chore(deps): update all dependencies

[gw0-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Update
@anthropic-ai/claude-code	2.1.247 → 2.1.250			patch
sickn33/agentic-awesome-skills	16.2.0 → 16.3.0			minor

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.250

Compare Source

• Bug fixes and reliability improvements

v2.1.248

Compare Source

• Added --restricted (or CLAUDE_CODE_RESTRICTED=1): removes the built-in tools that run commands or code and WebFetch (unless named in --tools), keeps file tools inside the working directory, refuses bypassPermissions, and ignores user, project and local settings files
• Added experimental.cacheTtl ("5m" or "1h") to agent frontmatter: a per-agent prompt cache TTL used when no subagent TTL setting is configured
• Added claude self-hosted-runner --client-label <label> (or SELF_HOSTED_RUNNER_CLIENT_LABEL) to override the label the runner registers with (default: hostname)
• Added server-managed settings diagnostics: a startup warning when the settings fail to load, and a /doctor and /status line explaining a load failure or why they weren't fetched (Bedrock/Vertex/third-party provider, custom ANTHROPIC_BASE_URL)
• Added a warning in /web-setup when the GitHub CLI token lacks the workflow scope, since pushes to very large repositories can be rejected without it
• Added /usage-credits for Enterprise organizations billed through AWS Marketplace, self-serve Enterprise, and Enterprise trials, so members can request a higher usage limit from their admin
• Added cross-session messaging (SendMessage / ListAgents) between sessions on the same machine on Bedrock, Vertex, and Foundry, and when telemetry is disabled
• Fixed a prompt-cache miss (and lost extended-thinking context) roughly once an hour in long sessions, caused by tool definitions being re-rendered after an OAuth token refresh
• Fixed the ScheduleWakeup tool definition changing between a session and its --resume when the account had entered usage overage, causing a full prompt-cache miss on the resumed session's first turn
• Fixed Claude Desktop and Cowork sessions disappearing after 30 days: the transcript cleanup now keeps desktop-written sessions while they are in the app (unless org policy manages retention); the new desktopSessionCleanupPeriodDays setting caps the exemption
• Fixed being sent to the login screen when another Claude Code process held the token refresh lock while the session token had expired; the request now fails with a retryable error instead
• Windows: Fixed the claude agents list not responding to the keyboard after detaching from a session, or when launched in a terminal tab left in win32-input-mode
• Fixed the recommended Console sign-in in /login failing with an OAuth error before showing a sign-in URL on machines where it can't be used (for example when ANTHROPIC_API_KEY or an API key helper is set); it now falls back to the API-key sign-in
• Fixed model names in /model and fast-mode switch notices to render as code, so suffixes like [1m] display literally instead of as a link
• Fixed claude agents skipping the workspace trust prompt when the CI environment variable is set
• Fixed claude agents crashing on launch when the PR-status cache held a malformed entry
• Fixed agent view resurrecting a weeks-old background session after the machine was off: such a session now shows as stopped at its real end, and opening it asks before resuming its saved conversation
• Fixed agent view sometimes opening an older conversation, and dropping the typed prompt, when starting a new session
• Fixed claude agents: opening a stopped session that you already resumed in another terminal no longer starts a second process on that conversation; the row now says it is open in a terminal
• Fixed claude agents and claude rm refusing to delete a session ("has commits that are not pushed anywhere") when its worktree branch was already merged into your checked-out default branch (e.g. local main) but not yet pushed
• Fixed background sessions waiting silently when a PermissionRequest or PreToolUse hook prints an invalid answer: the claude agents row now names the hook and the schema error
• Fixed hooks silently treating a stdout {…} object that isn't valid JSON as plain text; it's now reported as a hook error with the parse message
• Fixed /mcp listing a project .mcp.json entry that declares the claude.ai connector type under the trusted "claude.ai" heading; it now appears under its real scope
• Fixed MCP servers whose headersHelper supplies the Authorization header falling into OAuth discovery on a 401 instead of re-running the helper and retrying the call as documented
• Fixed /login to a Claude apps gateway hanging when the managed-settings security approval dialog was required
• Fixed gateway model discovery (CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY) never running when apiKeyHelper is the only credential
• Fixed claude logs leaving mouse tracking, bracketed paste and the alternate screen switched on in the terminal it was run from
• Fixed the trust dialog's list of repo permission rules showing a garbled character when a long rule was cut off in the middle of an emoji
• Fixed the permission mode indicator staying hidden behind the "Press Ctrl-C again to exit" hint when you press shift+tab right after ctrl+c
• Fixed /ultrareview and locally seeded cloud sessions uploading uncommitted edits to prod.env-style and *.tfvars files, or to editor swap, temp, and backup copies of credential files (e.g. key.pem.tmp, id_rsa.swo); they now stay on your machine
• Fixed Remote Control sessions occasionally never showing a permission prompt or the latest messages on the connected device after the CLI silently reconnected
• Fixed cloud sessions occasionally failing at startup when the container's session credentials were not yet readable
• Fixed claude remote-control rejecting its own flags (e.g. --spawn, --name) when a global flag or a wrapper-injected option precedes the subcommand
• Fixed startup warnings (e.g. "N MCP servers need authentication") rendering one column right of the rest of the transcript
• Fixed a backgrounded worktree session losing its checkout: the background session now holds the worktree's lock while it runs, so cleanup and git worktree remove leave it alone
• Fixed @​-mentions of other sessions not matching names typed with non-Latin characters (for example Korean entered through an IME)
• Fixed an invalid crossSessionInbound value being silently ignored: it now warns and holds cross-session messages (user settings) or refuses them (managed settings) until fixed
• Fixed rate-limit, usage, and fast-mode messages telling you to run /usage-credits when that command isn't available for your organization (e.g. hidden with DISABLE_EXTRA_USAGE_COMMAND)
• [VSCode] Fixed a chat tab getting stuck on "No conversation found" when its session was never saved; it now starts a new conversation instead
• Improved the Workflow tool's prompt footprint: its description is now about 1k tokens instead of 5.7k, with the script-writing reference moved into a bundled workflow-authoring skill
• Improved the prompt-footer PR badge to check GitHub less often while the pull request is unchanged; a push or a gh pr command still refreshes it right away
• Improved managed settings: client-side timeout, MCP startup-mode, and stream-watchdog env vars no longer trigger the settings-approval prompt
• Improved /ultrareview <PR#> to check before launch that the GitHub account connected to your Claude account can access the repository, and to explain how to fix it, instead of failing after the cloud session starts
• Improved cross-session messaging: falls back to a private per-user /tmp directory when the default one can't be used, and the notice and /status name the directory to fix
• Changed shift+enter in the agent view dispatch input to insert a newline (matching the prompt); ctrl+enter now dispatches and attaches
• Changed /loop: self-paced dynamic mode and the no-prompt autonomous default are now always available, including on Bedrock/Vertex/Foundry
• Changed Anthropic telemetry export failures to log at debug level as [Anthropic telemetry] instead of [3P telemetry] OTEL diag error, so they are not mistaken for your OTel collector failing
• Changed cross-session messaging in Linux user namespaces: root-equivalent trust for unmapped owners is limited to canonical system directories
• Changed SendMessage from a subagent to another session: the result now notes that any reply is delivered to the parent session's conversation, not to the subagent

