chore(deps): bump the npm group with 2 updates

[dependabot]

Bumps the npm group with 2 updates: @anthropic-ai/sdk and @antithesishq/bombadil.

Updates @anthropic-ai/sdk from 0.98.0 to 0.104.1

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.104.1

0.104.1 (2026-06-09)

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

Bug Fixes

• api: add frontier_llm refusal category (465e686)

sdk: v0.104.0

0.104.0 (2026-06-09)

Full Changelog: sdk-v0.103.0...sdk-v0.104.0

Features

• api: add support for Managed Agents deployments and environment variable credentials (d01e38b)

sdk: v0.103.0

0.103.0 (2026-06-09)

Full Changelog: sdk-v0.102.0...sdk-v0.103.0

Features

• api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (cc337f7)
• client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (cc337f7)
• middleware: add ctx.logger (#55) (edd1454)

Bug Fixes

• client: 3p middleware ordering (#53) (2a4c339)

sdk: v0.102.0

0.102.0 (2026-06-06)

Full Changelog: sdk-v0.101.0...sdk-v0.102.0

Features

• api: small updates to Managed Agents types (8ba4f92)

Bug Fixes

• client: run middleware before request signing (#45) (95f1a4a)

sdk: v0.101.0

0.101.0 (2026-06-05)

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.104.1 (2026-06-09)

Full Changelog: sdk-v0.104.0...sdk-v0.104.1

Bug Fixes

• api: add frontier_llm refusal category (465e686)

0.104.0 (2026-06-09)

Full Changelog: sdk-v0.103.0...sdk-v0.104.0

Features

• api: add support for Managed Agents deployments and environment variable credentials (d01e38b)

0.103.0 (2026-06-09)

Full Changelog: sdk-v0.102.0...sdk-v0.103.0

Features

• api: add support for claude-mythos-5 and claude-fable-5, with support for server-side fallbacks on refusal (cc337f7)
• client: adds client-side fallbacks middleware for API providers that do not support server-side fallbacks (cc337f7)
• middleware: add ctx.logger (#55) (edd1454)

Bug Fixes

• client: 3p middleware ordering (#53) (2a4c339)

0.102.0 (2026-06-06)

Full Changelog: sdk-v0.101.0...sdk-v0.102.0

Features

• api: small updates to Managed Agents types (8ba4f92)

Bug Fixes

• client: run middleware before request signing (#45) (95f1a4a)

0.101.0 (2026-06-05)

Full Changelog: sdk-v0.100.1...sdk-v0.101.0

Features

... (truncated)

Commits

• 9a0442d chore: release main
• 1ccd401 fix(api): add frontier_llm refusal category
• 8be0232 chore: release main
• 813af32 feat(api): add support for Managed Agents deployments and environment variabl...
• 589eed1 chore: release main
• a785874 feat(api): add support for claude-mythos-5 and claude-fable-5, with support f...
• 6322a4f fix(client): 3p middleware ordering (#53)
• c2e94fc feat(middleware): add ctx.logger (#55)
• f7dfb97 chore: release main
• a3f3c97 feat(api): small updates to Managed Agents types
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​anthropic-ai/sdk since your current version.

Updates @antithesishq/bombadil from 0.3.2 to 0.5.0

Release notes

Sourced from @​antithesishq/bombadil's releases.

v0.5.0

Major updates:

• Skip disabled controls in default clicks generator (#175)
• Add new experimental terminal fuzzer (#162, #164, #179, #180)
• Add test case reproduction as an option to test and test-external (#177)
• Improve test performance greatly by using quiescence timers instead of fixed timeouts (#176)
• Auto-accept dialogs (#166)
• Add --header option to pass extra request headers (#165)

Breaking changes:

• Remove .at() and time cell (#167)

Bug fixes:

• Begin browser state machine in navigating (#178)
• Use mask for edge coverage hashing (#170)
• Shutdown the browser before awaiting state machine done (#157)

Internals:

• Extract bombadil-ltl crate (#172)
• Remove esbuild (#169)
• Centralize all versions into root Cargo.toml (#168)
• Add spec and CI testing for Inspect UI (#158)
• Bump oxc deps (#156)

v0.4.5

Major updates:

• Release npm package with executables (#154)
• Add wait-once generator to defaults (#151)
• Make CLI exit codes consistent (#150)
• Widen default granted permissions for Chromium 145 (#149)

Bug fixes:

• Explicitly close + drop chrome on terminate() (#148)

Internals:

• Bump dependencies (#153)

v0.4.4

• Automate release procedure with script (#145)
• Grant permissions (e.g. local network access) to Chrome from CLI (#143, #144)

... (truncated)

Changelog

Sourced from @​antithesishq/bombadil's changelog.

0.5.0

Major updates:

• Skip disabled controls in default clicks generator (#175)
• Add new experimental terminal fuzzer (#162, #164, #179, #180)
• Add test case reproduction as an option to test and test-external (#177)
• Improve test performance greatly by using quiescence timers instead of fixed timeouts (#176)
• Auto-accept dialogs (#166)
• Add --header option to pass extra request headers (#165)

Breaking changes:

• Remove .at() and time cell (#167)

Bug fixes:

• Begin browser state machine in navigating (#178)
• Use mask for edge coverage hashing (#170)
• Shutdown the browser before awaiting state machine done (#157)

Internals:

• Extract bombadil-ltl crate (#172)
• Remove esbuild (#169)
• Centralize all versions into root Cargo.toml (#168)
• Add spec and CI testing for Inspect UI (#158)
• Bump oxc deps (#156)

0.4.5

Major updates:

• Release npm package with executables (#154)
• Add wait-once generator to defaults (#151)
• Make CLI exit codes consistent (#150)
• Widen default granted permissions for Chromium 145 (#149)

Bug fixes:

• Explicitly close + drop chrome on terminate() (#148)

Internals:

• Bump dependencies (#153)

0.4.4

• Automate release procedure with script (#145)
• Grant permissions (e.g. local network access) to Chrome from CLI (#143, #144)

... (truncated)

Commits

• c2af18c release v0.5.0 (#181)
• 3b0a020 Manual update for --reproduce and other flags (#180)
• f023106 Skip disabled controls in default clicks generator (#175)
• 0e77471 Move bombadil-terminal to terminal subcommand (#179)
• 0b38c97 Add test case reproduction (#177)
• 48d89e7 begin browser state machine in navigating (#178)
• 63540ae Quiescence timers instead of fixed timeouts (#176)
• 6b27ff8 Extract ltl crate (#172)
• 9b6f3cb use mask for edge coverage hashing (#170)
• 76bddf2 Remove esbuild (#169)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pewdiepie-archdaemon]

Reviewed the npm dependency group. git diff --check origin/dev...HEAD is clean, npm ci completed successfully with 0 vulnerabilities, @anthropic-ai/sdk imports under Node, and the updated Bombadil package exposes a working CLI (./node_modules/.bin/bombadil --help).