Skip to content

Conversation

@jensbodal
Copy link

Upgrade @anthropic-ai/claude-code from 2.0.24 → 2.0.42 (18 patch versions)

Primary Package Upgrade

  • @anthropic-ai/claude-code: 2.0.24 → 2.0.42

Related Package Upgrades

  • @anthropic-ai/sdk: 0.65.0 → 0.69.0
  • @modelcontextprotocol/sdk: 1.15.1 → 1.22.0
  • eslint: 9.x → 9.39.1
  • axios: 1.10.0 → 1.13.2
  • chalk: 5.4.1 → 5.6.2
  • fastify: 5.5.0 → 5.6.2
  • ink: 6.1.0 → 6.5.0
  • react: 19.1.1 → 19.2.0
  • @types/react: 19.1.9 → 19.2.5
  • tar: 7.4.3 → 7.5.2
  • typescript: 5.x → 5.9.3
  • tsx: 4.20.3 → 4.20.6
  • vitest: 3.2.4 → 4.0.9

Security Fixes

  • Fixed js-yaml prototype pollution vulnerability (CVE, moderate severity) by adding package resolution to js-yaml ^4.1.1
  • Resolved security audit: 0 vulnerabilities (previously 1 moderate)

Code Changes

  • Added scripts/claude_code_paths.cjs for dynamic path resolution
  • Updated claude launcher scripts for new SDK structure
  • Updated SDK utils for compatibility with SDK 0.69.0
  • Minor fixes in MCP client and bridge for protocol updates
  • Updated MessageQueue for new typing requirements

PR Feedback Improvements

  • Added PATH_SEGMENTS synchronization test (src/claude/sdk/utils.test.ts) to ensure CJS and TS path definitions stay in sync
  • Added MCP SDK breaking change comments in codexMcpClient.ts

Testing

  • ✅ Build: Passed
  • ✅ Typecheck: Passed
  • ✅ Tests: 107 passed, 12 skipped (daemon integration tests)

Breaking Changes

None identified. All changes are backward compatible.

🤖 Generated with Claude Code via Happy

Upgrade @anthropic-ai/claude-code from 2.0.24 → 2.0.42 (18 patch versions)

## Primary Package Upgrade
- @anthropic-ai/claude-code: 2.0.24 → 2.0.42

## Related Package Upgrades
- @anthropic-ai/sdk: 0.65.0 → 0.69.0
- @modelcontextprotocol/sdk: 1.15.1 → 1.22.0
- eslint: 9.x → 9.39.1
- axios: 1.10.0 → 1.13.2
- chalk: 5.4.1 → 5.6.2
- fastify: 5.5.0 → 5.6.2
- ink: 6.1.0 → 6.5.0
- react: 19.1.1 → 19.2.0
- @types/react: 19.1.9 → 19.2.5
- tar: 7.4.3 → 7.5.2
- typescript: 5.x → 5.9.3
- tsx: 4.20.3 → 4.20.6
- vitest: 3.2.4 → 4.0.9

## Security Fixes
- Fixed js-yaml prototype pollution vulnerability (CVE, moderate severity)
  by adding package resolution to js-yaml ^4.1.1
- Resolved security audit: 0 vulnerabilities (previously 1 moderate)

## Code Changes
- Added scripts/claude_code_paths.cjs for dynamic path resolution
- Updated claude launcher scripts for new SDK structure
- Updated SDK utils for compatibility with SDK 0.69.0
- Minor fixes in MCP client and bridge for protocol updates
- Updated MessageQueue for new typing requirements

## PR Feedback Improvements
- Added PATH_SEGMENTS synchronization test (src/claude/sdk/utils.test.ts)
  to ensure CJS and TS path definitions stay in sync
- Added MCP SDK breaking change comments in codexMcpClient.ts

## Testing
- ✅ Build: Passed
- ✅ Typecheck: Passed
- ✅ Tests: 107 passed, 12 skipped (daemon integration tests)

## Breaking Changes
None identified. All changes are backward compatible.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
@jensbodal jensbodal marked this pull request as ready for review November 15, 2025 08:09
Copilot AI review requested due to automatic review settings November 15, 2025 08:09
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades @anthropic-ai/claude-code from version 2.0.24 to 2.0.42 and updates related dependencies to maintain compatibility. The upgrade includes necessary code changes to adapt to breaking changes in the MCP SDK and improves robustness of the Claude Code CLI loading logic.

Key Changes:

  • Upgraded primary package (@anthropic-ai/claude-code) by 18 patch versions along with 13 related dependencies
  • Adapted code to MCP SDK breaking changes by removing deprecated fields and capabilities
  • Enhanced Claude Code CLI path resolution with fallback logic and synchronization tests
  • Fixed js-yaml security vulnerability via package resolution

Reviewed Changes

Copilot reviewed 10 out of 11 changed files in this pull request and generated no comments.

Show a summary per file
File Description
yarn.lock Updated dependency versions for @anthropic-ai/claude-code (2.0.42), @anthropic-ai/sdk (0.69.0), @modelcontextprotocol/sdk (1.22.0), eslint (9.39.1), axios (1.13.2), chalk (5.6.2), fastify (5.6.2), ink (6.5.0), react (19.2.0), vitest (4.0.9), and other related packages
src/utils/MessageQueue.ts Changed import source from SDK to local types for better decoupling, and updated parent_tool_use_id from null to undefined to align with TypeScript optional property conventions
src/codex/happyMcpStdioBridge.ts Removed deprecated tools: {} capability and description field to comply with MCP SDK 1.0.0+ API changes
src/codex/codexMcpClient.ts Removed deprecated tools: {} capability with explanatory comments about MCP SDK breaking changes
src/claude/utils/startHappyServer.ts Removed deprecated description field from McpServer initialization
src/claude/sdk/utils.ts Enhanced path resolution with fallback logic to try multiple Claude Code CLI locations (cli.js, bin/cli.js, dist/cli.js)
src/claude/sdk/utils.test.ts Added synchronization tests to ensure PATH_SEGMENTS consistency between CJS and TS modules
scripts/claude_remote_launcher.cjs Refactored to use shared loadClaudeCodeCli() function from claude_code_paths.cjs with improved error handling
scripts/claude_local_launcher.cjs Refactored to use shared loadClaudeCodeCli() function with fallback import logic
scripts/claude_code_paths.cjs New shared module providing canonical path/module specifiers for Claude Code CLI with fallback loading logic
package.json Updated dependency versions and added js-yaml resolution (^4.1.1) to fix security vulnerability

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant