input and matches what Claude Code sends today--bareto connect only the MCP servers named on the command line, send the model no system reminders, and start no background tasks; under--bare, a shell command that reaches its timeout now stops instead of moving to the background/artifacts,/mcp,/skills,/hooksand others) to always line up each row's details in one column after the names/hooksto open on one list of your configured hooks grouped by event, so viewing a hook takes one Enter instead of three/exit's Remove worktree to run after Claude Code stops the servers and shells it started there, which on Windows could keep the folder from being deletedclaude-apiskill's Managed Agents examples to create environments with limited networking/ultrareviewandclaude ultrareviewoutputclaude --bgand the agents view refusing a folder thatclaudealready trusts when its trust record was saved with different letter casev2.1.285Compare Source
CLAUDE_CODE_DISABLE_WEB_FETCHenvironment variable to turn off the WebFetch toolclaude --desktopto open the Claude desktop app on the current directory, or on a session with--continue/--resume <id>claude plugin configure <plugin>to show a plugin's options and which are unset, or save new values read from stdin with--values-stdin<server>.<key>=<value>toclaude plugin install --config, so a bundled.mcpbMCP server's own settings can be set at install time and it starts without visiting/plugin→ ConfigureallowedProvidersmanaged setting to limit which API providers a machine may use (Anthropic API, a custom endpoint, Bedrock, Mantle, Vertex AI, Foundry, Claude Platform on AWS, or a Cloud gateway)CLAUDE_CODE_NONSTREAMING_TIMEOUT_RETRIESenvironment variable to cap re-sends of a non-streaming fallback request that timed outclaude -pwithCLAUDE_CODE_FORK_SUBAGENT=1: a subagent's own Agent call now runs in the foreground, so the subagent gets the child's resultGIT_SSHor in your git config'score.sshCommandclaude plugin disableandenablewith a fullname@marketplaceid changing a settings entry in another letter case instead of the installed plugin's ownset_modelrequest (such as the Agent SDK'ssetModel) leaving the new model on the built-in output-token limit and auto-compact window until restart@, or all of it when the URL writes its@as%40/teleportfetches taking over the terminal; these fetches now fail fast instead of asking-psessions leaving its tools availableclaude -p --permission-prompt-tool: a background subagent's permission request now goes to the prompt tool instead of being auto-deniedclaude mcp listandclaude mcp get, and the not-found error ofclaude mcp remove,loginandlogout, printing line breaks and terminal escape sequences from MCP server names and valuespython3 -c,node -e) just because they contain=dontAskmode: a fork now runs under its parent's permission mode and cannot exit plan modeclaude remote-control --helpsaying--[no-]chromedefaults to the machine's/chromesetting; spawned sessions keep Claude in Chrome off unless--chromeis passed/remote-envreading only the newest 20 of an account's environmentsclaude plugin installor/pluginputting it into an installed plugin's cache or data folder when their ids differ only in.,-,@or (macOS, Windows) capitals; the install is now refusedANTHROPIC_AUTH_TOKENagainst the Anthropic API never loading the organization's policyagent(),parallel()orpipeline()call that a workflow script awaits later, or not at all, being treated as an unhandled promise rejection, which could end a background sessionsome-daemon &) kept its output open; the hook now finishes shortly after its own process exitsmodelTimeoutExceptionandserviceUnavailableExceptionerrors showing a raw JSON body instead of the error message/autofix-prand/schedulesaying the Claude GitHub App is not installed on a repository whose install status had not been checked yet/artifactsunlinking its file from the artifact, so publishing the same file again created a new artifact instead of updating itArtifactallow rule ("don't ask again") letting the Artifact tool publish a file outside the working directories without asking; add the file's folder with--add-dirfor the rule to cover it/costand SDKmodelUsagereporting a turn under the wrong model when the server answered a refusal with a different fallback model than the client expected/ultrareviewwhen the project folder briefly could not be read/ultrareviewon macOS and Linux failing to upload the working tree from a git worktree whose per-worktree config setscore.longpaths/ultrareviewuploads including uncommitted changes to credential files whose name has a colon before the extension, such asserver:8443.key/ultrareviewuploads on macOS and Linux running slowly on some unusual file names, and their credential-file check missing file or folder names with many backup or editor marksxorrin NORMAL mode no longer breaks a pasted-text placeholder at the end of the prompt.mcpbMCP server that still needs configuration:/plugin, the install message andclaude plugin installnow say so and point to Configure/ultrareviewrefusing to upload a checkout on a Linux volume when a changed file's name has a colon or ends in a dot or spaceCLAUDE_CODE_RESUME_INTERRUPTED_TURNre-running a turn that had ended at--max-turns/ultrareviewuploading a linked worktree of a repository rooted at your home folder in some casesclaude agentsto a background session waiting on a permission prompt sometimes approving the pending commandclaude attach,logs,stop,respawnandrmstarting a new session with the command name as its prompt when options came before it, such as from a shell aliasclaude mcp listleaving out WebSocket (ws) MCP servers; each is now listed with its URL and health statusclaude mcp getshowing no Type, Command, Args, or Environment for stdio servers whose config entry omits thetypefield.claude/settings.local.jsonallow rules