From ee041db2ce3990c321294c5a96b595b89914b389 Mon Sep 17 00:00:00 2001 From: Antawari Date: Wed, 21 Oct 2026 12:25:40 -0600 Subject: [PATCH 1/2] Raise the claude-agent-sdk floor past the resume injection advisory claude-agent-sdk releases before 0.2.121 are affected by argument injection through the resume option (GHSA-h4mw-j7qp-8mwm, CRITICAL). The old floor of 0.1 let a fresh install resolve one, so raise it and record the change under Security in the changelog. The changelog entry shifts the line anchors of the persona-name allowlist by seven; re-anchor them with the expected text unchanged, as earlier changelog additions did. Co-Authored-By: Claude Opus 5.5 --- CHANGELOG.md | 7 +++++++ pyproject.toml | 2 +- tests/unit/test_no_persona_names_in_public_docs.py | 11 +++++++---- 3 files changed, 15 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 2f3e875..a96efc8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,13 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## [Unreleased] +### Security + +- The minimum `claude-agent-sdk` is raised to 0.2.121. Earlier versions + are affected by an argument-injection advisory in the `resume` option + (GHSA-h4mw-j7qp-8mwm, CRITICAL). Installs that resolved an older SDK + now resolve a patched one. + ### Fixed - A pipeline stage naming a gate the engine does not hold in its diff --git a/pyproject.toml b/pyproject.toml index 61aebb1..26dac4b 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -24,7 +24,7 @@ classifiers = [ "Typing :: Typed", ] dependencies = [ - "claude-agent-sdk>=0.1", + "claude-agent-sdk>=0.2.121", "pydantic>=2.0", "pydantic-settings>=2.0", "typer>=0.15", diff --git a/tests/unit/test_no_persona_names_in_public_docs.py b/tests/unit/test_no_persona_names_in_public_docs.py index 699bb9c..dda0587 100644 --- a/tests/unit/test_no_persona_names_in_public_docs.py +++ b/tests/unit/test_no_persona_names_in_public_docs.py @@ -192,24 +192,27 @@ # Doc-truth pass: shifted 615/617/618/635 -> 662/664/665/682 when # the CHANGELOG entries owed by three merged PRs were written # under [Unreleased]. Anchors only; expected text is unchanged. + # Security floor entry: shifted 677/679/680/697 -> 684/686/687/704 + # when a Security section was added under [Unreleased]. Anchors + # only; expected text is unchanged. ( "CHANGELOG.md", - 677, + 684, "predecessor persona (Passelewe, the Chamberlain) was retired; the", ), ( "CHANGELOG.md", - 679, + 686, "`docs/_lore/passelewe.md`. The persona builtins directory", ), ( "CHANGELOG.md", - 680, + 687, "`src/bonfire/persona/builtins/passelewe/` was deleted; a new", ), ( "CHANGELOG.md", - 697, + 704, 'to ban `"passelewe"` in src/ (the predecessor persona is gone, so', ), # --- CLAUDE.md — constellation-pointer breadcrumbs -------------- From 0f6f1ade153ec3ba68d314525579057721581f97 Mon Sep 17 00:00:00 2001 From: Antawari Date: Wed, 21 Oct 2026 12:33:51 -0600 Subject: [PATCH 2/2] Keep the test package inside its frozen line budget The anchor shift added a three-line breadcrumb comment, which put the tests/unit package three lines over its shrink-only budget. Drop the comment; the anchors stay at 684/686/687/704 and the shift is recorded in the previous commit message. Co-Authored-By: Claude Opus 5.5 --- tests/unit/test_no_persona_names_in_public_docs.py | 3 --- 1 file changed, 3 deletions(-) diff --git a/tests/unit/test_no_persona_names_in_public_docs.py b/tests/unit/test_no_persona_names_in_public_docs.py index dda0587..fbab6e6 100644 --- a/tests/unit/test_no_persona_names_in_public_docs.py +++ b/tests/unit/test_no_persona_names_in_public_docs.py @@ -192,9 +192,6 @@ # Doc-truth pass: shifted 615/617/618/635 -> 662/664/665/682 when # the CHANGELOG entries owed by three merged PRs were written # under [Unreleased]. Anchors only; expected text is unchanged. - # Security floor entry: shifted 677/679/680/697 -> 684/686/687/704 - # when a Security section was added under [Unreleased]. Anchors - # only; expected text is unchanged. ( "CHANGELOG.md", 684,