chore(deps): bump the npm-production group with 3 updates

[dependabot]

Bumps the npm-production group with 3 updates: @anthropic-ai/claude-agent-sdk, dotenv and react.

Updates @anthropic-ai/claude-agent-sdk from 0.2.118 to 0.2.119

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.2.119

What's changed

• excludeDynamicSections now keeps static auto-memory instructions in the cacheable system-prompt block; only the per-user memory directory path and per-machine environment values are relocated to the first user message
• Long-running SDK sessions now reconnect claude.ai-proxied MCP servers after a transport-stream abort
• SessionStore.append() failures are now retried up to 3 times with short backoff before the batch is dropped and mirror_error is emitted

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.119
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.119
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.119
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.119

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.2.119

• Added forwardSubagentText option to stream subagent text deltas to SDK consumers
• excludeDynamicSections now keeps static auto-memory instructions in the cacheable system-prompt block; only the per-user memory directory path and per-machine environment values are relocated to the first user message
• Long-running SDK sessions now reconnect claude.ai-proxied MCP servers after a transport-stream abort
• SessionStore.append() failures are now retried up to 3 times with short backoff before the batch is dropped and mirror_error is emitted

Commits

• 76d1dec chore: Update CHANGELOG.md
• See full diff in compare view

Updates dotenv from 17.3.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

• Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

• Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

• Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

• Tighten up logs: ◇ injecting env (14) from .env (#1003)

Commits

• f116f70 17.4.2
• 3a81612 fix visual order of faq
• 13f55a8 Merge branch 'skill'
• 4bbbf73 reorganize faq
• c3da64b Merge pull request #1009 from motdotla/skill
• 6f743b1 update source
• fc2c624 update skill
• 972315b Tighten up skill
• 2795fce reorganize faq
• d5495d4 adjust skill
• Additional commits viewable in compare view

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

Commits

• 23f4f9f 19.2.5
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions