[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
anthropic	>=1.8,<2 → >=2.3,<3
websockets (changelog)	>=14.0,<16.0 → >=17.3,<17.4

---

Release Notes

anthropics/anthropic-sdk-python (anthropic)

v2.3.0

Compare Source

Features

• api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

• google-cloud: send user profiles requests to the organization endpoint

Chores

• client: stop sending query params hardcoded in endpoint paths
• docs: improve the descriptions of the code execution tool and its encrypted results
• docs: reword work queue, skill and external key descriptions
• docs: update descriptions of the per-user usage and cost reports
• internal: carry endpoint path query params to the request layer
• internal: check the repository by owner and public name in workflows
• internal: read the beta route qualifier instead of the beta=true query
• internal: remove preview build upload from CI
• internal: stop sending the beta query param from parse and stream

Documentation

• mcp: remove the stray await from the async tool_runner examples
• google-cloud: update the product name
• client: link the Bedrock and Vertex raw response docstrings to the SDK documentation
• update the README and the example request

v2.2.0

Compare Source

Features

• api: add support for message threads
• api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

• client: stop suggesting math.inf in the max_retries error message
• tools: leave the tool runner's history to the caller after append_messages(), and keep the current reply out of the set_messages_params() callback
• tools: keep running the tool runner's function tools when set_messages_params() gives tools as definitions, and stop running one it takes out of tools
• tools: give the set_messages_params() callback of a tool runner its tools as definitions again
• tools: keep a tool runner's betas, user_profile_id and workspace_id when set_messages_params() leaves them out

Chores

• deps: bump certifi in the dev lockfile
• docs: clarify plugin content scan and validation descriptions
• docs: clarify plugin served_version_pinned and updated_at
• docs: fix usage and cost report examples and ending_at docs
• docs: rate limit model lists vary by organization and workspace

v2.1.0

Compare Source

Features

• api: add enforcement status, actions and filter to user profiles

v2.0.0

Compare Source

⚠ BREAKING CHANGES

• api: add support for new API version 2026-10-21

Features

• api: add a workspace_id filter and the usage_tier scope type to list spend limits
• api: add support for new API version 2026-10-21

Documentation

• api: remove outdated system role note from messages description

v1.17.0

Compare Source

Features

• api: add org webhook endpoints and user profile enforcement events
• api: add RBAC Group owner-access error codes to the Admin API
• api: document the unsupported_charset error code for plugin uploads

Bug Fixes

• bedrock: keep a workspace ID set in default_headers on the Bedrock and Mantle clients
• google-cloud: keep workspace and user profile IDs set in default_headers

Chores

• ci: run the changelog check on a standard runner

v1.16.0

Compare Source

Features

• api: add data_refreshed_at and has_more to analytics report pages
• api: add workspace rate-limit updates to the Admin API
• api: make User Profiles generally available
• client: yield server-sent events with unrecognized event names
• google-cloud: use the v1 endpoints and add the organization endpoint

Chores

• ci: skip the changelog check on draft pull requests
• docs: add credential expiry descriptions to the Managed Agents API reference
• docs: add Messages API request descriptions
• docs: correct plugin manifest_version and reach descriptions
• docs: improve Managed Agents memory store descriptions
• docs: improve Managed Agents vault and credential descriptions

v1.15.0

Compare Source

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Chores

• ci: speed up breaking change detection
• docs: describe headers on Managed Agents and telemetry endpoints
• internal: simplify the script that formats code blocks in docs
• tests: cover OpenTelemetry options and method default timeouts

Documentation

• api: note that some models need a beta header to use speed

v1.14.0

Compare Source

Features

• api: add execution_identity to Managed Agents agents

• api: add organization_type_not_supported error to spend limit lists

• api: add telemetry destination test endpoint

• api: add telemetry destinations to the Admin API

• client: add native support for OpenTelemetry tracing

  If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass open_telemetry=False to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

• api: rename telemetry destination test response model
• client: close dropped streams without waiting for the collector
• streaming: pass unknown event types through the message stream helpers
• streaming: stop raising "Unexpected event order" for an event before message_start

Chores

• docs: correct prefill, thinking, fallback and model descriptions
• docs: document the scope required to assign the managed role
• docs: update model examples
• internal: narrow the tripwire test rule in the contributor guides

Documentation

• api: clarify when custom tool results can be sent
• api: say is_enabled is always true for user spend limits

python-websockets/websockets (websockets)

v17.3

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v17.2

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v17.1

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v17.0.1

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v17.0

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v16.1.1

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v16.1

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

v16.0

Compare Source

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

⚠️ 1 issue in files not directly in the diff

⚠️ Workspace lockfile blocks locked installs

A locked install rejects mistralai 2.10.1 because the Mistral dependency requires 3.0.x. The lock also pins websockets 15.0.1, below the new Gnani and Vakyam minimum of 17.1.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Workspace lockfile conflicts with plugin requirements

uv sync --locked cannot install the workspace: mistralai resolves to 2.10.1 despite the plugin requiring 3.0. Gnani and Vakyam also require websockets 17.2, but the lockfile resolves 15.0.1.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

Devin Review found 1 new potential issue.

🐛 1 issue in files not directly in the diff

🐛 Stale lockfile blocks locked installs

With mistralai constrained to 3.x, uv.lock selects 2.10.1 and retains the 2.x requirement. Gnani and Vakyam likewise require websockets 17.2, while the lock selects 15.0.1. Locked workspace installs fail.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Using CPython 3.12.3 interpreter at: /usr/bin/python3
error: No solution found when resolving dependencies for split (markers: python_full_version == '3.14.*' and sys_platform == 'win32')
  cause: Because rimelabs-sdk>=0.1.0a29 depends on websockets>=15,<17 and livekit-plugins-rime[realtime] depends on rimelabs-sdk>=0.1.0a29, we can conclude that livekit-plugins-rime[realtime] depends on websockets>=15,<17.
         And because livekit-plugins-gnani depends on websockets>=17.3,<17.4, we can conclude that livekit-plugins-gnani and livekit-plugins-rime[realtime] are incompatible.
         And because your workspace requires livekit-plugins-gnani and livekit-plugins-rime[realtime], we can conclude that your workspace's requirements are unsatisfiable.

hint: While the active Python version is 3.12, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.

File name: uv.lock

Using CPython 3.12.3 interpreter at: /usr/bin/python3
error: No solution found when resolving dependencies for split (markers: python_full_version == '3.14.*' and sys_platform == 'win32')
  cause: Because rimelabs-sdk>=0.1.0a29 depends on websockets>=15,<17 and livekit-plugins-rime[realtime] depends on rimelabs-sdk>=0.1.0a29, we can conclude that livekit-plugins-rime[realtime] depends on websockets>=15,<17.
         And because livekit-plugins-gnani depends on websockets>=17.3,<17.4, we can conclude that livekit-plugins-gnani and livekit-plugins-rime[realtime] are incompatible.
         And because your workspace requires livekit-plugins-gnani and livekit-plugins-rime[realtime], we can conclude that your workspace's requirements are unsatisfiable.

hint: While the active Python version is 3.12, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.

File name: uv.lock

Using CPython 3.12.3 interpreter at: /usr/bin/python3
error: No solution found when resolving dependencies for split (markers: python_full_version == '3.14.*' and sys_platform == 'win32')
  cause: Because rimelabs-sdk>=0.1.0a29 depends on websockets>=15,<17 and livekit-plugins-rime[realtime] depends on rimelabs-sdk>=0.1.0a29, we can conclude that livekit-plugins-rime[realtime] depends on websockets>=15,<17.
         And because livekit-plugins-gnani depends on websockets>=17.3,<17.4, we can conclude that livekit-plugins-gnani and livekit-plugins-rime[realtime] are incompatible.
         And because your workspace requires livekit-plugins-gnani and livekit-plugins-rime[realtime], we can conclude that your workspace's requirements are unsatisfiable.

hint: While the active Python version is 3.12, the resolution failed for other Python versions supported by your project. Consider limiting your project's supported Python versions using `requires-python`.