chore(deps): bump the bun-minor-and-patch group with 7 updates

[dependabot]

Bumps the bun-minor-and-patch group with 7 updates:

Package	From	To
@anthropic-ai/claude-agent-sdk	0.3.185	0.3.195
@anthropic-ai/sdk	0.105.0	0.107.0
@google/genai	2.9.0	2.10.0
motion	12.40.0	12.42.0
playwright	1.61.0	1.61.1
wrangler	4.103.0	4.105.0
puppeteer	25.2.0	25.2.1

Updates @anthropic-ai/claude-agent-sdk from 0.3.185 to 0.3.195

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.3.195

What's changed

• Added Query.reinitialize() to re-send the initialize control request and redeliver pending permission/dialog prompts after a transport gap
• Fixed commands_changed event not being emitted for synced skills when the skill list resolves before the change-detector subscribes

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.195
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.195
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.195
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.195

v0.3.193

What's changed

• Added promptSuggestions option to Browser SDK query() to opt the remote CLI into emitting follow-up suggestions
• Fixed brief console window flashes on Windows when spawning CLI subprocesses

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.193
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.193
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.3.193
# or
bun add @anthropic-ai/claude-agent-sdk@0.3.193

v0.3.191

What's changed

• Added old_source field to NotebookEdit tool results for replace and delete operations, enabling inline diffs
• Added seven_day_overage_included to SDKRateLimitInfo.rateLimitType for per-model weekly usage limits
• Added model_scoped array to usage response for per-model weekly limit windows with utilization and reset times
• Fixed fast mode reverting to standard after the first turn when settingSources includes user/project settings

Update

npm install @anthropic-ai/claude-agent-sdk@0.3.191
# or
yarn add @anthropic-ai/claude-agent-sdk@0.3.191
</tr></table> 

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.3.195

• Added Query.reinitialize() to re-send the initialize control request and redeliver pending permission/dialog prompts after a transport gap
• Fixed commands_changed event not being emitted for synced skills when the skill list resolves before the change-detector subscribes

0.3.194

• Updated to parity with Claude Code v2.1.194

0.3.193

• Added promptSuggestions option to Browser SDK query() to opt the remote CLI into emitting follow-up suggestions
• Fixed brief console window flashes on Windows when spawning CLI subprocesses

0.3.192

• Updated to parity with Claude Code v2.1.192

0.3.191

• Added old_source field to NotebookEdit tool results for replace and delete operations, enabling inline diffs
• Added seven_day_overage_included to SDKRateLimitInfo.rateLimitType for per-model weekly usage limits
• Added model_scoped array to usage response for per-model weekly limit windows with utilization and reset times
• Fixed fast mode reverting to standard after the first turn when settingSources includes user/project settings

0.3.190

• Updated to parity with Claude Code v2.1.190

0.3.188

• Updated to parity with Claude Code v2.1.188

0.3.187

• Added sandbox.credentials to SDK settings types for configuring credential file and environment variable denial in sandboxed commands

0.3.186

• Added agent_id field to can_use_tool control requests — background agents now forward permission prompts to canUseTool instead of auto-denying, and stdin stays open while background tasks are running
• Added ReadMcpResourceDirTool tool type to SDK schemas — MCP resource directory listing is now a dedicated tool instead of a fallback inside ReadMcpResourceTool
• Added rewind_conversation control request for rewinding a conversation to a previous point with durable resume anchor support

Commits

• b09861c chore: Update CHANGELOG.md
• 761e2be chore: Update CHANGELOG.md
• 7eef35d chore: Update CHANGELOG.md
• b9c030b chore: Update CHANGELOG.md
• 4279d96 chore: Update CHANGELOG.md
• 42f6772 chore: Update CHANGELOG.md
• See full diff in compare view

Updates @anthropic-ai/sdk from 0.105.0 to 0.107.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.107.0

0.107.0 (2026-06-29)

