Update LLM provider SDK npm packages

[hash-worker]

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/bedrock-sdk	0.26.3 → 0.29.1
@anthropic-ai/sdk	0.74.0 → 0.92.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anthropics/anthropic-sdk-typescript (@​anthropic-ai/bedrock-sdk)

v0.29.1

Full Changelog: sdk-v0.29.0...sdk-v0.29.1

Bug Fixes

• beta: merge betas param with the default value (#​556) (5520bbc)

Chores

• internal: update spec URL (#​554) (1fb6448)

v0.29.0

Full Changelog: sdk-v0.28.0...sdk-v0.29.0

Features

• api: add message batches api (4f114d5)

Chores

• internal: move LineDecoder to a separate file (#​541) (fd42469)
• internal: pass props through internal parser (#​549) (dd71955)

Refactors

• types: improve metadata type names (#​547) (cef499c)
• types: improve metadata types (#​546) (3fe538b)
• types: improve tool type names (#​543) (18dbe77)
• types: improve tool type names (#​544) (fc2d823)

v0.28.0

Full Changelog: sdk-v0.27.3...sdk-v0.28.0

Features

• api: support disabling parallel tool use (#​540) (df0032f)
• client: allow overriding retry count header (#​536) (ec11f91)
• client: send retry count header (#​533) (401b81c)

Bug Fixes

• types: remove leftover polyfill usage (#​532) (ac188b2)

Chores

• better object fallback behaviour for casting errors (#​503) (3660e97)
• better object fallback behaviour for casting errors (#​526) (4ffb2e4)
• internal: add dev dependency (#​531) (a9c127b)

Documentation

• improve and reference contributing documentation (#​539) (cbef925)
• update CONTRIBUTING.md (#​528) (2609dec)

v0.27.0

Full Changelog: sdk-v0.26.1...sdk-v0.27.0

Features

• client: add support for browser usage (#​504) (93c5f16)

Documentation

• readme: update formatting and clarity for CORS flag (9cb2c35)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am every weekday,every weekend"
• Automerge
  • "before 4am every weekday,every weekend"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hash	Error		May 14, 2026 8:14pm

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
hashdotdesign	Ignored	Preview	May 14, 2026 8:14pm
hashdotdesign-tokens	Ignored	Preview	May 14, 2026 8:14pm
petrinaut	Skipped		May 14, 2026 8:14pm

[cursor]

PR Summary

Medium Risk
Bumps core LLM-provider SDK versions used by the AI worker, which can introduce subtle runtime/typing changes in request/response handling. Risk is mainly compatibility/regression with existing Anthropic/Bedrock integration rather than logic changes in this PR.

Overview
Updates Anthropic provider dependencies: @anthropic-ai/bedrock-sdk is bumped in apps/hash-ai-worker-ts, and @anthropic-ai/sdk is bumped in both apps/hash-ai-worker-ts and libs/@local/repo-chores.

No application logic changes are included; this PR is strictly a dependency version update for the Anthropic/Bedrock integration and related tooling.

^{Reviewed by Cursor Bugbot for commit db14a13. Bugbot is set up for automated code reviews on this repo. Configure here.}

[augmentcode]

🤖 Augment PR Summary

Summary: Updates the pinned @anthropic-ai/sdk dependency from 0.74.0 to 0.75.0 in the AI worker and repo-chores Node workspaces.
Why: Pulls in the latest upstream SDK spec fixes and newly released model support (per v0.75.0 release notes).

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. No suggestions at this time.

Comment augment review to trigger a new review at any time.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: SDK version doesn't match PR description's target
  • Pinned @anthropic-ai/sdk to 0.78.0 in both affected package manifests and regenerated yarn.lock so all resolved entries now match the PR’s stated target version.

