Skip to content

deps(sdk): bump the providers group across 1 directory with 2 updates - #915

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/sdk/providers-fa1b527bdd
Closed

deps(sdk): bump the providers group across 1 directory with 2 updates#915
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/packages/sdk/providers-fa1b527bdd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the providers group with 2 updates in the /packages/sdk directory: @anthropic-ai/sdk and openai.

Updates @anthropic-ai/sdk from 0.132.1 to 0.136.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v0.136.0

Features

  • api: add data_refreshed_at and has_more to analytics report pages
  • api: add workspace rate-limit updates to the Admin API
  • api: make User Profiles generally available
  • client: yield server-sent events with unrecognized event names
  • tools: accept every tool definition field in the tool helpers

Bug Fixes

  • client: treat x-amz-security-token as a sensitive header
  • tools: keep $ sequences literal in memory tool str_replace

Chores

  • ci: skip the changelog check on draft pull requests
  • docs: add credential expiry descriptions to the Managed Agents API reference
  • docs: add Messages API request descriptions
  • docs: correct plugin manifest_version and reach descriptions
  • docs: improve Managed Agents memory store descriptions
  • docs: improve Managed Agents vault and credential descriptions
  • internal: bump playwright-core in the browser ecosystem tests
  • tests: cover OpenTelemetry failures, propagation and environment variables

sdk-v0.135.0

Features

  • api: add between_tools to thinking types in model capabilities
  • api: add the speed parameter and usage.speed to Messages
  • api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

  • client: close streams dropped without being read to the end
  • client: keep an unread JSONL response open while it is held

Chores

  • ci: speed up breaking change detection
  • docs: describe headers on Managed Agents and telemetry endpoints

Documentation

  • api: note that some models need a beta header to use speed

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.136.0 (2026-10-20)

Features

  • api: add data_refreshed_at and has_more to analytics report pages
  • api: add workspace rate-limit updates to the Admin API
  • api: make User Profiles generally available
  • client: yield server-sent events with unrecognized event names
  • tools: accept every tool definition field in the tool helpers

Bug Fixes

  • client: treat x-amz-security-token as a sensitive header
  • tools: keep $ sequences literal in memory tool str_replace

Chores

  • ci: skip the changelog check on draft pull requests
  • docs: add credential expiry descriptions to the Managed Agents API reference
  • docs: add Messages API request descriptions
  • docs: correct plugin manifest_version and reach descriptions
  • docs: improve Managed Agents memory store descriptions
  • docs: improve Managed Agents vault and credential descriptions
  • internal: bump playwright-core in the browser ecosystem tests
  • tests: cover OpenTelemetry failures, propagation and environment variables

0.135.0 (2026-10-15)

Features

  • api: add between_tools to thinking types in model capabilities
  • api: add the speed parameter and usage.speed to Messages
  • api: return a Console organization's usage-tier spend cap as a read-only spend limit

Bug Fixes

  • client: close streams dropped without being read to the end
  • client: keep an unread JSONL response open while it is held

Chores

  • ci: speed up breaking change detection
  • docs: describe headers on Managed Agents and telemetry endpoints

Documentation

... (truncated)

Commits
  • 4c88bc7 release: 0.136.0, packages/google-cloud-sdk 0.2.0
  • 096a434 Merge pull request #950 from anthropics/synced/published
  • ca35db9 chore(internal): bump playwright-core in the browser ecosystem test (#963)
  • 97343de feat(google-cloud): use the v1 endpoints and add the organization endpoint
  • f1bcab9 feat(api): add data_refreshed_at and has_more to analytics report pages
  • c496454 ci: update publish workflows
  • 0308a1f chore(ci): skip the changelog check on draft pull requests
  • 73fa496 feat(bedrock,vertex,aws,foundry): support user profiles on the platform clien...
  • c5c19ce chore(docs): add Messages API request descriptions
  • 3e0e46a feat(api): add workspace rate-limit updates to the Admin API
  • Additional commits viewable in compare view

Updates openai from 7.30.1 to 7.39.0

Release notes

Sourced from openai's releases.

v7.39.0

7.39.0 (2026-10-18)

Features

  • realtime: add opt-in bounded connection recovery (#2968) (64872e5)

Chores

v7.38.0

7.38.0 (2026-10-17)

Features

v7.37.0

7.37.0 (2026-10-17)

Features

  • api: add degraded external storage status (#2963) (e0fe092)

Chores

  • api: add shutdown notices for GPT-4 model aliases (#2959) (648cd0a)

Refactors

  • realtime: use generated Translation bindings (#2961) (bb024d4)

v7.36.0

7.36.0 (2026-10-16)

Features

  • api: add safety identifiers to image requests and responses (#2957) (c95ccaf)

v7.35.0

7.35.0 (2026-10-16)

... (truncated)

Changelog

Sourced from openai's changelog.

7.39.0 (2026-10-18)

Features

  • realtime: add opt-in bounded connection recovery (#2968) (64872e5)

Chores

7.38.0 (2026-10-17)

Features

7.37.0 (2026-10-17)

Features

  • api: add degraded external storage status (#2963) (e0fe092)

Chores

  • api: add shutdown notices for GPT-4 model aliases (#2959) (648cd0a)

Refactors

  • realtime: use generated Translation bindings (#2961) (bb024d4)

7.36.0 (2026-10-16)

Features

  • api: add safety identifiers to image requests and responses (#2957) (c95ccaf)

7.35.0 (2026-10-16)

Features

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(sdk): bump the providers group across 1 directory with 2 updates
0493dbb 
Bumps the providers group with 2 updates in the /packages/sdk directory: [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) and [openai](https://github.com/openai/openai-node).


Updates `@anthropic-ai/sdk` from 0.132.1 to 0.136.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.132.1...sdk-v0.136.0)

Updates `openai` from 7.30.1 to 7.39.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/main/CHANGELOG.md)
- [Commits](openai/openai-node@v7.30.1...v7.39.0)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.136.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: providers
- dependency-name: openai
  dependency-version: 7.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: providers
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from irparent as a code owner October 25, 2026 21:01
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 25, 2026
@irparent irparent mentioned this pull request Oct 25, 2026
Merged
irparent added a commit that referenced this pull request Oct 25, 2026
@irparent @claude
This week's second round of dependency updates, and the Docker catalo…
dbc0e8e 
…g entry at 0.21.0 (#918)

* deps: the second round of Dependabot updates in one change; the Docker catalog entry's source.commit at 0.21.0

Dependabot's own diffs, each generated on Linux, applied together (one CI
run instead of eight): #909 (website React 19.3.1), #911
(pypa/gh-action-pypi-publish 1.14.3), #912 (the Python OpenTelemetry
recipes), #913 (typescript-eslint 8.72.0), #914 (the JS OpenTelemetry
recipe), #915 (@anthropic-ai/sdk 0.136.0, openai 7.39.0), #916
(@langchain/langgraph 1.5.1), #917 (dashboard lucide-react 1.60.0,
react-router 8.5.0, typescript-eslint 8.72.0). Against main nothing is
downgraded; npm audit is 0 in every lockfile but the root's two recorded
development-tool rows; actionlint passes.

docs/launch/listings/docker/server.yaml carries the 0.21.0 release commit,
as the docker/mcp-registry entry now does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* deps(examples): the JS recipe takes OpenTelemetry's 2.x line at its newest; its half-published 3.x line is ignored for now

#914 moved @opentelemetry/resources to 3.0.0, the OTLP exporter to 0.300.0
and the API to 1.10.0, but left sdk-trace-base and sdk-trace-node on 2.12.0,
whose peer range is api <1.10.0: npm refused to install it (ERESOLVE), so
the recipe job failed. sdk-trace 3.x is not published yet, and OpenInference's
instrumentation needs core ^2.8.0, so no consistent 3.x set exists today.

The recipe takes the newest consistent set: api 1.9.1, core, resources and
both trace SDKs 2.12.0, the exporter 0.223.0, with #914's other updates
(@openai/agents 0.20.0, OpenInference core 2.8.0 and its OpenAI Agents
instrumentation 0.3.2). Regenerated on Linux; npm ci resolves one API copy;
nothing is downgraded against main; npm audit 0. dependabot.yml ignores the
3.x line in this directory, with the condition that lifts it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* deps(examples): the LlamaIndex recipe keeps openinference-instrumentation-llama-index 4.5.2 (#919)

With 4.6.0 (from #912) and 4.6.1 the recipe runs and answers but Iris
stores no matching trace, so its job failed. 4.5.2 with every other new pin
(llama-index-llms-openai 0.8.3, OpenTelemetry SDK and exporter 1.45.1)
passes 2 of 2 locally. #919 tracks the cause with a plan; dependabot.yml
holds the package below 4.6.0 until then.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 25, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/packages/sdk/providers-fa1b527bdd branch October 25, 2026 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@irparent irparent Awaiting requested review from irparent irparent is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants