[renovate]

This PR contains the following updates:

Package	Update	Change
anthropics/anthropic-cli	minor	1.42.0 → 1.44.0

---

Release Notes

anthropics/anthropic-cli

v1.44.0

Compare Source

Features

• api: add org webhook endpoints and user profile enforcement events

Chores

• bump go sdk to v1.84.0
• ci: run the changelog check on a standard runner

v1.43.0

Compare Source

Features

• api: add workspace rate-limit updates to the Admin API
• api: make User Profiles generally available
• auth: the stderr note printed when ANTHROPIC_API_KEY or ANTHROPIC_AUTH_TOKEN overrides a profile now names the variable, the profile and the fix

Bug Fixes

• auth: auth status no longer reports a credential passed as --api-key or --auth-token as an environment override
• client: treat x-amz-security-token as a sensitive header

Chores

• bump go sdk to v1.83.0
• ci: skip the changelog check on draft pull requests
• ci: update publish workflow
• docs: add credential expiry descriptions to the Managed Agents API reference
• docs: correct plugin manifest_version and reach descriptions
• docs: improve Managed Agents memory store descriptions
• docs: improve Managed Agents vault and credential descriptions

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

TL;DR for garyj

• Security fix in 1.43.0: x-amz-security-token is now treated as a sensitive header by the client, won't leak into logs/output if you use AWS Bedrock-style credentials with the CLI.
• Auth UX fixes: auth status no longer misreports --api-key/--auth-token CLI flags as env overrides, and the stderr override warning now names the variable and profile, useful if you juggle multiple API key sources.
• New Admin API features: org webhook endpoints, workspace rate-limit updates, and User Profiles now GA, relevant if you're scripting against the Anthropic Admin API.
• Routine: Go SDK bumped to v1.84.0, CI tweaks, no user-facing behavior change.

1.44.0

• Adds org webhook endpoints and user profile enforcement events to the API; otherwise just SDK/CI bumps.

1.43.0

• Security-relevant header fix and auth status/override messaging fixes (see above) are the main things worth knowing here.

_{Auto-summarized by claude-sonnet-5 from the release notes above. Add/remove the deps-summary label to control this.}

[garyj]

/merge ⚊ GJ ☛ +61403265135 | ♚ ***@***.*** [Apologies for my brevity & any errors/creative spelling - this was sent from a mobile device]

…

________________________________ From: github-actions[bot] ***@***.***> Sent: Tuesday, 27 October 2026 22:46:54 To: garyj/dotfiles ***@***.***> Cc: Gary Jarrel ***@***.***>; Assign ***@***.***> Subject: Re: [garyj/dotfiles] update: bump anthropics/anthropic-cli to 1.44.0 (PR #350) [https://avatars.githubusercontent.com/in/15368?s=20&v=4]github-actions[bot] left a comment (garyj/dotfiles#350)<#350 (comment)> TL;DR for garyj * Security fix in 1.43.0: x-amz-security-token is now treated as a sensitive header by the client, won't leak into logs/output if you use AWS Bedrock-style credentials with the CLI. * Auth UX fixes: auth status no longer misreports --api-key/--auth-token CLI flags as env overrides, and the stderr override warning now names the variable and profile, useful if you juggle multiple API key sources. * New Admin API features: org webhook endpoints, workspace rate-limit updates, and User Profiles now GA, relevant if you're scripting against the Anthropic Admin API. * Routine: Go SDK bumped to v1.84.0, CI tweaks, no user-facing behavior change. 1.44.0 * Adds org webhook endpoints and user profile enforcement events to the API; otherwise just SDK/CI bumps. 1.43.0 * Security-relevant header fix and auth status/override messaging fixes (see above) are the main things worth knowing here. Auto-summarized by claude-sonnet-5 from the release notes above. Add/remove the deps-summary label to control this. — Reply to this email directly, view it on GitHub<#350?email_source=notifications&email_token=AAE5KY635G3ZXELXJHPB2T35WCDK5A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTMNBUGEYDSNJTGAZKM4TFMFZW63VGMFZXG2LHN2SWK5TFNZ2KYZTPN52GK4S7MNWGSY3L#issuecomment-6441095302>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAE5KYYQXYWGFOQWP5ZICXL5WCDK5AVCNFSNUABFKJSXA33TNF2G64TZHM3TENRSGY4DQNRWHNEXG43VMU5TMMBVHA2TIMZTGM22C5QC>. You are receiving this because you were assigned.Message ID: ***@***.***>