Skip to content

chore(deps): update bump-dependencies#37

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate.bump-dependencies
Open

chore(deps): update bump-dependencies#37
renovate[bot] wants to merge 1 commit intomainfrom
renovate.bump-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 29, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@anthropic-ai/claude-code 2.1.117 → 2.1.120 age confidence
@google/gemini-cli 0.38.2 → 0.39.1 age confidence
opencode-ai 1.14.20 → 1.14.25 age confidence

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.120

Compare Source

  • Windows: Git for Windows (Git Bash) is no longer required — when absent, Claude Code uses PowerShell as the shell tool
  • Added claude ultrareview [target] subcommand to run /ultrareview non-interactively from CI or scripts — prints findings to stdout (--json for raw output) and exits 0 on completion or 1 on failure
  • Skills can now reference the current effort level with ${CLAUDE_EFFORT} in their content
  • Set AI_AGENT environment variable for subprocesses so gh can attribute traffic to Claude Code
  • Spinner tips that recommend installing the desktop app or creating skills/agents are now hidden when you already have them
  • Show a "use PgUp/PgDn to scroll" hint when the terminal sends arrow keys instead of scroll events
  • Faster session start when you have many claude.ai connectors configured but not authorized
  • The auto mode denial message now links to the configuration docs
  • claude plugin validate now accepts $schema, version, and description at the top level of marketplace.json and $schema in plugin.json
  • Auto-compact in auto mode now displays auto (lowercase, no token count) instead of a misleading token value
  • Fixed pressing Esc during a stdio MCP tool call closing the entire server connection (regression in 2.1.105)
  • Fixed /rewind and other interactive overlays not responding to keyboard input after launching with claude --resume
  • Fixed terminal scrollback duplication in non-fullscreen mode (resize, dialog dismiss, long sessions)
  • Fixed DISABLE_TELEMETRY / CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC not suppressing usage metrics telemetry for API and enterprise users
  • Fixed false-positive "Dangerous rm operation" permission prompts in auto mode for multi-line bash commands containing both a pipe and a redirect
  • Fixed long selection menus clipping below the terminal in fullscreen mode — the focused option now stays on screen as you scroll
  • Fixed Write tool output collapsing instead of expanding when clicking "+N lines" in fullscreen
  • Fixed slash command picker jumping while typing, and improved highlight to only match contiguous substrings in blue
  • Fixed /plugin marketplace failing to load when one entry uses an unrecognized source format — that entry is shown but installing it prompts you to update
  • [VSCode] /usage now opens the native Account & Usage dialog instead of returning plain-text session cost
  • [VSCode] Voice dictation now respects the language setting in ~/.claude/settings.json
  • Fixed find in the Bash tool exhausting open file descriptors on large directory trees, causing host-wide crashes (macOS/Linux native builds)