being held back outside a git repository when git's trace2 output is configured/claude-apieval runner scaffold and report builder writing through a symlink or hard link planted at an output file/claude-apieval runner scaffold counting responses cut off atmax_tokensin the score averages; they are now marked truncated and counted separately showing as literal text in the terminal when a reply uses it to indent text, such as row labels in a markdown table/clearor/compact/btwside question asked of a session hosted by an app such as Claude Desktop now sees the turn in progress, not only the last finished onepingstream event is now sent every 30 seconds on the Anthropic API, Claude Platform on AWS and gateways/resumeandclaude --resumeon a session that is running in the background: they now open that session instead of refusing, and a prompt given withclaude --resume <id> "prompt"is sent to it as its next turn_meta['anthropic/alwaysLoad']to false stays deferred when its--mcp-config, Agent SDK or plugin server is set toalwaysLoadtimeoutwithrun_in_background, default 30 min, max 2 h); Claude is notified when one is stopped/ultrareviewto run whendisableWorkflowsis on, unless the machine running the review has it set by its own administrator (MDM or the managed-settings file)ANTHROPIC_BASE_URLto use the 1M context window of models that have one (Opus 4.7+, Sonnet 5+, Fable); run/autocompact 200kif your gateway stops at 200Kclaude -pand Python Agent SDK sessions on third-party providers or with telemetry off to start in auto mode when no permission mode is configured, like interactive sessions;--permission-modestill overrides itwidgetsto be reserved in cloud sessions and on self-hosted runners: your own server under it, or a close spelling such aswidgets_, no longer loads, so rename it/ultrareviewon macOS and Linux to leave symbolic refs out when uploading a local checkout; a checkout whose current branch is a symbolic ref is now refused with an explanationenvto no longer setALLUSERSPROFILE,SystemDrive, or theCommonProgramFilesvariables; set them in user or managed settings instead/tasksto fold background work Claude Code runs for itself under one "System tasks" row; press Enter on it to show those tasks/ultrareviewon macOS and Linux to require git 2.31 or newer to upload a local repository; checkouts made with--separate-git-dirare now refused instead of being uploaded with an older method/ultrareviewuploads on macOS and Linux to send a partial clone as a working-tree snapshot on git 2.31 or newer, instead of falling back or refusing when git's version looked too old/ultrareviewuploads on macOS and Linux to refuse, instead of fetching, a partial clone missing some of its working tree's files on older git versions; a clone made without--filteruploadsclaude mcp getto hide the command, arguments, and environment values of stdio MCP servers provided by plugins; variable names are still shown/claude-apiso it can no longer be run from Remote Control clients/config chrome=trueto direct you to the /config panel instead of enabling Claude in Chrome by default;/config chrome=falsestill turns it off when it was onCLAUDE_CODE_RESUME_INTERRUPTED_TURNset, even with Continue After Reload offCLAUDE_CODE_SUBAGENT_MODEL_FORCEor an agent's ownmodel).claude/settings.jsonturns onMCP_DISCOVERY_CACHE=1, when set in your cloud environment's variables rather than a settings file, to reuse your connectors' tool lists after a session restart; other MCP servers are no longer cached and connect at startupv2.1.284Compare Source
claude-sonnet-5-5), now the default Sonnet model on the Anthropic API — 1M context, $2/$10 per Mtok with $0.20/Mtok cache reads/usageand the status line (for example "$271.40 / $500.00 spent this month") when the gateway runs this version or later; the status line'srate_limits.spend_limitalso gainsused_usd,limit_usdandperiodeffortSlider:decreaseEffort,increaseEffortandtoggleUltracodekeybinding actions, so the/effortslider's arrow and Tab keys can be rebound inkeybindings.json/rate-limit-optionsto/helpand the command menu for claude.ai subscribers, so the usage-limit notices that mention it point to a command you can find/mcp reconnect allin the interactive terminal to retry every MCP server that failed to connect or needs authentication at onceavailableModelsis empty, or leaves out the model Claude Code starts on without settingmodelorenforceAvailableModelsauth: { google: {} }for Claude apps gatewaytelemetry.forward_todestinations, so telemetry can be exported straight to Google Cloud's OTLP endpoint using the gateway's Google Cloud credentialsprivate_key_jwt) between the Claude apps gateway and its identity provider, for identity providers that issue certificate credentials instead of client secretssource, and failing on every later turn after a malformed document block; a malformed image is now replaced with an explanatory note/usage,/extra-usageand IDE usage views now back off instead of re-askingclaude mcp addreporting success when managed settings restrict MCP servers to plugins; it now refuses and says what to do, instead of saving a server that never loads/pluginconfigure screen: boolean options are now a true/false choice instead of free text, number options refuse invalid input, and ←/→ change an options field instead of switching tabsANTHROPIC_FOUNDRY_RESOURCEbeing interpolated into the Foundry endpoint host unvalidated; a value that is not a plain resource name is now refusedbin/directories that don't exist are no longer added to PATH, and inherited entries aren't added twicesparsePathsplugin marketplaces cloning empty and replacing a working local copy on older git (before 2.39), which failed every refresh with "marketplace.json file is no longer present"Configuration
📅 Schedule: (UTC)
* * * * 3)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.