build(deps): update claude-agent-sdk requirement from >=0.1.77 to >=0.2.82 in /claude-agent-sdk

[dependabot]

Updates the requirements on claude-agent-sdk to permit the latest version.

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.82

Breaking

• Breaking: MCP servers now connect in the background by default; sessions start immediately and slow servers report status: "pending" in init until ready. Set MCP_CONNECTION_NONBLOCKING=0 to restore the old behavior of waiting up to 5s before the first query, or mark a server alwaysLoad: true to require it in turn 1.
• Breaking: Headless and SDK sessions now use Task tools (TaskCreate / TaskUpdate / TaskGet / TaskList) instead of TodoWrite. Tool consumers should accumulate by task ID instead of replacing a snapshot list.

New Features

• EffortLevel type export: Added a public EffortLevel type alias for Claude effort string levels ("low", "medium", "high", "max", "xhigh") and exported it from the package root, making it available for downstream SDK wrappers and type annotations (#951)

Bug Fixes

• Stderr callback isolation: Fixed an issue where a user-provided stderr callback that raises an exception would silently terminate the stderr reader loop, dropping all subsequent stderr lines for the rest of the session. Exceptions are now caught per-line so a failing callback does not prevent delivery of later lines (#932)
• CancelledError in eager-flush done callback: Fixed noisy Exception in callback log messages on shutdown when pending eager-flush tasks were cancelled. The done callback now gracefully handles CancelledError instead of unconditionally calling Task.exception() (#931)
• Tighter permission_suggestions type: Replaced list[Any] | None with list[dict[str, Any]] | None on SDKControlPermissionRequest.permission_suggestions, enabling proper type-checking on consumers of that field (#955)

Documentation

• Clarified that hooks dispatch for a given event is concurrent (all matchers fire in parallel), not sequential, preventing incorrect assumptions about ordering-dependent hooks like rate limiters gating subsequent hooks (#956)

Internal/Other Changes

• Bumped mcp dependency lower bound to >=1.23.0 to address GHSA-9h52-p55h-vw2f (CVE-2025-66416), which disables DNS rebinding protection by default in older versions (#927)
• Stabilized eager-flush transcript mirror tests with deterministic wait helpers instead of fixed asyncio.sleep(0) yields (#933)
• Updated bundled Claude CLI to version 2.1.142

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.82/

pip install claude-agent-sdk==0.2.82

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.82

New Features

• EffortLevel type export: Added a public EffortLevel type alias for Claude effort string levels ("low", "medium", "high", "max", "xhigh") and exported it from the package root, making it available for downstream SDK wrappers and type annotations (#951)

Bug Fixes

• Stderr callback isolation: Fixed an issue where a user-provided stderr callback that raises an exception would silently terminate the stderr reader loop, dropping all subsequent stderr lines for the rest of the session. Exceptions are now caught per-line so a failing callback does not prevent delivery of later lines (#932)
• CancelledError in eager-flush done callback: Fixed noisy Exception in callback log messages on shutdown when pending eager-flush tasks were cancelled. The done callback now gracefully handles CancelledError instead of unconditionally calling Task.exception() (#931)
• Tighter permission_suggestions type: Replaced list[Any] | None with list[dict[str, Any]] | None on SDKControlPermissionRequest.permission_suggestions, enabling proper type-checking on consumers of that field (#955)

Documentation

• Clarified that hooks dispatch for a given event is concurrent (all matchers fire in parallel), not sequential, preventing incorrect assumptions about ordering-dependent hooks like rate limiters gating subsequent hooks (#956)

Internal/Other Changes

• Bumped mcp dependency lower bound to >=1.23.0 to address GHSA-9h52-p55h-vw2f (CVE-2025-66416), which disables DNS rebinding protection by default in older versions (#927)
• Stabilized eager-flush transcript mirror tests with deterministic wait helpers instead of fixed asyncio.sleep(0) yields (#933)
• Updated bundled Claude CLI to version 2.1.142

0.1.81

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.139

0.1.80

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.138

0.1.79

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.137

0.1.78

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.136

0.1.77

Bug Fixes

... (truncated)

Commits

• 054b75f docs: update changelog for v0.2.82
• ae655df chore: release v0.2.82
• 9d2c650 fix(transcript_mirror): handle CancelledError in eager-flush done callback (#...
• 687e22f docs(types): clarify hooks dispatch is concurrent, not sequential (#956)
• 5a1f94d test(transcript_mirror): stabilize eager-flush tests with deterministic wait ...
• fd8213b deps: bump mcp lower bound to 1.23.0 for GHSA-9h52-p55h-vw2f (#927)
• 5ce669c fix(types): tighten permission_suggestions type in SDKControlPermissionReques...
• 6bbad5f fix(transport): isolate stderr callback failures, continue reading lines (#932)
• fc7a6de Export EffortLevel type alias (#951)
• 1a72b69 chore: bump bundled CLI version to 2.1.142
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like claude-agent-sdk is up-to-date now, so this is no longer needed.