deps(app)(deps): bump @anthropic-ai/sdk from 0.39.0 to 0.71.2 in /chartsmith-app#169
Conversation
dependabot
bot
added
chartsmith-app
dependencies
Bumps [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) from 0.39.0 to 0.71.2. - [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.39.0...sdk-v0.71.2) --- updated-dependencies: - dependency-name: "@anthropic-ai/sdk" dependency-version: 0.71.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/chartsmith-app/anthropic-ai/sdk-0.71.2
branch
from
ffca761 to
01df7bd
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| "zod": { | ||
| "optional": true | ||
| } | ||
| } |
There was a problem hiding this comment.
Bug: Missing node-fetch dependency after SDK upgrade
The upgrade removes node-fetch as a transitive dependency of @anthropic-ai/sdk, but chartsmith-app/lib/workspace/archive.ts imports and uses node-fetch directly (lines 9, 155, 226). Since node-fetch is not listed as an explicit dependency in package.json, this upgrade will cause runtime failures when downloading charts from ArtifactHub URLs. The node-fetch package needs to be added as a direct dependency, or the code needs to be refactored to use native Node.js fetch.
|
Closing stale dependabot PR - likely superseded by newer grouped updates |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/chartsmith-app/anthropic-ai/sdk-0.71.2
branch
1 participant
Bumps @anthropic-ai/sdk from 0.39.0 to 0.71.2.
Release notes
Sourced from
@anthropic-ai/sdk's releases.... (truncated)
Changelog
Sourced from
@anthropic-ai/sdk's changelog.... (truncated)
Commits
eb8b090chore: release mainc512663fix(streams): ensure errors are catchable (#856)1999377chore: release main6e368bcchore: add deprecation warnings for accessing .parsed3cc2dd6fix(parser): use correct naming for parsed text blocks4cd61aefix(structured outputs): ensure parsed is not enumerable7131dbacodegen metadata71ee68bchore(internal): upgrade eslintaaac44bchore(client): fix logger property type2db553fcodegen metadataMaintainer changes
This version was pushed to npm by packy-anthropic, a new releaser for
@anthropic-ai/sdksince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)