chore(deps): bump deepagents from 1.10.5 to 1.10.8

[dependabot]

Bumps deepagents from 1.10.5 to 1.10.8.

Release notes

Sourced from deepagents's releases.

deepagents@1.10.8

Patch Changes

• #668 7c8a770 Thanks @​colifran! - fix(deepagents): fast-glob follows directory symlink cycles leading to ELOOP crashes

deepagents@1.10.7

Patch Changes

• #659 8efde93 Thanks @​Kowshik4593! - Fix: Normalize path to file_path in filesystem tools (read_file, write_file, and edit_file) and align the prompt documentation examples to prevent validation schema failures on weaker/custom models.

deepagents@1.10.6

Patch Changes

• #608 d7ecab2 Thanks @​aolsenjazz! - fix(deepagents): forward subagent results as text

  Fixed a 400 invalid_request_error that occurred when a subagent used an Anthropic server-side tool (web search, web fetch, or code execution): the subagent's server_tool_use/*_tool_result blocks were forwarded to the parent agent as tool_result content, which the API rejects. Subagent results are now passed back to the parent as their text content (matching the Python implementation), which resolves the error and also handles a trailing empty end_turn message.

• #656 1a2b2df Thanks @​colifran! - fix(deepagents): default unknown file extensions to text/plain

• #611 42f34b6 Thanks @​aolsenjazz! - feat(deepagents): add bedrockPromptCachingMiddleware to default stack

  Add bedrockPromptCachingMiddleware to default middleware stack. This automatically opts-in to Bedrock prompt caching for Nova and Anthropic models

• #613 0ae10d7 Thanks @​christian-bromann! - fix(deepagents): declare LangChain runtime packages as peer dependencies

  Move @langchain/core, @langchain/langgraph, @langchain/langgraph-sdk, and langchain from dependencies to peerDependencies, and also declare @langchain/langgraph-checkpoint as a peer (its BaseCheckpointSaver/BaseStore types are part of the public API), so they resolve to a single shared instance in the consumer's tree. Previously they were bundled as regular dependencies, which let a consumer end up with two copies of @langchain/core (e.g. 1.2.0 vs 1.2.1). Because these packages ship classes with private/ protected fields, the duplicate copies are treated as nominally distinct types, producing errors like passing a ChatOpenAI model to createDeepAgent or a compiled graph to the local protocol helpers. As peers, the app controls the version and bumping @langchain/core no longer requires a deepagents release.

Commits

• 4507acd chore: version packages (#670)
• 7c8a770 fix(deepagents): fast-glob follows directory symlink cycles leading to `ELOOP...
• 2d1b39b fix: Deno sandbox file path shell injection (#664)
• 1b8528b fix: Permission gate (requestToolPermission) is defined but never called — al...
• 3eab2ca chore: version packages (#660)
• 8efde93 feat(deepagents): implement filesystem state management middleware with atomi...
• ff8cc5c chore: version packages (#607)
• 1a2b2df fix(deepagents): default unknown file extensions to text/plain (#656)
• 5f93c11 fix(modal): modal sandboxes fail to upload files (#657)
• ff7d82a build(deps): bump the minor-deps-updates-main group with 8 updates (#640)
• Additional commits viewable in compare view