Skip to content

chore(deps-dev): bump @anthropic-ai/sdk from 0.39.0 to 0.78.0#158

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/anthropic-ai/sdk-0.78.0
Open

chore(deps-dev): bump @anthropic-ai/sdk from 0.39.0 to 0.78.0#158
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/anthropic-ai/sdk-0.78.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026

Bumps @anthropic-ai/sdk from 0.39.0 to 0.78.0.

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.78.0

0.78.0 (2026-02-19)

Full Changelog: sdk-v0.77.0...sdk-v0.78.0

Features

  • api: Add top-level cache control (automatic caching) (1e2f83d)

Bug Fixes

  • bedrock: eliminate race condition in AWS credential resolution (#901) (e5a101d)
  • client: format batches test file (821e9bf)
  • tests: fix issue in batches test (5f4ccf8)

Chores

  • update mock server docs (25d337f)

sdk: v0.77.0

0.77.0 (2026-02-18)

Full Changelog: sdk-v0.76.0...sdk-v0.77.0

Features

  • api: fix shared UserLocation and error code types (c84038f)

sdk: v0.76.0

0.76.0 (2026-02-18)

Full Changelog: sdk-v0.75.0...sdk-v0.76.0

Features

  • api: Make new tool versions available as top level tool types (25fe41c)

sdk: v0.75.0

0.75.0 (2026-02-17)

Full Changelog: sdk-v0.74.0...sdk-v0.75.0

Features

  • api: Releasing claude-sonnet-4-6 (d75e1c0)

Bug Fixes

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.78.0 (2026-02-19)

Full Changelog: sdk-v0.77.0...sdk-v0.78.0

Features

  • api: Add top-level cache control (automatic caching) (1e2f83d)

Bug Fixes

  • bedrock: eliminate race condition in AWS credential resolution (#901) (e5a101d)
  • client: format batches test file (821e9bf)
  • tests: fix issue in batches test (5f4ccf8)

Chores

  • update mock server docs (25d337f)

0.77.0 (2026-02-18)

Full Changelog: sdk-v0.76.0...sdk-v0.77.0

Features

  • api: fix shared UserLocation and error code types (c84038f)

Bug Fixes

  • add backward-compat namespace re-exports for UserLocation (#706) (b88834f)

0.76.0 (2026-02-18)

Full Changelog: sdk-v0.75.0...sdk-v0.76.0

Features

0.75.0 (2026-02-17)

Full Changelog: sdk-v0.74.0...sdk-v0.75.0

Features

  • api: Releasing claude-sonnet-4-6 (d75e1c0)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by packy-anthropic, a new releaser for @​anthropic-ai/sdk since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 11, 2026
@chatgpt-codex-connector
Copy link

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@greptile-apps
Copy link
Contributor

greptile-apps bot commented Mar 11, 2026

Greptile Summary

This is a Dependabot-generated PR that bumps the @anthropic-ai/sdk devDependency from 0.39.0 to 0.79.0 (a 40-minor-version jump). The SDK is used in three places in the codebase — agentops/runner/lib/llm/provider.ts, agentops/scripts/test-api-keys.ts, and scripts/agents/behavioral-contracts.ts — all using the stable client.messages.create() API, which remains compatible across this version range.

Key changes brought in by this upgrade:

  • Modernized dependency tree: The old SDK relied on node-fetch, abort-controller, agentkeepalive, form-data-encoder, and formdata-node as runtime polyfills. The new SDK drops all of these in favour of native fetch, significantly reducing the dependency footprint.
  • New transitive dependencies: json-schema-to-ts@3.1.1, ts-algebra@2.0.0, and @babel/runtime@7.29.2 are introduced to support improved TypeScript type inference.
  • Optional Zod peer dependency: The new SDK accepts an optional zod peer dependency (already present in the lockfile at 3.25.76 via @anthropic-ai/claude-agent-sdk), which enables richer runtime validation when available.
  • Binary added: hasBin: true is now set for the package, exposing a CLI binary bundled with the SDK.
  • PR title mismatch: The PR title says 0.78.0 but the actual installed version is 0.79.0, likely due to a dependabot rebase after 0.79.0 was published.

Confidence Score: 4/5

  • Safe to merge — all SDK call sites use stable messages.create() APIs that are unchanged across this version range, and the dependency tree simplification is a positive change.
  • The consuming code uses only the core messages.create() API, which has remained stable throughout this version range. The large jump (0.39.0 → 0.79.0) is notable but primarily reflects iterative additions (new models, new tool types, caching controls, Bedrock fixes) rather than breaking API changes. The one point deducted is for the version mismatch between the PR title and the actual installed version, which warrants a quick manual check that 0.79.0 is intentional and that no relevant breaking changes were introduced in the intermediate releases.
  • No files require special attention — the changed files are package.json and pnpm-lock.yaml only.

