fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@atproto/api (source)	0.20.27 → 0.20.28
npm:@anthropic-ai/claude-code	2.1.204 → 2.1.206
npm:@openai/codex (source)	0.143.0 → 0.144.1
prettier (source)	3.9.4 → 3.9.5
yarn (source)	4.17.0 → 4.17.1

---

Release Notes

bluesky-social/atproto (@​atproto/api)

v0.20.28

Compare Source

Patch Changes

• Updated dependencies [9e1da84]:
  • @​atproto/syntax@​0.7.2
  • @​atproto/common-web@​0.5.6
  • @​atproto/lexicon@​0.7.7
  • @​atproto/xrpc@​0.8.6

anthropics/claude-code (npm:@​anthropic-ai/claude-code)

v2.1.206

Compare Source

• Added directory path suggestions to /cd, matching /add-dir behavior
• Added a /doctor check that proposes trimming checked-in CLAUDE.md files by cutting content Claude could derive from the codebase
• /commit-push-pr now auto-allows git push to the repo's configured push remote (remote.pushDefault, or the sole remote when only one is configured) in addition to origin
• Gateway: /login now supports Anthropic-operated public gateway endpoints
• EnterWorktree now asks for confirmation before entering a git worktree outside the project's .claude/worktrees/ directory
• Background agents now upgrade to a new version in the background right after a Claude Code update, instead of paying a slow stale-session upgrade when you attach
• Fixed an expired login failing every model with a misleading "There's an issue with the selected model" error instead of prompting to run /login
• Fixed claude --resume and --continue not responding to keyboard input on startup
• Fixed MCP servers configured via --mcp-config or .mcp.json ignoring a per-server request_timeout_ms, which caused long-running MCP tool calls to time out at the 60s default in fresh sessions
• Fixed CLAUDE_CODE_EXTRA_BODY being silently ignored by claude agents / --bg background workers; the shell-exported override now follows the dispatching session
• Fixed OAuth MCP servers requiring manual re-authentication after a single failed token refresh
• Fixed --permission-prompt-tool pointing at an MCP server crashing with "MCP tool not found" on cold start before the server finishes connecting
• Fixed /model picker rows printing a price for a different model than the row named, and stopped quoting first-party list prices on providers that don't bill them
• Fixed server-provided model rows being misplaced in the /model picker when an entitlement or allowlist restriction drops the row they were positioned against
• Fixed desktop sessions getting stuck showing "running" after a slash command was sent mid-turn
• Fixed keyboard input being ignored in the agents view when a setup prompt appeared before a bare claude --resume on Windows
• Fixed claude rm leaving the removed job in the daemon roster, causing the row to reappear in claude agents
• Fixed /remote-control showing "Unknown command" when logged out — it now explains how to sign in
• Fixed left arrow not stepping back out of a phase or agent in the workflow detail view
• Fixed /status listing the same broken-install warning twice
• Fixed false "disused plugin" tips and skewed disuse telemetry for LSP plugins
• Fixed /doctor's update check to compare Homebrew installs against their cask's channel instead of the settings channel
• Fixed the fullscreen jump-to-bottom pill suggesting Ctrl+End on macOS, not showing rebound chords, and wrapping over the transcript
• Bedrock: fixed a multi-minute startup hang when using an awsCredentialExport helper on networks with restricted egress
• Improved /code-review findings quality on claude-opus-4-8 across all effort levels
• Improved agents view: status column now uses full terminal width instead of truncating at 64 characters
• Changed agents view: Ctrl+X now permanently removes a completed session, and sessions no longer render twice; deleted background jobs stay deleted

v2.1.205

Compare Source

• Added an auto mode rule that blocks tampering with session transcript files
• Fixed --json-schema silently producing unstructured output when the schema was invalid, and schemas using the format keyword being rejected
• Fixed a message sent while Claude was working being silently lost when the turn ended at the --max-turns limit
• Fixed Windows worktree removal deleting files outside the worktree when an NTFS junction or directory symlink existed inside it
• Fixed background agents staying shown as "failed" or "completed" in the agent list after being resumed with SendMessage
• Fixed background jobs flipping from "needs input" back to "working" in the agent list when the agent's turn contained no readable text
• Fixed claude attach erroring when a background agent was mid-upgrade restart instead of waiting for it to come back
• Fixed session-to-PR linking missing a PR created in a Bash call whose output exceeded the 30K inline limit
• Fixed claude mcp add-from-claude-desktop getting stuck when a server name contains unsupported characters; invalid names are now reported and remaining servers still import
• Fixed a plugin LSP server that fails to initialize preventing a valid LSP server from another plugin handling the same file extension
• Fixed a Windows crash when the directory Claude was launched from is deleted, locked, or unmounted while a command is running
• Fixed a crash when a file watcher was closed while a directory scan was still in flight
• Fixed project verify skills being rewritten on every session instead of only when a documented command changed
• Fixed the agent view rendering one line too high and clipping its header when the job list slightly overflowed the screen
• Fixed background tasks in the web and mobile Remote Control panels showing stale "Running" status by forwarding full task state on every membership change
• Improved auto mode to ask before running rm -rf on a variable it can't resolve from context
• Auto-update binary downloads now stream to disk instead of buffering in memory, cutting the updater's peak memory usage by roughly 400 MB
• Background task notifications now explicitly state that no human input has occurred, preventing fabricated in-transcript approvals from being acted on
• Improved agent view: sessions that edit, merge, comment on, or push to an existing PR now link it in claude agents
• Improved agent view: rows now show a colored state word and a classifier-written headline instead of raw tool call text, and the peek opens with full status including the exact ask for blocked sessions
• /doctor is now a full setup checkup that can diagnose and fix issues; /checkup is its alias
• Reserved the "Claude Browser" MCP server name (alongside "Claude Preview") ahead of the Claude Desktop pane rename; user-configured MCP servers can no longer register under either name
• Fixed Cowork VM-mode local-agent sessions failing to start with "Not logged in · Please run /login" on CLI 2.1.203+

prettier/prettier (prettier)

v3.9.5

Compare Source

diff

Markdown: Cap ordered list mark at 999,999,999 (#​19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text