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

Features

• api: add support for 20260318 web fetch and support tools (d7057ea)

Bug Fixes

• agent-toolset: bound canonicalize symlink hops; resolve glob matches before confinement check (#142) (277be80)
• types: restore BatchCreateParams.Request.params dropped by codegen merge (#165) (c6b68d2)

Chores

• api: accept user profile ID's when counting tokens (6cda67e)
• docs: updates to descriptions and example values (51a5f81)

Documentation

• update readme requirements to match anthropic docs (#146) (3818412)

sdk: v0.106.0

0.106.0 (2026-06-24)

Full Changelog: sdk-v0.105.0...sdk-v0.106.0

Features

• client: add support for system.message streaming events (a7c14b7)

Bug Fixes

• helpers: single source for x-stainless-helper, append semantics, and tag the fallback middleware (#107) (106bea0)

Chores

• api: add support for new refusal category (b38fd01)
• api: add support for sending User Profile ID in request headers (198583e)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.107.0 (2026-06-29)

Full Changelog: sdk-v0.106.0...sdk-v0.107.0

Features

• api: add support for 20260318 web fetch and support tools (d7057ea)

Bug Fixes

• agent-toolset: bound canonicalize symlink hops; resolve glob matches before confinement check (#142) (277be80)
• types: restore BatchCreateParams.Request.params dropped by codegen merge (#165) (c6b68d2)

Chores

• api: accept user profile ID's when counting tokens (6cda67e)
• docs: updates to descriptions and example values (51a5f81)

Documentation

• update readme requirements to match anthropic docs (#146) (3818412)

0.106.0 (2026-06-24)

Full Changelog: sdk-v0.105.0...sdk-v0.106.0

Features

• client: add support for system.message streaming events (a7c14b7)

Bug Fixes

• helpers: single source for x-stainless-helper, append semantics, and tag the fallback middleware (#107) (106bea0)

Chores

• api: add support for new refusal category (b38fd01)
• api: add support for sending User Profile ID in request headers (198583e)

Commits

• f1662fe chore: release main
• c7d44fd fix(types): restore BatchCreateParams.Request.params dropped by codegen merge...
• e345810 feat(api): add support for 20260318 web fetch and support tools
• c625b04 fix(agent-toolset): bound canonicalize symlink hops; resolve glob matches bef...
• 3a7c513 chore(docs): updates to descriptions and example values
• 756ec9e docs: update readme requirements to match anthropic docs (#146)
• 9d37c71 chore(api): accept user profile ID's when counting tokens
• d3c49c7 codegen metadata
• 0ffdbfa chore: release main (#1098)
• See full diff in compare view

Updates @google/genai from 2.9.0 to 2.10.0

Release notes

Sourced from @​google/genai's releases.

v2.10.0

2.10.0 (2026-06-24)

Features

• [Interactions] Add ComputerUse.disabled_safety_policies (a2ca95c)
• [Models] Add ComputerUse.disabled_safety_policies (3618023)
• add usage fields for steps (048db9a)
• add video generation and response format parameters. (84e795c)

Changelog

Sourced from @​google/genai's changelog.

2.10.0 (2026-06-24)

Features

• [Interactions] Add ComputerUse.disabled_safety_policies (a2ca95c)
• [Models] Add ComputerUse.disabled_safety_policies (3618023)
• add usage fields for steps (048db9a)
• add video generation and response format parameters. (84e795c)

Commits

• 31223a3 chore(main): release 2.10.0 (#1725)
• 628f3f2 chore: Disable ComputerUse.disabled_safety_policies in Gemini Enterprise API
• 84e795c feat: add video generation and response format parameters.
• 048db9a feat: add usage fields for steps
• a2ca95c feat: Add ComputerUse.disabled_safety_policies
• 3618023 feat: Add ComputerUse.disabled_safety_policies
• eeee711 docs: fix typos across docstrings
• a12a590 chore: Upgrade stalebot action to use v10 (due to Node20 deprecation)
• See full diff in compare view

Updates motion from 12.40.0 to 12.42.0

Changelog

Sourced from motion's changelog.