Important Files Changed

Filename Overview
package.json Bumps @anthropic-ai/sdk devDependency from ^0.39.0 to ^0.79.0. PR title claims 0.78.0 but the actual resolved version is 0.79.0.
pnpm-lock.yaml Lockfile updated to resolve @anthropic-ai/sdk at 0.79.0. Old dependencies (node-fetch, abort-controller, agentkeepalive, form-data-encoder, formdata-node) are replaced by json-schema-to-ts and optional zod peer dependency, reflecting the SDK's modernization to use native fetch. New transitive deps @babel/runtime@7.29.2 and ts-algebra@2.0.0 are added.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["@anthropic-ai/sdk@0.79.0"] --> B["json-schema-to-ts@3.1.1"]
    A --> C["zod@3.25.76 (optional peer)"]
    B --> D["@babel/runtime@7.29.2"]
    B --> E["ts-algebra@2.0.0"]

    subgraph removed["Removed dependencies (0.39.0)"]
        R1["node-fetch@2.7.0"]
        R2["abort-controller@3.0.0"]
        R3["agentkeepalive@4.6.0"]
        R4["form-data-encoder@1.7.2"]
        R5["formdata-node@4.4.1"]
        R6["@types/node-fetch@2.6.13"]
    end

    subgraph consumers["SDK Consumers"]
        P["agentops/runner/lib/llm/provider.ts"]
        T["agentops/scripts/test-api-keys.ts"]
        BC["scripts/agents/behavioral-contracts.ts"]
    end

    consumers --> A
Loading
Prompt To Fix All With AI
This is a comment left during a code review.
Path: package.json
Line: 96

Comment:
**PR title/version mismatch**

The PR title states this bumps `@anthropic-ai/sdk` to `0.78.0`, but `package.json` specifies `^0.79.0` and the lockfile resolves to `0.79.0`. It appears dependabot opened this PR targeting `0.78.0` and then rebased it as `0.79.0` was released, without updating the title. The actual installed version is `0.79.0`, not `0.78.0` as the PR description states.

How can I resolve this? If you propose a fix, please make it concise.

Last reviewed commit: "chore(deps-dev): bum..."

@augmentcode
Copy link

augmentcode bot commented Mar 11, 2026

🤖 Augment PR Summary

Summary: This PR updates the Anthropic TypeScript SDK used by development/agent tooling.

Changes:

  • Bumps @anthropic-ai/sdk in devDependencies from ^0.39.0 to ^0.78.0
  • Updates the pnpm-lock.yaml resolution accordingly

Technical Notes: The version jump spans many 0.x releases; upstream includes API/type fixes and new features (e.g., cache control), so downstream scripts calling client.messages.create() should be verified against the new SDK.

🤖 Was this summary useful? React with 👍 or 👎

Copy link

@augmentcode augmentcode bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. 1 suggestion posted.

Fix All in Augment

Comment augment review to trigger a new review at any time.

package.json Outdated
"devDependencies": {
"@anthropic-ai/claude-agent-sdk": "^0.1.76",
"@anthropic-ai/sdk": "^0.39.0",
"@anthropic-ai/sdk": "^0.78.0",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a fairly large @anthropic-ai/sdk jump (0.39 → 0.78); consider re-running the scripts/tests that call Anthropic (e.g. agentops/runner/lib/llm/provider.ts, scripts/agents/behavioral-contracts.ts) to confirm the messages.create() response shape/types and error handling remain compatible.

Severity: low

Fix This in Augment

🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/anthropic-ai/sdk-0.78.0 branch 3 times, most recently from 8be02f3 to 0bfc557 Compare March 17, 2026 23:50
@@ -95,7 +95,7 @@
},
"devDependencies": {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 PR title/version mismatch

The PR title states this bumps @anthropic-ai/sdk to 0.78.0, but package.json specifies ^0.79.0 and the lockfile resolves to 0.79.0. It appears dependabot opened this PR targeting 0.78.0 and then rebased it as 0.79.0 was released, without updating the title. The actual installed version is 0.79.0, not 0.78.0 as the PR description states.

Prompt To Fix With AI
This is a comment left during a code review.
Path: package.json
Line: 96

Comment:
**PR title/version mismatch**

The PR title states this bumps `@anthropic-ai/sdk` to `0.78.0`, but `package.json` specifies `^0.79.0` and the lockfile resolves to `0.79.0`. It appears dependabot opened this PR targeting `0.78.0` and then rebased it as `0.79.0` was released, without updating the title. The actual installed version is `0.79.0`, not `0.78.0` as the PR description states.

How can I resolve this? If you propose a fix, please make it concise.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/anthropic-ai/sdk-0.78.0 branch from 0bfc557 to 5d49950 Compare March 18, 2026 16:42
Bumps [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) from 0.39.0 to 0.78.0.
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.39.0...sdk-v0.78.0)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.78.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/anthropic-ai/sdk-0.78.0 branch from 5d49950 to bc5b615 Compare March 19, 2026 04:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants