chore(deps): bump @anthropic-ai/sdk from 0.78.0 to 0.90.0#345
chore(deps): bump @anthropic-ai/sdk from 0.78.0 to 0.90.0#345dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) from 0.78.0 to 0.90.0. - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.78.0...sdk-v0.90.0) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.90.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
✔️ Bundle Size Analysis
Bundle breakdown |
Greptile SummaryThis PR is a routine Dependabot bump of Confidence Score: 5/5Safe to merge — purely a dependency version bump with no breaking changes affecting existing SDK usage patterns. All changed lines are in No files require special attention. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[package.json] --> B[pnpm-lock.yaml]
B --> C[src/llm/api.ts]
B --> D[src/llm/batch.ts]
B --> E[src/loop/agents/anthropic-sdk.ts]
B --> F[src/loop/visual-validation.ts]
C --> G[Anthropic API]
D --> G
E --> G
F --> G
Reviews (1): Last reviewed commit: "chore(deps): bump @anthropic-ai/sdk from..." | Re-trigger Greptile |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — straightforward Dependabot SDK version bump with consistent lockfile updates.
Extended reasoning...
Overview
This PR bumps @anthropic-ai/sdk from 0.78.0 to 0.90.0 in package.json and the corresponding pnpm-lock.yaml. The lockfile also picks up minor transitive updates to @babel/runtime, rollup, postcss, and @rollup/* platform binaries — all patch/minor bumps with valid integrity hashes.
Security risks
No security risks. This is purely a dependency version update generated by Dependabot. The upstream SDK changelog shows additive API features (new model IDs, token budgets, streaming fixes) with no breaking changes or known CVEs.
Level of scrutiny
Low. Dependabot PRs with only package.json and pnpm-lock.yaml changes require minimal scrutiny. The lockfile hashes are present and consistent with the declared versions.
Other factors
No bugs reported by the bug hunting system. No prior reviews on this PR. No outstanding reviewer comments. The change is self-contained and does not touch application logic.
|
Superseded by #353. |
dependabot
Bot
deleted the
dependabot/npm_and_yarn/anthropic-ai/sdk-0.90.0
branch
Bumps @anthropic-ai/sdk from 0.78.0 to 0.90.0.
Release notes
Sourced from
@anthropic-ai/sdk's releases.... (truncated)
Changelog
Sourced from
@anthropic-ai/sdk's changelog.... (truncated)
Commits
93ac7c7chore: release main (#1003)39549e9chore: release main (#993)089fe05chore: release main (#987)73f128fchore: release main (#985)fd6cf54chore: release main (#983)79d1d73chore: release main (#982)4ade5b1chore: release main (#979)4368602chore: release main (#978)4105fd6chore: release main (#973)0b536aechore: release main (#970)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)