chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates

DE
5d ago
+253-751

Bumps the dev-dependencies group with 5 updates in the / directory:

PackageFromTo
@earendil-works/pi-coding-agent1.0.21.3.0
@earendil-works/pi-tui1.0.21.3.0
@types/node26.6.426.6.5
typebox1.3.341.4.2
vitest5.0.35.0.5

Updates @earendil-works/pi-coding-agent from 1.0.2 to 1.3.0

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v1.3.0

New Features

  • Choose where /share uploads: sessionShareDestination selects auto, gist, or radius. See Sessions and context and Export or share a session.
  • Cache-preserving thinking level changes on OpenAI GPT-6: changing the thinking level mid-session with an API key keeps the prompt cache.
  • Kimi Code over Chat Completions: tools added mid-conversation no longer invalidate the prompt cache. models.json base URL overrides must now include /v1. See Providers.
  • Clean model switching: thinking from a previous model is dropped instead of being shown to the new model as text.
  • Resumed sessions keep their active tools: --tools +name/-name applies on top of them. See Tools.

Added

  • Changing the thinking level mid-session on OpenAI GPT-6 models (API key) now keeps the prompt cache (#10853)
  • Added the sessionShareDestination setting to choose automatic, GitHub gist, or Radius uploads for /share (#10870 by @​vegarsti)

Changed

  • Changed the kimi-coding provider to use OpenAI Chat Completions at https://api.kimi.com/coding/v1, the protocol used by the official Kimi Code client. K3, K3-256K, and Kimi For Coding now accept tools added mid-conversation without invalidating the prompt cache. models.json overrides of the kimi-coding base URL must now include /v1 (#10720)
  • Changed model switching to drop thinking blocks from earlier assistant messages produced by a different model, instead of sending them as plain text. The new model previously saw the old model's reasoning as part of its replies and could start writing its own reasoning into the visible answer (#10995)

Fixed

  • Pinned internal Pi dependencies to exact release versions to prevent fresh installs from mixing incompatible packages (#10865)
  • Fixed resumed sessions dropping tools activated during the session. Resume now restores the session's active tools, with --tools +name/-name entries applied to them, unless --tools with tool names, --no-tools, or --no-builtin-tools selects tools explicitly (#10785)
  • Fixed stopping a codemode script or reaching its deadline waiting for a non-interruptible built-in to return on Bun (#10748)
  • Fixed repeated codemode timeouts or aborts accumulating surviving workers; admission now limits live workers to two across sessions, counting cancelled workers until actual exit (#10748)
  • Fixed --model choosing a provider by catalog order when several providers offer the match; Pi now prefers the provider with credentials and otherwise reports the ambiguity. --models and enabledModels add a model for each provider that offers it and warn about the ambiguity (#10160)
  • Fixed read line-range labels for numeric-string or null arguments in the TUI, session tree, HTML exports, and examples (#9887)
  • Fixed the Nix flake build failing when a provider switched APIs: the model catalog pin is now refreshed from the newest published catalog when its model API groups differ, and releases pin the newest catalog and build with it before tagging (#10985)
  • Fixed the Nix package putting its Node.js first on PATH, which made bash tool shells use Pi's Node instead of the user's node/npm. Pi's Node is now only a fallback (#10519)
  • Fixed prompt templates dropping empty quoted arguments ("" or ''), which shifted later positional arguments and prevented positional defaults from applying (#10867)
  • Fixed the Nix package build failing in its install check because it still expected chord and esbuild, which Pi no longer depends on
  • Fixed tool-call argument parsing dropping fields when a string contains an invalid \u escape such as \usepackage (#10868)
  • Fixed Anthropic and Bedrock Claude requests failing with a 400 when an error tool result contains images; the images are now sent after the tool results of the turn, so the model still sees them (#10794)
  • Fixed OpenCode Go Gemini models failing with a 404 by moving OpenCode Zen and OpenCode Go to the opencode.ai/inference endpoints, and added Google Generative AI support to the OpenCode Go provider
  • Fixed OpenCode Go MiniMax M2.7 failing with "Model does not support this protocol" by using the Anthropic Messages API
  • Fixed automatic retry not triggering for gateway Unable to forward upstream stream errors (#10920)
  • Fixed automatic retry not triggering for The service is temporarily unavailable errors, which also made compaction fail on the first attempt (#10965)
  • Fixed OpenAI-compatible responses showing thinking after the answer when a proxy such as LiteLLM sends reasoning and content in the same stream chunk (#10926)
  • Fixed Gemini 4 Argon requests on Google Vertex failing with "Thinking budget is not supported", and its thinking level being ignored on the Gemini API (#10890)
  • Fixed Xiaomi MiMo models failing with a 400 at the minimal thinking level; they now expose only the off and high levels (#10818)
  • Fixed openai-codex/gpt-6.1-sol using a 272K context window instead of the 500K window Codex now provides (#10840)
  • Fixed tool calls whose final arguments are malformed JSON silently running with only the fields parsed before the error; they now fail validation and show the model the raw arguments it sent (#10897)
  • Fixed Claude Haiku 5.5 and Claude Opus 5 not supporting the off thinking level (#10753)
  • Fixed done() of an extension's ctx.ui.custom({ overlay: true }) closing the topmost overlay instead of its own, which left the finished overlay on screen and another extension's dialog unresolved (#10648, #10999 by @​masonc15)

v1.2.0

New Features

  • Per-key OpenRouter model lists: with an OpenRouter key, Pi lists only the models that key may use, with the key's context size, max output, and prices, including regional endpoints set in models.json. See OpenRouter.
  • Published configuration schemas: add $schema to settings.json, models.json, keybindings, and themes for editor validation and completion. See Settings, Models, Keybindings, and Themes.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[1.3.0] - 2026-10-15

New Features

  • Choose where /share uploads: sessionShareDestination selects auto, gist, or radius. See Sessions and context and Export or share a session.
  • Cache-preserving thinking level changes on OpenAI GPT-6: changing the thinking level mid-session with an API key keeps the prompt cache.
  • Kimi Code over Chat Completions: tools added mid-conversation no longer invalidate the prompt cache. models.json base URL overrides must now include /v1. See Providers.
  • Clean model switching: thinking from a previous model is dropped instead of being shown to the new model as text.
  • Resumed sessions keep their active tools: --tools +name/-name applies on top of them. See Tools.

Added

  • Changing the thinking level mid-session on OpenAI GPT-6 models (API key) now keeps the prompt cache (#10853)
  • Added the sessionShareDestination setting to choose automatic, GitHub gist, or Radius uploads for /share (#10870 by @​vegarsti)

Changed

  • Changed the kimi-coding provider to use OpenAI Chat Completions at https://api.kimi.com/coding/v1, the protocol used by the official Kimi Code client. K3, K3-256K, and Kimi For Coding now accept tools added mid-conversation without invalidating the prompt cache. models.json overrides of the kimi-coding base URL must now include /v1 (#10720)
  • Changed model switching to drop thinking blocks from earlier assistant messages produced by a different model, instead of sending them as plain text. The new model previously saw the old model's reasoning as part of its replies and could start writing its own reasoning into the visible answer (#10995)

Changed

  • Changed the default NVIDIA model to nvidia/nemotron-3.5-super-vl-120b-a12b (#10910 by @​cv)

