Skip to content

chore: upgrade bundled agent CLIs#900

Merged
dohooo merged 2 commits into
mainfrom
dohooo/cli-sdk-upgrade-investigation
Jun 25, 2026
Merged

chore: upgrade bundled agent CLIs#900
dohooo merged 2 commits into
mainfrom
dohooo/cli-sdk-upgrade-investigation

Conversation

@dohooo

@dohooo dohooo commented Jun 25, 2026

Copy link
Copy Markdown
Owner

What changed

  • Upgraded bundled agent dependencies for Claude Code, Codex, Cursor, and OpenCode in the sidecar package/lockfile.
  • Updated vendor staging metadata and checksum handling for the new bundled CLI versions.
  • Added the helmor-bump-vendors skill documentation, references, and helper script for future vendor bumps.
  • Added a patch changeset and refreshed docs/NOTICE references from Codex SDK to Codex CLI.

Why

Keeping bundled agent CLIs current avoids drift from upstream SDK/CLI behavior and documents the repeatable process for future upgrades.

Follow-up / test notes

  • No tests were run in this PR creation step; this workspace already had a clean working tree with the changes committed.

dohooo added 2 commits June 24, 2026 15:48
Bump every bundled agent provider to latest stable (no breaking changes hit Helmor):
- claude-agent-sdk 0.3.186->0.3.191 + claude-code 2.1.186->2.1.191 (lockstep)
- @cursor/sdk 1.0.19->1.0.21; drop the now-redundant @connectrpc/connect-node
  pin (added in #889) -- 1.0.21 declares it as a real dependency
- @opencode-ai/sdk + opencode-ai 1.17.9->1.17.10
- kimi 0.19.1->0.19.2
- codex held at 0.142.0 (already latest stable)
- remove unused @earendil-works/pi-* deps (dead code, never imported)
- prune stale KIMI_SHA256 0.14.3 key
- correct "Codex SDK" -> @openai/codex (CLI) wording in AGENTS.md, CLAUDE.md, NOTICE

Verified: sidecar typecheck, sidecar tests (407 pass), pipeline snapshot tests,
and a full `bun run build`.

Also add the helmor-bump-vendors skill (.agents/skills/, symlinked into
.claude/skills/): standardized bump procedure -- pin sites, per-vendor SHA256
sources, lockstep/dist-tags/cross-arch rules, verification gates -- plus an
npm_vendor_sha.sh helper.
- Add the `helmor` patch changeset for the bundled-agent CLI/SDK refresh.
- helmor-bump-vendors: end the bump workflow by invoking /helmor-release to
  create the changeset (and an announcement when warranted), instead of
  leaving it to the user.
@vercel

vercel Bot commented Jun 25, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
helmor-marketing Ignored Ignored Jun 25, 2026 3:23am

Request Review

@dosubot dosubot Bot added the size:L This PR changes 100-499 lines, ignoring generated files. label Jun 25, 2026
@dosubot

dosubot Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

📄 Knowledge review

✏️ Documentation updates

1 page was updated by changes in this PR.

Page Library Status
05 - Sidecar Overview Helmor ✅ Updated
📝 05 - Sidecar Overview — changes
@@ -34,7 +34,7 @@
 
 The sidecar integrates with:
 - **Claude Code** (Anthropic) — via the Claude Agent SDK.
-- **Codex** (OpenAI) — via the Codex SDK.
+- **Codex** (OpenAI) — via the Codex CLI.
 - **Cursor** — via the Cursor SDK.
 
 Each provider manages its own auth. The sidecar just forwards credentials from the environment or config.

Leave Feedback Ask Dosu about helmor

@dohooo dohooo merged commit ba5cee8 into main Jun 25, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:L This PR changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant