build(deps): bump claude-agent-sdk from 0.2.110 to 0.2.123

[dependabot]

Bumps claude-agent-sdk from 0.2.110 to 0.2.123.

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.123

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.215

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.123/

pip install claude-agent-sdk==0.2.123

v0.2.122

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.214

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.122/

pip install claude-agent-sdk==0.2.122

v0.2.121

Bug Fixes

• Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

• Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
• CI now lints and typechecks scripts/ alongside src/ and tests/
• CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
• Updated bundled Claude CLI to version 2.1.212

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.121/

pip install claude-agent-sdk==0.2.121
</tr></table> 

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.123

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.215

0.2.122

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.214

0.2.121

Bug Fixes

• Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

• Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
• CI now lints and typechecks scripts/ alongside src/ and tests/
• CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
• Updated bundled Claude CLI to version 2.1.212

0.2.120

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.211

0.2.119

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.210

0.2.118

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.209

0.2.117

Bug Fixes

• Escaped untrusted fields in Slack issue notification workflow: Fixed the Slack notification workflow to properly escape issue titles and usernames using jq instead of bash substitution, preventing malformed JSON payloads and mrkdwn injection from specially crafted issue titles (#1116)

Internal/Other Changes

... (truncated)

Commits

• 2d4ef94 docs: update changelog for v0.2.123
• d65bf4a chore: release v0.2.123
• 4fa1389 chore: bump bundled CLI version to 2.1.215
• 94ff18e docs: update changelog for v0.2.122
• 1829240 chore: release v0.2.122
• b461f55 chore: bump bundled CLI version to 2.1.214
• f604b8c docs: update changelog for v0.2.121
• 0a87d2c chore: release v0.2.121
• 1cd470d chore: bump bundled CLI version to 2.1.212
• 0278287 Validate CLAUDE_CLI_VERSION and remove shell interpolation from the build scr...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.