build: update all non-major dependencies

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@anthropic-ai/sdk	^0.65.0 -> ^0.67.0
@google/gemini-cli	^0.8.0 -> ^0.9.0
@openai/codex (source)	^0.46.0 -> ^0.47.0

---

Release Notes

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.67.0

Full Changelog: sdk-v0.66.0...sdk-v0.67.0

Features

• api: adding support for agent skills (0b7d97f)

v0.66.0

Full Changelog: sdk-v0.65.0...sdk-v0.66.0

Features

• api: manual updates (7605d04)

Bug Fixes

• tool-runner: fix unhandled promise error for streams (4f6bc94)

Chores

• client: add context-management-2025-06-27 beta header (c6efc98)
• client: add model-context-window-exceeded-2025-08-26 beta header (06d2513)
• internal: use npm pack for build uploads (55c0ad7)
• jsdoc: fix @​link annotations to refer only to parts of the package‘s public interface (62c1b5e)

google-gemini/gemini-cli (@​google/gemini-cli)

v0.9.0

Compare Source

What's Changed

• chore(release): bump version to 0.9.0-nightly.20251001.163dba7e by @​skeshive in #​10362
• Codebase Investigator: Separate initial query from system prompt and apply templateStrings in query and initialMessages by @​silviojr in #​10282
• feat(telemetry): add OpenTelemetry GenAI semantic convention metrics by @​jerop in #​10343
• feat: Add enableSubagents configuration and wire up subagent registration by @​abhipatel12 in #​9988
• Cleanup useSelectionList and fix infinite loop in debug mode issues. by @​jacob314 in #​10248
• Revert reducing margin on narrow screens by @​bbiggs in #​10375
• Switch to a reducer for tracking update state fixing flicker issues due to continuous renders by @​jacob314 in #​10280
• Smart Edit Strategy Logging by @​mrcabbage972 in #​10345
• Fix so paste timeout protection is much less invasive. by @​jacob314 in #​9284
• fix(ui): increase padding of settings dialog by @​galz10 in #​10376
• Docs IA update and Get Started section. by @​jkcinouye in #​10192
• fix(core): add telemetry support for smart edit correction events by @​agmsb in #​10378
• support giving a github repo URL with a trailing slash by @​jakemac53 in #​10360
• feat(ci): Add npx run testing to Release Verification Testing by @​richieforeman in #​10352
• fix(integration): Added shell specification for winpty by @​davideast in #​9497
• fix(ci) update wording of promote action output to be more clear by @​skeshive in #​10369
• fix(core): use constant for tool_output_truncated event name by @​jerop in #​10372
• fix: Stream parsing for Windows Zed integration by @​benbrandt in #​10339
• feat(ide extension): introduce debug logging by @​skeshive in #​10416
• Fix(infra) - Give merge queue skipper read-all access by @​shishu314 in #​10368
• fix(vscode): suppress update and install messages in managed IDEs by @​skeshive in #​10431
• refactor(agents): implement submit_final_output tool for agent completion by @​abhipatel12 in #​10377
• fix(infra) - Add pr number to the release branch name for final step of release by @​shishu314 in #​10364
• Docs: Add changelog section by @​jkcinouye in #​10388
• Modify GCLI system prompt to conditionally use the CodebaseInvestigator by @​silviojr in #​10419
• fix: prevent tools discovery error for prompt-only MCP servers by @​vasayxtx in #​10367
• Update patch PRs with additional content by @​shishu314 in #​10180
• fix(auto-update): suppress npx nag for transient installs by @​ashmod in #​10276
• Update GOOGLE_CLOUD_PROJECT in README for disambiguation by @​kuri-leo in #​10310
• Adding list sub command to memoryCommand to list the path of GEMINI.md files by @​sgnagnarella in #​10108
• Change "Create Pull Request" action to not try merging by @​scidomino in #​10379
• fix(docs): several .md links in docs are incorrect by @​mbleigh in #​10449
• Fix /chat list not write terminal escape codes directly by @​adamfweidman in #​10415
• Docs: Minor change to website nav and headings by @​jkcinouye in #​10454
• chore(formatting): Fix formatting on main by @​abhipatel12 in #​10464
• feat(ci): Add some very basic smoke testing to CI.yml by @​richieforeman in #​10451
• fix(doc) -update release doc by @​shishu314 in #​10484
• feat(vscode-ide-companion): enforce auth token validation by @​skeshive in #​10481
• feat(ci): add ability to publish packages to private github registry for testing by @​skeshive in #​10348
• refactor(core): Unify retry logic and remove schema depth check by @​SandyTao520 in #​10453
• Fix oauth support for MCP servers by @​jakemac53 in #​10427
• Add function processOutput to AgentDefinition and typing for an agent's output by @​silviojr in #​10447
• feat(lint): add sensitive keyword linter by @​skeshive in #​10488
• Update dep versions to fix vulnerabilities by @​scidomino in #​10496
• fix(infra) - Add original PR number into hotfix branch by @​shishu314 in #​10499
• fix(doc) - Update releases doc by @​shishu314 in #​10504
• test: fix flaky integration tests for compress command by @​hritan in #​10371
• fix: handle request retries and model fallback correctly by @​gsquared94 in #​9407
• Stop logging tool call error message to clearcut by @​owenofbrien in #​10511
• fix(lint): Fixes silent pass for formatting mistakes in gh ci by @​abhipatel12 in #​10489
• Cleanup extension update logic by @​jakemac53 in #​10514
• Temporarily remove NPM integration tests till we resolve #​10517 by @​scidomino in #​10520
• chore(actions): mark wombat-token-cli as required by @​adamfweidman in #​10590
• Re-submission: Make --allowed-tools work in non-interactive mode by @​mistergarrison in #​10289
• ci(release): remove 'dev' option from manual release by @​galz10 in #​10374
• feat(sessions): Add automatic session cleanup and retention policy by @​bl-ue in #​7662
• Modifying stale data by @​jkcinouye in #​10622
• fix(core): retain user message in history on stream failure by @​SandyTao520 in #​10608
• Update extensions docs by @​chrstnb in #​10621
• fix(ci): ensure dry-run is false for scheduled nightly releases by @​SandyTao520 in #​10571
• Fix link to Extension Releasing Guide (broken link) by @​LyalinDotCom in #​10635
• Update gemini extensions new by @​chrstnb in #​10629
• chore: fix folder trust tests by @​adamfweidman in #​10636
• use extract-zip and tar libraries to extract archives by @​jakemac53 in #​10414
• Remove separate --path argument for extensions install command by @​chrstnb in #​10628
• Fix quoting when echoing workflow JSON by @​adamfweidman in #​10596
• Enhance debug profiler to track tree framerate and dispatch errors by @​jacob314 in #​10502
• fix(infra) - Fix missing package error by @​shishu314 in #​10595
• Get around the initial empty response from gemini-2.5-flash. by @​mrcabbage972 in #​10508
• fix(core): Use 127.0.0.1 for IDE client connection by @​skeshive in #​10658
• fix(patch): cherry-pick 467a305 to release/v0.9.0-preview.0-pr-10661 to patch version v0.9.0-preview.0 and create version 0.9.0-preview.1 by @​gemini-cli-robot in #​10817
• fix(patch): cherry-pick 0b6c020 to release/v0.9.0-preview.1-pr-10828 [CONFLICTS] by @​gemini-cli-robot in #​10920
• fix(patch): cherry-pick dd01af6 to release/v0.9.0-preview.2-pr-11072 to patch version v0.9.0-preview.2 and create version 0.9.0-preview.3 by @​gemini-cli-robot in #​11076
• Cherrypick #​10900 by @​chrstnb in #​11116
• fix(patch): cherry-pick 996c9f5 to release/v0.9.0-preview.4-pr-11164 [CONFLICTS] by @​gemini-cli-robot in #​11166

New Contributors

• @​benbrandt made their first contribution in #​10339
• @​vasayxtx made their first contribution in #​10367
• @​kuri-leo made their first contribution in #​10310

Full Changelog: google-gemini/gemini-cli@v0.8.2...v0.9.0

---

Configuration

📅 Schedule: Branch creation - "after 10:00pm every weekday,before 5:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.