Skip to content

Update LLM provider SDK npm packages#8437

Open
hash-worker[bot] wants to merge 1 commit intomainfrom
deps/js/llm-provider-sdk-npm-packages
Open

Update LLM provider SDK npm packages#8437
hash-worker[bot] wants to merge 1 commit intomainfrom
deps/js/llm-provider-sdk-npm-packages

Conversation

@hash-worker
Copy link
Copy Markdown
Contributor

@hash-worker hash-worker bot commented Feb 17, 2026

This PR contains the following updates:

Package Change Age Confidence
@anthropic-ai/bedrock-sdk 0.26.3 -> 0.26.4 age confidence
@anthropic-ai/sdk 0.74.0 -> 0.80.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.80.0

Full Changelog: sdk-v0.79.0...sdk-v0.80.0

Features
Chores
  • internal: tweak CI branches (4a5819e)

v0.79.0

Full Changelog: sdk-v0.78.0...sdk-v0.79.0

Features
Bug Fixes
  • docs/contributing: correct pnpm link command (16bf66c)
  • internal: skip tests that depend on mock server (07417e5)
  • zod: use v4 import path for Zod ^3.25 compatibility (#​925) (c6c0ac8)
Chores
  • client: remove unused import (3827ab5)
  • internal: codegen related update (2c1fc10)
  • internal: improve import alias names (5b9615b)
  • internal: move stringifyQuery implementation to internal function (16239f3)
  • internal: update dependencies to address dependabot vulnerabilities (6fdea5e)
  • mcp-server: improve instructions (66e5363)
  • remove accidentally committed file (#​929) (0989113)
  • tests: unskip tests that are now supported in steady (616a98a)
Documentation

v0.78.0

Full Changelog: sdk-v0.77.0...sdk-v0.78.0

Features
  • api: Add top-level cache control (automatic caching) (1e2f83d)
Bug Fixes
  • bedrock: eliminate race condition in AWS credential resolution (#​901) (e5a101d)
  • client: format batches test file (821e9bf)
  • tests: fix issue in batches test (5f4ccf8)
Chores
  • update mock server docs (25d337f)

v0.77.0

Full Changelog: sdk-v0.76.0...sdk-v0.77.0

Features
  • api: fix shared UserLocation and error code types (c84038f)
Bug Fixes
  • add backward-compat namespace re-exports for UserLocation (#​706) (b88834f)

v0.76.0

Full Changelog: sdk-v0.75.0...sdk-v0.76.0

Features

v0.75.0

Full Changelog: sdk-v0.74.0...sdk-v0.75.0

Features
  • api: Releasing claude-sonnet-4-6 (d75e1c0)
Bug Fixes
Chores
  • internal/client: fix form-urlencoded requests (cba82b4)
  • internal: avoid type checking errors with ts-reset (c723296)
  • readme: change badge color to blue (3f7e788)

Configuration

📅 Schedule: Branch creation - "before 4am every weekday,every weekend" (UTC), Automerge - "before 4am every weekday,every weekend" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@vercel
Copy link
Copy Markdown

vercel bot commented Feb 17, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hash Ready Ready Preview, Comment Apr 1, 2026 7:10pm
3 Skipped Deployments
Project Deployment Actions Updated (UTC)
hashdotdesign Ignored Ignored Preview Apr 1, 2026 7:10pm
hashdotdesign-tokens Ignored Ignored Preview Apr 1, 2026 7:10pm
petrinaut Skipped Skipped Apr 1, 2026 7:10pm

@vercel vercel bot temporarily deployed to Preview – petrinaut February 17, 2026 19:53 Inactive
@cursor
Copy link
Copy Markdown

cursor bot commented Feb 17, 2026

PR Summary

Medium Risk
Dependency-only change, but it upgrades LLM provider SDKs used by the AI worker which can subtly affect request/response behavior and model defaults at runtime.

Overview
Updates Anthropic client dependencies used in production: bumps @anthropic-ai/sdk from 0.74.0 to 0.80.0 (also in @local/repo-chores) and bumps @anthropic-ai/bedrock-sdk from 0.26.3 to 0.26.4 in hash-ai-worker-ts.

Regenerates yarn.lock to reflect the new resolved versions and checksums.

Written by Cursor Bugbot for commit 2be6a43. This will update automatically on new commits. Configure here.

@github-actions github-actions bot added area/deps Relates to third-party dependencies (area) area/apps > hash* Affects HASH (a `hash-*` app) area/libs Relates to first-party libraries/crates/packages (area) type/eng > backend Owned by the @backend team area/apps labels Feb 17, 2026
@augmentcode
Copy link
Copy Markdown

augmentcode bot commented Feb 17, 2026

🤖 Augment PR Summary

Summary: Updates the pinned @anthropic-ai/sdk dependency from 0.74.0 to 0.75.0 in the AI worker and repo-chores Node workspaces.
Why: Pulls in the latest upstream SDK spec fixes and newly released model support (per v0.75.0 release notes).

