[angeloashmore]

Updates dependencies to the newest versions published before 2026-10-30 (3-day cooldown).

Updated

• @anthropic-ai/claude-agent-sdk 0.3.311 → 0.3.312 (dev-only, eval tooling)
• @openai/codex-sdk 0.164.0 → 0.166.0 (dev-only, eval tooling)
• @types/node 26.6.5 → 26.6.6
• oxfmt 0.74.0 → 0.75.0
• oxlint 1.89.0 → 1.90.0
• tsdown 0.23.2 → 0.23.4

Transitive dependencies were refreshed with npm update (for example rolldown bindings 1.2.15 → 1.2.16, and tsdown now uses tinyps in place of tree-kill). The lockfile was refreshed with npm 11, as in earlier runs. Lint, type-check, build, and format check pass locally with no source changes.

Not included because they were published inside the cooldown window: @anthropic-ai/claude-agent-sdk 0.3.314–0.3.316 and vitest 5.1.0. A later run will pick them up. @prismicio/types-internal (4.7.0 → 4.8.1) is skipped by policy.

Held back

None.

---

Generated by Claude Code

---

Note

Low Risk
DevDependency and tooling-only lockfile updates with no changes to the published CLI runtime or production dependencies.

Overview
Bumps dev-only dependencies in package.json and refreshes package-lock.json; there are no application source changes.

Direct updates: @anthropic-ai/claude-agent-sdk (0.3.311 → 0.3.312) and @openai/codex-sdk (0.164.0 → 0.166.0) for eval runs; @types/node (26.6.5 → 26.6.6); oxfmt (0.74 → 0.75), oxlint (1.89 → 1.90), and tsdown (0.23.2 → 0.23.4) for format, lint, and build.

The lockfile also picks up transitive churn from npm update, including rolldown 1.2.15 → 1.2.16, tsdown swapping tree-kill for tinyps, and rolldown-plugin-dts moving from 0.29.0-beta.2 to 0.28.8 as required by the newer tsdown release.

^{Reviewed by Cursor Bugbot for commit 1abb9bb. Bugbot is set up for automated code reviews on this repo. Configure here.}