chore(deps): update bump-dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Update	Pending
@anthropic-ai/claude-code	2.1.201 → 2.1.204			patch	2.1.207 (+2)
@openai/codex (source)	0.142.5 → 0.143.0			minor	0.144.1 (+1)
containerd.io	2.2.5-1~debian.13~trixie → 2.2.6-1~debian.13~trixie			patch
golang.org/x/tools/gopls	v0.22.0 → v0.23.0			minor
golang.org/x/vuln	v1.5.0 → v1.6.0			minor
opencode-ai	1.17.13 → 1.17.15			patch	1.17.18 (+2)

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.204

Compare Source

• Fixed hook events not streaming during SessionStart hooks in headless sessions, which could cause remote workers to be idle-reaped mid-hook

v2.1.203

Compare Source

• Added a warning when your login is about to expire, so you can re-authenticate before background sessions are interrupted
• Added a grey ⏸ badge to the footer when in manual permission mode, making the active mode always visible
• Added the session's additional working directories to MCP roots/list, with notifications/roots/list_changed sent when the set changes
• Fixed opening or switching background agent sessions on macOS stalling for 15–20 seconds due to a false low-memory detection (regression in 2.1.196)
• Fixed background sessions becoming permanently unresponsive to attach, replies, and stop when the daemon's session token went stale — the session now recovers automatically
• Fixed returning to claude agents silently stopping running subagents and re-running the prompt from scratch — their work now carries over
• Fixed a memory and per-turn CPU regression in interactive sessions: the context-usage indicator no longer re-analyzes the entire transcript after every turn
• Fixed background agents inheriting a stale PATH from the daemon instead of the dispatching shell, causing missing tools on Windows
• Fixed background and agent-view sessions dropping a shell-exported ANTHROPIC_BASE_URL, which sent API keys to the default endpoint and failed with 401
• Fixed Bash failing with "argument list too long" in repos with many git worktrees
• Fixed worktree-isolated subagents sometimes running shell commands in the parent checkout instead of their own worktree
• Fixed worktree creation rejecting nested repositories in multi-repo workspaces, leaving background sessions unable to isolate and edit
• Fixed background agents crash-looping when their working directory was deleted, replaced by a file, or became an invalid path — they now fail once with a clear error
• Fixed a background daemon auto-upgrade failure silently killing all running background sessions
• Fixed TaskStop and TaskOutput failing to find background agents spawned by another agent — errors now list running agents by id and description
• Fixed the claude agents composer discarding your typed message when a slash command isn't available there
• Fixed the agent list crashing when opening a stopped session whose conversation was already open in another session
• Fixed background sessions showing "Needs input" in the agent list after the question was already answered
• Fixed background agent startup failures showing only "exit_with_message" instead of the actual error
• Fixed background sessions ignoring effortLevel changes in settings.json when forked through the daemon
• Fixed attached background sessions ignoring CLAUDE_CODE_DISABLE_MOUSE and CLAUDE_CODE_DISABLE_MOUSE_CLICKS opt-outs
• Fixed /exit incorrectly warning about running background agents after all named agents had completed
• Fixed background sessions started from a non-git directory unable to edit files when a WorktreeCreate hook was configured
• Fixed the @ directory picker in claude agents not showing registered git worktrees
• Fixed background task output on Windows being permanently replaced by an empty file after /clear
• Fixed content jumping when scrolling up through long transcript history
• Fixed the terminal flickering and jumping while typing in bash mode when a shell-history suggestion was shown
• Fixed literal ^[[I / ^[[O escape codes being printed when reattaching to a background session
• Fixed LSP-only plugins being incorrectly flagged for disuse when their language servers deliver diagnostics or answer navigation requests
• Improved responsiveness while long responses stream: live-preview updates no longer re-render the whole screen
• Improved subagent behavior: agents are now less likely to re-delegate their entire task to another subagent
• Reduced binary size by ~7 MB and startup memory by ~7 MB by loading a large bundled dependency lazily instead of inlining it
• Changed left arrow to no longer close the background tasks, diff, and workflow detail views — press Esc instead
• Changed the empty claude agents view to always show the organized sections (Needs input / Working / Completed) with descriptions
• Removed the startup "claude command missing or broken" warnings — they now appear in /doctor and /status instead
• Removed a redundant navigation hint from the claude agents footer
• [VSCode] Added a Settings toggle for "Enable Remote Control for all sessions"

v2.1.202

Compare Source

• Added a "Dynamic workflow size" setting in /config for controlling how large Claude generally makes dynamic workflows (small/medium/large agent counts) — an advisory guideline, not an enforced cap
• Added workflow.run_id and workflow.name OpenTelemetry attributes to telemetry emitted by workflow-spawned agents, so a workflow run's activity can be reconstructed from OTel data
• Fixed a crash in the inline Ctrl+R history search when accepting or cancelling while the search was still scanning the history file
• Fixed /rename on background sessions being reverted when the job restarts, which broke addressing the session by its new name
• Fixed transient mTLS handshake failures when settings were re-applied during an in-place client certificate rotation
• Fixed commands sent from Remote Control (mobile/web) into an interactive session failing with "Unknown command"
• Fixed images and files sent from the Remote Control mobile or web app without a caption being silently dropped
• Fixed the sign-in URL printed by claude auth login and claude mcp login --no-browser not being reliably clickable when it wraps over SSH — it is now emitted as a single hyperlink
• Fixed opening a chat from claude agents sometimes failing with "currently running as a background agent" followed by a worker crash/respawn loop
• Fixed workflow scripts with unicode quote escapes in strings being corrupted before parsing; workflow parse errors now show the offending line instead of always blaming TypeScript
• Fixed voice dictation retrying in an unbounded loop when the microphone or audio recorder fails — repeated capture failures now pause voice input
• Fixed /remote-control sessions showing the wrong permission mode in the mobile and web apps
• Fixed resuming a session by name, or opening the resume picker, taking minutes and using a large amount of memory in repositories with many git worktrees
• Fixed installer and updater downloads failing immediately with "aborted" when a proxy or network drops the connection mid-download — transient connection drops now retry
• Fixed re-invoking an already-loaded skill appending a duplicate copy of its instructions to context
• Improved /workflows agent list layout: wider titles, a dedicated time column, shorter model names, and no per-row tool-call counts
• Improved MCP error messages: clearer error when a server config has url but no type, suggesting "type": "http" instead of the misleading "command: expected string"
• Changed /review <pr> back to a fast single-pass review; use /code-review <level> <pr#> for the multi-agent review at a chosen effort level

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Wednesday (* * * * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.