Fixed

  • Pinned internal Pi dependencies to exact release versions to prevent fresh installs from mixing incompatible packages (#10865)
  • Fixed resumed sessions dropping tools activated during the session. Resume now restores the session's active tools, with --tools +name/-name entries applied to them, unless --tools with tool names, --no-tools, or --no-builtin-tools selects tools explicitly (#10785)
  • Fixed stopping a codemode script or reaching its deadline waiting for a non-interruptible built-in to return on Bun (#10748)
  • Fixed repeated codemode timeouts or aborts accumulating surviving workers; admission now limits live workers to two across sessions, counting cancelled workers until actual exit (#10748)
  • Fixed --model choosing a provider by catalog order when several providers offer the match; Pi now prefers the provider with credentials and otherwise reports the ambiguity. --models and enabledModels add a model for each provider that offers it and warn about the ambiguity (#10160)
  • Fixed read line-range labels for numeric-string or null arguments in the TUI, session tree, HTML exports, and examples (#9887)
  • Fixed the Nix flake build failing when a provider switched APIs: the model catalog pin is now refreshed from the newest published catalog when its model API groups differ, and releases pin the newest catalog and build with it before tagging (#10985)
  • Fixed the Nix package putting its Node.js first on PATH, which made bash tool shells use Pi's Node instead of the user's node/npm. Pi's Node is now only a fallback (#10519)
  • Fixed prompt templates dropping empty quoted arguments ("" or ''), which shifted later positional arguments and prevented positional defaults from applying (#10867)
  • Fixed the Nix package build failing in its install check because it still expected chord and esbuild, which Pi no longer depends on
  • Fixed tool-call argument parsing dropping fields when a string contains an invalid \u escape such as \usepackage (#10868)
  • Fixed Anthropic and Bedrock Claude requests failing with a 400 when an error tool result contains images; the images are now sent after the tool results of the turn, so the model still sees them (#10794)
  • Fixed OpenCode Go Gemini models failing with a 404 by moving OpenCode Zen and OpenCode Go to the opencode.ai/inference endpoints, and added Google Generative AI support to the OpenCode Go provider
  • Fixed OpenCode Go MiniMax M2.7 failing with "Model does not support this protocol" by using the Anthropic Messages API
  • Fixed automatic retry not triggering for gateway Unable to forward upstream stream errors (#10920)
  • Fixed automatic retry not triggering for The service is temporarily unavailable errors, which also made compaction fail on the first attempt (#10965)
  • Fixed OpenAI-compatible responses showing thinking after the answer when a proxy such as LiteLLM sends reasoning and content in the same stream chunk (#10926)
  • Fixed Gemini 4 Argon requests on Google Vertex failing with "Thinking budget is not supported", and its thinking level being ignored on the Gemini API (#10890)
  • Fixed Xiaomi MiMo models failing with a 400 at the minimal thinking level; they now expose only the off and high levels (#10818)
  • Fixed openai-codex/gpt-6.1-sol using a 272K context window instead of the 500K window Codex now provides (#10840)
  • Fixed tool calls whose final arguments are malformed JSON silently running with only the fields parsed before the error; they now fail validation and show the model the raw arguments it sent (#10897)
  • Fixed Claude Haiku 5.5 and Claude Opus 5 not supporting the off thinking level (#10753)
  • Fixed done() of an extension's ctx.ui.custom({ overlay: true }) closing the topmost overlay instead of its own, which left the finished overlay on screen and another extension's dialog unresolved (#10648, #10999 by @​masonc15)

... (truncated)

Commits
  • 71023ae Release v1.3.0
  • 9800c96 docs(coding-agent): add changelog entry for #10999
  • 2cb2cfa docs: audit changelogs for release
  • a4f67eb fix(coding-agent): close own custom ui overlay (#10999)
  • d05a73f fix: keep the Nix model catalog pin buildable
  • eddebae fix(coding-agent): append Node to PATH in the Nix wrapper
  • dfb03c3 fix(coding-agent): use claude-sonnet-4.5 in model registry tests
  • 9fe3f37 fix(coding-agent): keep empty quoted prompt template arguments
  • 9101499 fix(coding-agent): normalize read line-range labels (#10938)
  • d7f7e0d fix(coding-agent): resolve model references through one provider selection po...
  • Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 1.0.2 to 1.3.0

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v1.3.0

New Features

  • Choose where /share uploads: sessionShareDestination selects auto, gist, or radius. See Sessions and context and Export or share a session.
  • Cache-preserving thinking level changes on OpenAI GPT-6: changing the thinking level mid-session with an API key keeps the prompt cache.
  • Kimi Code over Chat Completions: tools added mid-conversation no longer invalidate the prompt cache. models.json base URL overrides must now include /v1. See Providers.
  • Clean model switching: thinking from a previous model is dropped instead of being shown to the new model as text.
  • Resumed sessions keep their active tools: --tools +name/-name applies on top of them. See Tools.

Added

  • Changing the thinking level mid-session on OpenAI GPT-6 models (API key) now keeps the prompt cache (#10853)
  • Added the sessionShareDestination setting to choose automatic, GitHub gist, or Radius uploads for /share (#10870 by @​vegarsti)

Changed

  • Changed the kimi-coding provider to use OpenAI Chat Completions at https://api.kimi.com/coding/v1, the protocol used by the official Kimi Code client. K3, K3-256K, and Kimi For Coding now accept tools added mid-conversation without invalidating the prompt cache. models.json overrides of the kimi-coding base URL must now include /v1 (#10720)
  • Changed model switching to drop thinking blocks from earlier assistant messages produced by a different model, instead of sending them as plain text. The new model previously saw the old model's reasoning as part of its replies and could start writing its own reasoning into the visible answer (#10995)

Fixed

  • Pinned internal Pi dependencies to exact release versions to prevent fresh installs from mixing incompatible packages (#10865)
  • Fixed resumed sessions dropping tools activated during the session. Resume now restores the session's active tools, with --tools +name/-name entries applied to them, unless --tools with tool names, --no-tools, or --no-builtin-tools selects tools explicitly (#10785)
  • Fixed stopping a codemode script or reaching its deadline waiting for a non-interruptible built-in to return on Bun (#10748)
  • Fixed repeated codemode timeouts or aborts accumulating surviving workers; admission now limits live workers to two across sessions, counting cancelled workers until actual exit (#10748)
  • Fixed --model choosing a provider by catalog order when several providers offer the match; Pi now prefers the provider with credentials and otherwise reports the ambiguity. --models and enabledModels add a model for each provider that offers it and warn about the ambiguity (#10160)
  • Fixed read line-range labels for numeric-string or null arguments in the TUI, session tree, HTML exports, and examples (#9887)
  • Fixed the Nix flake build failing when a provider switched APIs: the model catalog pin is now refreshed from the newest published catalog when its model API groups differ, and releases pin the newest catalog and build with it before tagging (#10985)
  • Fixed the Nix package putting its Node.js first on PATH, which made bash tool shells use Pi's Node instead of the user's node/npm. Pi's Node is now only a fallback (#10519)
  • Fixed prompt templates dropping empty quoted arguments ("" or ''), which shifted later positional arguments and prevented positional defaults from applying (#10867)
  • Fixed the Nix package build failing in its install check because it still expected chord and esbuild, which Pi no longer depends on
  • Fixed tool-call argument parsing dropping fields when a string contains an invalid \u escape such as \usepackage (#10868)
  • Fixed Anthropic and Bedrock Claude requests failing with a 400 when an error tool result contains images; the images are now sent after the tool results of the turn, so the model still sees them (#10794)
  • Fixed OpenCode Go Gemini models failing with a 404 by moving OpenCode Zen and OpenCode Go to the opencode.ai/inference endpoints, and added Google Generative AI support to the OpenCode Go provider
  • Fixed OpenCode Go MiniMax M2.7 failing with "Model does not support this protocol" by using the Anthropic Messages API
  • Fixed automatic retry not triggering for gateway Unable to forward upstream stream errors (#10920)
  • Fixed automatic retry not triggering for The service is temporarily unavailable errors, which also made compaction fail on the first attempt (#10965)
  • Fixed OpenAI-compatible responses showing thinking after the answer when a proxy such as LiteLLM sends reasoning and content in the same stream chunk (#10926)
  • Fixed Gemini 4 Argon requests on Google Vertex failing with "Thinking budget is not supported", and its thinking level being ignored on the Gemini API (#10890)
  • Fixed Xiaomi MiMo models failing with a 400 at the minimal thinking level; they now expose only the off and high levels (#10818)
  • Fixed openai-codex/gpt-6.1-sol using a 272K context window instead of the 500K window Codex now provides (#10840)
  • Fixed tool calls whose final arguments are malformed JSON silently running with only the fields parsed before the error; they now fail validation and show the model the raw arguments it sent (#10897)
  • Fixed Claude Haiku 5.5 and Claude Opus 5 not supporting the off thinking level (#10753)
  • Fixed done() of an extension's ctx.ui.custom({ overlay: true }) closing the topmost overlay instead of its own, which left the finished overlay on screen and another extension's dialog unresolved (#10648, #10999 by @​masonc15)

v1.2.0

New Features

  • Per-key OpenRouter model lists: with an OpenRouter key, Pi lists only the models that key may use, with the key's context size, max output, and prices, including regional endpoints set in models.json. See OpenRouter.
  • Published configuration schemas: add $schema to settings.json, models.json, keybindings, and themes for editor validation and completion. See Settings, Models, Keybindings, and Themes.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-tui's changelog.

[1.3.0] - 2026-10-15

[1.2.0] - 2026-10-12

Breaking Changes

  • Editor.render() and Input.render() now wrap the drawn cursor in zero-width APC markers instead of emitting \x1b[7m directly. TUI renderers resolve them; code that renders these components outside a TUI must strip them, for example with stripTerminalSequences()

Added

  • Added renderFakeCursor(). Components wrap their drawn cursor with it, and the TUI renders it in reverse video, or omits it after CURSOR_MARKER when showHardwareCursor is enabled

Changed

  • Changed showHardwareCursor to show only the terminal cursor: focused Editor and Input components no longer draw a reverse-video cursor when it is enabled. This avoids terminals that extend edge cell colors into the window padding stretching the drawn cursor at the first or last column

Fixed

  • Fixed overlay compositing dropping CURSOR_MARKER when an overlay ends directly left of the cursor, which lost the hardware cursor position
  • Fixed focused fullscreen overlays blocking mouse-wheel scrolling of the transcript. Wheel events that no component handles now scroll the transcript instead of reaching the focused overlay's handleInput as raw input; overlays that scroll with the wheel must implement handleMouse (#10769)
  • Fixed fragmented terminal color replies leaking hex values into the prompt and triggering the external editor via their BEL terminator (related reports: #10256, #10657)
  • Fixed inline images not rendering in Herdr since 1.1.0; Herdr now uses the Kitty graphics protocol (#10774 by @​ogulcancelik)
  • Fixed key bindings that name a shifted symbol, such as + or ctrl++, not matching when the Kitty keyboard protocol or modifyOtherKeys reports the key as Shift plus the unshifted key. parseKey() now returns the produced symbol (+ instead of shift+=); the physical shift+= spelling still matches, and key ids such as ctrl++ are parsed correctly (#9880 by @​christianklotz)

[1.1.0] - 2026-10-07

Breaking Changes

  • Terminal implementations must provide setProgramStatus(status); a terminal without OSC 7501 support can implement it as a no-op (#10607)

Added

  • Added Box.setPaddingX(...) and Text.setPaddingX(...) (#10557 by @​rwachtler)
  • Added Terminal.setProgramStatus() and formatProgramStatus() for the Program Status Protocol (OSC 7501). ProcessTerminal asks the terminal for support at startup and sends reports only if it answers; PI_PROGRAM_STATUS=1|0 overrides detection (#10607)
  • Added TuiAltScreen.resetTextSelection(), which drops the text selection and multi-click state, for example before a host replaces the transcript (#9311, #10567 by @​christianklotz)

Fixed

  • Fixed Markdown links not being clickable in Herdr: TERM_PROGRAM=herdr is now detected as supporting OSC 8 hyperlinks (#10573)

[1.0.4] - 2026-10-05

[1.0.3] - 2026-10-05

Changed

  • Home/End now always move the editor cursor to the line start/end; fullscreen transcript top/bottom moved to Ctrl+Home/Ctrl+End, which no longer move the editor cursor (#10314)
Commits
  • 71023ae Release v1.3.0
  • d547949 Add [Unreleased] section for next cycle
  • 06a4669 Release v1.2.0
  • 0d79b74 docs: audit changelogs and add new features for next release
  • 11f9911 fix(tui): let unhandled wheel input scroll the transcript under a focused ove...
  • 78a3c10 fix(tui): enable kitty images in herdr (#10774)
  • edb2eb9 fix(tui): keep delayed terminal replies out of keyboard input
  • 7f9e119 feat(coding-agent): publish configuration schemas (#9880)
  • 1cedd32 feat(tui,coding-agent): use only the terminal cursor when showHardwareCursor ...
  • 75a9972 Add [Unreleased] section for next cycle
  • Additional commits viewable in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates typebox from 1.3.34 to 1.4.2

Commits

Updates vitest from 5.0.3 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps the five dev dependencies, including @earendil-works/pi-coding-agent and @earendil-works/pi-tui from 1.0.2 to 1.3.0. The updated Pi packages no longer depend on esbuild and @earendil-works/chord, which accounts for most of the lockfile cleanup.

Dependencies

  • @earendil-works/pi-tui 1.2.0 breaks its render API: Editor.render() and Input.render() emit APC cursor markers instead of raw reverse-video escapes, and Terminal implementations must now provide setProgramStatus().
  • @earendil-works/pi-coding-agent 1.3.0 requires models.json base URL overrides for kimi-coding to end with /v1.
  • typebox moves to 1.4.2, while vitest and @types/node receive patch fixes only.