fix(deps): update minor and patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/claude-agent-sdk	0.3.201 → 0.3.214
@anthropic-ai/sdk	^0.106.0 → ^0.112.0
@types/node (source)	22.20.0 → 22.20.1
@workos/emulate	^0.1.0 → ^0.2.0
oxfmt (source)	^0.56.0 → ^0.59.0
oxlint (source)	1.72.0 → 1.74.0
pnpm (source)	10.34.4 → 10.34.5
tsx (source)	4.23.0 → 4.23.1
xstate (source)	5.32.4 → 5.32.5

---

Release Notes

anthropics/claude-agent-sdk-typescript (@​anthropic-ai/claude-agent-sdk)

v0.3.214

• set_permission_mode now rejects unrecognized permission modes with an error instead of silently adopting them; the 'manual' alias is accepted at every ingress
• Added optional subkind: 'scheduled-trigger' to the task-notification member of SDKMessageOrigin, marking deliveries that are the fired prompt of a user-configured scheduled task
• applyFlagSettings({effortLevel}) now accepts 'max' in its TypeScript type (runtime already supported it)
• Assistant messages truncated by interrupt() now carry aborted: true, so consumers can distinguish a mid-stream partial from a completed message
• Added optional subagent_type and subagent_retry fields to tool_progress messages so clients can show a subagent waiting out an API rate-limit retry
• The system/init message's plugins entries and the reload_plugins response now include each plugin's manifest version
• SessionStart hooks now report source "fork" instead of "resume" when the session begins as a fork

v0.3.213

• Updated to parity with Claude Code v2.1.213

v0.3.212

Compare Source

• Fixed dash-leading resumeSessionAt and sessionId values being passed to the CLI as separate argv tokens; both now use equals-form (--flag=value)
• Agent tool output now includes the resolved model when a mid-turn model swap changed the subagent's model

v0.3.211

Compare Source

• Fixed --replay-user-messages with --include-partial-messages emitting the turn-start user replay after the first content block instead of before the turn's content events
• Added SDKAssistantMessage.timestamp (ISO-8601) to the live stream, matching SDKUserMessage; older emitters omit it, consumers should fall back to receive time
• Added rate-limit message prefix buckets (USAGE_LIMIT_ERROR_PREFIXES and siblings) as @alpha exports for classifying rate-limit messages without hand-mirrored lists
• Improved process-exit errors to include the CLI's stderr output, so a failed child reports its actual cause instead of only an exit code

v0.3.210

Compare Source

• Added timedOutAfterMs to BashToolOutput, set when a command is auto-backgrounded on timeout

v0.3.209

Compare Source

• Updated to parity with Claude Code v2.1.209

v0.3.208

Compare Source

• Fixed a caller abort during a pending SDK hook callback being converted into hook success, which let PreToolUse-gated tools execute after the abort
• Fixed a per-query resource leak in the SDK's process tracking when spawning the CLI fails (nonexistent or inaccessible executable path)
• Fixed an SDK UserPromptSubmit hook callback exceeding its timeout killing the entire query with an empty error; it now blocks the prompt with a clear timeout message and the session continues
• Fixed extraArgs values that look like flags (e.g. resume: '--version') being parsed as their own CLI flags; dash-leading values are now bound with equals-form argv
• Fixed an abort-listener leak: streaming queries sharing one AbortController no longer accumulate abort listeners on its signal after each completed query
• Fixed createSdkMcpServer docs pointing at a nonexistent env var; the MCP tool-call timeout knob is MCP_TOOL_TIMEOUT
• Fixed an uncaught exception when writing to stdin after the Claude Code subprocess has exited

v0.3.207

Compare Source

• Fixed canUseTool returning {behavior: 'allow'} without updatedInput being rejected as a deny with a raw ZodError message; the tool now runs with the original input per the documented contract
• The Agent tool's structured result now has a published SDK type (AgentToolCompletedOutput) that matches the emitted object exactly

