Bump claude-agent-sdk from 0.1.48 to 0.2.121

[dependabot]

Bumps claude-agent-sdk from 0.1.48 to 0.2.121.

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.121

Bug Fixes

• Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

• Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
• CI now lints and typechecks scripts/ alongside src/ and tests/
• CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
• Updated bundled Claude CLI to version 2.1.212

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.121/

pip install claude-agent-sdk==0.2.121

v0.2.120

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.211

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.120/

pip install claude-agent-sdk==0.2.120

v0.2.119

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.210

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.119/

pip install claude-agent-sdk==0.2.119
</tr></table> 

... (truncated)

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.121

Bug Fixes

• Fixed argv flag injection via resume and session_id options: --resume and --session-id are now passed as single =-joined argv tokens (e.g. --resume=<value>) so that a dash-prefixed value is never misinterpreted as an independent CLI flag (#1123)

Internal/Other Changes

• Hardened build scripts against command injection via CLAUDE_CLI_VERSION: Added version validation (_cli_version_validation.py) and eliminated shell interpolation in download_cli.py and update_cli_version.py so that a malformed version string cannot inject shell or Python code during builds (#1117)
• CI now lints and typechecks scripts/ alongside src/ and tests/
• CI CLI install steps now fail properly when curl errors (added shell: bash for pipefail)
• Updated bundled Claude CLI to version 2.1.212

0.2.120

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.211

0.2.119

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.210

0.2.118

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.209

0.2.117

Bug Fixes

• Escaped untrusted fields in Slack issue notification workflow: Fixed the Slack notification workflow to properly escape issue titles and usernames using jq instead of bash substitution, preventing malformed JSON payloads and mrkdwn injection from specially crafted issue titles (#1116)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.208

0.2.116

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.207
• Fixed CI workspace trust so Claude Code honors project-scoped permission grants in checkout directories (#1085)

0.2.115

... (truncated)

Commits

• f604b8c docs: update changelog for v0.2.121
• 0a87d2c chore: release v0.2.121
• 1cd470d chore: bump bundled CLI version to 2.1.212
• 0278287 Validate CLAUDE_CLI_VERSION and remove shell interpolation from the build scr...
• 347a1cb Pass --resume and --session-id as a single argv token (#1123)
• af69c01 docs: update changelog for v0.2.120
• 07f1ab3 chore: release v0.2.120
• 135bf9a chore: bump bundled CLI version to 2.1.211
• 57f67cd docs: update changelog for v0.2.119
• d434722 chore: release v0.2.119
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.

[github-actions]

Performance comparison

Threshold: regressions >15.0% on gating scenarios fail the build. Higher ops/s is better; positive Δ means the PR is slower.

Scenario	Gating	Baseline (ops/s)	Candidate (ops/s)	Δ %	Status
azure_monitor_log	yes	18,635.9	18,726.6	-0.48%	✅
azure_monitor_span	yes	153,562.7	155,739.0	-1.40%	✅
otel_log	no	21,679.3	22,319.4	-2.87%	✅
otel_span	no	40,345.4	40,673.6	-0.81%	✅