[dependabot]

Bumps the python-minor-patch group with 6 updates in the / directory:

Package	From	To
claude-agent-sdk	0.2.110	0.2.128
anthropic	0.112.0	0.120.2
github-copilot-sdk	1.0.4	1.0.8
openai	2.44.0	2.51.0
ruff	0.15.20	0.16.1
mypy	2.1.0	2.3.0

Updates claude-agent-sdk from 0.2.110 to 0.2.128

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.128

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.220

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.128/

pip install claude-agent-sdk==0.2.128

v0.2.127

Bug Fixes

• Fixed premature stdin closure when background tasks are in flight: query() no longer closes stdin on the first result frame when background tasks (e.g. run_in_background: true subagents) are still running. Previously, closing stdin too early caused SDK-MCP tool calls from background tasks to fail with "Stream closed" and silently bypassed PreToolUse hooks. Stdin now stays open until all in-flight tasks complete and the final result frame arrives (#1103)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.219

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.127/

pip install claude-agent-sdk==0.2.127

v0.2.126

New Features

• terminal_reason on ResultMessage: ResultMessage.terminal_reason now surfaces why the query loop ended ("completed", "max_turns", "aborted_streaming", "aborted_tools", etc.). A value of "aborted_streaming" or "aborted_tools" means the turn was cancelled via ClaudeSDKClient.interrupt(). Mirrors the TypeScript SDK's SDKResultMessage.terminal_reason (#1142)
• Typed model_usage on ResultMessage: ResultMessage.model_usage is now typed as dict[str, ModelUsage] instead of dict[str, Any], with a new ModelUsage TypedDict that mirrors the TypeScript SDK's shape. Includes optional canonicalModel and provider fields for stable model identification across provider-specific aliases (#1143)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.218

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.126/

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.128

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.220

0.2.127

Bug Fixes

• Fixed premature stdin closure when background tasks are in flight: query() no longer closes stdin on the first result frame when background tasks (e.g. run_in_background: true subagents) are still running. Previously, closing stdin too early caused SDK-MCP tool calls from background tasks to fail with "Stream closed" and silently bypassed PreToolUse hooks. Stdin now stays open until all in-flight tasks complete and the final result frame arrives (#1103)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.219

0.2.126

New Features

• terminal_reason on ResultMessage: ResultMessage.terminal_reason now surfaces why the query loop ended ("completed", "max_turns", "aborted_streaming", "aborted_tools", etc.). A value of "aborted_streaming" or "aborted_tools" means the turn was cancelled via ClaudeSDKClient.interrupt(). Mirrors the TypeScript SDK's SDKResultMessage.terminal_reason (#1142)
• Typed model_usage on ResultMessage: ResultMessage.model_usage is now typed as dict[str, ModelUsage] instead of dict[str, Any], with a new ModelUsage TypedDict that mirrors the TypeScript SDK's shape. Includes optional canonicalModel and provider fields for stable model identification across provider-specific aliases (#1143)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.218

0.2.125

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.217

0.2.124

Bug Fixes

• Refused batch script CLI spawning on Windows: Blocked spawning .bat/.cmd CLI scripts (including npm's claude.cmd shim) on Windows to prevent command injection via cmd.exe metacharacter re-parsing (BatBadBut / CVE-2024-27980 class). Windows users relying on the npm shim should switch to the native installer, an explicit claude.exe path, or a platform wheel that bundles the CLI (#1127)
• Windows cmd.exe metacharacter rejection: resume and session_id values containing cmd.exe metacharacters (& | < > ^ % ! ") or newlines now raise ValueError on Windows, preventing injection even if a cmd.exe hop is reintroduced. POSIX behavior is unchanged (#1127)
• Dash-prefixed extra_args value binding: extra_args now uses --flag=value form when the value starts with -, preventing a dash-leading value from being misinterpreted as a separate CLI flag (#1127)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.216

0.2.123

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.215

... (truncated)

Commits

• f8b9ec9 docs: update changelog for v0.2.128
• ec77673 chore: release v0.2.128
• cadaa63 chore: bump bundled CLI version to 2.1.220
• 3145cc6 docs: update changelog for v0.2.127
• 26b1a5c chore: release v0.2.127
• f277fd8 chore: bump bundled CLI version to 2.1.219
• e6e07f1 fix(query): don't close stdin on a result frame while tasks are in flight (#1...
• 74fe445 docs: update changelog for v0.2.126
• 013cb15 chore: release v0.2.126
• ee68d65 chore: bump bundled CLI version to 2.1.218
• Additional commits viewable in compare view

Updates anthropic from 0.112.0 to 0.120.2

Release notes

Sourced from anthropic's releases.

v0.120.2

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

• mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

v0.120.1

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

• mcp: pin mcp extra to <2 (#1783) (fb66371)

v0.120.0

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

• api: add claude-opus-5 model (bf4e31c)
• api: add tool addition/removal blocks and tool_change events (bf4e31c)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

v0.119.0

0.119.0 (2026-07-23)

Full Changelog: v0.118.0...v0.119.0

Features

• api: add new stop reason 'model_context_window_exceeded' (d983cde)

Bug Fixes

• tools: handle binary files in agent toolset read/edit (#283) (417b76b)

v0.118.0

0.118.0 (2026-07-22)

Full Changelog: v0.117.1...v0.118.0

Features

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.120.2 (2026-07-28)

Full Changelog: v0.120.1...v0.120.2

Bug Fixes

• mcp: support mcp sdk v2 alongside v1 (#300) (177f88c)

0.120.1 (2026-07-28)

Full Changelog: v0.120.0...v0.120.1

Bug Fixes

• mcp: pin mcp extra to <2 (#1783) (fb66371)

0.120.0 (2026-07-24)

Full Changelog: v0.119.0...v0.120.0

Features

• api: add claude-opus-5 model (bf4e31c)
• api: add tool addition/removal blocks and tool_change events (bf4e31c)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (bf4e31c)

0.119.0 (2026-07-23)

Full Changelog: v0.118.0...v0.119.0

Features

• api: add new stop reason 'model_context_window_exceeded' (d983cde)

Bug Fixes

• tools: handle binary files in agent toolset read/edit (#283) (417b76b)

0.118.0 (2026-07-22)

Full Changelog: v0.117.1...v0.118.0

Features

• api: add support for Managed Agents model effort, initial session events, and threads delta streaming (712bc6f)

0.117.1 (2026-07-21)

Full Changelog: v0.117.0...v0.117.1

... (truncated)

Commits

• f5c30d0 release: 0.120.2
• 8b327c3 fix(mcp): support mcp sdk v2 alongside v1 (#300)
• 3b65b23 release: 0.120.1
• 6c127ae fix(mcp): pin mcp extra to <2 (#1783)
• 36863a0 codegen metadata
• 60c64fb release: 0.120.0
• 70c0a64 feat(api): add claude-opus-5 model
• eb178ec release: 0.119.0
• 6914718 feat(api): add new stop reason 'model_context_window_exceeded'
• d2bad4f fix(tools): handle binary files in agent toolset read/edit (#283)
• Additional commits viewable in compare view

Updates github-copilot-sdk from 1.0.4 to 1.0.8

Release notes

Sourced from github-copilot-sdk's releases.

rust/v1.0.8

What's Changed

• docs: document sub-agent event attribution by @​loganrosen in github/copilot-sdk#1878
• docs: expand Azure Managed Identity BYOK guidance by @​scottaddie in github/copilot-sdk#1995
• Durably document required secrets by @​edburns in github/copilot-sdk#2046
• Fix ask_user starving the Rust SDK per-session event loop by @​pallaviraiturkar0 in github/copilot-sdk#2034
• Use dependency groups for Python dev deps by @​brettcannon in github/copilot-sdk#2038
• Fix consistency review PR delta detection by @​roji in github/copilot-sdk#2018
• Update @​github/copilot to 1.0.73 by @​github-actions[bot] in github/copilot-sdk#2055

Full Changelog: github/copilot-sdk@rust/v1.0.8-preview.0...rust/v1.0.8

v1.0.8

Feature: per-agent reasoning effort

Custom sub-agents can now have their own reasoning effort level, independent of the parent session. When reasoningEffort is omitted on a custom agent, the backend applies its own default — the session-level setting is not inherited. (#1981)

const session = await client.createSession({
    customAgents: [{
        name: "planner",
        prompt: "You plan tasks.",
        reasoningEffort: "high",
    }],
});

var session = await client.CreateSessionAsync(new SessionOptions {
    CustomAgents = [new CustomAgentConfig {
        Name = "planner",
        Prompt = "You plan tasks.",
        ReasoningEffort = ReasoningEffort.High,
    }],
});

Other changes

• improvement: strongly type expAssignments session config field across all SDKs (#2033)
• bugfix: [Rust] fix ask_user starving the per-session event loop (#2034)

New contributors

• @lukewar made their first contribution in #1880

[!WARNING]

... (truncated)

Changelog

Sourced from github-copilot-sdk's changelog.

Changelog

All notable changes to the Copilot SDK are documented in this file.

This changelog is automatically generated by an AI agent when stable releases are published. See GitHub Releases for the full list.

v1.0.7 (2026-07-16)

Feature: in-process (FFI) transport

The SDK can now host the Copilot runtime in-process by loading the native runtime library via its C ABI (FFI), eliminating the overhead of spawning a child process. This experimental transport is available for Node.js, Rust, Python, and Go. (#1953, #1915, #1975, #1976)

const client = new CopilotClient({ connection: RuntimeConnection.forInProcess() });

var client = new CopilotClient(new CopilotClientOptions { Connection = RuntimeConnection.ForInProcess() });

Feature: tool search configuration

A new toolSearch session option controls how the SDK defers tools when the total tool count exceeds a threshold. When enabled (the default), excess MCP and external tools are surfaced on demand through the built-in tool_search_tool rather than pre-loaded into every prompt. Tool results can also include toolReferences to link cited sources back to the tool that produced them. (#1933)

const session = await client.createSession({
    toolSearch: { defer: "auto" },
});

var session = await client.CreateSessionAsync(new SessionConfig
{
    ToolSearch = new ToolSearchConfig { Defer = "auto" },
});

Feature: opaque metadata passthrough on tool definitions

Tool definitions now accept an optional metadata bag that is forwarded verbatim in session.create and session.resume RPC calls. This lets hosts attach namespaced, implementation-specific metadata to tools without expanding the typed public contract; unknown keys are preserved and round-tripped untouched. (#1864)

session.defineTool("my-tool", { metadata: { "myapp:priority": 1 } }, handler);

session.DefineTool("my-tool", new ToolOptions { Metadata = new() { ["myapp:priority"] = 1 } }, handler);

... (truncated)

Commits

• a54b0b5 Update @​github/copilot to 1.0.73 (#2055)
• f36e6be Fix consistency review PR delta detection (#2018)
• 5ca48b1 Use dependency groups for Python dev deps (#2038)
• 5cd5710 Fix ask_user starving the Rust SDK per-session event loop (#2034)
• 97e8f80 Durably document required secrets (#2046)
• 0d563bd docs: expand Azure Managed Identity BYOK guidance (#1995)
• 85946f2 docs: document sub-agent event attribution (#1878)
• cd2b10b [maven-release-plugin] prepare for next development iteration
• 24f1ac0 [maven-release-plugin] prepare release java/v1.0.8-preview.0
• 00ef6cc docs: update version references to 1.0.8-preview.0
• Additional commits viewable in compare view

Updates openai from 2.44.0 to 2.51.0

Release notes

Sourced from openai's releases.

v2.51.0

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

• api: fast tier (8808ed2)

Bug Fixes

• api: add fast tier to helper methods (6064126)

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

• api: transcription model updates (fd57393)

Bug Fixes

• audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

• require Python 3.10 and automate version reviews (#3537) (d4c151d)

v2.48.0

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

• api: accept None for prompt_cache_key/safety_identifier (36820e6)
• api: add support for spend_limit admin apis (1ff13af)

v2.47.0

2.47.0 (2026-07-21)

... (truncated)

Changelog

Sourced from openai's changelog.

2.51.0 (2026-07-30)

Full Changelog: v2.50.0...v2.51.0

Features

• api: fast tier (8808ed2)

Bug Fixes

• api: add fast tier to helper methods (6064126)

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

• api: transcription model updates (fd57393)

Bug Fixes

• audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

• require Python 3.10 and automate version reviews (#3537) (d4c151d)

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

• api: accept None for prompt_cache_key/safety_identifier (36820e6)
• api: add support for spend_limit admin apis (1ff13af)

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

• client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)

... (truncated)

Commits

• 3844843 release: 2.51.0 (#3553)
• 4f40426 release: 2.50.0
• 92594f1 fix(audio): restore transcription keyword overload
• 59ed1dc feat(api): transcription model updates
• 6ba31bc release: 2.49.0 (#3539)
• 90483ad test: support a hermetic local API reference (#3542)
• d4c151d feat: require Python 3.10 and automate version reviews (#3537)
• 8a6adcb release: 2.48.0
• cbd2fba feat(api): add support for spend_limit admin apis
• 00709f2 feat(api): accept None for prompt_cache_key/safety_identifier
• Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.1

Release notes

Sourced from ruff's releases.

0.16.1

Release Notes

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.1

Released on 2026-07-30.

Preview features

• Add an option to opt out of human-readable names (#27160)
• [flake8-pytest-style] Make fixes safe by default and unsafe only when comments are present (PT018) (#27201)
• [pyupgrade] Skip fix when a defaulted TypeVar precedes a non-defaulted one (UP040, UP046, UP047) (#27133)
• [ruff] Fix false positive with unpacked arguments (RUF065) (#26959)

Bug fixes

• Bump gen-lsp-types to gracefully handle unknown enumeration values in LSP messages (#27230)
• [flake8-bugbear] Mark range as immutable (B008) (#27247)
• [flake8-comprehensions] NFKC-normalize keyword names in C408 fix (#26813)
• [flake8-return] Fix false positive when variable is read in finally clause (RET504) (#25441)
• [pydocstyle] Skip section detection inside RST directive bodies (D214, D405, D413) (#23635)
• [refurb] Parenthesize yield arguments in the FURB192 fix (#27192)

Rule changes

• [flake8-pytest-style] Mark PT022 fixes as unsafe (#26440)
• [refurb] Mark fixes that remove unknown separators as unsafe (FURB105) (#27200)

Server

• Fix indexing of excluded nested Ruff workspaces (#27303)
• Lint TOML files in the LSP (#26862)

Documentation

• Cover pycon Markdown formatting (#27153)
• [flake8-bandit] Document TYPE_CHECKING exception (S101) (#27004)
• [flake8-import-conventions] Document that extend-aliases can override default aliases (#27191)
• [pylint] Add missing fix safety gotchas for non-augmented-assignment (PLR6104) (#27250)

Other changes

• Reduce syntax error noise by swallowing dedents like indents (#27170)
• Vendor latest annotate-snippets (#27033)

Contributors

• @​bxff
• @​anishgirianish
• @​Avasam
• @​epage
• @​LHMQ878
• @​MichaReiser

... (truncated)

Commits

• 80790b3 Bump 0.16.1 (#27330)
• 63830f3 [ty] Borrow from constraint set storage less often (#27328)
• f40dca9 [ty] Preserve forwarded expanded-variadic diagnostic sources (#27266)
• 0d80497 Lint TOML files in the LSP (#26862)
• d91586b Update prek dependencies (#27293)
• 7da4b8b [ty] Respect bounds and constraints in generic materializations (#27228)
• b20daf7 [ty] refactor: add helper function to send partial results (#27249)
• 4d4c8fa [ty] Emit diagnostic when specializing a non-generic class (#26883)
• 7c3e2db [ty] Fix enum class container assignability (#27318)
• d5ef97f [flake8-return] Fix false positive when variable is read in finally claus...
• Additional commits viewable in compare view

Updates mypy from 2.1.0 to 2.3.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Packaging changes

• No longer provide mypyc-accelerated wheels for macOS x86_64 [mypyc-wheels #119](mypyc/mypy_mypyc-wheels#119)

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

Free-threaded Python builds that don't have the GIL require additional synchronization primitives or lock-free algorithms to ensure memory safety when there are race conditions (for example, when a thread reads a list item while another thread writes the same list item concurrently). This release greatly improves memory safety of free threading.

List operations are now memory-safe on free threaded Python builds, even in the presence of race conditions. This has some performance cost. For list-heavy workloads, using librt.vecs.vec instead of list is often significantly faster, but note that vec is not (and likely won't be) fully memory safe, and the user is expected to avoid race conditions. The newly introduced librt.threading.Lock helps with this. Using variable-length tuples can also be more efficient than lists, since tuples are immutable and don't require expensive synchronization to ensure memory safety.

Instance attribute access is also (mostly) memory safe now on free-threaded builds in the presence of race conditions. We are planning to fix the remaining unsafe cases in a future release.

Full list of changes:

• Make attribute access memory safe on free-threaded builds (Jukka Lehtosalo, PR 21705)
• Fix unsafe borrowing of instance attributes with free-threading (Jukka Lehtosalo, PR 21688)
• Make list get/set item more memory safe on free-threaded builds (Jukka Lehtosalo, PR 21683)
• Don't borrow list items on free-threaded builds (Jukka Lehtosalo, PR 21679)
• Make multiple assignment from list memory-safe on free-threaded builds (Jukka Lehtosalo, PR 21684)

... (truncated)

Commits

• 8aabf84 Drop +dev from version
• 4d8ad2a Update changelog for 2.3 release (#21728)
• 2c21546 [mypyc] Update documentation of race conditions under free threading (#21726)
• a9f62a3 [mypyc] Make attribute access memory safe on free-threaded builds (#21705)
• 0faa413 Use PYODIDE environment variable for Emscripten cross-compilation detection...
• 3d75cdb [mypyc] Borrow final attributes more aggressively (#21702)
• 24c237d [mypyc] Improve documentation of Final (#21713)
• b5be217 [mypyc] Update free threading Python compatibility docs (#21711)
• cbcb51a Narrow for frozendict membership check (#21709)
• af2bc0f Sync typeshed (#21707)
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.