chore(deps): bump the minor-and-patch group with 6 updates

[dependabot]

Bumps the minor-and-patch group with 6 updates:

Package	From	To
@anthropic-ai/claude-agent-sdk	0.2.81	0.2.90
discord.js	14.25.1	14.26.0
mailparser	3.9.5	3.9.6
nodemailer	8.0.3	8.0.4
typescript-eslint	8.57.1	8.58.0
sqlite-vec	0.1.7	0.1.9

Updates @anthropic-ai/claude-agent-sdk from 0.2.81 to 0.2.90

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.2.90

What's changed

• Updated to parity with Claude Code v2.1.90

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.90
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.90
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.90
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.90

v0.2.89

What's changed

• Added startup() to pre-warm the CLI subprocess before query(), making the first query ~20x faster when startup cost can be paid upfront
• Added includeSystemMessages option to getSessionMessages() to optionally include system messages in session history
• Added listSubagents() and getSubagentMessages() functions to retrieve subagent conversation history from sessions
• Added includeHookEvents option to enable hook lifecycle messages (hook_started, hook_progress, hook_response) for all hook event types
• Fixed ERR_STREAM_WRITE_AFTER_END errors when single-turn queries with SDK MCP servers or hooks have control responses arriving after the result message
• Fixed Zod v4 field .describe() metadata being dropped from createSdkMcpServer tool schemas
• Fixed side_question returning null on resume before the first turn completes
• Fixed settingSources empty array causing --setting-sources "" to consume the next CLI flag
• Fixed error result messages (error_during_execution, error_max_turns, error_max_budget_usd) to correctly set is_error: true with descriptive messages
• Fixed MCP servers getting permanently stuck in a failed state after a connection race — they now retry on the next message

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.89
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.89
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.89
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.89

v0.2.87

What's changed

• Updated to parity with Claude Code v2.1.87

Update

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.2.90

• Updated to parity with Claude Code v2.1.90

0.2.89

• Added startup() to pre-warm the CLI subprocess before query(), making the first query ~20x faster when startup cost can be paid upfront
• Added includeSystemMessages option to getSessionMessages() to optionally include system messages in session history
• Added listSubagents() and getSubagentMessages() functions to retrieve subagent conversation history from sessions
• Added includeHookEvents option to enable hook lifecycle messages (hook_started, hook_progress, hook_response) for all hook event types
• Fixed ERR_STREAM_WRITE_AFTER_END errors when single-turn queries with SDK MCP servers or hooks have control responses arriving after the result message
• Fixed Zod v4 field .describe() metadata being dropped from createSdkMcpServer tool schemas
• Fixed side_question returning null on resume before the first turn completes
• Fixed settingSources empty array causing --setting-sources "" to consume the next CLI flag
• Fixed error result messages (error_during_execution, error_max_turns, error_max_budget_usd) to correctly set is_error: true with descriptive messages
• Fixed MCP servers getting permanently stuck in a failed state after a connection race — they now retry on the next message

0.2.87

• Updated to parity with Claude Code v2.1.87

0.2.86

• Added getContextUsage() control method to retrieve a breakdown of context window usage by category
• Made session_id optional in SDKUserMessage type — callers no longer need to provide a session ID when sending user messages, as the SDK assigns one automatically
• Fixed TypeScript types resolving to any by adding @anthropic-ai/sdk and @modelcontextprotocol/sdk as dependencies
• Updated to parity with Claude Code v2.1.86

0.2.85

• Added reloadPlugins() SDK method to reload plugins and receive refreshed commands, agents, and MCP server status
• Fixed PreToolUse hooks with permissionDecision: "ask" being ignored in SDK mode
• Updated to parity with Claude Code v2.1.85

0.2.84

• Added taskBudget option for API-side token budget awareness, allowing the model to pace tool use within a token limit
• Added enableChannel() method and capabilities field on McpServerStatus for SDK-driven MCP channel activation
• Exported EffortLevel type ('low' | 'medium' | 'high' | 'max') for consumers to reference effort values directly
• Fixed showing "[Request interrupted by user]" for errors that were not caused by user interruption
• Updated to parity with Claude Code v2.1.84

0.2.83

• Added seed_read_state control subtype to seed readFileState with {path, mtime} so Edit works after the originating Read was removed from context
• Changed session_state_changed events to opt-in: set CLAUDE_CODE_EMIT_SESSION_STATE_EVENTS=1 to receive them
• Updated to parity with Claude Code v2.1.83

0.2.82

... (truncated)

Commits

• 3cdcd33 chore: Update CHANGELOG.md
• 29e6edf chore: Update CHANGELOG.md
• d7cc5d9 chore: Update CHANGELOG.md
• 948afef Read issue number from workflow event in edit-issue-labels.sh (#258)
• 0a660e8 chore: Update CHANGELOG.md
• af1bd53 chore: Update CHANGELOG.md
• 86b848b chore: Update CHANGELOG.md
• 0f3a95b chore: Update CHANGELOG.md
• ba2688c chore: Update CHANGELOG.md
• 598007c chore: Update CHANGELOG.md
• See full diff in compare view

Updates discord.js from 14.25.1 to 14.26.0

Release notes

Sourced from discord.js's releases.

14.26.0

Bug Fixes

• Remove manage messages check for pinnable (#11453) (1a0da18)
• DJSError: Differentiate error type (#11295) (f5b3f84)

Features

• Allow partial DMChannel without client user (#11462) (45bd430)
• Modal radio group and checkbox components for v14 (#11437) (b42e499)

Refactor

• DJSError: Prefer this.constructor.name (#11294) (e32f0c1)

Typings

• BroadcastEval overload order (#11422) (16d70b9)

Changelog

Sourced from discord.js's changelog.

14.26.0 - (2026-03-31)

Bug Fixes

• Remove manage messages check for pinnable (#11453) (1a0da18)
• DJSError: Differentiate error type (#11295) (f5b3f84)

Features

• Allow partial DMChannel without client user (#11462) (45bd430)
• Modal radio group and checkbox components for v14 (#11437) (b42e499)

Refactor

• DJSError: Prefer this.constructor.name (#11294) (e32f0c1)

Typings

• BroadcastEval overload order (#11422) (16d70b9)

Commits

• eee6f94 chore(discord.js): release discord.js@14.26.0
• 45bd430 feat: allow partial DMChannel without client user (#11462)
• baeeb38 build: upgrade Undici
• 1a0da18 fix: Remove manage messages check for pinnable (#11453)
• b42e499 feat: modal radio group and checkbox components for v14 (#11437)
• 319a73f build: Upgrade v14 dependencies (#11427)
• 16d70b9 types: broadcastEval overload order (#11422)
• f5b3f84 fix(DJSError): Differentiate error type (#11295)
• e32f0c1 refactor(DJSError): Prefer this.constructor.name (#11294)
• See full diff in compare view

Updates mailparser from 3.9.5 to 3.9.6

Changelog

Sourced from mailparser's changelog.

3.9.6 (2026-03-25)

Bug Fixes

• bump nodemailer to 8.0.4 (b2d7f77)

Commits

• 7f17ae9 chore(master): release 3.9.6 [skip-ci]
• b2d7f77 fix: bump nodemailer to 8.0.4
• See full diff in compare view

Updates nodemailer from 8.0.3 to 8.0.4

Release notes

Sourced from nodemailer's releases.

v8.0.4

8.0.4 (2026-03-25)

Bug Fixes

• sanitize envelope size to prevent SMTP command injection (2d7b971)

Changelog

Sourced from nodemailer's changelog.

8.0.4 (2026-03-25)

Bug Fixes

• sanitize envelope size to prevent SMTP command injection (2d7b971)

Commits

• 2d31975 chore(master): release 8.0.4 (#1806)
• 2d7b971 fix: sanitize envelope size to prevent SMTP command injection
• See full diff in compare view

Updates typescript-eslint from 8.57.1 to 8.58.0

Release notes

Sourced from typescript-eslint's releases.

v8.58.0

8.58.0 (2026-03-30)

🚀 Features

• support TypeScript 6 (#12124)

🩹 Fixes

• eslint-plugin: crash in no-unnecessary-type-arguments (#12163)
• eslint-plugin: [no-extraneous-class] handle index signatures (#12142)
• eslint-plugin: [prefer-regexp-exec] avoid fixing unknown RegExp flags (#12161)

❤️ Thank You

• ej shafran @​ej-shafran
• Evyatar Daud @​StyleShit
• GG ZIBLAKING
• milkboy2564 @​SeolJaeHyeok
• teee32 @​teee32

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.2

8.57.2 (2026-03-23)

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#11865)
• eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#11971)
• eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#12120)
• eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
• eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#12125)
• eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#12127)
• eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#11954)
• typescript-estree: skip createIsolatedProgram fallback for projectService (#12066, #12065)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• Konv Suu
• mdm317
• Newton Yuan @​NewtonYuan
• RyoheiYamamoto
• SungHyun627 @​SungHyun627
• Tamashoo @​Tamashoo

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.58.0 (2026-03-30)

🚀 Features

• support TypeScript 6 (#12124)

❤️ Thank You

• Evyatar Daud @​StyleShit

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.2 (2026-03-23)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 4933417 chore(release): publish 8.58.0
• 8cde2d0 feat: support TypeScript 6 (#12124)
• be4d54d chore(release): publish 8.57.2
• See full diff in compare view

Updates sqlite-vec from 0.1.7 to 0.1.9

Release notes

Sourced from sqlite-vec's releases.

v0.1.9 Bug fix for DELETE operations

Fixes #274, which discovered that DELETE operations on vec0 tables with metadata text columns that are long (>12chars) would erronuously report a SQLItE_DONE error.

v0.1.9-alpha.1

Attempted fix of broken DELETEs on vec0 rows with large metdata text column values, as reported in #274

v0.1.8

Minor fix to the sqlite-vec NPM package, fixing #272. If youv'e ever had a problem npm install'ing sqlite-vec, now 's a great time to try again!

v0.1.8-alpha.1

Attempt to fix Node.js package distribution by bumping sqlite-dist in the release process.

Commits

• e9f598a v0.1.9
• 6c3bf36 v0.1.9-alpha.1
• ee9bd2b Fix SQLITE_DONE leak in ClearMetadata that broke DELETE on long text metadata...
• dfd8dc5 v0.1.8
• e7ae41b v0.1.8-alpha.1
• a8d81cb bump sqlte-dist
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.