Skip to content

chore: bump SDK#311451

Merged
rzhao271 merged 2 commits intomainfrom
rzhao271/audit-copilot-0420
Apr 20, 2026
Merged

chore: bump SDK#311451
rzhao271 merged 2 commits intomainfrom
rzhao271/audit-copilot-0420

Conversation

@rzhao271
Copy link
Copy Markdown
Collaborator

No description provided.

Copilot AI review requested due to automatic review settings April 20, 2026 18:52
@rzhao271 rzhao271 enabled auto-merge (squash) April 20, 2026 18:52
@rzhao271 rzhao271 self-assigned this Apr 20, 2026
@rzhao271 rzhao271 added this to the 1.118.0 milestone Apr 20, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR bumps the Copilot extension’s @anthropic-ai/claude-agent-sdk dependency and refreshes the associated lockfiles, updating transitive dependencies (including moving to platform-specific optional packages for the SDK).

Changes:

  • Bump @anthropic-ai/claude-agent-sdk from 0.2.98 to 0.2.114 in the Copilot extension.
  • Update extensions/copilot/package-lock.json to reflect the new SDK version and its new optional dependency structure.
  • Update extensions/copilot/chat-lib/package-lock.json (notably Vite/esbuild and related transitive changes, plus removal of @types/vscode entries).

Reviewed changes

Copilot reviewed 1 out of 3 changed files in this pull request and generated 2 comments.

File Description
extensions/copilot/package.json Bumps @anthropic-ai/claude-agent-sdk to 0.2.114.
extensions/copilot/package-lock.json Updates lockfile for the new SDK version and new platform-specific optional packages.
extensions/copilot/chat-lib/package-lock.json Refreshes chat-lib lockfile (Vite/esbuild transitive updates; removes @types/vscode from lock).
Files not reviewed (2)
  • extensions/copilot/chat-lib/package-lock.json: Language not supported
  • extensions/copilot/package-lock.json: Language not supported

@@ -6408,7 +6408,7 @@
"zod": "3.25.76"
Copy link

Copilot AI Apr 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bumping @anthropic-ai/claude-agent-sdk to 0.2.114 introduces a peer dependency on zod@^4.0.0 (see package-lock), but this extension pins/overrides zod to 3.25.76. This is likely to produce an unmet peer dependency and can cause type/runtime incompatibilities if the SDK relies on Zod v4 APIs. Consider either upgrading the repo’s zod to a compatible v4 range (and removing the override) or selecting a claude-agent-sdk version that still supports Zod v3.

Suggested change
"zod": "3.25.76"
"zod": "^4.0.0"

Copilot uses AI. Check for mistakes.
"@anthropic-ai/claude-agent-sdk-win32-x64": "0.2.114"
},
"peerDependencies": {
"zod": "^4.0.0"
Copy link

Copilot AI Apr 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@anthropic-ai/claude-agent-sdk@0.2.114 declares zod as a peer dependency with range ^4.0.0, but this project pins zod@3.25.76 (and forces it via overrides in package.json). This peer mismatch should be resolved to avoid install warnings and potential SDK breakage (upgrade zod to v4 or use an SDK version compatible with v3).

Suggested change
"zod": "^4.0.0"
"zod": "^3.25.76 || ^4.0.0"

Copilot uses AI. Check for mistakes.
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 20, 2026

Screenshot Changes

Base: 1b82a19e Current: c8cad5d7

Changed (1)

chat/aiCustomizations/aiCustomizationManagementEditor/McpBrowseMode/Light
Before After
before after

roblourens
roblourens previously approved these changes Apr 20, 2026
@rzhao271 rzhao271 merged commit 8974e74 into main Apr 20, 2026
26 checks passed
@rzhao271 rzhao271 deleted the rzhao271/audit-copilot-0420 branch April 20, 2026 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants