Update LLM provider SDK npm packages by hash-worker[bot] · Pull Request #8437 · hashintel/hash

Medium Risk
Large minor-version jumps on SDKs that power production LLM calls (Temporal AI worker and Bedrock); breakage would surface at compile or runtime, not in this diff.

Overview
Bumps Anthropic TypeScript client dependencies only—no application source changes in this diff.

In @apps/hash-ai-worker-ts, @anthropic-ai/sdk goes from 0.74.0 → 0.104.1 and @anthropic-ai/bedrock-sdk from 0.26.3 → 0.30.2 (direct API + Bedrock paths used by the shared LLM activity layer). In @local/repo-chores, @anthropic-ai/sdk is aligned to 0.104.1 for the AI PR review script.

Reviewers should rely on install/build, lint:tsc, and AI worker unit tests to catch breaking type or API changes across the large SDK jump.

^{Reviewed by Cursor Bugbot for commit 599309c. Bugbot is set up for automated code reviews on this repo. Configure here.}

augmentcode · 2026-02-17T19:54:44Z

🤖 Augment PR Summary

Summary: Updates the pinned @anthropic-ai/sdk dependency from 0.74.0 to 0.75.0 in the AI worker and repo-chores Node workspaces.
Why: Pulls in the latest upstream SDK spec fixes and newly released model support (per v0.75.0 release notes).

_{🤖 Was this summary useful? React with 👍 or 👎}

augmentcode

Review completed. No suggestions at this time.

Comment augment review to trigger a new review at any time.

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

✅ Fixed: SDK version doesn't match PR description's target
- Pinned @anthropic-ai/sdk to 0.78.0 in both affected package manifests and regenerated yarn.lock so all resolved entries now match the PR’s stated target version.

Or push these changes by commenting:

@cursor push 7c837bbb15

Preview (7c837bbb15)

diff --git a/apps/hash-ai-worker-ts/package.json b/apps/hash-ai-worker-ts/package.json
--- a/apps/hash-ai-worker-ts/package.json
+++ b/apps/hash-ai-worker-ts/package.json
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@anthropic-ai/bedrock-sdk": "0.26.4",
-    "@anthropic-ai/sdk": "0.79.0",
+    "@anthropic-ai/sdk": "0.78.0",
     "@apps/hash-graph": "workspace:*",
     "@blockprotocol/graph": "workspace:*",
     "@blockprotocol/type-system": "workspace:*",

diff --git a/libs/@local/repo-chores/node/package.json b/libs/@local/repo-chores/node/package.json
--- a/libs/@local/repo-chores/node/package.json
+++ b/libs/@local/repo-chores/node/package.json
@@ -10,7 +10,7 @@
     "lint:tsc": "tsc --noEmit"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "0.79.0",
+    "@anthropic-ai/sdk": "0.78.0",
     "@blockprotocol/core": "0.1.4",
     "@linear/sdk": "61.0.0",
     "@local/hash-backend-utils": "workspace:*",

diff --git a/yarn.lock b/yarn.lock
--- a/yarn.lock
+++ b/yarn.lock
@@ -31,9 +31,9 @@
   languageName: node
   linkType: hard
 
-"@anthropic-ai/sdk@npm:0.79.0, @anthropic-ai/sdk@npm:>=0.50.3 <1":
-  version: 0.79.0
-  resolution: "@anthropic-ai/sdk@npm:0.79.0"
+"@anthropic-ai/sdk@npm:0.78.0, @anthropic-ai/sdk@npm:>=0.50.3 <1":
+  version: 0.78.0
+  resolution: "@anthropic-ai/sdk@npm:0.78.0"
   dependencies:
     json-schema-to-ts: "npm:^3.1.1"
   peerDependencies:
@@ -43,7 +43,7 @@
       optional: true
   bin:
     anthropic-ai-sdk: bin/cli
-  checksum: 10c0/dd68838935bed0b8478da75e6a7f18ecb20c85f0cc173db10ca425ae6aa0a60536ba7b5994819e889f3d48bf30534ca25ea572dc306cb311ce6647057caf1f2a
+  checksum: 10c0/a43c83047d0f6ac8d50938e8a07aee27b8891cf51011fcbdb07159996762f262734e4839df00e57f713e25c8c740424939e13c91e6b3f5b12879b9cde1d9c835
   languageName: node
   linkType: hard
 
@@ -337,7 +337,7 @@
   resolution: "@apps/hash-ai-worker-ts@workspace:apps/hash-ai-worker-ts"
   dependencies:
     "@anthropic-ai/bedrock-sdk": "npm:0.26.4"
-    "@anthropic-ai/sdk": "npm:0.79.0"
+    "@anthropic-ai/sdk": "npm:0.78.0"
     "@apps/hash-graph": "workspace:*"
     "@blockprotocol/graph": "workspace:*"
     "@blockprotocol/type-system": "workspace:*"
@@ -9588,7 +9588,7 @@
   version: 0.0.0-use.local
   resolution: "@local/repo-chores@workspace:libs/@local/repo-chores/node"
   dependencies:
-    "@anthropic-ai/sdk": "npm:0.79.0"
+    "@anthropic-ai/sdk": "npm:0.78.0"
     "@blockprotocol/core": "npm:0.1.4"
     "@linear/sdk": "npm:61.0.0"
     "@local/eslint": "workspace:*"

_{This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.}

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

hash-worker · 2026-04-30T16:09:42Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

error This project's package.json defines "packageManager": "yarn@4.16.0". However the current global version of Yarn is 1.22.22.

Presence of the "packageManager" field indicates that the project is meant to be used with Corepack, a tool included by default with all official Node.js distributions starting from 16.9 and 14.19.
Corepack must currently be enabled by running corepack enable in your terminal. For more information, check out https://yarnpkg.com/corepack.

github-actions · 2026-04-30T16:09:49Z

Dependency Review

The following issues were found:

❌ 2 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

apps/hash-ai-worker-ts/package.json

Name	Version	Vulnerability	Severity	Patched Version
@anthropic-ai/sdk	0.91.0	Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool	moderate	0.91.1

libs/@local/repo-chores/node/package.json

Name	Version	Vulnerability	Severity	Patched Version
@anthropic-ai/sdk	0.91.0	Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool	moderate	0.91.1

OpenSSF Scorecard

Package	Version	Score	Details
npm/@anthropic-ai/sdk	0.91.0	Unknown	Unknown
npm/@anthropic-ai/bedrock-sdk	0.29.0	Unknown	Unknown
npm/@anthropic-ai/sdk	0.91.0	Unknown	Unknown

Scanned Files

apps/hash-ai-worker-ts/package.json
libs/@local/repo-chores/node/package.json

hash-worker Bot assigned CiaranMn Feb 17, 2026

vercel Bot temporarily deployed to Preview – petrinaut February 17, 2026 19:53 Inactive

github-actions Bot added area/deps Relates to third-party dependencies (area) area/apps > hash* Affects HASH (a `hash-*` app) area/libs Relates to first-party libraries/crates/packages (area) type/eng > backend Owned by the @backend team area/apps labels Feb 17, 2026

augmentcode Bot reviewed Feb 17, 2026

View reviewed changes

vercel Bot deployed to Preview – hash February 17, 2026 20:06 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 927fcbd to 948dad1 Compare February 18, 2026 04:27

hash-worker Bot changed the title ~~Update npm package @anthropic-ai/sdk to v0.75.0~~ Update npm package @anthropic-ai/sdk to v0.76.0 Feb 18, 2026

vercel Bot temporarily deployed to Preview – petrinaut February 18, 2026 04:27 Inactive

vercel Bot deployed to Preview – hash February 18, 2026 04:40 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 948dad1 to f8c67bd Compare February 18, 2026 20:55

hash-worker Bot changed the title ~~Update npm package @anthropic-ai/sdk to v0.76.0~~ Update npm package @anthropic-ai/sdk to v0.77.0 Feb 18, 2026

vercel Bot temporarily deployed to Preview – petrinaut February 18, 2026 20:56 Inactive

cursor Bot reviewed Feb 18, 2026

View reviewed changes

Comment thread apps/hash-ai-worker-ts/package.json Outdated

vercel Bot had a problem deploying to Preview – hash February 18, 2026 20:59 Failure

vilkinsons enabled auto-merge February 18, 2026 22:30

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from f8c67bd to 45073ad Compare February 19, 2026 20:20

hash-worker Bot changed the title ~~Update npm package @anthropic-ai/sdk to v0.77.0~~ Update LLM provider SDK npm packages Feb 19, 2026

vercel Bot temporarily deployed to Preview – petrinaut February 19, 2026 20:20 Inactive

vercel Bot deployed to Preview – hash February 19, 2026 20:33 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 45073ad to 40ecdb2 Compare February 20, 2026 10:20

vercel Bot temporarily deployed to Preview – petrinaut February 20, 2026 10:20 Inactive

vercel Bot deployed to Preview – hash February 20, 2026 10:33 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 40ecdb2 to 3d73d42 Compare February 25, 2026 17:58

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 9c1bd9d to f0e4a24 Compare March 16, 2026 17:59

vercel Bot temporarily deployed to Preview – petrinaut March 16, 2026 17:59 Inactive

cursor Bot reviewed Mar 16, 2026

View reviewed changes

Comment thread apps/hash-ai-worker-ts/package.json Outdated

vercel Bot deployed to Preview – hash March 16, 2026 18:12 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from f0e4a24 to 3da5a30 Compare March 18, 2026 18:58

vercel Bot temporarily deployed to Preview – petrinaut March 18, 2026 18:59 Inactive

vercel Bot deployed to Preview – hash March 18, 2026 19:13 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 3da5a30 to b395cc3 Compare March 31, 2026 17:04

vercel Bot temporarily deployed to Preview – petrinaut March 31, 2026 17:04 Inactive

vercel Bot deployed to Preview – hash March 31, 2026 17:19 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from b395cc3 to 2be6a43 Compare April 1, 2026 18:58

vercel Bot temporarily deployed to Preview – petrinaut April 1, 2026 18:58 Inactive

cursor Bot reviewed Apr 1, 2026

View reviewed changes

Comment thread apps/hash-ai-worker-ts/package.json Outdated

vercel Bot deployed to Preview – hash April 1, 2026 19:10 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 2be6a43 to 3f5b876 Compare April 14, 2026 18:04

vercel Bot temporarily deployed to Preview – petrinaut April 14, 2026 18:04 Inactive

vercel Bot deployed to Preview – hash April 14, 2026 18:15 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 3f5b876 to 26fff62 Compare April 15, 2026 20:30

vercel Bot temporarily deployed to Preview – petrinaut April 15, 2026 20:30 Inactive

vercel Bot deployed to Preview – hash April 15, 2026 20:41 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 26fff62 to 0eea08d Compare April 21, 2026 18:39

vercel Bot temporarily deployed to Preview – petrinaut April 21, 2026 18:39 Inactive

vercel Bot deployed to Preview – hash April 21, 2026 18:52 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 0eea08d to ecd3575 Compare April 21, 2026 19:42

vercel Bot temporarily deployed to Preview – petrinaut April 21, 2026 19:42 Inactive

vercel Bot deployed to Preview – hash April 21, 2026 19:53 View deployment

hash-worker Bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from ecd3575 to 025106d Compare April 22, 2026 17:34

Update LLM provider SDK npm packages

599309c

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update LLM provider SDK npm packages#8437

Update LLM provider SDK npm packages#8437
hash-worker[bot] wants to merge 1 commit into
mainfrom
deps/js/llm-provider-sdk-npm-packages

hash-worker Bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

cursor Bot commented Feb 17, 2026 •

edited

Loading

Uh oh!

augmentcode Bot commented Feb 17, 2026

Uh oh!

augmentcode Bot left a comment

Uh oh!

Uh oh!

cursor Bot left a comment •

edited

Loading

Uh oh!

Uh oh!

cursor Bot left a comment

Uh oh!

Uh oh!

hash-worker Bot commented Apr 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

hash-worker Bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Chores

Features

Bug Fixes

Chores

Bug Fixes

Bug Fixes

Chores

Features

Chores

Refactors

Features

Bug Fixes

Chores

Documentation

Features

Documentation

Configuration

Uh oh!

vercel Bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor Bot commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

augmentcode Bot commented Feb 17, 2026

Uh oh!

augmentcode Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

hash-worker Bot commented Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: yarn.lock

Uh oh!

github-actions Bot commented Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Vulnerabilities

apps/hash-ai-worker-ts/package.json

libs/@local/repo-chores/node/package.json

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

hash-worker Bot commented Feb 17, 2026 •

edited

Loading

vercel Bot commented Feb 17, 2026 •

edited

Loading

cursor Bot commented Feb 17, 2026 •

edited

Loading

cursor Bot left a comment •

edited

Loading

hash-worker Bot commented Apr 30, 2026 •

edited

Loading

github-actions Bot commented Apr 30, 2026 •

edited

Loading