v2.1.119

Compare Source

  • /config settings (theme, editor mode, verbose, etc.) now persist to ~/.claude/settings.json and participate in project/local/policy override precedence
  • Added prUrlTemplate setting to point the footer PR badge at a custom code-review URL instead of github.com
  • Added CLAUDE_CODE_HIDE_CWD environment variable to hide the working directory in the startup logo
  • --from-pr now accepts GitLab merge-request, Bitbucket pull-request, and GitHub Enterprise PR URLs
  • --print mode now honors the agent's tools: and disallowedTools: frontmatter, matching interactive-mode behavior
  • --agent <name> now honors the agent definition's permissionMode for built-in agents
  • PowerShell tool commands can now be auto-approved in permission mode, matching Bash behavior
  • Hooks: PostToolUse and PostToolUseFailure hook inputs now include duration_ms (tool execution time, excluding permission prompts and PreToolUse hooks)
  • Subagent and SDK MCP server reconfiguration now connects servers in parallel instead of serially
  • Plugins pinned by another plugin's version constraint now auto-update to the highest satisfying git tag
  • Vim mode: Esc in INSERT no longer pulls a queued message back into the input; press Esc again to interrupt
  • Slash command suggestions now highlight the characters that matched your query
  • Slash command picker now wraps long descriptions onto a second line instead of truncating
  • owner/repo#N shorthand links in output now use your git remote's host instead of always pointing at github.com
  • Security: blockedMarketplaces now correctly enforces hostPattern and pathPattern entries
  • OpenTelemetry: tool_result and tool_decision events now include tool_use_id; tool_result also includes tool_input_size_bytes
  • Status line: stdin JSON now includes effort.level and thinking.enabled
  • Fixed pasting CRLF content (Windows clipboards, Xcode console) inserting an extra blank line between every line
  • Fixed multi-line paste losing newlines in terminals using kitty keyboard protocol sequences inside bracketed paste
  • Fixed Glob and Grep tools disappearing on native macOS/Linux builds when the Bash tool is denied via permissions
  • Fixed scrolling up in fullscreen mode snapping back to the bottom every time a tool finishes
  • Fixed MCP HTTP connections failing with "Invalid OAuth error response" when servers returned non-JSON bodies for OAuth discovery requests
  • Fixed Rewind overlay showing "(no prompt)" for messages with image attachments
  • Fixed auto mode overriding plan mode with conflicting "Execute immediately" instructions
  • Fixed async PostToolUse hooks that emit no response payload writing empty entries to the session transcript
  • Fixed spinner staying on when a subagent task notification is orphaned in the queue
  • Tool search is now disabled by default on Vertex AI to avoid an unsupported beta header error (opt in with ENABLE_TOOL_SEARCH)
  • Fixed @-file Tab completion replacing the entire prompt when used inside a slash command with an absolute path
  • Fixed a stray p character appearing at the prompt on startup in macOS Terminal.app via Docker or SSH
  • Fixed ${ENV_VAR} placeholders in headers for HTTP/SSE/WebSocket MCP servers not being substituted before requests
  • Fixed MCP OAuth client secret stored via --client-secret not being sent during token exchange for servers requiring client_secret_post
  • Fixed /skills Enter key closing the dialog instead of pre-filling /<skill-name> in the prompt
  • Fixed /agents detail view mislabeling built-in tools unavailable to subagents as "Unrecognized"
  • Fixed MCP servers from plugins not spawning on Windows when the plugin cache was incomplete
  • Fixed /export showing the current default model instead of the model the conversation actually used
  • Fixed verbose output setting not persisting after restart
  • Fixed /usage progress bars overlapping with their "Resets …" labels
  • Fixed plugin MCP servers failing when ${user_config.*} references an optional field left blank
  • Fixed list items containing a sentence-final number wrapping the number onto its own line
  • Fixed /plan and /plan open not acting on the existing plan when entering plan mode
  • Fixed skills invoked before auto-compaction being re-executed against the next user message
  • Fixed /reload-plugins and /doctor reporting load errors for disabled plugins
  • Fixed Agent tool with isolation: "worktree" reusing stale worktrees from prior sessions
  • Fixed disabled MCP servers appearing as "failed" in /status
  • Fixed TaskList returning tasks in arbitrary filesystem order instead of sorted by ID
  • Fixed spurious "GitHub API rate limit exceeded" hints when gh output contained PR titles mentioning "rate limit"
  • Fixed SDK/bridge read_file not correctly enforcing size cap on growing files
  • Fixed PR not linked to session when working in a git worktree
  • Fixed /doctor warning about MCP server entries overridden by a higher-precedence scope
  • Windows: removed false-positive "Windows requires 'cmd /c' wrapper" MCP config warning
  • [VSCode] Fixed voice dictation's first recording producing nothing on macOS while the microphone permission prompt is showing

v2.1.118

Compare Source

  • Added vim visual mode (v) and visual-line mode (V) with selection, operators, and visual feedback
  • Merged /cost and /stats into /usage — both remain as typing shortcuts that open the relevant tab
  • Create and switch between named custom themes from /theme, or hand-edit JSON files in ~/.claude/themes/; plugins can also ship themes via a themes/ directory
  • Hooks can now invoke MCP tools directly via type: "mcp_tool"
  • Added DISABLE_UPDATES env var to completely block all update paths including manual claude update — stricter than DISABLE_AUTOUPDATER
  • WSL on Windows can now inherit Windows-side managed settings via the wslInheritsWindowsSettings policy key
  • Auto mode: include "$defaults" in autoMode.allow, autoMode.soft_deny, or autoMode.environment to add custom rules alongside the built-in list instead of replacing it
  • Added a "Don't ask again" option to the auto mode opt-in prompt
  • Added claude plugin tag to create release git tags for plugins with version validation
  • --continue/--resume now find sessions that added the current directory via /add-dir
  • /color now syncs the session accent color to claude.ai/code when Remote Control is connected
  • The /model picker now honors ANTHROPIC_DEFAULT_*_MODEL_NAME/_DESCRIPTION overrides when using a custom ANTHROPIC_BASE_URL gateway
  • When auto-update skips a plugin due to another plugin's version constraint, the skip now appears in /doctor and the /plugin Errors tab
  • Fixed /mcp menu hiding OAuth Authenticate/Re-authenticate actions for servers configured with headersHelper, and HTTP/SSE MCP servers with custom headers being stuck in "needs authentication" after a transient 401
  • Fixed MCP servers whose OAuth token response omits expires_in requiring re-authentication every hour
  • Fixed MCP step-up authorization silently refreshing instead of prompting for re-consent when the server's insufficient_scope 403 names a scope the current token already has
  • Fixed an unhandled promise rejection when an MCP server's OAuth flow times out or is cancelled
  • Fixed MCP OAuth refresh proceeding without its cross-process lock under contention
  • Fixed macOS keychain race where a concurrent MCP token refresh could overwrite a freshly-refreshed OAuth token, causing unexpected "Please run /login" prompts
  • Fixed OAuth token refresh failing when the server revokes a token before its local expiry time
  • Fixed credential save crash on Linux/Windows corrupting ~/.claude/.credentials.json
  • Fixed /login having no effect in a session launched with CLAUDE_CODE_OAUTH_TOKEN — the env token is now cleared so disk credentials take effect
  • Fixed unreadable text in the "new messages" scroll pill and /plugin badges
  • Fixed plan acceptance dialog offering "auto mode" instead of "bypass permissions" when running with --dangerously-skip-permissions
  • Fixed agent-type hooks failing with "Messages are required for agent hooks" when configured for events other than Stop or SubagentStop
  • Fixed prompt hooks re-firing on tool calls made by an agent-hook verifier subagent
  • Fixed /fork writing the full parent conversation to disk per fork — now writes a pointer and hydrates on read
  • Fixed Alt+K / Alt+X / Alt+^ / Alt+_ freezing keyboard input
  • Fixed connecting to a remote session overwriting your local model setting in ~/.claude/settings.json
  • Fixed typeahead showing "No commands match" error when pasting file paths that start with /
  • Fixed plugin install on an already-installed plugin not re-resolving a dependency installed at the wrong version
  • Fixed unhandled errors from file watcher on invalid paths or fd exhaustion
  • Fixed Remote Control sessions getting archived on transient CCR initialization blips during JWT refresh
  • Fixed subagents resumed via SendMessage not restoring the explicit cwd they were spawned with
google-gemini/gemini-cli (@​google/gemini-cli)

v0.39.1

Compare Source

Full Changelog: google-gemini/gemini-cli@v0.39.0...v0.39.1

v0.39.0

Compare Source

What's Changed

New Contributors

Full Changelog: google-gemini/gemini-cli@v0.38.2...v0.39.0

v0.39.0-preview.2

Compare Source

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.39.0-preview.1...v0.39.0-preview.2

v0.39.0-preview.1

Compare Source

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.39.0-preview.0...v0.39.0-preview.1

v0.39.0-preview.0

Compare Source

What's Changed

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Wednesday (* * * * 3)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants