chore(deps): bump @anthropic-ai/sdk from 0.78.0 to 0.88.0#335
chore(deps): bump @anthropic-ai/sdk from 0.78.0 to 0.88.0#335dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) from 0.78.0 to 0.88.0. - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.78.0...sdk-v0.88.0) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.88.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits. |
✔️ Bundle Size Analysis
Bundle breakdown |
Greptile SummaryBumps Confidence Score: 5/5Safe to merge — clean dependency bump with only additive SDK features and no breaking changes. All changes are confined to No files require special attention. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A["ralph-starter"] -->|"^0.88.0 (was ^0.78.0)"| B["@anthropic-ai/sdk@0.88.0"]
B --> C["json-schema-to-ts@3.1.1"]
C -->|"7.29.2 (was 7.28.6)"| D["@babel/runtime@7.29.2"]
B --> E["zod@4.3.6 (peer, unchanged)"]
Reviews (1): Last reviewed commit: "chore(deps): bump @anthropic-ai/sdk from..." | Re-trigger Greptile |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — straightforward Dependabot dependency bump with no bugs found.
Extended reasoning...
Overview
This PR updates @anthropic-ai/sdk from 0.78.0 to 0.88.0 in package.json and regenerates pnpm-lock.yaml accordingly. The only other change is a transitive bump of @babel/runtime from 7.28.6 to 7.29.2 (pulled in via json-schema-to-ts). No application source code is modified.
Security Risks
None. This is an update to the official Anthropic TypeScript SDK, an additive minor-version series. The changelog shows only new features (Vertex EU region, beta advisor tool, Claude Managed Agents, Bedrock Mantle client) and internal chores — no deprecations or breaking changes that could introduce security regressions.
Level of Scrutiny
Low. This is a Dependabot-generated dependency bump touching only package.json and pnpm-lock.yaml. Both files follow the expected mechanical pattern of version string replacements and hash updates. No business logic, auth, or security-sensitive code paths are affected.
Other Factors
No bugs were found by the bug hunting system. There are no outstanding reviewer comments. The PR timeline shows only bot noise (a missing label warning from Dependabot and a Codex limits message) with no human feedback to address. This is a clean, low-risk update appropriate for shadow approval.
Bumps @anthropic-ai/sdk from 0.78.0 to 0.88.0.
Release notes
Sourced from
@anthropic-ai/sdk's releases.... (truncated)
Changelog
Sourced from
@anthropic-ai/sdk's changelog.... (truncated)
Commits
089fe05chore: release main (#987)73f128fchore: release main (#985)fd6cf54chore: release main (#983)79d1d73chore: release main (#982)4ade5b1chore: release main (#979)4368602chore: release main (#978)4105fd6chore: release main (#973)0b536aechore: release main (#970)6d72814chore: release main (#967)bc1a2ffchore: release main (#955)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)