Skip to content

Commit bf2e426

Browse files
committed
chore(deps): exempt pinned @anthropic-ai/sdk 0.114.0 from the release-age gate
CI's bun install --frozen-lockfile blocks 0.114.0 (published 2026-07-23, younger than the 7-day supply-chain gate). The pin is exact and was vetted for the agent-events streaming work; following the existing bunfig pattern, the exclusion ages out on 2026-07-30 and should be dropped then.
1 parent d833d43 commit bf2e426

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

bunfig.toml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ minimumReleaseAge = 604800
1111
# July 2026 advisories (SSRF, cache confusion, DoS, middleware bypass — GHSA-89xv-2m56-2m9x
1212
# et al.); published 2026-07-21, they age out of the gate on 2026-07-28 — drop these two
1313
# entries then.
14+
# @anthropic-ai/sdk is exactly pinned to 0.114.0, vetted for the agent-events
15+
# streaming work (adaptive thinking display types + transform-json-schema);
16+
# published 2026-07-23, it ages out of the gate on 2026-07-30 — drop this entry then.
1417
minimumReleaseAgeExcludes = [
1518
"@typescript/native-preview",
1619
"@earendil-works/pi-agent-core",
@@ -19,6 +22,7 @@ minimumReleaseAgeExcludes = [
1922
"@earendil-works/pi-tui",
2023
"next",
2124
"@next/env",
25+
"@anthropic-ai/sdk",
2226
]
2327

2428
[run]

0 commit comments

Comments
 (0)