[dependabot]

Bumps the npm-minor-major group with 2 updates: @anthropic-ai/sdk and openai.

Updates @anthropic-ai/sdk from 0.135.0 to 1.2.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk-v1.2.0

Features

• api: add support for message threads
• api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

• tools: copy the messages a tool runner is created with again
• tools: restore what the tool runner does after setMessagesParams() or pushMessages() in the loop body

Chores

• docs: clarify plugin content scan and validation descriptions
• docs: clarify plugin served_version_pinned and updated_at
• docs: fix usage and cost report examples and ending_at docs
• docs: rate limit model lists vary by organization and workspace
• internal: rename the version manifest to .version-manifest.json
• tests: fix a retry count header test that could never fail

aws-sdk-v1.1.1

Chores

• internal: stop expecting the beta query param in tests

google-cloud-sdk-v1.1.1

Bug Fixes

• google-cloud: send user profile routes to the organization endpoint

Chores

• internal: stop expecting the beta query param in tests

Documentation

• google-cloud: update the product name in the package description
• google-cloud: update the product name

sdk-v1.1.0

Features

• api: add enforcement status, actions and filter to user profiles

aws-sdk-v1.1.0

Features

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

1.2.0 (2026-10-23)

Features

• api: add support for message threads
• api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

• tools: copy the messages a tool runner is created with again
• tools: restore what the tool runner does after setMessagesParams() or pushMessages() in the loop body

Chores

• docs: clarify plugin content scan and validation descriptions
• docs: clarify plugin served_version_pinned and updated_at
• docs: fix usage and cost report examples and ending_at docs
• docs: rate limit model lists vary by organization and workspace
• internal: rename the version manifest to .version-manifest.json
• tests: fix a retry count header test that could never fail

1.1.0 (2026-10-21)

Features

• api: add enforcement status, actions and filter to user profiles

1.0.0 (2026-10-21)

⚠ BREAKING CHANGES

• api: add support for new API version 2026-10-21

Features

• api: add a workspace_id filter and the usage_tier scope type to list spend limits
• api: add support for new API version 2026-10-21

Chores

• ci: check the changelog of each package a pull request changes
• internal: specify which changelog a pull request updates

Documentation

• api: remove outdated system role note from messages description

... (truncated)

Commits

• bc9cbb0 release: 1.2.0, packages/aws-sdk 1.1.0, packages/bedrock-sdk 1.1.0, packages/...
• 913b71b Merge pull request #988 from anthropics/synced/published
• f8946b2 fix(tools): restore the released tool runner behavior when the caller changes...
• ea246a4 chore(docs): fix usage and cost report examples and ending_at docs
• cb17b41 feat(api): add usage and cost reports by dimension, mark older reports legacy
• 8ee6642 chore(tests): fix a retry count header test that could never fail
• e106cfe codegen metadata
• 832402e feat(api): add support for message threads
• 87f0ef4 chore(docs): clarify plugin content scan and validation descriptions
• e856fd1 chore(docs): rate limit model lists vary by organization and workspace
• Additional commits viewable in compare view

Updates openai from 7.34.0 to 7.43.0

Release notes

Sourced from openai's releases.

v7.43.0

7.43.0 (2026-10-22)

Features

• api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.trim() can fail when it receives an array; check typeof question.instructions === 'string' and handle the array case. Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type. DecisionInputMessage is now a union: code that extends or implements the old interface must use DecisionInputMessage.DecisionInputUserMessage instead. Existing string instructions and user-message inputs still work. (21a056d)

Bug Fixes

• deps-dev: bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-tests/vercel-edge (#2998) (1c69ab8)
• deps-dev: bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/ts-browser-webpack (#2997) (0e1bedc)
• deps: bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge (#3021) (482f73e)

Chores

• api: preserve client and helper compatibility (#3016) (17e0f08)
• refresh trusted next policy tooling (#3017) (7a970a7)

v7.42.0

7.42.0 (2026-10-22)

Features

• api: add voice deletion (#3014) (2a88010)

Bug Fixes

• agents: avoid repeated ancestor-path hashing (#3010) (e352050)
• api: avoid excessive work when redacting long log values (#3012) (e310fe0)

Chores

• api: clarify service-account API key deletion (#3015) (ab6d626)
• api: preserve file helpers and resource exports (#3007) (94c0c1b)

v7.41.0

7.41.0 (2026-10-21)

Features

• add Vertex AI support for the Responses API (#3005) (04b1ac4)

v7.40.0

... (truncated)

Changelog

Sourced from openai's changelog.

7.43.0 (2026-10-22)

Features

• api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.trim() can fail when it receives an array; check typeof question.instructions === 'string' and handle the array case. Decisions request inputs also accept new message roles and tool-history items, so update code that assumes it knows every input type. DecisionInputMessage is now a union: code that extends or implements the old interface must use DecisionInputMessage.DecisionInputUserMessage instead. Existing string instructions and user-message inputs still work. (21a056d)

Bug Fixes

• deps-dev: bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-tests/vercel-edge (#2998) (1c69ab8)
• deps-dev: bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/ts-browser-webpack (#2997) (0e1bedc)
• deps: bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge (#3021) (482f73e)

Chores

• api: preserve client and helper compatibility (#3016) (17e0f08)
• refresh trusted next policy tooling (#3017) (7a970a7)

7.42.0 (2026-10-22)

Features

• api: add voice deletion (#3014) (2a88010)

Bug Fixes

• agents: avoid repeated ancestor-path hashing (#3010) (e352050)
• api: avoid excessive work when redacting long log values (#3012) (e310fe0)

Chores

• api: clarify service-account API key deletion (#3015) (ab6d626)
• api: preserve file helpers and resource exports (#3007) (94c0c1b)

7.41.0 (2026-10-21)

Features

• add Vertex AI support for the Responses API (#3005) (04b1ac4)

7.40.0 (2026-10-21)

Features

... (truncated)

Commits

• d02d4de release: 7.43.0 (#3020)
• e17e0d4 ci: retire unused next status bridge (#3023)
• 21a056d feat(api): expand Decisions input and question types (#3018)
• 482f73e fix(deps): bump next from 15.5.27 to 15.5.28 in /ecosystem-tests/vercel-edge ...
• 17e0f08 chore(api): preserve client and helper compatibility (#3016)
• f3403f4 ci: validate next candidates from trusted main (#2999)
• 0e1bedc fix(deps-dev): bump launch-editor from 2.14.1 to 2.14.2 in /ecosystem-tests/t...
• 1c69ab8 fix(deps-dev): bump follow-redirects from 1.16.0 to 1.16.1 in /ecosystem-test...
• 7a970a7 chore: refresh trusted next policy tooling (#3017)
• 802a323 release: 7.42.0 (#3008)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Auto-merge skipped: grouped PR contains a major version bump. Patch and minor bumps auto-merge after CI passes; major bumps need a human to review and merge.