v0.3.206

Compare Source

• Added command_lifecycle frames to stream-json and SDK sessions, reporting each uuid-stamped message's terminal state (queued/started/completed/cancelled/discarded); zero-API results no longer report stale duration_api_ms

v0.3.205

Compare Source

• Interrupt control responses now include still_queued (UUIDs of queued async messages that will still run), Query.interrupt() returns the typed receipt, and system/init advertises an interrupt_receipt_v1 capability for feature detection
• Added structured name and body fields to peer-message session events, exposing the sender display name and decoded message body

v0.3.204

Compare Source

• Added terminal_reason values tool_deferred_unavailable (deferred tool resume found the tool gone — previously an is_error result with no reason, read as a clean completion by lifecycle sweeps) and turn_setup_failed (the turn-input builder threw before the turn started). Both classify as dead turns, so commands consumed by them report command_lifecycle state cancelled
• Fixed the post-merge cancel backstop cancelling every member of a coalesced prompt batch when a cancel named only one: uncancelled siblings now re-merge and run (previously they were reported cancelled — on remote transports that acknowledged them as processed, silently dropping messages nobody cancelled)
• Added terminal_reason values api_error, malformed_tool_use_exhausted, budget_exhausted, and structured_output_retry_exhausted. Turns that die on an exhausted-API-retry or malformed-tool-use give-up previously reported completed; budget and structured-output exhaustion results previously omitted terminal_reason. Commands consumed by such turns now report command_lifecycle state cancelled instead of completed (dup-over-loss)
• Updated to parity with Claude Code v2.1.204

v0.3.203

Compare Source

• Added a background_tasks_changed system message with the full set of live background tasks on every membership change, so consumers can track background activity as a level instead of pairing task_started/task_notification edges
• Fixed stable releases shipping a sdk.d.ts with unresolved type references that broke consumer typechecking with skipLibCheck disabled

v0.3.202

Compare Source

• Added parent_agent_id field to subagent session messages for building depth-2+ agent trees from disk-persisted metadata
• Fixed apply_flag_settings with a non-object settings value crashing the session instead of returning a control error

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.112.3

Compare Source

Full Changelog: sdk-v0.112.2...sdk-v0.112.3

Chores

• docs: small updates (79fd6c7)

v0.112.2

Compare Source

Full Changelog: sdk-v0.112.1...sdk-v0.112.2

Chores

• client: docs updates (fdb3a65)

v0.112.1

Compare Source

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

v0.112.0

Compare Source

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

• api: add support for MCP Tunnels (597ac41)

v0.111.0

Compare Source

Full Changelog: sdk-v0.110.0...sdk-v0.111.0

Features

• api: add support for dreaming (77b28a6)
• tools: gate session tool calls on evaluated_permission; bound idle by server stop_reason (68a6d7b)

Chores

• docs: small updates to field descriptions (e25b885)
• docs: update model example (a33f3f0)
• docs: updates to descriptions and examples (eac4bac)

v0.110.0

Compare Source

Full Changelog: sdk-v0.109.1...sdk-v0.110.0

Features

• api: add agent-memory-2026-07-22 beta header (a470e10)

v0.109.1

Compare Source

Full Changelog: sdk-v0.109.0...sdk-v0.109.1

Chores

• api: remove some nonfunctional types from the SDKs (cc4dd4e)

v0.109.0

Compare Source

Full Changelog: sdk-v0.108.0...sdk-v0.109.0

Features

• api: add support for Managed Agents event delta streaming, agent overrides, reverse pagination, vault credential injection scoping, and agent and deployment webhook events (7f3211b)

v0.108.0

Compare Source

Full Changelog: sdk-v0.107.0...sdk-v0.108.0

Features

• api: add support for claude-sonnet-5 (4588db0)

Bug Fixes

• agent-toolset: allow absolute paths that resolve inside workdir (#​112) (e951fb2)

Chores

• format README.md (#​176) (98dcff7)

v0.107.0

Compare Source

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

Features

• api: add support for 2026031 web fetch and support tools (d7057ea)

Bug Fixes

• agent-toolset: bound canonicalize symlink hops; resolve glob matches before confinement check (#​142) (277be80)
• types: restore BatchCreateParams.Request.params dropped by codegen merge (#​165) (c6b68d2)

Chores

• api: accept user profile ID's when counting tokens (6cda67e)
• docs: updates to descriptions and example values (51a5f81)

Documentation

• update readme requirements to match anthropic docs (#​146) (3818412)

workos/emulate (@​workos/emulate)

v0.2.1

Compare Source

Bug Fixes

• auth: Echo original session method on refresh_token (#​14) (97fb951)
• auth: Emit spec-valid authentication_method (#​12) (3066f71)

v0.2.0

Compare Source

Features

• add response-shape conformance codegen and test (#​9) (358773b)
• provide an end-to-end login flow story with spec-accurate webhooks (#​2) (fa39dfe)
• seed M2M apps and API keys (#​10) (f761419)

oxc-project/oxc (oxfmt)

v0.59.0

Compare Source

🐛 Bug Fixes

• 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#​24286) (leaysgur)

v0.58.0

Compare Source

v0.57.0

Compare Source

oxc-project/oxc (oxlint)

v1.74.0

Compare Source

🚀 Features

• 0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#​24044) (Boshen)

🐛 Bug Fixes

• 8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#​24341) (leaysgur)
• 2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#​24339) (leaysgur)

⚡ Performance

• 7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#​24413) (connorshea)
• 6272051 linter/typescript/no-require-imports: Compile allow patterns once (#​24417) (connorshea)
• 33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#​24420) (connorshea)

v1.73.0

Compare Source

🚀 Features

• a2c97f3 linter/unicorn: Implement explicit-timer-delay rule (#​23612) (Mikhail Baev)
• 85735cb linter/unicorn: Implement no-confusing-array-with rule (#​23638) (Shekhu☺️)
• cb4fbb9 linter/eslint: Implement no-unreachable-loop rule (#​23975) (Todor Andonov)
• dc32112 linter/eslint/no-constant-binary-expression: Check relational comparisons (#​24088) (camc314)
• d963967 linter/unicorn/no-array-sort: Add allowAfterSpread option (#​24043) (Boshen)
• 0a75682 linter: Add per-rule timings for type-aware linting (#​22488) (camchenry)
• 743e222 linter/react: Add disallowedValues option for forbid-dom-props rule (#​23970) (Mikhail Baev)

🐛 Bug Fixes

• bdb51c7 linter/jest/prefer-ending-with-an-expect: Validate config patterns (#​24122) (camc314)
• 45d607d linter/react/forbid-component-props: Make allow/disallow lists optional in schema (#​24024) (Boshen)

pnpm/pnpm (pnpm)

v10.34.5: pnpm 10.34.5

Compare Source

Patch Changes

• 78e29fe: Prevent a crafted pnpm-lock.yaml from writing package content outside the virtual store. A dependency path key whose name reconstructs to a path-traversal sequence (e.g. ../../../tmp/x@1.0.0) is now rejected by the isolated (virtual-store) linker and the Plug'n'Play resolver map, matching the containment already applied to the hoisted linker. Under the global virtual store, a traversal in the version-derived path segment (e.g. a snapshot version: "../../x") is now rejected at iterateHashedGraphNodes, the single point every global-virtual-store slot path funnels through.
• 78e29fe: Fixed a path traversal vulnerability where a dependency whose manifest name was a scoped path traversal (e.g. @x/../../../<path>) could be written outside node_modules to an attacker-controlled location during pnpm install, even with --ignore-scripts. The isolated linker now validates the package name before using it as a directory name, matching the existing protection in the hoisted linker.
• 47ef6f0: Fixed switching to and self-updating to pnpm v12. pnpm v12 (the Rust port) ships as the pnpm and @pnpm/exe npm packages whose bins are placeholders replaced at install time by the host's native binary from a @pnpm/exe.<platform>-<arch>[-musl] optional dependency. Because pnpm installs its own engine with --ignore-scripts, that relinking never ran, leaving a non-executable placeholder. pnpm now relinks the native binary itself for v12 (recognizing the new platform-package naming scheme and the native pnpm package), and verifies the native binary's npm registry signature before running it.
• 36928be: ${...} environment-variable placeholders in the httpProxy, httpsProxy, noProxy, proxy, and noproxy settings are no longer expanded when these settings come from a project's pnpm-workspace.yaml. They now receive the same protection already applied to registry.

Platinum Sponsors

Gold Sponsors

privatenumber/tsx (tsx)

v4.23.1

Compare Source

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

statelyai/xstate (xstate)

v5.32.5

Compare Source

Patch Changes

• #​5603 345e04c Thanks @​xianjianlf2! - Sending an event to a stopped actor no longer throws when the event contains unserializable data (e.g. circular references). Previously, the development-only warning that an event was sent to a stopped actor used JSON.stringify on the event, which could throw and mask the intended warning. The warning is now emitted safely regardless of the event's contents.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on the 15th day of the month before 12pm"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Summary

Renovate batch updating nine packages across package.json and pnpm-lock.yaml. All changes are minor/patch bumps within their semver specifiers, with no structural code changes.

• @anthropic-ai/sdk advances from 0.106.0 to 0.112.5 (6 minor versions), gaining MCP Tunnel support, dreaming API, Managed Agents streaming, and a type cleanup that removed some nonfunctional SDK types.
• pnpm bumps from 10.34.4 to 10.34.5, patching two path-traversal security vulnerabilities in the lockfile linker — crafted dependency names or version strings could previously write files outside node_modules.
• All other updates (@anthropic-ai/claude-agent-sdk 0.3.201→0.3.214, @workos/emulate 0.1→0.2.2, xstate 5.32.4→5.32.5, oxfmt 0.56→0.59, oxlint, @types/node, tsx) are bug-fix or additive releases with no breaking changes noted in their changelogs.

Confidence Score: 5/5

Safe to merge — all bumps are minor/patch releases within existing semver specifiers, no structural code changes, and the pnpm upgrade carries important security patches.

The pnpm 10.34.5 upgrade actively fixes path-traversal vulnerabilities in the lockfile linker, making it beneficial to land quickly. The @anthropic-ai/sdk jump across six minor versions removed some SDK types marked nonfunctional; if the codebase referenced those types TypeScript would catch it at build time. All other bumps are strictly additive or fix-only.

Files Needing Attention: No files require special attention.

Important Files Changed

Filename	Overview
package.json	Seven dependency specifiers updated: @anthropic-ai/sdk ^0.106→^0.112, @workos/emulate ^0.1→^0.2, oxfmt ^0.56→^0.59, pnpm packageManager pin bumped to 10.34.5. All changes are within declared semver ranges.
pnpm-lock.yaml	Lockfile regenerated to reflect all resolved versions; peer-dependency strings updated consistently across the graph. No unexpected transitive version jumps observed.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package.json] -->|specifier bumps| B[pnpm-lock.yaml]
    B --> C1["@anthropic-ai/sdk\n0.106.0 → 0.112.5"]
    B --> C2["@anthropic-ai/claude-agent-sdk\n0.3.201 → 0.3.214"]
    B --> C3["@workos/emulate\n0.1.0 → 0.2.2"]
    B --> C4["pnpm\n10.34.4 → 10.34.5\n⚠️ security patches"]
    B --> C5["xstate\n5.32.4 → 5.32.5"]
    B --> C6["oxfmt, oxlint, @types/node, tsx\npatch / minor bumps"]

Loading

_{Reviews (24): Last reviewed commit: "fix(deps): update minor and patch update..." | Re-trigger Greptile}