fix(deps): Update dependency anthropic to v0.87.0 [SECURITY]

[cloudquery-ci]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
anthropic	==0.7.8 → ==0.87.0
anthropic	0.86.0 → 0.87.0

---

Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool

CVE-2026-34450 / GHSA-q5f5-3gjm-7mfm

More information

Details

The local filesystem memory tool in the Anthropic Python SDK created memory files with mode 0o666, leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could modify memory files to influence subsequent model behavior. Both the synchronous and asynchronous memory tool implementations were affected.

Users on the affected versions are advised to update to the latest version.

Claude SDK for Python thanks lucasfutures on HackerOne for the report.

Severity

• CVSS Score: 4.8 / 10 (Medium)
• Vector String: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

References

• https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-q5f5-3gjm-7mfm
• https://nvd.nist.gov/vuln/detail/CVE-2026-34450
• https://github.com/anthropics/anthropic-sdk-python/commit/715030ceb4d6dd8d3546e999c680e29532bf1255
• https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0
• https://github.com/advisories/GHSA-q5f5-3gjm-7mfm

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape

CVE-2026-34452 / GHSA-w828-4qhx-vxx3

More information

Details

The async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then returned the unresolved path for subsequent file operations. A local attacker able to write to the memory directory could retarget a symlink between validation and use, causing reads or writes to escape the sandbox. The synchronous memory tool implementation was not affected.

Users on the affected versions are advised to update to the latest version.

Claude SDK for Python thanks hackerone.com/kasthelord for reporting this issue!

Severity

• CVSS Score: 5.8 / 10 (Medium)
• Vector String: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

References

• https://github.com/anthropics/anthropic-sdk-python/security/advisories/GHSA-w828-4qhx-vxx3
• https://nvd.nist.gov/vuln/detail/CVE-2026-34452
• https://github.com/anthropics/anthropic-sdk-python/commit/6599043eee6e86dce16953fcd1fd828052052be6
• https://github.com/anthropics/anthropic-sdk-python/releases/tag/v0.87.0
• https://github.com/advisories/GHSA-w828-4qhx-vxx3

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

anthropics/anthropic-sdk-python (anthropic)

v0.87.0

Compare Source

Full Changelog: v0.87.0...v0.88.0

Features

• api: add structured stop_details to message responses (fd82d6b)
• bedrock api key auth (#​1623) (a95a3fc)
• prepare aws package (#​1615) (6875fab)

Chores

• tests: bump steady to v0.20.2 (1bc4e9f)

v0.86.0

Compare Source

Full Changelog: v0.86.0...v0.87.0

Features

• client: add error type field to APIStatusError (#​1587) (dd563c0)
• internal: implement indices array format for query and form serialization (11a6244)

Bug Fixes

• honor api_exclude in async transform path (#​1612) (8172232), closes #​1610
• memory: return resolved path from async _validate_path (7b0add3)
• memory: use restrictive file mode for memory files (47ba5b8)
• sanitize endpoint path params (98f60e4)
• transform schema: support enums (#​1275) (5c088ab)

Chores

• ci: run builds on CI even if only spec metadata changed (194c050)
• ci: skip lint on metadata-only changes (03e2ab9)
• internal: update gitignore (94ede14)
• tests: bump steady to v0.19.4 (2d6d58f)
• tests: bump steady to v0.19.5 (8fb439a)
• tests: bump steady to v0.19.6 (76da5fd)
• tests: bump steady to v0.19.7 (bfa40e5)
• tests: bump steady to v0.20.1 (4fd9446)

v0.85.0

Compare Source

Full Changelog: v0.85.0...v0.86.0

Features

• add support for filesystem memory tools (#​1247) (235d218)
• api: manual updates (86dbe4a)
• api: manual updates (45d9cc0)

Bug Fixes

• AsyncAnthropic._make_status_error missing 529 and 413 cases (#​1244) (05220bc)
• deps: bump minimum typing-extensions version (09ab112)
• pydantic: do not pass by_alias unless set (b17480e)

Chores

• internal: tweak CI branches (3c0308c)

v0.84.0

Compare Source

Full Changelog: v0.84.0...v0.85.0

Features

• api: chore(config): clean up model enum list (#​31) (cce1a5b)
• api: GA thinking-display-setting (207340c)
• tests: update mock server (7dc86a4)

Bug Fixes

• client: add missing 413 and 529 error handlers to async client (#​1554) (9c2986f)
• tool runner: propagate container_id for programmatic tool calling (#​1462) (3ae7ff6)
• tools: use filtered messages list in async compaction (#​1124) (710d666)