sickn33/agentic-awesome-skills (sickn33/agentic-awesome-skills)

v16.3.0: "Delegation Workflows and Reliable Operations"

Compare Source

[16.3.0] - 2026-08-28 - "Delegation Workflows and Reliable Operations"

Added 24 reviewed skills for multi-agent delegation, pull-request review,
scientific reasoning, model fine-tuning, MCP operation, and graceful service
shutdown. The published catalog contains 2,098 skills.

This release helps Claude Code, Cursor, Codex CLI, Gemini CLI, Antigravity, and
related AI coding assistants delegate bounded implementation work, review and
monitor pull requests, challenge scientific claims, fine-tune models on limited
hardware, operate SandBase safely, and shut down production services without
dropping in-flight work.

Start here:

• Install: npx agentic-awesome-skills
• delegate-setup for configuring the external
  delegation runtime before selecting an implementer relay.
• babysit-pr and
  debate-review for iterative review and
  two-perspective code-review workflows.
• graceful-shutdown for bounded draining,
  readiness transitions, and shutdown deadlines.
• Choose your tool
• Bundles

Added

• Added delegate-setup and 17 docs-only implementer
  relays for Agy, Aider, Claude, Cline, Codex, CommandCode, Copilot, Cursor,
  Grok, Kimi, OMP, OpenCode, Pi, Qoder, Vibe, Warp, and ZCode. Each relay ships
  its complete dispatch, queue, review, and brief-writing references while
  keeping review and landing with the orchestrator
  (#​1283).
• Added babysit-pr for bounded review-round monitoring
  and debate-review for structured two-model review,
  including their prompt, schema, and comment-format assets
  (#​1282).
• Added falsify for explicit hypotheses, adversarial
  checks, evidence grading, calibrated conclusions, and a durable thinking
  ledger (#​1281).
• Added sandbase-mcp with immutable release pinning,
  checksum and archive verification, and explicit credential, privacy, cost,
  and mutation approval gates
  (#​1279).
• Added unsloth-finetuning for single-GPU VRAM
  planning, LoRA and QLoRA, GRPO and DPO, template and loss-mask correctness,
  and GGUF or merged-model export
  (#​1278).
• Added graceful-shutdown for SIGTERM and SIGINT
  handling, connection draining, probe transitions, shutdown deadlines, and
  Kubernetes-aware Node.js, Python, and worker patterns
  (#​1276).

Changed

• Upgraded the catalog web app from @supabase/supabase-js 2.112.0 to 2.112.2,
  including fixes for duplicate Realtime bindings, stale sign-out payloads,
  preserved authentication 5xx messages, and token refresh behavior
  (#​1273).
• Regenerated the canonical catalog, offline AAS Core data, tracked web assets,
  marketplaces, editorial bundles, compatibility reports, and Codex/Claude
  plugin distributions for 2,098 skills.

Fixed

• Removed retired UIZZE score-endpoint guidance while keeping the skill's
  source-only scoring workflow intact
  (#​1274).
• Restored every companion reference, prompt, schema, and template required by
  the imported review, delegation, and scientific-reasoning skills instead of
  publishing incomplete entrypoints.
• Replaced 18 truncated delegation descriptions with complete trigger and
  operating-boundary summaries.

Security

• Kept the delegation and review integrations docs-only: their external
  runtimes are not bundled, relays never land changes, and unsandboxed,
  all-tools, or danger-full-access execution requires separate human
  authorization.
• Pinned SandBase to the reviewed v0.1.17 release and SHA-256
  1ad535b2899ca460b57b3c268aef278fee28fd28e649a89b92951514fd71fffa,
  with archive inspection before installation and two approval boundaries
  before credentialed or mutating work.
• Kept Unsloth training and export guidance bounded by hardware checks,
  explicit dataset and template validation, checkpointing, and output review.
• Kept graceful shutdown bounded by deadlines and forced-exit fallbacks so
  draining cannot hang a deployment indefinitely.

Who should care

• Teams orchestrating multiple coding agents that need explicit task briefs,
  bounded permissions, polling, independent review, and controlled landing.
• Maintainers who need repeatable pull-request review rounds without confusing
  an external runtime with bundled repository functionality.
• Researchers and ML practitioners who need falsification discipline or
  practical single-GPU fine-tuning guidance.
• Platform engineers operating MCP services, Kubernetes workloads, workers,
  and long-lived production connections.

Validation

• Passed repository and reference validation, documentation-security checks,
  warning-budget enforcement, the complete 113-group repository test suite,
  176 web-app tests, the production web build, npm audits, plugin compatibility,
  bundle and marketplace checks, and protected canonical synchronization.
• Reviewed every changed canonical skill subtree and bundled asset for
  semantics, safety, provenance, declared risk, limitations, permission
  escalation, and review or landing boundaries before protected merge.
• Verified final source and canonical CI plus CodeQL on the exact protected
  main commit with no open pull requests, issues, or generated-state drift.

Limitations

• The delegation and review skills document external runtimes; installing AAS
  alone does not install or authenticate those tools.
• Delegation can distribute implementation work, but it does not replace
  orchestrator review, test evidence, repository policy, or human approval for
  elevated execution.
• Falsification structures reasoning but cannot guarantee scientific truth or
  replace domain expertise, replication, or higher-quality evidence.
• Unsloth memory estimates and export paths remain model-, dataset-, hardware-,
  and version-dependent; validate against the current upstream project.
• SandBase operations may incur external service costs and expose supplied
  data to its service; review current upstream terms and privacy behavior.

Credits

• @​FrancoStino and the MIT-licensed
  amElnagdy/delegate-skills
  and amElnagdy/review-skills
  sources for the delegation and review collections proposed in
  #​1265 and
  #​1264.
• @​263311487-ux for falsify, proposed
  in #​1266.
• @​A-ryanVAT-S for
  unsloth-finetuning, proposed in
  #​1267.
• @​denial123789 for sandbase-mcp,
  proposed in #​1269.
• @​Prajeeth-12 for
  graceful-shutdown, proposed in
  #​1272.
• @​samuelbushi for the UIZZE documentation
  correction proposed in
  #​1271.
• Snyk for the Supabase dependency update in
  #​1273.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.