1234567890123456789012) text

<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text

1234567890123456789012) text

<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text

1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#​19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](<> "title")

<!-- Prettier 3.9.4 -->
[link]( "title")

<!-- Prettier 3.9.5 -->
[link](<> "title")

Less: Remove extra spaces after [ in map lookups (#​19503 by @​kovsu)

// Input
.foo {
  color: #theme[ primary];
  color: #theme[@​name];
  color: #theme[@​@​name];
}

// Prettier 3.9.4
.foo {
  color: #theme[ primary];
  color: #theme[ @​name];
  color: #theme[ @​@​name];
}

// Prettier 3.9.5
.foo {
  color: #theme[primary];
  color: #theme[@​name];
  color: #theme[@​@​name];
}

CSS: Prevent addition space in type() with + (#​19516 by @​bigandy)

This fixes the addition space before + in CSS type() declaration. For example type(<number>+) was being converted into type(<number> +) which is invalid CSS and does not work.

/* Input */
div {
  border-radius: attr(br type(<length>+));
}

/* Prettier 3.9.4 */
div {
  border-radius: attr(br type(<length> +));
}

/* Prettier 3.9.5 */
div {
  border-radius: attr(br type(<length>+));
}

Less: Remove spaces between merge markers and colons (#​19517 by @​kovsu)

// Input
a {
  box-shadow  +  : 0 0 1px #​000;
}

// Prettier 3.9.4
a {
  box-shadow+  : 0 0 1px #​000;
}

// Prettier 3.9.5
a {
  box-shadow+: 0 0 1px #​000;
}

Markdown: Preserve wiki links with aliases (#​19527 by @​kovsu)

<!-- Input -->
[[Foo:Bar]]

<!-- Prettier 3.9.4 -->
[[Foo]]

<!-- Prettier 3.9.5 -->
[[Foo:Bar]]

TypeScript: Fix comments being dropped on shorthand type import/export specifiers (#​19565 by @​kirkwaiblinger)

// Input
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";

// Prettier 3.9.4
Error: Comment "comment" was not printed. Please report this error!

// Prettier 3.9.5
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";

Miscellaneous: Preserving comments' placement property (#​19567 by @​Janther)

Prettier@​3.9.0 deleted an undocumented property on comments, which was already used by plugins, comment.placement is now available again after comment attach.

Flow: Stop enforcing empty module declaration to break (#​19568 by @​fisker)

// Input
declare module "foo" {}

// Prettier 3.9.4
declare module "foo" {
}

// Prettier 3.9.5
declare module "foo" {}

Angular: Support expression for exhaustive typechecking (#​19571 by @​fisker)

<!-- Input -->
@&#8203;switch (state.mode) {
  @&#8203;default never(state);
}

<!-- Prettier 3.9.4 -->
@&#8203;switch (state.mode) {
  @&#8203;default never;
}

<!-- Prettier 3.9.5 -->
@&#8203;switch (state.mode) {
  @&#8203;default never(state);
}

TypeScript: Ignore comments inside mapped type when checking type parameter comments (#​19572 by @​fisker)

// Input
foo<{
  // comment
  [key in keyof Foo]: number
}>();

// Prettier 3.9.4
foo<
  {
    // comment
    [key in keyof Foo]: number;
  }
>();

// Prettier 3.9.5
foo<{
  // comment
  [key in keyof Foo]: number;
}>();

Less: Fix adjacent block comments being corrupted (#​19574 by @​kovsu)

// Input
/* a *//* b */
/* a */* {
  color: red;
}

// Prettier 3.9.4
/* a */
/* b */
/* a * {
  color: red;
}

// Prettier 3.9.5
/* a */ /* b */
/* a */
* {
  color: red;
}

JavaScript: Handle dangling comments in SwitchStatement (#​19581 by @​fisker)

// Input
switch (foo) {
 // comment
}

// Prettier 3.9.4
switch (
  foo
  // comment
) {
}

// Prettier 3.9.5
switch (foo) {
  // comment
}

TypeScript: Remove space in comment-only object type (#​19583 by @​fisker)

// Input
var foo = {
  /* comment */
};
type Foo = {
  /* comment */
};

// Prettier 3.9.4
var foo = {/* comment */};
type Foo = { /* comment */ };

// Prettier 3.9.5
var foo = {/* comment */};
type Foo = {/* comment */};

yarnpkg/berry (yarn)

v4.17.1: v4.17.1

Compare Source

What's Changed

• Handle optional compat patch failures for TypeScript 7 by @​hamidrezahanafi in #​7190

New Contributors

• @​hamidrezahanafi made their first contribution in #​7190

Full Changelog: https://github.com/yarnpkg/berry/compare/@yarnpkg/cli/4.17.0...@​yarnpkg/cli/4.17.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.