Skip to content

chore(deps): bump the production group across 1 directory with 9 updates#59

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dab5a725b7
Closed

chore(deps): bump the production group across 1 directory with 9 updates#59
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dab5a725b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026

Copy link
Copy Markdown

Bumps the production group with 9 updates in the / directory:

Package From To
@composio/core 0.10.0 0.13.1
@earendil-works/pi-agent-core 0.79.9 0.80.3
@earendil-works/pi-ai 0.79.9 0.80.3
@earendil-works/pi-coding-agent 0.79.9 0.80.3
@earendil-works/pi-tui 0.79.9 0.80.3
@slack/web-api 7.17.0 7.18.0
convex 1.41.0 1.42.1
playwright-core 1.60.0 1.61.1
tar 7.5.16 7.5.19

Updates @composio/core from 0.10.0 to 0.13.1

Release notes

Sourced from @​composio/core's releases.

@​composio/core@​0.13.1

Patch Changes

  • 605a726: Add Tool Router session deletion APIs.

@​composio/core@​0.13.0

Minor Changes

  • d17a268: Add the first-class composio.sessions.create() API while keeping composio.create() as an alias, expose the experimental shared-connection ACL patch helper as connectedAccounts.updateAcl() while keeping experimental.updateAcl() as an alias, and include SDK docs/source in the published package.

    MCP is now opt-in. Sessions return native tools by default; the hosted MCP endpoint is only surfaced on the type when you create the session with { mcp: true }. The default create() / use() now return SessionWithoutMcp (the runtime object is unchanged — session.mcp still exists at runtime — but it is no longer in the type).

    Migration: read session.mcp only after creating with { mcp: true }.

  • d17a268: Surface the resolved workbench config on Tool Router sessions.

    • Session.workbench is now populated from the API response (on create/retrieve/attach/update). It exposes the resolved workbench config, e.g. session.workbench?.enable (defaults to true server-side).

    This lets callers create a session with the remote workbench disabled (workbench: { enable: false }) and detect that state — the foundation for running code in a sandbox you own via the experimental @composio/experimental/workbench helpers.

Patch Changes

  • d17a268: Prefer sandbox for session code-execution configuration while continuing to accept the existing workbench alias.
  • d17a268: Add triggers.parse() to parse and optionally verify incoming webhook requests.
  • d17a268: Add triggers.setWebhookSubscription() to create or update the project webhook subscription from the TypeScript SDK.

@​composio/core@​0.12.0

Minor Changes

  • a0bef5d: Bump @composio/client to 0.1.0-alpha.74.

  • dfd7a08: Add per-request cancellation to public SDK methods via a new ComposioRequestOptions ({ signal?: AbortSignal }) trailing argument, plus a typed ComposioRequestCancelledError for detecting caller-initiated aborts.

    Without this, a slow tools.get or tools.execute had no way to be cancelled — a 100s search would block the calling agent indefinitely. The new shape:

    try {
      const tools = await composio.tools.get(
        'user_1',
        { search: 'send email', limit: 50 },
        { signal: AbortSignal.timeout(5_000) }
      );
    } catch (err) {
      if (err instanceof ComposioRequestCancelledError) {
        return;
      }
      throw err;
    }

    The signal is forwarded to the underlying @composio/client fetch. Any abort error (APIUserAbortError, AbortError, or DOMException(name='AbortError')) coming back is normalized to ComposioRequestCancelledError so callers can instanceof-detect cancellation without unwrapping nested causes. Catch-and-wrap paths in tools.execute / tools.getRawComposioToolBySlug / toolkits.get re-throw the cancellation error rather than remapping it to ComposioToolExecutionError / ComposioToolNotFoundError / ComposioToolkitFetchError.

... (truncated)

Changelog

Sourced from @​composio/core's changelog.

0.13.1

Patch Changes

  • 605a726: Add Tool Router session deletion APIs.

0.13.0

Minor Changes

  • d17a268: Add the first-class composio.sessions.create() API while keeping composio.create() as an alias, expose the experimental shared-connection ACL patch helper as connectedAccounts.updateAcl() while keeping experimental.updateAcl() as an alias, and include SDK docs/source in the published package.

    MCP is now opt-in. Sessions return native tools by default; the hosted MCP endpoint is only surfaced on the type when you create the session with { mcp: true }. The default create() / use() now return SessionWithoutMcp (the runtime object is unchanged — session.mcp still exists at runtime — but it is no longer in the type).

    Migration: read session.mcp only after creating with { mcp: true }.

  • d17a268: Surface the resolved workbench config on Tool Router sessions.

    • Session.workbench is now populated from the API response (on create/retrieve/attach/update). It exposes the resolved workbench config, e.g. session.workbench?.enable (defaults to true server-side).

    This lets callers create a session with the remote workbench disabled (workbench: { enable: false }) and detect that state — the foundation for running code in a sandbox you own via the experimental @composio/experimental/workbench helpers.

Patch Changes

  • d17a268: Prefer sandbox for session code-execution configuration while continuing to accept the existing workbench alias.
  • d17a268: Add triggers.parse() to parse and optionally verify incoming webhook requests.
  • d17a268: Add triggers.setWebhookSubscription() to create or update the project webhook subscription from the TypeScript SDK.

0.12.0

Minor Changes

  • a0bef5d: Bump @composio/client to 0.1.0-alpha.74.

  • dfd7a08: Add per-request cancellation to public SDK methods via a new ComposioRequestOptions ({ signal?: AbortSignal }) trailing argument, plus a typed ComposioRequestCancelledError for detecting caller-initiated aborts.

    Without this, a slow tools.get or tools.execute had no way to be cancelled — a 100s search would block the calling agent indefinitely. The new shape:

    try {
      const tools = await composio.tools.get(
        'user_1',
        { search: 'send email', limit: 50 },
        { signal: AbortSignal.timeout(5_000) }
      );
    } catch (err) {
      if (err instanceof ComposioRequestCancelledError) {
        return;
      }
      throw err;
    }

... (truncated)

Commits
  • 156a1eb Release: update version (#3686)
  • 956f9be chore(agents): normalize repo guidance skills (#3666)
  • 605a726 Add tool router session deletion (#3679)
  • 20bf1b6 chore(ts): quiet tsdown build warnings (#3665)
  • d102ab0 Release: update version (#3676)
  • d17a268 docs: sessions-first rewrite — new guides, examples & components (+ core 0.13...
  • 9764ce3 Release: update version (#3616)
  • f6b5505 fix(core): preserve SDK reference types
  • 507318d fix(anthropic): harden tool property-key sanitizer (#3650)
  • dfd7a08 feat(core): add AbortSignal cancellation to public SDK methods + ComposioRequ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​composio/core since your current version.


Updates @earendil-works/pi-agent-core from 0.79.9 to 0.80.3

Release notes

Sourced from @​earendil-works/pi-agent-core's releases.

v0.80.3

New Features

  • Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
  • Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
  • External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
  • Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
  • Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
  • Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

  • Added inherited Anthropic Claude Sonnet 5 model support.
  • Added get_entries and get_tree RPC commands for reading session entries and tree snapshots over RPC (#6078 by @​geraschenko).
  • Added a package ./rpc-entry export for launching Pi directly in RPC mode.
  • Added session-name change events for extensions (#6175 by @​xl0).
  • Added inherited Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
  • Added inherited Usage.reasoning token counts for providers that report reasoning/thinking token usage (#6057).
  • Added an externalEditor settings.json override for Ctrl+G external editor commands, with default fallbacks to Notepad on Windows and nano elsewhere (#6122).
  • Added an outputPad setting for user message, assistant message, and thinking horizontal padding (#6168).