Chores

• ci: bump uv version (09656ac)
• internal: codegen related update (c9e9fc2)
• internal: codegen related update (77f77d1)
• tests: unskip tests that are now supported in steady (827330b)

v0.83.0

Compare Source

Full Changelog: v0.83.0...v0.84.0

Features

• api: change array_format to brackets (925d2ad)
• api: remove publishing section from cli target (7bc7ceb)
• helpers: add conversion helpers for MCP tools, prompts, and resources (#​1383) (9489751)

Chores

• add missing raw jsonl results method (1009d4a)
• internal: add request options to SSE classes (4f4bc8e)
• internal: make test_proxy_environment_variables more resilient (f7056e0)
• internal: make test_proxy_environment_variables more resilient to env (143efcc)
• internal: simplify http snapshots (#​1092) (4a4dc9f)
• internal: update jsonl tests (a8e6a6e)

Documentation

• rebrand to Claude SDK and streamline README (6b54405)

v0.82.0

Compare Source

Full Changelog: v0.82.0...v0.83.0

Features

• api: Add top-level cache control (automatic caching) (a940123)

Chores

• update mock server docs (34ef48c)

v0.81.0

Compare Source

Full Changelog: v0.81.0...v0.82.0

Features

• api: fix shared UserLocation and error code types (da3b931)

Bug Fixes

• add backward-compat aliases for removed nested UserLocation classes (#​1409) (56db1e3)

v0.80.0

Compare Source

Full Changelog: v0.80.0...v0.81.0

Features

• api: manual updates (0a385c2)

v0.79.0

Compare Source

Full Changelog: v0.79.0...v0.80.0

Features

• api: Releasing claude-sonnet-4-6 (d518d6e)

Bug Fixes

• api: fix spec errors (1413a76)
• remove speed from ga messages (#​1402) (f6ce67c)

Chores

• format all api.md files (28a0eb5)
• internal: bump dependencies (99f3014)
• internal: fix lint error on Python 3.14 (a90d71b)

Refactors

• vertex: remove redundant isinstance check in load_auth (#​1387) (6b7a7dc)

v0.78.0

Compare Source

Full Changelog: v0.78.0...v0.79.0

Features

• api: enabling fast-mode in claude-opus-4-6 (5953ba7)

Bug Fixes

• pass speed parameter through in sync beta count_tokens (1dd6119)

v0.77.1

Compare Source

Full Changelog: v0.77.1...v0.78.0

Features

• api: Release Claude Opus 4.6, adaptive thinking, and other features (3ef1529)

v0.77.0

Compare Source

Full Changelog: v0.77.0...v0.77.1

Bug Fixes

• structured outputs: send structured output beta header when format is omitted (#​1158) (258494e)

Chores

• remove claude-code-review workflow (#​1338) (aec4512)

v0.76.0

Compare Source

Full Changelog: v0.76.0...v0.77.0

Features

• api: add support for Structured Outputs in the Messages API (ad56677)
• api: migrate sending message format in output_config rather than output_format (af405e4)
• client: add custom JSON encoder for extended type support (7780e90)
• use output_config for structured outputs (82d669d)

Bug Fixes

• client: run formatter (2e4ff86)
• remove class causing breaking change (#​1333) (81ee953)
• structured outputs: avoid including beta header if output_format is missing (#​1121) (062077e)

Chores

• ci: upgrade actions/github-script (34df616)
• internal: update actions/checkout version (ea50de9)

v0.75.0

Compare Source

Full Changelog: v0.75.0...v0.76.0

Features

• allow raw JSON schema to be passed to messages.stream() (955c61d)
• client: add support for binary request streaming (5302f27)
• tool runner: add support for server-side tools (#​1086) (1521316)

Bug Fixes

• client: loosen auth header validation (5a0b89b)
• ensure streams are always closed (388bd0c)
• types: allow pyright to infer TypedDict types within SequenceNotStr (ede3242)
• use async_to_httpx_files in patch method (718fa8e)

Chores

• add missing docstrings (d306605)
• bump required uv version (90634f3)
• ci: Add Claude Code GitHub Workflow (#​1293) (83d1c4a)
• deps: mypy 1.18.1 has a regression, pin to 1.17 (21c6374)
• docs: use environment variables for authentication in code snippets (87aa378)
• fix docstring (51fca79)
• internal: add --fix argument to lint script (8914b7a)
• internal: add missing files argument to base client (6285abc)
• internal: avoid using unstable Python versions in tests (4547171)
• update lockfile (d7ae1fc)
• update uv.lock (746ac05)

v0.74.1

Compare Source

Full Changelog: v0.74.1...v0.75.0

Features

• api: adds support for Claude Opus 4.5, Effort, Advance Tool Use Features, Autocompaction, and Computer Use v5 (5c3e633)

Bug Fixes

• internal: small fixes (36c82f7)

Chores

• fix lint issues (4f1fd54)

v0.74.0

Compare Source

Full Changelog: v0.74.0...v0.74.1

Bug Fixes

• structured outputs: use correct beta header (e90d347)

Chores

• examples: update model references (e09461d)

v0.73.0

Compare Source

Full Changelog: v0.73.0...v0.74.0

Features

• add Foundry SDK (3ae9e45)

Bug Fixes

• examples/memory: properly add assistant_content to messages (#​1049) (9c7141b)
• use posix paths in file collection for cross-platform compatibility (d9c6f40), closes #​1051

Chores

• internal: remove unnecessary wrapper around external snapshots (19eceac)

Documentation

• explain snapshot update process (#​1040) (b61fd87)

v0.72.1

Compare Source

Full Changelog: v0.72.1...v0.73.0

Features

• api: add support for structured outputs beta (688da81)

v0.72.0

Compare Source

Full Changelog: v0.72.0...v0.72.1

Bug Fixes

• client: close streams without requiring full consumption (109b771)
• compat with Python 3.14 (bd2a137)
• compat: update signatures of model_dump and model_dump_json for Pydantic v1 (540f0f8)

Chores

• internal/tests: avoid race condition with implicit client cleanup (72767ce)
• internal: grammar fix (it's -> its) (9efe993)
• package: drop Python 3.8 support (e9af5d3)

v0.71.1

Compare Source

Full Changelog: v0.71.1...v0.72.0

Features

• api: add ability to clear thinking in context management (27c8f17)

v0.71.0

Compare Source

Full Changelog: v0.71.0...v0.71.1

Bug Fixes

• client: resolve non-functional default socket options (4606137)

Chores

• api: mark older sonnet models as deprecated (7906595)
• bump httpx-aiohttp version to 0.1.9 (5d27492)

v0.70.0

Compare Source

Full Changelog: v0.70.0...v0.71.0

Features

• api: adding support for agent skills (51a606f)

v0.69.0

Compare Source

Full Changelog: v0.69.0...v0.70.0

Features

• api: manual updates (39e62ac)

Chores

• client: add context-management-2025-06-27 beta header (36dd334)
• client: add model-context-window-exceeded-2025-08-26 beta header (2cbdb0f)
• internal: detect missing future annotations with ruff (b2a2b05)

v0.68.2

Compare Source

Full Changelog: v0.68.2...v0.69.0

Features

• api: adds support for Claude Sonnet 4.5 and context management features (f93eb12)

v0.68.1

Compare Source

Full Changelog: v0.68.1...v0.68.2

Bug Fixes

• do not set headers with default to omit (95b14ab)

v0.68.0

Compare Source

Full Changelog: v0.68.0...v0.68.1

Chores

• deps: move deprecated dev-dependencies in pyproject.toml to dev group (df16b88)
• do not install brew dependencies in ./scripts/bootstrap by default (a457673)
• rename tool runner helper header (a9ed3f9)
• types: change optional parameter type from NotGiven to Omit (9f0a11f)
• update more NotGiven usage sites (72ab661)

v0.67.0

Compare Source

Full Changelog: v0.67.0...v0.68.0

Features

• add tool running helpers (d9c9ce6)

Chores

• internal: fix tests (9858c79)
• internal: update pydantic dependency (f59c2f1)
• tests: simplify get_platform test (7596748)

v0.66.0

Compare Source

Full Changelog: v0.66.0...v0.67.0

Features

• api: adds support for web_fetch_20250910 tool (f85b6a1)
• improve future compat with pydantic v3 (39f28c5)

Bug Fixes

• more updates for future pydantic v3 compat (7967d15)
• types/beta: add response content block type to params (#​1030) (9febe38)

Chores

• internal: move mypy configurations to pyproject.toml file (c5347b6)
• update SDK settings (36e6870)

v0.65.0

Compare Source

Full Changelog: v0.65.0...v0.66.0

Features

• api: adds support for Documents in tool results (5309dad)

v0.64.0

Compare Source

Full Changelog: v0.64.0...v0.65.0

Features

• client: adds support for code-execution-2025-08-26 tool (fe92af0)
• types: replace List[str] with SequenceNotStr in params (f542b54)

Bug Fixes

• avoid newer type syntax (c6d1cf5)
• client: remove unused import (712c6d8)

Chores

• client: sync SequenceNotStr over to custom stream methods (dd16483)
• internal: add Sequence related utils (d523f29)
• internal: bump uv version (aab5bc6)
• internal: change ci workflow machines (5383431)
• internal: codegen related update (eb8b19f)
• internal: improve breaking change detection (6c8afa9)
• internal: refactor pydantic v1 test setup (cb5444b)
• internal: run tests in an isolated environment (9adb089)
• internal: update pyright exclude list (85961ef)
• update github action (1e6a135)

v0.63.0

Compare Source

Full Changelog: v0.63.0...v0.64.0

Features

• api: makes 1 hour TTL Cache Control generally available (35201ba)

Chores

• deprecate older claude-3-5 sonnet models (#​1116) (3e8e10d)

v0.62.0

Compare Source

Full Changelog: v0.62.0...v0.63.0

Features

• betas: add context-1m-2025-08-07 (57a80e7)

Chores

• internal: detect breaking changes when removing endpoints (5c62d7b)
• internal: update comment in script (9e9d69c)
• internal: update test skipping reason (b18a3d5)
• update @​stainless-api/prism-cli to v5.15.0 (55cb0a1)

v0.61.0

Compare Source

Full Changelog: v0.61.0...v0.62.0

Features

• api: search result content blocks (1ae15cd)

v0.60.0

Compare Source

Full Changelog: v0.60.0...v0.61.0

Features

• api: add claude-opus-4-1-20250805 (baae0ee)
• api: adds support for text_editor_20250728 tool (9ad8fe5)
• client: support file upload requests (a9bd98a)

Chores

• client: add TextEditor_20250429 tool (ec207c5)
• internal: codegen related update (4498057)
• internal: fix ruff target version (3cfa202)

v0.59.0

Compare Source

Full Changelog: v0.59.0...v0.60.0

Features

• update streaming error message to say 'required' not 'recommended' (57120c8)
• update streaming error message to say 'required' not 'recommended' (3b47368)

Bug Fixes

• vertex: add missing beta methods (#​1004) (f8e9cb4)

Chores

• project: add settings file for vscode (1c4a9b1)

v0.58.2

Compare Source

Full Changelog: v0.58.2...v0.59.0

Features

• api: removed older deprecated models (38998fd)

Bug Fixes

• parsing: ignore empty metadata (7099f32)
• parsing: parse extra field types (dbea8a4)

Chores

• internal: version bump (5defffa)

v0.58.1

Compare Source

Full Changelog: v0.58.1...v0.58.2

Chores

• internal: version bump (cd5d1ad)

v0.58.0

Compare Source

Full Changelog: v0.58.0...v0.58.1

Chores

• internal: version bump (31c3b38)

v0.57.1

Compare Source

Full Changelog: v0.57.1...v0.58.0

Features

• clean up environment call outs (4f64e9c)

Bug Fixes

• client: don't send Content-Type header on GET requests (727268f)
• parsing: correctly handle nested discriminated unions (44dd47e)

Chores

• internal: bump pinned h11 dep (9a947e1)
• internal: codegen related update (33f2b34)
• internal: version bump (5f0f5ad)
• package: mark python 3.13 as supported (703d557)
• readme: fix version rendering on pypi (dd956a6)

Documentation

• model in examples (89b6925)
• model in examples (1eccecb)

v0.57.0

Compare Source

Full Changelog: v0.57.0...v0.57.1

Chores

• api: update BetaCitationSearchResultLocation (e0735b4)
• internal: version bump (d368831)

v0.56.0

Compare Source

Full Changelog: v0.56.0...v0.57.0

Features

• api: add support for Search Result Content Blocks (4896178)

Bug Fixes

• improve timeout/network error message to be more helpful (347fb57)

Chores

• ci: change upload type (4dc4178)
• internal: version bump (363629c)
• stream: improve get_final_text() error message (#​979) (5ae0a33)

Documentation

• fix vertex id (f7392c7)
• fix vertex id (92fe132)
• update model in readme (1a4df78)
• update models and non-beta (a54e65c)
• update more models (9e3dd6a)

v0.55.0

Compare Source

Full Changelog: v0.55.0...v0.56.0

Features

• bedrock: automatically infer AWS Region (#​974) (f648e09)
• vertex: support global region endpoint (1fd1adf)

Bug Fixes

• ci: correct conditional (18e625a)
• ci: release-doctor — report correct token name ([c91f50d](https://redirect.github.com/anthropi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.