🤖 Was this summary useful? React with 👍 or 👎

Copy link
Copy Markdown

@augmentcode augmentcode bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. No suggestions at this time.

Comment augment review to trigger a new review at any time.

@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 927fcbd to 948dad1 Compare February 18, 2026 04:27
@hash-worker hash-worker bot changed the title Update npm package @anthropic-ai/sdk to v0.75.0 Update npm package @anthropic-ai/sdk to v0.76.0 Feb 18, 2026
@vercel vercel bot temporarily deployed to Preview – petrinaut February 18, 2026 04:27 Inactive
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 948dad1 to f8c67bd Compare February 18, 2026 20:55
@hash-worker hash-worker bot changed the title Update npm package @anthropic-ai/sdk to v0.76.0 Update npm package @anthropic-ai/sdk to v0.77.0 Feb 18, 2026
@vercel vercel bot temporarily deployed to Preview – petrinaut February 18, 2026 20:56 Inactive
@vilkinsons vilkinsons enabled auto-merge February 18, 2026 22:30
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from f8c67bd to 45073ad Compare February 19, 2026 20:20
@hash-worker hash-worker bot changed the title Update npm package @anthropic-ai/sdk to v0.77.0 Update LLM provider SDK npm packages Feb 19, 2026
@vercel vercel bot temporarily deployed to Preview – petrinaut February 19, 2026 20:20 Inactive
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 45073ad to 40ecdb2 Compare February 20, 2026 10:20
@vercel vercel bot temporarily deployed to Preview – petrinaut February 20, 2026 10:20 Inactive
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 40ecdb2 to 3d73d42 Compare February 25, 2026 17:58
@hash-worker hash-worker bot changed the title Update npm package @anthropic-ai/bedrock-sdk to v0.26.4 Update npm package @anthropic-ai/bedrock-sdk to v0.26.4 - autoclosed Feb 25, 2026
@hash-worker hash-worker bot closed this Feb 25, 2026
auto-merge was automatically disabled February 25, 2026 18:36

Pull request was closed

@hash-worker hash-worker bot deleted the deps/js/llm-provider-sdk-npm-packages branch February 25, 2026 18:36
@hash-worker hash-worker bot changed the title Update npm package @anthropic-ai/bedrock-sdk to v0.26.4 - autoclosed Update LLM provider SDK npm packages Feb 25, 2026
@hash-worker hash-worker bot reopened this Feb 25, 2026
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch 2 times, most recently from 3d73d42 to 8295b73 Compare February 25, 2026 19:00
@vercel vercel bot temporarily deployed to Preview – petrinaut February 25, 2026 19:00 Inactive
@github-actions github-actions bot added area/libs Relates to first-party libraries/crates/packages (area) type/eng > backend Owned by the @backend team labels Feb 25, 2026
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 8295b73 to 9c1bd9d Compare March 15, 2026 19:47
@vercel vercel bot temporarily deployed to Preview – petrinaut March 15, 2026 19:47 Inactive
@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from 9c1bd9d to f0e4a24 Compare March 16, 2026 17:59
@vercel vercel bot temporarily deployed to Preview – petrinaut March 16, 2026 17:59 Inactive
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

  • ✅ Fixed: SDK version doesn't match PR description's target
    • Pinned @anthropic-ai/sdk to 0.78.0 in both affected package manifests and regenerated yarn.lock so all resolved entries now match the PR’s stated target version.

Create PR

Or push these changes by commenting:

@cursor push 7c837bbb15
Preview (7c837bbb15)
diff --git a/apps/hash-ai-worker-ts/package.json b/apps/hash-ai-worker-ts/package.json
--- a/apps/hash-ai-worker-ts/package.json
+++ b/apps/hash-ai-worker-ts/package.json
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@anthropic-ai/bedrock-sdk": "0.26.4",
-    "@anthropic-ai/sdk": "0.79.0",
+    "@anthropic-ai/sdk": "0.78.0",
     "@apps/hash-graph": "workspace:*",
     "@blockprotocol/graph": "workspace:*",
     "@blockprotocol/type-system": "workspace:*",

diff --git a/libs/@local/repo-chores/node/package.json b/libs/@local/repo-chores/node/package.json
--- a/libs/@local/repo-chores/node/package.json
+++ b/libs/@local/repo-chores/node/package.json
@@ -10,7 +10,7 @@
     "lint:tsc": "tsc --noEmit"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "0.79.0",
+    "@anthropic-ai/sdk": "0.78.0",
     "@blockprotocol/core": "0.1.4",
     "@linear/sdk": "61.0.0",
     "@local/hash-backend-utils": "workspace:*",

diff --git a/yarn.lock b/yarn.lock
--- a/yarn.lock
+++ b/yarn.lock
@@ -31,9 +31,9 @@
   languageName: node
   linkType: hard
 
-"@anthropic-ai/sdk@npm:0.79.0, @anthropic-ai/sdk@npm:>=0.50.3 <1":
-  version: 0.79.0
-  resolution: "@anthropic-ai/sdk@npm:0.79.0"
+"@anthropic-ai/sdk@npm:0.78.0, @anthropic-ai/sdk@npm:>=0.50.3 <1":
+  version: 0.78.0
+  resolution: "@anthropic-ai/sdk@npm:0.78.0"
   dependencies:
     json-schema-to-ts: "npm:^3.1.1"
   peerDependencies:
@@ -43,7 +43,7 @@
       optional: true
   bin:
     anthropic-ai-sdk: bin/cli
-  checksum: 10c0/dd68838935bed0b8478da75e6a7f18ecb20c85f0cc173db10ca425ae6aa0a60536ba7b5994819e889f3d48bf30534ca25ea572dc306cb311ce6647057caf1f2a
+  checksum: 10c0/a43c83047d0f6ac8d50938e8a07aee27b8891cf51011fcbdb07159996762f262734e4839df00e57f713e25c8c740424939e13c91e6b3f5b12879b9cde1d9c835
   languageName: node
   linkType: hard
 
@@ -337,7 +337,7 @@
   resolution: "@apps/hash-ai-worker-ts@workspace:apps/hash-ai-worker-ts"
   dependencies:
     "@anthropic-ai/bedrock-sdk": "npm:0.26.4"
-    "@anthropic-ai/sdk": "npm:0.79.0"
+    "@anthropic-ai/sdk": "npm:0.78.0"
     "@apps/hash-graph": "workspace:*"
     "@blockprotocol/graph": "workspace:*"
     "@blockprotocol/type-system": "workspace:*"
@@ -9588,7 +9588,7 @@
   version: 0.0.0-use.local
   resolution: "@local/repo-chores@workspace:libs/@local/repo-chores/node"
   dependencies:
-    "@anthropic-ai/sdk": "npm:0.79.0"
+    "@anthropic-ai/sdk": "npm:0.78.0"
     "@blockprotocol/core": "npm:0.1.4"
     "@linear/sdk": "npm:61.0.0"
     "@local/eslint": "workspace:*"

This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.

"@anthropic-ai/bedrock-sdk": "0.26.3",
"@anthropic-ai/sdk": "0.74.0",
"@anthropic-ai/bedrock-sdk": "0.26.4",
"@anthropic-ai/sdk": "0.79.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SDK version doesn't match PR description's target

Medium Severity

The @anthropic-ai/sdk is updated to 0.79.0 in both package files and yarn.lock, but the PR description states the intended target version is 0.78.0. The release notes included in the PR only cover through v0.78.0 and don't document what v0.79.0 (published today) contains. A reviewer approving this PR would be deploying an unreviewed SDK version with potentially unknown API changes.

Additional Locations (1)
Fix in Cursor Fix in Web

@hash-worker hash-worker bot force-pushed the deps/js/llm-provider-sdk-npm-packages branch from b395cc3 to 2be6a43 Compare April 1, 2026 18:58
@vercel vercel bot temporarily deployed to Preview – petrinaut April 1, 2026 18:58 Inactive
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

Fix All in Cursor

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

"@anthropic-ai/bedrock-sdk": "0.26.3",
"@anthropic-ai/sdk": "0.74.0",
"@anthropic-ai/bedrock-sdk": "0.26.4",
"@anthropic-ai/sdk": "0.80.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SDK version 0.80.0 installed instead of documented 0.79.0

Medium Severity

The PR description and release notes document an update of @anthropic-ai/sdk from 0.74.0 to 0.79.0, but the actual package.json files and yarn.lock install version 0.80.0. The release notes only cover changes through v0.79.0, meaning the changes in v0.80.0 (a minor version bump that could contain breaking API changes) have not been reviewed as part of this PR.

Additional Locations (1)
Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/apps > hash* Affects HASH (a `hash-*` app) area/apps area/deps Relates to third-party dependencies (area) area/libs Relates to first-party libraries/crates/packages (area) type/eng > backend Owned by the @backend team

Development

Successfully merging this pull request may close these issues.

1 participant