Build(deps): Update claude-agent-sdk requirement from <0.3,>=0.2.136 to >=0.2.164,<0.3

[dependabot]

Updates the requirements on claude-agent-sdk to permit the latest version.

Release notes

Sourced from claude-agent-sdk's releases.

v0.2.164

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.292
• CI: security hardening for GitHub Actions workflows that call Claude — egress-firewall runner, network allow list, auto permission mode, and a check workflow to enforce them (#1329)
• CI: raised PyPI per-file limit guard to 250 MiB to match the updated project limit (#1366)
• Tests: fixed thinking-deltas e2e test for CLI 2.1.287+ by using explicit thinking display options (#1367)

---

PyPI: https://pypi.org/project/claude-agent-sdk/0.2.164/

pip install claude-agent-sdk==0.2.164

Changelog

Sourced from claude-agent-sdk's changelog.

0.2.164

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.292
• CI: security hardening for GitHub Actions workflows that call Claude — egress-firewall runner, network allow list, auto permission mode, and a check workflow to enforce them (#1329)
• CI: raised PyPI per-file limit guard to 250 MiB to match the updated project limit (#1366)
• Tests: fixed thinking-deltas e2e test for CLI 2.1.287+ by using explicit thinking display options (#1367)

0.2.163

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.286
• CI: pinned the model for issue triage to fix failures caused by the CLI's new default model (#1328)

0.2.162

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.285

0.2.161

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.284

0.2.160

Bug Fixes

• Fixed follow-up turns failing after background subagents: When using query() with hooks, can_use_tool, or SDK MCP servers, stdin was closed too early if a subagent finished just before the turn's result arrived. Follow-up turns would then fail with "Stream closed" and the model would report the tool as refused. The SDK now listens for the CLI's session_state_changed messages and keeps stdin open until the CLI reports idle, matching the TypeScript SDK's behavior. A bounded wait ceiling (configurable via CLAUDE_CODE_PRINT_BG_WAIT_CEILING_MS, default 10 minutes) prevents indefinite hangs. Older CLIs without state events fall back to the previous close-at-first-result behavior. (#1190, #1279)

Documentation

• Aligned docstrings with the code and fixed docstring formatting (#1293)

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.283
• CI: skip wheels over PyPI's per-file limit instead of failing the release (#1309)

0.2.159

Internal/Other Changes

• Updated bundled Claude CLI to version 2.1.281
• Pinned default model for e2e tests to claude-opus-5 to work around CI failures with the CLI's new default model (#1287)

... (truncated)

Commits

• 2f38c69 docs: update changelog for v0.2.164
• e5e4af7 chore: release v0.2.164
• f596bfe test(e2e): fix thinking-deltas test for CLI 2.1.287+ to unblock releases (#1367)
• ee34c4e chore: bump bundled CLI version to 2.1.292
• 441ed0c ci: raise PyPI per-file limit guard to 250 MiB (#1366)
• 1cc862c chore: bump bundled CLI version to 2.1.291
• 7bb2753 chore: bump bundled CLI version to 2.1.290
• 9c69ce7 chore: bump bundled CLI version to 2.1.289
• 68db221 chore: bump bundled CLI version to 2.1.288
• bfb895c chore: bump bundled CLI version to 2.1.287
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1086.