[12.42.0] 2026-06-24

Changed

• animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

• animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.
• animateView: Disabled automatic border-radius animation.

[12.41.0] 2026-06-23

Added

• animateView: Moves from Motion+ Early Access and alpha to main library.
• animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.
• animateView: .new() and .old() configures values to animate on new and old layers.
• animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.
• animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.
• animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.

Fixed

• AnimatePresence: Prevent stuck exit animations when children interrupt.
• drag: Child e.stopPropagation() no longer break drag end.
• Fixing Next.js OOM on Windows when importing via motion package.
• animateLayout: Improve handling of parallel/interleaved calls.

Changed

• animateView: .enter() and .exit() now refer specifically to new and old layers where there are no matching old or new layers.
• animateView: Interrupted transition setups now return resolved animation rather than throwing.

Commits

• 9c84145 v12.42.0
• 60d7c72 Add view-transition group nesting and aspect-aware cropping
• 6437276 Updating
• f0f893e v12.41.0
• c0c53cb Updating changelog
• 18c3e3e Removing plans
• 378fc4c Merge pull request #3761 from motiondivision/worktree-view-target
• 94ea505 Merge branch 'main' into worktree-view-target
• de65f6b Fade auto morph crossfades over the spring's visual duration
• f8af239 Let an explicit duration override the inherited spring on a view layer
• Additional commits viewable in compare view

Updates playwright from 1.61.0 to 1.61.1

Release notes

Sourced from playwright's releases.

v1.61.1

Bug Fixes

• #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
• #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
• #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
• #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
• #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

Commits

• 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
• 4328122 chore: mark v1.61.1 (#41404)
• 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
• 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
• 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
• b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
• b5a3175 cherry-pick(#41319): fix(loader): support other node versions
• d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
• See full diff in compare view

Updates wrangler from 4.103.0 to 4.105.0

Release notes

Sourced from wrangler's releases.

wrangler@4.105.0

Minor Changes

• #14311 34e0cef Thanks @​sherryliu-lsy! - Add Google Artifact Registry support to containers registries configure

  wrangler containers registries configure now recognizes *-docker.pkg.dev (Google Artifact Registry) domains.

  • The Google service account email is the public credential, supplied with --gar-email. It must match the client_email in the service account key.
  • The service account JSON key is the private credential. It is provided via stdin (a file path, raw JSON, or base64) or an interactive prompt (a file path or base64) — never as a CLI flag, so it does not appear in shell history. The key is validated against --gar-email and stored base64-encoded.
  • Secret reuse inherits the existence-first flow: when the target Secrets Store secret already exists, it is reused by reference and the key is not required. In that case the email cannot be verified locally; it is validated against the key when images are pulled.

  <path-to-key>.json | npx wrangler@latest containers registries configure <region>-docker.pkg.dev --gar-email=<service-account-email> --secret-name=Google_Service_Account_JSON_Key

Patch Changes

• #14424 5f40dd5 Thanks @​MattieTK! - Bump am-i-vibing from 0.4.0 to 0.5.0

  This updates the agentic environment detection library to the latest version, which adds detection for the Pi coding agent (earendil-works/pi).

• #14406 3b743c1 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20260623.1	1.20260625.1

• #14343 daa5389 Thanks @​th0m! - Use digest-pinned image references for Dockerfile container deploys

  Dockerfile-backed container deploys now use the pushed image digest when deploying the container application. This lets snapshot-enabled container apps pass Cloudchamber validation while keeping local, non-pushed builds and registry image URI deploys unchanged.

• #14394 8a5cf8c Thanks @​Partha-Shankar! - fix(d1): escape migrationsTableName and filenames in SQLite queries

  D1 migration commands in both wrangler and @cloudflare/vitest-pool-workers interpolated the migrationsTableName config value and migration filenames directly into SQL strings without any escaping. This meant:

  • A table name such as my"table would produce invalid SQL in CREATE TABLE, SELECT, and INSERT statements, and
  • A migration filename containing an apostrophe (e.g. what's-new.sql) would break the INSERT INTO ... VALUES ('...') statement appended after each migration in wrangler.

  Both identifiers are now properly escaped before interpolation: migrationsTableName is wrapped in double-quotes with internal double-quotes doubled (SQL-standard identifier quoting), and migration filenames used as string literals have their single-quotes doubled before insertion.

• Updated dependencies [3b743c1]:

  • miniflare@4.20260625.0

wrangler@4.104.0

Minor Changes

• #14369 e312dec Thanks @​edmundhung! - Add getEnv() to createTestHarness() Worker handles

... (truncated)

Commits

• 70d97d9 Version Packages (#14401)
• 5f40dd5 [wrangler] Bump am-i-vibing from 0.4.0 to 0.5.0 (#14424)
• 3b743c1 Bump workerd from 1.20260623.1 to 1.20260625.1 in the workerd-and-workers-typ...
• 10543c1 [wrangler] interpolate current date to fix brittle test (#14421)
• 76cc8d6 extremely minor refactor of versions upload/deploy validation (#14400)
• daa5389 Use digest-pinned images for Dockerfile container deploys (#14343)
• 34e0cef CC-7948 Update wrangler CLI to support GAR (#14311)
• 8a5cf8c [wrangler] fix(d1): escape migrationsTableName and filenames in SQLite querie...
• ec856a1 Version Packages (#14370)
• fab565f Bump workerd from 1.20260621.1 to 1.20260623.1 in the workerd-and-workers-typ...
• Additional commits viewable in compare view

Updates puppeteer from 25.2.0 to 25.2.1

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.2.1

25.2.1 (2026-06-24)

🛠️ Fixes

• regression when using Puppeteer with untrusted sessions (#15150) (801c212)
• roll to Firefox 152.0.2 (#15153) (d2908b2)

puppeteer: v25.2.1

25.2.1 (2026-06-24)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.2.0 to 25.2.1

Changelog

Sourced from puppeteer's changelog.

25.2.1 (2026-06-24)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.2.0 to 25.2.1

🛠️ Fixes

• regression when using Puppeteer with untrusted sessions (#15150) (801c212)
• roll to Firefox 152.0.2 (#15153) (d2908b2)

Commits

• 4a56c69 chore: release main (#15152)
• d2908b2 fix: roll to Firefox 152.0.2 (#15153)
• 801c212 fix: regression when using Puppeteer with untrusted sessions (#15150)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Note

Low Risk
Lockfile and dev/optional dependency updates with no production runtime code changes; validate CI (Playwright, live-e2e-agent, deploy) after merge.

Overview
Bumps the Dependabot bun-minor-and-patch group by refreshing bun.lock and raising @anthropic-ai/sdk in package.json from ^0.105.0 to ^0.107.0.

Resolved versions move forward for agent/LLM tooling (@anthropic-ai/claude-agent-sdk 0.3.185→0.3.195), Google GenAI (@google/genai 2.9→2.10), site animation (motion / framer-motion 12.40→12.42), E2E (playwright 1.61.0→1.61.1), Cloudflare local/deploy (wrangler, miniflare, workerd), and optional screenshots (puppeteer 25.2.0→25.2.1). No application source changes—only lockfile resolution and the one explicit SDK range bump.

^{Reviewed by Cursor Bugbot for commit 4d67366. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cloudflare-workers-and-pages]

Deploying impeccable with    Cloudflare Pages

Latest commit:	4d67366
Status:	✅  Deploy successful!
Preview URL:	https://c7ea9810.impeccable-2rv.pages.dev
Branch Preview URL:	https://dependabot-bun-bun-minor-and-togs.impeccable-2rv.pages.dev

View logs