Skip to content

chore(deps): bump claude-agent-sdk from 0.2.118 to 0.2.123 - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/claude-agent-sdk-0.2.120
Closed

chore(deps): bump claude-agent-sdk from 0.2.118 to 0.2.123#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/claude-agent-sdk-0.2.120

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps claude-agent-sdk from 0.2.118 to 0.2.123.

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.123

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.215

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.123/

pip install claude-agent-sdk==0.2.123

v0.2.122

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.214

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.122/

pip install claude-agent-sdk==0.2.122

v0.2.121

Bug Fixes

  • Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

  • Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
  • CI now lints and typechecks scripts/ alongside src/ and tests/
  • CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
  • Updated bundled Claude CLI to version 2.1.212

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.121/

pip install claude-agent-sdk==0.2.121
</tr></table>

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.123

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.215

0.2.122

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.214

0.2.121

Bug Fixes

  • Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

  • Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
  • CI now lints and typechecks scripts/ alongside src/ and tests/
  • CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
  • Updated bundled Claude CLI to version 2.1.212

0.2.120

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.211

0.2.119

Internal/Other Changes

  • Updated bundled Claude CLI to version 2.1.210
Commits
  • 2d4ef94 docs: update changelog for v0.2.123
  • d65bf4a chore: release v0.2.123
  • 4fa1389 chore: bump bundled CLI version to 2.1.215
  • 94ff18e docs: update changelog for v0.2.122
  • 1829240 chore: release v0.2.122
  • b461f55 chore: bump bundled CLI version to 2.1.214
  • f604b8c docs: update changelog for v0.2.121
  • 0a87d2c chore: release v0.2.121
  • 1cd470d chore: bump bundled CLI version to 2.1.212
  • 0278287 Validate CLAUDE_CLI_VERSION and remove shell interpolation from the build scr...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Dependency / Dependabot updates python Python / uv dependency updates labels Jul 16, 2026
@dependabot
dependabot Bot requested a review from OctavianTocan as a code owner July 16, 2026 03:24
@dependabot dependabot Bot added dependencies Dependency / Dependabot updates python Python / uv dependency updates labels Jul 16, 2026
@semanticdiff-com

semanticdiff-com Bot commented Jul 16, 2026

Copy link
Copy Markdown

Review changes with  SemanticDiff

@socket-security

socket-security Bot commented Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedclaude-agent-sdk@​0.2.118 ⏵ 0.2.12399 +1100100100100

View full report

@dependabot
chore(deps): bump claude-agent-sdk from 0.2.118 to 0.2.123
58f15cc 
Bumps [claude-agent-sdk](https://github.com/anthropics/claude-agent-sdk-python) from 0.2.118 to 0.2.123.
- [Release notes](https://github.com/anthropics/claude-agent-sdk-python/releases)
- [Changelog](https://github.com/anthropics/claude-agent-sdk-python/blob/main/CHANGELOG.md)
- [Commits](anthropics/claude-agent-sdk-python@v0.2.118...v0.2.123)

---
updated-dependencies:
- dependency-name: claude-agent-sdk
  dependency-version: 0.2.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump claude-agent-sdk from 0.2.114 to 0.2.120 chore(deps): bump claude-agent-sdk from 0.2.118 to 0.2.123 Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/claude-agent-sdk-0.2.120 branch from 2a13100 to 58f15cc Compare July 20, 2026 14:11
@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #15.

@dependabot dependabot Bot closed this Jul 23, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/claude-agent-sdk-0.2.120 branch July 23, 2026 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@OctavianTocan OctavianTocan Awaiting requested review from OctavianTocan OctavianTocan is a code owner

Assignees

No one assigned

Labels

dependencies Dependency / Dependabot updates python Python / uv dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants