Skip to content

chore(deps): bump provider SDKs and app dependencies to latest - #166

Open
badcuban wants to merge 9 commits into
mainfrom
chore/bump-deps-latest
Open

chore(deps): bump provider SDKs and app dependencies to latest#166
badcuban wants to merge 9 commits into
mainfrom
chore/bump-deps-latest

Conversation

@badcuban

Copy link
Copy Markdown
Collaborator

Replaces #164, which conflicted with main after #165 merged and proposed versions that were already a day stale.

Bumps @anthropic-ai/claude-agent-sdk to 0.3.234 (background subagent resume fix, new context-usage/VCS-event/effort fields), @anthropic-ai/sdk to 0.117.1, @github/copilot-sdk to 1.0.11, and the ranged app deps (astro, @opencode-ai/sdk, @legendapp/list, @tanstack/react-router + router-plugin, lucide-react, zustand, wrangler, @oxlint/plugins) to latest.

SDK 0.3.233 removed the todo/task tools from the default tool surface on newer models, so the Claude adapter now names them in allowedTools to keep the plan timeline populated.

Held back on purpose: vitest family stays at 4.1.10 (vite-plus 0.2.4 pins @vitest/browser-preview 4.1.10; bumping vitest alone splits the family) and oxlint stays at 1.78.0 (1.79.0 needs a coordinated oxlint-tsgolint/vite-plus bump).

Replaces dependabot #164, which conflicted with main after #165 merged
and proposed versions that were already stale.

- @anthropic-ai/claude-agent-sdk ^0.3.234: picks up the background
  subagent resume fix (0.3.225) and the new context-usage, VCS-event,
  and effort fields. 0.3.233 removed the todo/task tools from the
  default surface on newer models, so the adapter now names them in
  allowedTools to keep the plan timeline populated.
- @anthropic-ai/sdk ^0.117.1, @github/copilot-sdk 1.0.11
- astro 7.2.3, @opencode-ai/sdk 1.18.18, @legendapp/list 3.3.7,
  @tanstack/react-router 1.170.29, router-plugin 1.168.32,
  lucide-react 1.32.0, zustand 5.0.15, wrangler 4.124.0
- @oxlint/plugins 1.78.0 (matching oxlint; 1.79.0 needs a coordinated
  oxlint-tsgolint/vite-plus bump)
- vitest family stays at 4.1.10: vite-plus 0.2.4 pins
  @vitest/browser-preview 4.1.10, and bumping vitest alone splits the
  family across two patch versions.
@vercel

vercel Bot commented Aug 18, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
threadlines Skipped Skipped Aug 18, 2026 8:39pm

Request Review

@github-actions github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:XL labels Aug 18, 2026
3.3.6/3.3.7 changed first-load scroll-follow behavior and the ChatView
stale-turn prompt-edit browser test failed twice in a row on CI with it
(passes locally). Pin back to the version with green CI evidence;
re-attempt 3.3.7 together with a test fix.
Dependency-bump branches invalidate every cache, and on slow runners the
job hits the 20-minute cap during browser runtime install (two runs
cancelled at 20m2Xs on #166).
The ChatView stale-turn prompt-edit browser test fails on every CI run
of this branch (element never renders, passes locally). 1.170.28 is the
newest router with a green CI run, and upstream is actively changing
pending-UI/navigation behavior in adjacent patches. Re-attempt the
router bump separately.
Browser test failures on CI are usually invisible locally; the vitest
on-failure screenshot is the only evidence of what actually rendered.
The CI failures that prompted holding these back were runner
infrastructure (Azure apt mirror stalls hanging the browser runtime
install, plus one timing-flaky ChatView test that also failed on the
untouched dependabot branch). Both libraries fail and pass at both
versions; they were never the cause. This also clears the router-plugin
1.168.32 peer warning.
azure.archive.ubuntu.com has been stalling apt for 20+ minutes on
hosted runners, starving the job timeout during playwright install
--with-deps. Rewrite apt sources to archive.ubuntu.com first.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XL vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant