chore(deps): bump the anthropic group with 2 updates

[dependabot]

Bumps the anthropic group with 2 updates: @anthropic-ai/claude-agent-sdk and @anthropic-ai/claude-code.

Updates @anthropic-ai/claude-agent-sdk from 0.3.276 to 0.3.278

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.278

What's changed

• Updated to parity with Claude Code v2.1.278

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.278
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.278
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.278
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.278

v0.3.277

What's changed

• Added an optional builtin field to SlashCommand, set when a command is built into Claude Code
• Added pasted_content to SDKUserMessage: text the user pasted rather than typed, appended after the typed prompt
• Added optional remote-session latency fields (first_text_post_ms, first_text_post_wall_ms, first_stream_post_queue_wait_ms, first_stream_post_queued_behind) to the success result message
• Added 'userSettings' as an updateSettings() source, accepting only effortLevel, which is saved for the session's current model as /effort saves it
• Fixed a resumed or forked session's total_cost_usd, modelUsage and get_usage totals starting at zero instead of continuing from the earlier turns (maxBudgetUsd is unchanged)
• Changed SDKUsageReport usage rows to always carry severity and is_active: the report relays only rows from a live server reply, and none while the usage fetch is failing
• Updated to parity with Claude Code v2.1.277

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.277
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.277
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.277
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.277

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.278

• Updated to parity with Claude Code v2.1.278

0.3.277

• Added an optional builtin field to SlashCommand, set when a command is built into Claude Code
• Added pasted_content to SDKUserMessage: text the user pasted rather than typed, appended after the typed prompt
• Added optional remote-session latency fields (first_text_post_ms, first_text_post_wall_ms, first_stream_post_queue_wait_ms, first_stream_post_queued_behind) to the success result message
• Added 'userSettings' as an updateSettings() source, accepting only effortLevel, which is saved for the session's current model as /effort saves it
• Fixed a resumed or forked session's total_cost_usd, modelUsage and get_usage totals starting at zero instead of continuing from the earlier turns (maxBudgetUsd is unchanged)
• Changed SDKUsageReport usage rows to always carry severity and is_active: the report relays only rows from a live server reply, and none while the usage fetch is failing
• Updated to parity with Claude Code v2.1.277

Commits

• 18661ed chore: Update CHANGELOG.md
• ba8f408 chore: Update CHANGELOG.md
• See full diff in compare view

Updates @anthropic-ai/claude-code from 2.1.276 to 2.1.278

Release notes

Sourced from @​anthropic-ai/claude-code's releases.

v2.1.278

What's changed

• Changed auto mode for Claude API and Enterprise users, and on Bedrock, Vertex, Foundry and gateways, to default to the server-side classifier, which does not charge for classifier overhead (CLAUDE_CODE_AUTO_MODE_SERVER=0 opts out on Bedrock, Vertex, Foundry and gateways); warns on billed fallback. See https://code.claude.com/docs/en/auto-mode-classifier-billing
• Added an Auto mode server row to /status showing whether this session's auto mode classifier runs on the server

v2.1.277

What's changed

• Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Bedrock, Vertex or Foundry)
• Added CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 for Claude apps gateways whose only egress is a forward proxy: every outbound request hands the proxy the hostname instead of resolving it locally
• Added an optional headers: map on Claude apps gateway upstreams, to send static headers to a proxy you run in front of a provider
• Added a line saying a background task's update is waiting when it finishes while a panel such as /tasks is open
• Fixed claude -p and Agent SDK sessions that could hang with no result after an internal error; they now report the error and exit with code 1
• Fixed conversations failing every request with "text content blocks must be non-empty" when an earlier assistant turn held an empty text block beside other content, including after --resume
• Fixed being unexpectedly logged out when an older Claude Code build (for example an IDE extension's bundled CLI) runs on the same machine as the current one
• Fixed interactive start-up hanging or showing an error for ANTHROPIC_API_KEY users when ~/.claude.json holds a malformed customApiKeyResponses value
• Fixed update checks erroring every 30 minutes, and claude update hanging when a minimum or maximum version is set, if a proxy returns an invalid version; a malformed minimumVersion is now ignored
• Fixed claude update on winget- or apk-managed installs reporting "up to date" when the version lookup failed
• Fixed claude plugin install sometimes failing and breaking the installed copy when reinstalling a plugin version that a session or another program was using; an unchanged copy is now left alone
• Fixed Grep and Glob reporting no matches when the search could not start because the system was out of processes, memory or file handles; they now return an error saying so
• Fixed the Write tool silently ending the turn as a declined permission when the target path is an existing directory; it now reports a clear error
• Fixed the Edit tool treating an escaped backslash followed by uXXXX text as a \uXXXX escape, which could make an edit of a non-ASCII character rewrite an escaped backslash sequence instead
• Fixed the Edit tool reporting "Invalid regular expression: regular expression too large" instead of "String not found in file" when a very large edit containing non-ASCII text did not match the file
• Fixed a turn ending early with "Path contains null bytes" when a tool call's file path contained \u0000 written as an escape sequence; escaped control characters now stay as literal text
• Fixed background sessions (claude --bg) exiting when a plugin's LSP server exited or closed its stdin
• Fixed a crash ("Type error") when opening /mcp or /plugin manage with a malformed claudeAiMcpEverConnected value in ~/.claude.json
• Fixed a crash at launch when ~/.claude.json holds a malformed theme value
• Fixed a crash ("unrecoverable interface error") when the prompt held text containing terminal color codes, for example a prompt recalled from history or text loaded from the external editor
• Fixed a crash when resuming a session whose saved history holds an assistant message stored as a plain string
• Fixed sessions on slow or heavily loaded machines sometimes exiting with "Claude Code exited after an unrecoverable interface error" when the first spinner appeared
• Fixed a rare case where the screen could stop updating for the rest of the session after an internal rendering error
• Fixed a rare case on Windows where a turn could stop with an error such as "Out of memory" right after Claude replied, so that reply's tool calls never ran
• Fixed sessions continued after /clear (restart, --continue, --resume) missing part of their first message when a SessionStart hook printed output, causing a full prompt-cache miss
• Fixed messages from other agents (such as a subagent's SendMessage) that arrived mid-turn showing up below the "Ran N shell commands" row instead of where they arrived
• Fixed the "copied" notice not appearing after drag-selecting text in the fullscreen /resume picker and other panels that cover the prompt area
• Fixed $TMPDIR expanding empty in Bash commands that run outside the sandbox while sandboxing is enabled
• Fixed WebFetch and WebSearch in Cowork cloud sessions not telling Claude why a request was refused, such as a used-up fetch budget or an admin policy
• Fixed the Claude apps gateway's telemetry relay ignoring a collector hostname or domain listed in NO_PROXY when a proxy is set
• Fixed one malformed strictKnownMarketplaces or blockedMarketplaces entry silently disabling the whole enterprise marketplace policy
• Fixed failed auto-updates leaving large staged downloads behind in ~/.cache/claude/staging
• Fixed /plugin not stripping terminal control characters from messages on the Installed tab, such as the error of a failed plugin update
• Fixed /plugin → Installed and /skills crashing when a skill or legacy command is named like a built-in Object property such as constructor or toString
• Fixed /plugin closing with no message when every install in a multi-select failed
• Fixed uninstalled plugins reappearing as "failed to load" rows in /plugin Installed, and Remove not clearing such a row
• Fixed plugins from the official marketplace being recorded without their commit in installed_plugins.json, and installed_plugins.json keeping the old commit after updating a pinned-commit plugin
• Fixed plugin reload previews keeping every previewed copy of a plugin archive unpacked until exit, and overwriting the cached --plugin-url archive a reload falls back to when its download fails
• Fixed Remote Control session bookkeeping failing when ~/.claude.json holds a malformed placeholder record
• Fixed the error after a revoked claude.ai login blaming an expired Anthropic profile; it now leads with /login
• Fixed typed or pasted text occasionally coming out scrambled in the claude agents dispatch input during key repeat or very fast input

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-code's changelog.

2.1.278

• Changed auto mode for Claude API and Enterprise users, and on Bedrock, Vertex, Foundry and gateways, to default to the server-side classifier, which does not charge for classifier overhead (CLAUDE_CODE_AUTO_MODE_SERVER=0 opts out on Bedrock, Vertex, Foundry and gateways); warns on billed fallback. See https://code.claude.com/docs/en/auto-mode-classifier-billing
• Added an Auto mode server row to /status showing whether this session's auto mode classifier runs on the server

2.1.277

• Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Bedrock, Vertex or Foundry)
• Added CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 for Claude apps gateways whose only egress is a forward proxy: every outbound request hands the proxy the hostname instead of resolving it locally
• Added an optional headers: map on Claude apps gateway upstreams, to send static headers to a proxy you run in front of a provider
• Added a line saying a background task's update is waiting when it finishes while a panel such as /tasks is open
• Fixed claude -p and Agent SDK sessions that could hang with no result after an internal error; they now report the error and exit with code 1
• Fixed conversations failing every request with "text content blocks must be non-empty" when an earlier assistant turn held an empty text block beside other content, including after --resume
• Fixed being unexpectedly logged out when an older Claude Code build (for example an IDE extension's bundled CLI) runs on the same machine as the current one
• Fixed interactive start-up hanging or showing an error for ANTHROPIC_API_KEY users when ~/.claude.json holds a malformed customApiKeyResponses value
• Fixed update checks erroring every 30 minutes, and claude update hanging when a minimum or maximum version is set, if a proxy returns an invalid version; a malformed minimumVersion is now ignored
• Fixed claude update on winget- or apk-managed installs reporting "up to date" when the version lookup failed
• Fixed claude plugin install sometimes failing and breaking the installed copy when reinstalling a plugin version that a session or another program was using; an unchanged copy is now left alone
• Fixed Grep and Glob reporting no matches when the search could not start because the system was out of processes, memory or file handles; they now return an error saying so
• Fixed the Write tool silently ending the turn as a declined permission when the target path is an existing directory; it now reports a clear error
• Fixed the Edit tool treating an escaped backslash followed by uXXXX text as a \uXXXX escape, which could make an edit of a non-ASCII character rewrite an escaped backslash sequence instead
• Fixed the Edit tool reporting "Invalid regular expression: regular expression too large" instead of "String not found in file" when a very large edit containing non-ASCII text did not match the file
• Fixed a turn ending early with "Path contains null bytes" when a tool call's file path contained \u0000 written as an escape sequence; escaped control characters now stay as literal text
• Fixed background sessions (claude --bg) exiting when a plugin's LSP server exited or closed its stdin
• Fixed a crash ("Type error") when opening /mcp or /plugin manage with a malformed claudeAiMcpEverConnected value in ~/.claude.json
• Fixed a crash at launch when ~/.claude.json holds a malformed theme value
• Fixed a crash ("unrecoverable interface error") when the prompt held text containing terminal color codes, for example a prompt recalled from history or text loaded from the external editor
• Fixed a crash when resuming a session whose saved history holds an assistant message stored as a plain string
• Fixed sessions on slow or heavily loaded machines sometimes exiting with "Claude Code exited after an unrecoverable interface error" when the first spinner appeared
• Fixed a rare case where the screen could stop updating for the rest of the session after an internal rendering error
• Fixed a rare case on Windows where a turn could stop with an error such as "Out of memory" right after Claude replied, so that reply's tool calls never ran
• Fixed sessions continued after /clear (restart, --continue, --resume) missing part of their first message when a SessionStart hook printed output, causing a full prompt-cache miss
• Fixed messages from other agents (such as a subagent's SendMessage) that arrived mid-turn showing up below the "Ran N shell commands" row instead of where they arrived
• Fixed the "copied" notice not appearing after drag-selecting text in the fullscreen /resume picker and other panels that cover the prompt area
• Fixed $TMPDIR expanding empty in Bash commands that run outside the sandbox while sandboxing is enabled
• Fixed WebFetch and WebSearch in Cowork cloud sessions not telling Claude why a request was refused, such as a used-up fetch budget or an admin policy
• Fixed the Claude apps gateway's telemetry relay ignoring a collector hostname or domain listed in NO_PROXY when a proxy is set
• Fixed one malformed strictKnownMarketplaces or blockedMarketplaces entry silently disabling the whole enterprise marketplace policy
• Fixed failed auto-updates leaving large staged downloads behind in ~/.cache/claude/staging
• Fixed /plugin not stripping terminal control characters from messages on the Installed tab, such as the error of a failed plugin update
• Fixed /plugin → Installed and /skills crashing when a skill or legacy command is named like a built-in Object property such as constructor or toString
• Fixed /plugin closing with no message when every install in a multi-select failed
• Fixed uninstalled plugins reappearing as "failed to load" rows in /plugin Installed, and Remove not clearing such a row
• Fixed plugins from the official marketplace being recorded without their commit in installed_plugins.json, and installed_plugins.json keeping the old commit after updating a pinned-commit plugin
• Fixed plugin reload previews keeping every previewed copy of a plugin archive unpacked until exit, and overwriting the cached --plugin-url archive a reload falls back to when its download fails
• Fixed Remote Control session bookkeeping failing when ~/.claude.json holds a malformed placeholder record
• Fixed the error after a revoked claude.ai login blaming an expired Anthropic profile; it now leads with /login
• Fixed typed or pasted text occasionally coming out scrambled in the claude agents dispatch input during key repeat or very fast input
• Fixed a crash ("unrecoverable interface error") when resuming a session whose saved transcript contains a stop hook summary without a well-formed hook list
• Fixed Enter on a selected agent panel row doing nothing when keybindings.json rebinds Enter in the Chat context, for example to chat:queueSubmit

... (truncated)

Commits

• bf7d404 chore: Update CHANGELOG.md and feed.xml
• 92ec78f diff: a docked pane reads the repository before it opens, so it never lands o...
• 2287e5d diff: the first edit opens the pane only from the main loop with checkpointin...
• 6ce37e9 mods/diff: type openPane's answer as unknown so a richer $.ui.open result com...
• 2fc72b2 mods/agents-md: a Read attaches no nested AGENTS.md where the engine attaches...
• f708f4f chore: Update CHANGELOG.md and feed.xml
• ca02e7d chore: Update CHANGELOG.md and feed.xml
• a92ea1c mods/agents-md: the AGENTS.md project-instructions mod (#95409)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: dcbd5936-b47c-469f-965a-a0e97b8b04f2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}