Or push these changes by commenting:

@cursor push 7c837bbb15

Preview (7c837bbb15)

diff --git a/apps/hash-ai-worker-ts/package.json b/apps/hash-ai-worker-ts/package.json
--- a/apps/hash-ai-worker-ts/package.json
+++ b/apps/hash-ai-worker-ts/package.json
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@anthropic-ai/bedrock-sdk": "0.26.4",
-    "@anthropic-ai/sdk": "0.79.0",
+    "@anthropic-ai/sdk": "0.78.0",
     "@apps/hash-graph": "workspace:*",
     "@blockprotocol/graph": "workspace:*",
     "@blockprotocol/type-system": "workspace:*",

diff --git a/libs/@local/repo-chores/node/package.json b/libs/@local/repo-chores/node/package.json
--- a/libs/@local/repo-chores/node/package.json
+++ b/libs/@local/repo-chores/node/package.json
@@ -10,7 +10,7 @@
     "lint:tsc": "tsc --noEmit"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "0.79.0",
+    "@anthropic-ai/sdk": "0.78.0",
     "@blockprotocol/core": "0.1.4",
     "@linear/sdk": "61.0.0",
     "@local/hash-backend-utils": "workspace:*",

diff --git a/yarn.lock b/yarn.lock
--- a/yarn.lock
+++ b/yarn.lock
@@ -31,9 +31,9 @@
   languageName: node
   linkType: hard
 
-"@anthropic-ai/sdk@npm:0.79.0, @anthropic-ai/sdk@npm:>=0.50.3 <1":
-  version: 0.79.0
-  resolution: "@anthropic-ai/sdk@npm:0.79.0"
+"@anthropic-ai/sdk@npm:0.78.0, @anthropic-ai/sdk@npm:>=0.50.3 <1":
+  version: 0.78.0
+  resolution: "@anthropic-ai/sdk@npm:0.78.0"
   dependencies:
     json-schema-to-ts: "npm:^3.1.1"
   peerDependencies:
@@ -43,7 +43,7 @@
       optional: true
   bin:
     anthropic-ai-sdk: bin/cli
-  checksum: 10c0/dd68838935bed0b8478da75e6a7f18ecb20c85f0cc173db10ca425ae6aa0a60536ba7b5994819e889f3d48bf30534ca25ea572dc306cb311ce6647057caf1f2a
+  checksum: 10c0/a43c83047d0f6ac8d50938e8a07aee27b8891cf51011fcbdb07159996762f262734e4839df00e57f713e25c8c740424939e13c91e6b3f5b12879b9cde1d9c835
   languageName: node
   linkType: hard
 
@@ -337,7 +337,7 @@
   resolution: "@apps/hash-ai-worker-ts@workspace:apps/hash-ai-worker-ts"
   dependencies:
     "@anthropic-ai/bedrock-sdk": "npm:0.26.4"
-    "@anthropic-ai/sdk": "npm:0.79.0"
+    "@anthropic-ai/sdk": "npm:0.78.0"
     "@apps/hash-graph": "workspace:*"
     "@blockprotocol/graph": "workspace:*"
     "@blockprotocol/type-system": "workspace:*"
@@ -9588,7 +9588,7 @@
   version: 0.0.0-use.local
   resolution: "@local/repo-chores@workspace:libs/@local/repo-chores/node"
   dependencies:
-    "@anthropic-ai/sdk": "npm:0.79.0"
+    "@anthropic-ai/sdk": "npm:0.78.0"
     "@blockprotocol/core": "npm:0.1.4"
     "@linear/sdk": "npm:61.0.0"
     "@local/eslint": "workspace:*"

_{This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

[hash-worker]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

error This project's package.json defines "packageManager": "yarn@4.12.0". However the current global version of Yarn is 1.22.22.

Presence of the "packageManager" field indicates that the project is meant to be used with Corepack, a tool included by default with all official Node.js distributions starting from 16.9 and 14.19.
Corepack must currently be enabled by running corepack enable in your terminal. For more information, check out https://yarnpkg.com/corepack.

[github-actions]

Dependency Review

The following issues were found:

• ❌ 2 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

apps/hash-ai-worker-ts/package.json

Name	Version	Vulnerability	Severity	Patched Version
@anthropic-ai/sdk	0.91.0	Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool	moderate	0.91.1

libs/@local/repo-chores/node/package.json

Name	Version	Vulnerability	Severity	Patched Version
@anthropic-ai/sdk	0.91.0	Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool	moderate	0.91.1

OpenSSF Scorecard

Package	Version	Score	Details
npm/@anthropic-ai/sdk	0.91.0	Unknown	Unknown
npm/@anthropic-ai/bedrock-sdk	0.29.0	Unknown	Unknown
npm/@anthropic-ai/sdk	0.91.0	Unknown	Unknown

Scanned Files

• apps/hash-ai-worker-ts/package.json
• libs/@local/repo-chores/node/package.json