chore(deps): bump the npm-minor-patch group across 1 directory with 2 updates

[dependabot]

Bumps the npm-minor-patch group with 2 updates in the / directory: @anthropic-ai/claude-agent-sdk and yaml.

Updates @anthropic-ai/claude-agent-sdk from 0.1.77 to 0.2.141

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.2.141

What's changed

• TaskCreateInput, TaskCreateOutput, TaskGetInput, TaskGetOutput, TaskUpdateInput, TaskUpdateOutput, TaskListInput, and TaskListOutput types are now exported from @anthropic-ai/claude-agent-sdk/sdk-tools and included in the ToolInputSchemas/ToolOutputSchemas unions
• Aligned @anthropic-ai/sdk dependency to ^0.93.0

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.141
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.141
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.141
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.141

v0.2.140

What's changed

• Updated to parity with Claude Code v2.1.140

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.140
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.140
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.140
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.140

v0.2.139

What's changed

• Updated to parity with Claude Code v2.1.139

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.139
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.139
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.139
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.139
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.2.141

• TaskCreateInput, TaskCreateOutput, TaskGetInput, TaskGetOutput, TaskUpdateInput, TaskUpdateOutput, TaskListInput, and TaskListOutput types are now exported from @anthropic-ai/claude-agent-sdk/sdk-tools and included in the ToolInputSchemas/ToolOutputSchemas unions
• Aligned @anthropic-ai/sdk dependency to ^0.93.0

0.2.140

• Updated to parity with Claude Code v2.1.140

0.2.139

• Updated to parity with Claude Code v2.1.139

0.2.138

• Updated to parity with Claude Code v2.1.138

0.2.137

• Updated to parity with Claude Code v2.1.137

0.2.136

• Added resolveSettings() (alpha) to inspect effective merged settings without spawning the Claude CLI; reads MDM (plist/HKLM/HKCU) for parity with CLI startup
• Deprecated TodoWrite tool — future versions will switch to Task tools (TaskCreate, TaskGet, TaskUpdate, TaskList)

0.2.135

• Updated to parity with Claude Code v2.1.135

0.2.134

• Updated to parity with Claude Code v2.1.134

0.2.133

• Deprecated the unstable V2 session API (unstable_v2_createSession / unstable_v2_resumeSession / unstable_v2_prompt) — use query() instead
• Deprecated passing 'Skill' in allowedTools — use the skills option instead
• Updated to parity with Claude Code v2.1.133

0.2.132

• Documented applyFlagSettings() in the TypeScript Agent SDK reference and added support for null on top-level keys to clear flag-settings overrides
• Updated to parity with Claude Code v2.1.132

0.2.131

• Updated to parity with Claude Code v2.1.131

0.2.130

... (truncated)

Commits

• See full diff in compare view

Updates yaml from 2.8.3 to 2.9.0

Release notes

Sourced from yaml's releases.

v2.9.0

The changes here are really only patches, but I'm releasing this as a minor version to note a small change to the documentation of parseDocument() and parseAllDocuments(): I've removed the claim that they'll "never throw".

It remains the case that practically all non-malicious inputs will be handled without emitting an error, but there is a decent chance that code paths remain where e.g. a RangeError due to call stack exhaustion can be triggered by malicious inputs. Up to now, I've considered these as security vulnerabilities, and in fact it's the only category of error for which yaml CVEs have been issued so far.

Starting from this release, I'll be considering such errors as bugs, but not vulnerabilities. I do welcome people and/or LLMs looking for them, but please report them as normal issues rather than suspected security vulnerabilities. This also applies to previously undiscovered bugs in earlier releases.

• fix: Avoid calling Array.prototype.push.apply() with large source array
• fix(lexer): Avoid recursive calls that may exhaust the call stack

v2.8.4

• Disable alias resolution with maxAliasCount:0 (#677)
• Handle invalid unicode escapes (e1a1a77)
• Apply minFractionDigits only to decimal strings (#676)

Commits

• ddb21b0 2.9.0
• 167365b docs: Clarify that not all errors can be avoided
• 6eca2a7 fix: Avoid calling Array.prototype.push.apply() with large source array
• 0543cd5 fix(lexer): Avoid recursive calls that may exhaust the call stack
• ccdf743 2.8.4
• f625789 fix: Disable alias resolution with maxAliasCount:0 (#677)
• e1a1a77 fix: Handle invalid unicode escapes
• a163ea0 style: Satify Prettier
• b2a5a6c fix: Apply minFractionDigits only to decimal strings (#676)
• 93c951b chore: Bump JSR version to v2.8.3 (#673)
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.