chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@anthropic-ai/claude-code	2.1.179 → 2.1.186				patch
actions/checkout	v6 → v7			action	major

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.186

Compare Source

• Added claude mcp login <name> and claude mcp logout <name> to authenticate MCP servers from the CLI without opening the interactive /mcp menu, with --no-browser stdin redirect support for completing over SSH
• Added status filtering (press f) to the /workflows agent detail view
• Added a "Skills" section to the /plugin Installed tab
• Added teammateMode: "iterm2" setting with a warning when auto mode cannot find the it2 CLI
• Added "Claude Platform on AWS - refresh credentials" option to /login when awsAuthRefresh is configured
• ! bash commands now trigger Claude to respond to the output automatically; set "respondToBashCommands": false in settings.json to keep the previous context-only behavior
• Fixed streaming requests failing with "Content block not found" or JSON parse errors after the machine wakes from sleep
• Fixed subagent transcript scroll position bleeding into the main transcript on exit
• Fixed background task previews flashing raw tool names before the agent's plan loaded
• Fixed Chrome tab-group isolation not applying when the in-product permissions gate is off for concurrent CLI sessions
• Fixed background session recaps being duplicated; the agent's own end-of-turn summary now shows as the recap line
• Fixed opening a background session from claude agents leaving the previous screen painted behind it
• Fixed Agent(type) deny rules and Agent(x,y) allowed-types restrictions not being enforced for named subagent spawns
• Fixed Esc and Ctrl+C not responding while background agents are still running after the main turn ends
• Fixed misaligned option numbers in permission prompts when the option text overflows
• Fixed pressing x on a finished subagent in the agent panel not dismissing it
• Fixed a misleading "MCP server disconnected" notice for intentionally retired tools when resuming older sessions
• Fixed /plugin Installed showing a "more above" indicator when already scrolled to the top
• Fixed ~~strikethrough~~ showing literal tildes in assistant messages instead of rendering as strikethrough
• Fixed --tools allowing feature-gated tools to slip through before flags loaded on a cold first launch
• Fixed background job status in claude agents showing a stale "needs input" message after replying
• Fixed a dark-theme flash when opening a background session from claude agents on a light terminal
• Fixed mouse-selected text staying highlighted after deleting it in claude agents
• Fixed session cost not showing for usage-based Enterprise and Team subscribers
• Fixed agent teams: teammates spawned via tmux/pane backends now inherit the leader's --effort level
• Fixed Workflow agent({schema}) subagents looping forever on repeated schema validation failures instead of aborting after 5 attempts
• Improved claude mcp get and claude mcp remove to suggest the closest configured server name on a typo and truncate long server lists
• Improved memory: the agent is now reminded to compact its MEMORY.md index when nearing the size limit
• Improved skill frontmatter: display-name, default-enabled, fallback, and metadata.* keys now accept kebab-case, snake_case, and camelCase
• Improved malformed SKILL.md YAML frontmatter handling: loads the skill body with empty metadata instead of failing silently
• Changed CLAUDE_CODE_MAX_RETRIES to cap at 15; for unattended sessions, use CLAUDE_CODE_RETRY_WATCHDOG instead
• Changed background subagents to surface permission prompts in the main session instead of auto-denying; the dialog shows which agent is asking, and Esc denies just that tool
• Changed /review <pr> to use the same review engine as /code-review medium

v2.1.185

Compare Source

• The stream-stall hint now reads "Waiting for API response · will retry in …" instead of "No response from API · Retrying in …", and triggers after 20s of silence instead of 10s

v2.1.183

• Improved auto mode safety: destructive git commands (git reset --hard, git checkout -- ., git clean -fd, git stash drop) are now blocked when you didn't ask to discard local work, git commit --amend is blocked when the commit wasn't made by the agent this session, and terraform destroy/pulumi destroy/cdk destroy are blocked unless you asked for the specific stack
• Added a warning when the requested model is deprecated or automatically updated to a newer model, shown on stderr in print mode (-p) and now also covering models set in agent frontmatter
• Added attribution.sessionUrl setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions
• Added /config --help to list all available shorthand keys for /config key=value
• Changed /config toggle behavior: Enter and Space both change the selected setting, and Esc now saves and closes instead of reverting
• Removed the startup "setup issues" line under the logo — run /doctor to see configuration issues or use --debug
• Fixed thinking.disabled.display: Extra inputs are not permitted 400 errors on subagent spawns and session-title generation for affected configurations
• Fixed WebSearch returning empty results in subagents
• Fixed the terminal cursor being stranded above the prompt after navigating history in vim mode with the native cursor enabled
• Fixed fullscreen TUI corruption (statusline mid-screen, duplicated spinner rows, merged text) in Windows Terminal under heavy nested-subagent load
• Fixed turns silently completing with no visible output when the model returned only a thinking block; Claude now re-prompts once
• Fixed user-level skills appearing multiple times in slash-command autocomplete when multiple plugins are enabled
• Fixed MCP servers requiring authentication exposing auth-stub tools to the model in headless/SDK mode
• Fixed tmux teammate panes failing to launch when the shell has slow rc-file initialization, and keystrokes typed during agent spawn leaking into the new tmux pane instead of the leader prompt
• Fixed background tasks started by a teammate being killed when the teammate finishes a turn
• Fixed scheduled task and webhook trigger deliveries being treated as keyboard input; they now classify as task notifications and can no longer approve a pending action or set the session title in auto mode
• Fixed focus mode showing "Ran N PostToolUse hooks" timing lines under each response

v2.1.181

Compare Source

• Added /config key=value syntax to set any setting from the prompt (e.g. /config thinking=false) — works in interactive, -p, and Remote Control
• Added sandbox.allowAppleEvents opt-in setting that lets sandboxed commands send Apple Events on macOS
• Added CLAUDE_CLIENT_PRESENCE_FILE environment variable: point it at a marker file to suppress mobile push notifications while you're at the machine
• Upgraded the bundled Bun runtime to 1.4
• Improved streaming of long paragraphs: text now appears line-by-line instead of waiting for the first line break
• Improved auto-retry: API connection drops mid-thinking now automatically retry instead of showing "Connection closed while thinking"
• Improved the subagent panel: idle subagents auto-hide after 30s, the list caps at 5 rows with scroll hints, and keyboard hints now show in the footer
• Improved the MCP OAuth browser page to match Claude Code's visual style and auto-close on success
• Changed fullscreen mode URL opening to require Cmd+click (macOS) / Ctrl+click, matching native terminal behavior
• Changed the Improved N memories line to no longer list individual files outside verbose mode
• Fixed prompt caching not reading on custom ANTHROPIC_BASE_URL and on Foundry due to a per-request attestation token changing every turn
• Fixed Write/Edit producing 0-byte or truncated files on network drives and cloud-synced folders
• Fixed open, osascript, and browser-based auth flows failing with error -600 on macOS by adding the Apple Events entitlement
• Fixed a startup regression (~120ms per launch in fresh environments, introduced in 2.1.169): the first prompt no longer waits for the managed-settings fetch when no MCP servers are configured
• Fixed startup blocking with a blank terminal for up to 15 seconds when the account settings fetch is slow on a degraded network
• Fixed startup crash (TypeError: Cannot read properties of null) when .claude.json contains corrupted null project entries
• Fixed macOS TUI freezing at session start (Ctrl+C unresponsive) when Spotlight is busy reindexing
• Fixed long-running idle sessions losing their history when another Claude Code process ran the 30-day transcript cleanup
• Fixed foreground subagents spawning unbounded nested chains; they now respect the same 5-level depth limit as background subagents
• Fixed /recap and conversation forks using the previous model immediately after a model switch
• Fixed subagent "Thinking" duration showing the parent agent's elapsed time instead of the subagent's own
• Fixed subagents blocked on a nested agent showing a ticking elapsed time instead of "waiting" in the agent panel
• Fixed the API retry indicator ("Retrying in 0s · attempt N/10") staying on screen after the retry succeeded
• Fixed AWS awsCredentialExport credentials with a short remaining lifetime causing credential refreshes every minute, and now accepts the JSON shape from aws configure export-credentials
• Fixed claude mcp get/list showing ✓ Connected when tools/list fails; they now show ! Connected · tools fetch failed with the error detail
• Fixed /remote-control leaving a stale "connecting…" line; it now confirms in the transcript once connected
• Fixed ExitWorktree refusing to remove a clean worktree with "Could not verify worktree state" when bare git cannot be resolved on Windows
• Fixed settings changes (such as /effort or /model) failing with ENOENT when ~/.claude/settings.json is a relative symlink under a symlinked ~/.claude
• Fixed IDE selection line numbers in context reminders being off by one (IntelliJ and VS Code)
• Fixed Ctrl+C in fullscreen after a native terminal selection (modifier+drag) overwriting the clipboard with the app's prior selection
• Fixed Ctrl+V showing "No image found in clipboard" instead of pasting when the clipboard contains text
• Fixed agent creation failing with "EEXIST: file already exists" when the agents directory already exists (Windows/OneDrive)
• Fixed AskUserQuestion preview content being cut off at the dialog edge instead of word-wrapping
• Fixed AskUserQuestion multi-select questions silently dropping a typed "Other" free-text answer when submitting
• Fixed /stats "Most active day" and daily token chart dates showing one day early in UTC-negative timezones
• Fixed /copy and copy-on-select on Linux not detecting a clipboard utility installed after Claude Code started
• Fixed tab-indented code rendering with incorrect indentation in the Write (create-file) preview
• Fixed user prompts queued mid-turn not showing a full-width background highlight in the transcript
• Fixed the activity spinner's pulse dwelling on the wrong glyph size in Ghostty

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.