chore(deps): update anthropic requirement from >=0.120.2 to >=1.7.0

[dependabot]

Updates the requirements on anthropic to permit the latest version.

Release notes

Sourced from anthropic's releases.

v1.7.0

1.7.0 (2026-09-18)

Full Changelog: v1.6.0...v1.7.0

Features

• api: add group with display_name to rate limits, deprecate group_type (28f0a83)
• tools: add compact_before_next_turn() to the tool runner (#641) (8b23fb3)

Bug Fixes

• bedrock: raise an API error for eventstream exception and error frames (#769) (8ec9cc9)
• client: accept X | Y union types when parsing responses (b366fa5)
• client: don't raise TypeError for X | Y fields with unknown data (30ebd69)
• client: join multiple anthropic-beta values with a comma and no space (#781) (1680324)
• tools: tidy compact_before_next_turn() state and failure handling (#804) (d3a9fc8)

Chores

• deps: require pydantic 1.10 or later (91931e1)
• docs: add descriptions for enum values and path parameters (99184dc)
• docs: clarify the compaction tool_changes and tool change descriptions (eacc0ff)
• internal: add more unnecessary cast comments (9e6ce27)
• internal: pass strict= to zip() in the MCP tool helpers (13cfe64)
• internal: remove an unused noqa comment from the model tests (2c18298)
• internal: set ruff's target version to Python 3.10 (2bdfd41)

Changelog

Sourced from anthropic's changelog.

1.7.0 (2026-09-18)

Full Changelog: v1.6.0...v1.7.0

Features

• api: add group with display_name to rate limits, deprecate group_type (28f0a83)
• tools: add compact_before_next_turn() to the tool runner (#641) (8b23fb3)

Bug Fixes

• bedrock: raise an API error for eventstream exception and error frames (#769) (8ec9cc9)
• client: accept X | Y union types when parsing responses (b366fa5)
• client: don't raise TypeError for X | Y fields with unknown data (30ebd69)
• client: join multiple anthropic-beta values with a comma and no space (#781) (1680324)
• tools: tidy compact_before_next_turn() state and failure handling (#804) (d3a9fc8)

Chores

• deps: require pydantic 1.10 or later (91931e1)
• docs: add descriptions for enum values and path parameters (99184dc)
• docs: clarify the compaction tool_changes and tool change descriptions (eacc0ff)
• internal: add more unnecessary cast comments (9e6ce27)
• internal: pass strict= to zip() in the MCP tool helpers (13cfe64)
• internal: remove an unused noqa comment from the model tests (2c18298)
• internal: set ruff's target version to Python 3.10 (2bdfd41)

1.6.0 (2026-09-15)

Full Changelog: v1.5.0...v1.6.0

Features

• api: add auto mode tool permissions for Managed Agents (909d92f)
• api: add compaction parameter and signed compaction blocks (beta) (8689179)
• api: add enum types for workspace data-residency geo fields (3dc6dbf)
• api: add thinking_mismatch_allowed entries to input_transformations (beta) (14d1792)
• api: add url_sources to the web fetch tool (4ba7115)
• api: add workspace_id parameter to user profiles methods (1c359b2)
• client: support async credential token providers (95e93f7)

Bug Fixes

• api: mark usage iteration model as nullable (520d000)
• api: use one input transformation type for message and delta event (ae86d7d)
• client: honor Retry-After values above 60 seconds (2d03ba2)
• client: ignore invalid Retry-After values and validate maxRetries (909d92f)

... (truncated)

Commits

• 0af0190 Merge pull request #1939 from anthropics/release-please--branches--main--chan...
• a096a48 release: 1.7.0
• 28f0a83 feat(api): add group with display_name to rate limits, deprecate group_type
• 5b4202a codegen metadata
• 182a764 codegen metadata
• 99184dc chore(docs): add descriptions for enum values and path parameters
• 91931e1 chore(deps): require pydantic 1.10 or later
• d3a9fc8 fix(tools): tidy compact_before_next_turn() state and failure handling (#804)
• 9d2d579 codegen metadata
• e7dd41e codegen metadata
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
repopilot	Error		Sep 25, 2026 1:25am UTC

[ecc-tools]

ECC Tools / Security Evidence

Commit: 9794fbe9c51f71d9278e0c392da8b67b3ac21af0

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 1 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Risk Taxonomy

Commit: 9794fbe9c51f71d9278e0c392da8b67b3ac21af0

PR taxonomy clear (success)

Scanned 1 changed file(s). No taxonomy bucket signals were detected.

Scanned 1 changed file(s).

No PR taxonomy bucket signals were detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Reference Set Readiness

Commit: 9794fbe9c51f71d9278e0c392da8b67b3ac21af0

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 1 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 8693917d-2342-4ec8-ae07-a0bcae4e582e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ecc-tools]

ECC Tools / Hosted Promotion Readiness

Commit: 9794fbe9c51f71d9278e0c392da8b67b3ac21af0

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 1 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[dependabot]

Superseded by #368.