Changed

  • Changed the default OpenAI model to gpt-5.5.
  • Changed inherited OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

  • Fixed inherited Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
  • Fixed inherited generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
  • Fixed inherited provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
  • Fixed inherited streamSimple() max-token caps so providers that count input and output against one context window do not reject long requests (#5595).
  • Fixed inherited OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
  • Fixed inherited Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).
  • Fixed pre-prompt compaction to stop after compaction instead of continuing immediately (#6074 by @​yzhg1983).
  • Fixed resource notifications to stay before messages when resuming sessions (#6048 by @​haoqixu).
  • Fixed startup benchmark timing output to print after TUI shutdown, preserve extension timings, and drain terminal-query replies before stopping benchmark mode (#6030 by @​xl0, #6063 by @​xl0).
  • Fixed extension tool changes to apply before the next provider request in the same agent run without dropping before_agent_start system-prompt overrides (#6162).
  • Fixed a crash when undici emits an internal client error while terminating a mid-stream HTTP response (#6133).
  • Fixed the compaction event regression test to cover status indicator cleanup and keep CI passing.
  • Fixed interactive status indicators so ending work, retry, compaction, or branch-summary indicators no longer shrink the TUI when clear-on-shrink is enabled (#6026).
  • Fixed --session and SessionManager.open() to reject non-empty invalid session files without overwriting them (#6002).
  • Fixed user-message transcript rendering to keep visible backslashes in Markdown escape sequences such as \" (#6105).
  • Fixed assistant messages stopped by output length to show a visible incomplete-response error (#4290).
  • Fixed --no-session --session-id so ephemeral CLI runs can use deterministic session IDs for provider cache affinity (#6070).
  • Fixed disk BMP image files to be detected, converted to PNG, and attached through read and CLI @file inputs (#6047).
  • Fixed auto-retry for provider stream errors that explicitly tell callers to retry the request (#6019).

v0.80.2

Changed

... (truncated)

Changelog

Sourced from @​earendil-works/pi-agent-core's changelog.

[0.80.3] - 2026-06-30

Added

  • Added prepareNextTurnWithContext for Agent users that need the next-turn loop context.

Fixed

  • Fixed oversized harness shell execution timeouts to fail with a clear validation error instead of being clamped to an immediate timeout (#6181).
  • Fixed Agent.prepareNextTurn to keep receiving the run abort signal instead of the next-turn context.

[0.80.2] - 2026-06-23

Changed

  • Renamed the public harness shell execution options type from ExecutionEnvExecOptions to ShellExecOptions.

[0.80.1] - 2026-06-23

[0.80.0] - 2026-06-23

Breaking Changes

  • AgentHarnessOptions.models is required and is the only auth path: the harness streams turns, compaction, and branch summarization through the provided Models instance (models.streamSimple()/completeSimple()), resolving auth through the providers. AgentHarnessOptions.getApiKeyAndHeaders is removed — apps that resolved keys per request now express that as provider auth (ApiKeyAuth/OAuthAuth) on the providers in the Models collection. Build one with createModels() + provider factories (or builtinModels() from @earendil-works/pi-ai/providers/all); tests use fauxProvider().
  • compact(), generateSummary(), and generateBranchSummary() take a Models parameter and no longer accept explicit apiKey/headers.
  • StreamFn is defined structurally ((model, context, options?) => AssistantMessageEventStream | Promise<...>); Models.streamSimple satisfies it.
  • Removed the @earendil-works/pi-agent-core/base selective-provider entrypoint; use the root package with an explicit Models instance instead.

Fixed

  • Fixed harness session names to normalize newline characters before storing labels (#5999 by @​haoqixu).
  • Fixed harness compaction estimates to ignore malformed all-zero assistant usage after truncated responses (#5526 by @​dmmulroy).

[0.79.10] - 2026-06-22

Commits
  • a23abe4 Release v0.80.3
  • fd6659d fix(coding-agent): preserve run prompt during tool refresh
  • e547bb9 fix(coding-agent): refresh session state before next turn
  • c29bbc0 docs(agent): update models phase 9 plan
  • 8277bd6 Add [Unreleased] section for next cycle
  • 0201806 Release v0.80.2
  • 9096d5f docs: update changelog entries
  • 49fbe68 fix(ai): align api key credentials with auth json
  • b377623 Type name change
  • e000743 Add [Unreleased] section for next cycle
  • Additional commits viewable in compare view

Updates @earendil-works/pi-ai from 0.79.9 to 0.80.3

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v0.80.3

New Features

  • Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
  • Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
  • External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
  • Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
  • Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
  • Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

  • Added inherited Anthropic Claude Sonnet 5 model support.
  • Added get_entries and get_tree RPC commands for reading session entries and tree snapshots over RPC (#6078 by @​geraschenko).
  • Added a package ./rpc-entry export for launching Pi directly in RPC mode.
  • Added session-name change events for extensions (#6175 by @​xl0).
  • Added inherited Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
  • Added inherited Usage.reasoning token counts for providers that report reasoning/thinking token usage (#6057).
  • Added an externalEditor settings.json override for Ctrl+G external editor commands, with default fallbacks to Notepad on Windows and nano elsewhere (#6122).
  • Added an outputPad setting for user message, assistant message, and thinking horizontal padding (#6168).

Changed

  • Changed the default OpenAI model to gpt-5.5.
  • Changed inherited OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

  • Fixed inherited Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
  • Fixed inherited generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
  • Fixed inherited provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
  • Fixed inherited streamSimple() max-token caps so providers that count input and output against one context window do not reject long requests (#5595).
  • Fixed inherited OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
  • Fixed inherited Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).
  • Fixed pre-prompt compaction to stop after compaction instead of continuing immediately (#6074 by @​yzhg1983).
  • Fixed resource notifications to stay before messages when resuming sessions (#6048 by @​haoqixu).
  • Fixed startup benchmark timing output to print after TUI shutdown, preserve extension timings, and drain terminal-query replies before stopping benchmark mode (#6030 by @​xl0, #6063 by @​xl0).
  • Fixed extension tool changes to apply before the next provider request in the same agent run without dropping before_agent_start system-prompt overrides (#6162).
  • Fixed a crash when undici emits an internal client error while terminating a mid-stream HTTP response (#6133).
  • Fixed the compaction event regression test to cover status indicator cleanup and keep CI passing.
  • Fixed interactive status indicators so ending work, retry, compaction, or branch-summary indicators no longer shrink the TUI when clear-on-shrink is enabled (#6026).
  • Fixed --session and SessionManager.open() to reject non-empty invalid session files without overwriting them (#6002).
  • Fixed user-message transcript rendering to keep visible backslashes in Markdown escape sequences such as \" (#6105).
  • Fixed assistant messages stopped by output length to show a visible incomplete-response error (#4290).
  • Fixed --no-session --session-id so ephemeral CLI runs can use deterministic session IDs for provider cache affinity (#6070).
  • Fixed disk BMP image files to be detected, converted to PNG, and attached through read and CLI @file inputs (#6047).
  • Fixed auto-retry for provider stream errors that explicitly tell callers to retry the request (#6019).

v0.80.2

Changed

... (truncated)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[0.80.3] - 2026-06-30

Added

  • Added Anthropic Claude Sonnet 5 model metadata for Anthropic-compatible, Bedrock, OpenRouter, and Vercel AI Gateway providers.
  • Added Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
  • Added an optional reasoning field to Usage reporting reasoning/thinking token counts as a subset of output. Populated for Anthropic (output_tokens_details.thinking_tokens), OpenAI Responses/Codex/Azure (output_tokens_details.reasoning_tokens), OpenAI Completions (completion_tokens_details.reasoning_tokens), and Google Generative AI / Vertex (thoughtsTokenCount). Bedrock Converse and Mistral are not populated because those APIs do not return a reasoning token breakdown (#6057).

Changed

  • Changed OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

  • Fixed Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
  • Fixed generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
  • Fixed provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
  • Fixed streamSimple() to send a context-aware max-token cap so providers that count input and output against one context window do not reject long requests (#5595).
  • Fixed OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
  • Fixed retry classification for provider errors that explicitly tell callers to retry the request (#6019).
  • Fixed Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).

[0.80.2] - 2026-06-23

Changed

  • Changed ApiKeyCredential to use the auth.json-compatible discriminator type: "api_key" and provider-scoped env values instead of type: "api-key" and metadata.

Fixed

  • Fixed Anthropic-compatible custom models to use explicit compatibility metadata instead of provider-name heuristics for session-affinity headers and unsupported tool-field omissions.
  • Fixed request-scoped apiKey and env values to participate in provider auth resolution, so providers such as Cloudflare can derive request-specific base URLs from explicit call options (#6021).
  • Restored temporary legacy per-API stream aliases such as streamSimpleOpenAICompletions on the compat entrypoint (#6016, #6017).
  • Restored runtime detectCompat fallback in openai-completions for models without explicit compat metadata (#6020).

[0.80.1] - 2026-06-23

Fixed

  • Fixed a regression in Amazon Bedrock scoped AWS_PROFILE endpoint resolution for built-in inference profile endpoints.
  • Fixed Fireworks Anthropic-compatible requests to apply session-affinity and unsupported tool-field defaults for custom Fireworks models.
  • Fixed Together MiniMax M2.7 metadata to avoid unsupported Together reasoning toggles.

[0.80.0] - 2026-06-23

Breaking Changes

  • The root entrypoint (@earendil-works/pi-ai) is now core-only and side-effect free. The old global API moved to the temporary @earendil-works/pi-ai/compat entrypoint, a strict superset of the root: switching a file's import path is the only migration step. Moved symbols include stream/complete/streamSimple/completeSimple, getModel/getModels/getProviders (now deprecated aliases of getBuiltinModel/getBuiltinModels/getBuiltinProviders from @earendil-works/pi-ai/providers/all), registerApiProvider/unregisterApiProviders/resetApiProviders/getApiProvider, getEnvApiKey/findEnvKeys, setBedrockProviderModule, the per-API lazy stream wrappers (anthropicMessagesApi, ...), and the image-generation API.
  • Renamed the Provider type to ProviderId. Provider now names the runtime provider interface (id, name, auth, model listing, stream behavior).
  • API implementation modules moved from src/providers/ to @earendil-works/pi-ai/api/*, renamed by API id (anthropic -> api/anthropic-messages, google -> api/google-generative-ai, mistral -> api/mistral-conversations, amazon-bedrock -> api/bedrock-converse-stream), each exporting exactly stream and streamSimple. The old per-impl export names (streamAnthropic, streamSimpleAnthropic, ...) and legacy raw API subpaths (./anthropic, ./google, ./openai-completions, ...) are gone; import raw API implementations through @earendil-works/pi-ai/api/*.

... (truncated)

Commits
  • a23abe4 Release v0.80.3
  • f98a154 docs: audit changelog entries
  • 5c1a297 fix(ai): update generated model catalogue
  • 3d6acb3 fix(ai): regenerate model catalog
  • 6fbeba5 Merge pull request #5832 from stephanmck/fix/provider-error-body-passthrough-...
  • b91bdd5 fix(ai): preserve Z.AI thinking content
  • 5411373 fix(ai): use HTTP timeout for Codex SSE headers
  • 09f1059 fix(ai): clamp streamSimple max tokens
  • f78b163 fix(ai): revert minimax max token clamp
  • 62fad94 fix(ai): surface provider HTTP error body instead of opaque SDK message
  • Additional commits viewable in compare view

Updates @earendil-works/pi-coding-agent from 0.79.9 to 0.80.3

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.80.3

New Features

  • Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
  • Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
  • External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
  • Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
  • Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
  • Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

  • Added inherited Anthropic Claude Sonnet 5 model support.
  • Added get_entries and get_tree RPC commands for reading session entries and tree snapshots over RPC (#6078 by @​geraschenko).
  • Added a package ./rpc-entry export for launching Pi directly in RPC mode.
  • Added session-name change events for extensions (#6175 by @​xl0).
  • Added inherited Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
  • Added inherited Usage.reasoning token counts for providers that report reasoning/thinking token usage (#6057).
  • Added an externalEditor settings.json override for Ctrl+G external editor commands, with default fallbacks to Notepad on Windows and nano elsewhere (#6122).
  • Added an outputPad setting for user message, assistant message, and thinking horizontal padding (#6168).

Changed

  • Changed the default OpenAI model to gpt-5.5.
  • Changed inherited OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

  • Fixed inherited Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
  • Fixed inherited generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
  • Fixed inherited provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
  • Fixed inherited streamSimple() max-token caps so providers that count input and output against one context window do not reject long requests (#5595).
  • Fixed inherited OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
  • Fixed inherited Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).
  • Fixed pre-prompt compaction to stop after compaction instead of continuing immediately (#6074 by @​yzhg1983).
  • Fixed resource notifications to stay before messages when resuming sessions (#6048 by @​haoqixu).
  • Fixed startup benchmark timing output to print after TUI shutdown, preserve extension timings, and drain terminal-query replies before stopping benchmark mode (#6030 by @​xl0, #6063 by @​xl0).
  • Fixed extension tool changes to apply before the next provider request in the same agent run without dropping before_agent_start system-prompt overrides (#6162).
  • Fixed a crash when undici emits an internal client error while terminating a mid-stream HTTP response (#6133).
  • Fixed the compaction event regression test to cover status indicator cleanup and keep CI passing.
  • Fixed interactive status indicators so ending work, retry, compaction, or branch-summary indicators no longer shrink the TUI when clear-on-shrink is enabled (#6026).
  • Fixed --session and SessionManager.open() to reject non-empty invalid session files without overwriting them (#6002).
  • Fixed user-message transcript rendering to keep visible backslashes in Markdown escape sequences such as \" (#6105).
  • Fixed assistant messages stopped by output length to show a visible incomplete-response error (#4290).
  • Fixed --no-session --session-id so ephemeral CLI runs can use deterministic session IDs for provider cache affinity (#6070).
  • Fixed disk BMP image files to be detected, converted to PNG, and attached through read and CLI @file inputs (#6047).
  • Fixed auto-retry for provider stream errors that explicitly tell callers to retry the request (#6019).

v0.80.2

Changed

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.80.3] - 2026-06-30

New Features

  • Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
  • Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
  • External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
  • Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
  • Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
  • Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

  • Added inherited Anthropic Claude Sonnet 5 model support.
  • Added get_entries and get_tree RPC commands for reading session entries and tree snapshots over RPC (#6078 by @​geraschenko).
  • Added a package ./rpc-entry export for launching Pi directly in RPC mode.
  • Added session-name change events for extensions (#6175 by @​xl0).
  • Added inherited Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
  • Added inherited Usage.reasoning token counts for providers that report reasoning/thinking token usage (#6057).
  • Added an externalEditor settings.json override for Ctrl+G external editor commands, with default fallbacks to Notepad on Windows and nano elsewhere (#6122).
  • Added an outputPad setting for user message, assistant message, and thinking horizontal padding (#6168).

Changed

  • Changed the default OpenAI model to gpt-5.5.
  • Changed inherited OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

  • Fixed inherited Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
  • Fixed inherited generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
  • Fixed inherited provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
  • Fixed inherited streamSimple() max-token caps so providers that count input and output against one context window do not reject long requests (#5595).
  • Fixed inherited OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
  • Fixed inherited Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).
  • Fixed pre-prompt compaction to stop after compaction instead of continuing immediately (#6074 by @​yzhg1983).
  • Fixed resource notifications to stay before messages when resuming sessions (#6048 by @​haoqixu).
  • Fixed startup benchmark timing output to print after TUI shutdown, preserve extension timings, and drain terminal-query replies before stopping benchmark mode (#6030 by @​xl0, #6063 by @​xl0).
  • Fixed extension tool changes to apply before the next provider request in the same agent run without dropping before_agent_start system-prompt overrides (#6162).
  • Fixed a crash when undici emits an internal client error while terminating a mid-stream HTTP response (#6133).
  • Fixed the compaction event regression test to cover status indicator cleanup and keep CI passing.
  • Fixed interactive status indicators so ending work, retry, compaction, or branch-summary indicators no longer shrink the TUI when clear-on-shrink is enabled (#6026).
  • Fixed --session and SessionManager.open() to reject non-empty invalid session files without overwriting them (#6002).
  • Fixed user-message transcript rendering to keep visible backslashes in Markdown escape sequences such as \" (#6105).
  • Fixed assistant messages stopped by output length to show a visible incomplete-response error (#4290).
  • Fixed --no-session --session-id so ephemeral CLI runs can use deterministic session IDs for provider cache affinity (#6070).
  • Fixed disk BMP image files to be detected, converted to PNG, and attached through read and CLI @file inputs (#6047).
  • Fixed auto-retry for provider stream errors that explicitly tell callers to retry the request (#6019).

[0.80.2] - 2026-06-23

... (truncated)

Commits
  • a23abe4 Release v0.80.3
  • f98a154 docs: audit changelog entries
  • fd6659d fix(coding-agent): preserve run prompt during tool refresh
  • e547bb9 fix(coding-agent): refresh session state before next turn
  • 9be55bc fix(coding-agent): apply output padding to user messages
  • 6564d94 feat(coding-agent): add configurable assistant output padding
  • 2117b61 fix(coding-agent): handle undici mid-stream client errors
  • 726a9c5 fix(coding-agent): emit session name changes to extensions
  • 927e980 fix(coding-agent): fix compaction event regression test
  • 5d49927 fix(coding-agent): stabilize interactive status indicators
  • Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 0.79.9 to 0.80.3

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v0.80.3

New Features

  • Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
  • Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
  • External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
  • Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
  • Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
  • Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

  • Added inherited Anthropic Claude Sonnet 5 model support.
  • Added get_entries and get_tree RPC commands for reading session entries and tree s...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 2, 2026
@dependabot
dependabot Bot requested a review from Bhasvanth-Dev9380 as a code owner July 2, 2026 17:50
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dab5a725b7 branch from 658871b to bbdf745 Compare July 5, 2026 04:31
Bumps the production group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@composio/core](https://github.com/ComposioHQ/composio/tree/HEAD/ts/packages/core) | `0.10.0` | `0.13.1` |
| [@earendil-works/pi-agent-core](https://github.com/earendil-works/pi/tree/HEAD/packages/agent) | `0.79.9` | `0.80.3` |
| [@earendil-works/pi-ai](https://github.com/earendil-works/pi/tree/HEAD/packages/ai) | `0.79.9` | `0.80.3` |
| [@earendil-works/pi-coding-agent](https://github.com/earendil-works/pi/tree/HEAD/packages/coding-agent) | `0.79.9` | `0.80.3` |
| [@earendil-works/pi-tui](https://github.com/earendil-works/pi/tree/HEAD/packages/tui) | `0.79.9` | `0.80.3` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `7.17.0` | `7.18.0` |
| [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex) | `1.41.0` | `1.42.1` |
| [playwright-core](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.16` | `7.5.19` |



Updates `@composio/core` from 0.10.0 to 0.13.1
- [Release notes](https://github.com/ComposioHQ/composio/releases)
- [Changelog](https://github.com/ComposioHQ/composio/blob/next/ts/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ComposioHQ/composio/commits/@composio/core@0.13.1/ts/packages/core)

Updates `@earendil-works/pi-agent-core` from 0.79.9 to 0.80.3
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/agent/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.3/packages/agent)

Updates `@earendil-works/pi-ai` from 0.79.9 to 0.80.3
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.3/packages/ai)

Updates `@earendil-works/pi-coding-agent` from 0.79.9 to 0.80.3
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.3/packages/coding-agent)

Updates `@earendil-works/pi-tui` from 0.79.9 to 0.80.3
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/tui/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.3/packages/tui)

Updates `@slack/web-api` from 7.17.0 to 7.18.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.17.0...@slack/web-api@7.18.0)

Updates `convex` from 1.41.0 to 1.42.1
- [Release notes](https://github.com/get-convex/convex-backend/releases)
- [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md)
- [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex)

Updates `playwright-core` from 1.60.0 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.60.0...v1.61.1)

Updates `tar` from 7.5.16 to 7.5.19
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.16...v7.5.19)

---
updated-dependencies:
- dependency-name: "@composio/core"
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@earendil-works/pi-agent-core"
  dependency-version: 0.80.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@earendil-works/pi-ai"
  dependency-version: 0.80.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@earendil-works/pi-coding-agent"
  dependency-version: 0.80.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@earendil-works/pi-tui"
  dependency-version: 0.80.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@slack/web-api"
  dependency-version: 7.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: convex
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: playwright-core
  dependency-version: 1.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: tar
  dependency-version: 7.5.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dab5a725b7 branch from bbdf745 to 1fe9721 Compare July 5, 2026 11:33
@dependabot @github

dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 12, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dab5a725b7 branch July 12, 2026 11:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants