chore(deps)(deps-dev): bump @steipete/oracle from 0.17.1 to 0.17.3 in the npm-dev group

[dependabot]

Bumps the npm-dev group with 1 update: @steipete/oracle.

Updates @steipete/oracle from 0.17.1 to 0.17.3

Release notes

Sourced from @​steipete/oracle's releases.

v0.17.3

Highlight: browser-mode answers and recovery are reliable again — no more discarded responses, and authenticated sessions survive a reattach.

Fixed

• Browser: treat the skip-ahead control labels as placeholder signals only when the entire turn text is short chrome text, so substantial assistant answers that mention those labels are no longer discarded.
• Browser: align reattach recovery cookie sync with the launch path for manual-login profiles with explicit cookie sync, so recovery can reopen an authenticated conversation with supplied cookies instead of skipping sync. Thanks @​enieuwy!
• Browser: recognize the Japanese 詳細設定 → 推論レベル controls in ChatGPT's unified Intelligence picker, allowing explicit Pro effort selection without weakening the fail-closed guard for unknown languages. Thanks @​kiyo-e!
• Browser: honor explicit --browser-headless for locally launched Chrome/Chromium binaries while preserving the headful default. Explicit --browser-headless still conflicts with --browser-attach-running; a saved browser.headless preference is ignored in attach-running mode. Thanks @​enieuwy!

---

npm: https://www.npmjs.com/package/@​steipete/oracle/v/0.17.3 Tarball integrity: sha512-xoziw8brto9rEtOROHcMr4vHu70DDGQJ41bwMHpkJgA77MIZ11B+IQtGqKpZ48WkihmHkEUVEvWsf+eDwxtwgg==

0.17.2

Highlight: browser mode works with ChatGPT's redesigned model picker again — model selection moved under Advanced → Model, and the gpt-*-pro aliases now select the right model and the Pro effort tier.

Fixed

• Browser: navigate ChatGPT's unified picker, where the model version lives under Advanced → Model and effort under Advanced → Effort. The gpt-5.5-pro family of aliases now resolves to the GPT-5.5 model with Pro thinking time instead of failing against the removed flat menu; an explicit --browser-thinking-time still wins (#362, thanks @​shivamiitgoa).
• Security: restrict existing and newly created session transcripts, model metadata, and browser artifacts to the current user, without following symlinks during upgrade hardening. Thanks @​bunlongheng!

Added

• Browser: a pro thinking-time level that selects ChatGPT's Pro effort tier on the model it is already using. It fails closed: an unconfirmed selection aborts the run rather than silently submitting at a cheaper tier.

Changed

• Dependencies: update Google GenAI, Node types, Chrome DevTools protocol, esbuild, tsx, shiki, tokentally (now pricing cached tokens), hono, protobufjs, vite, and related transitives.
• Developer workflow: remove the obsolete scoped-commit helper and allow standard Git commands in isolated worktrees.

Verification

• npm: @​steipete/oracle@0.17.2
• Registry tarball: oracle-0.17.2.tgz
• Integrity: sha512-Y2I/sTML2YPZrmYaw1QbpNd7bt6so9ld1pTjRP/MiEKTWanYjoICkmCpWBplPXq+KzHiVsgyPqUZpwxxOpa2Jg==
• CI: run 31417373180

Changelog

Sourced from @​steipete/oracle's changelog.

0.17.3 — 2026-08-13

Highlight: browser-mode answers and recovery are reliable again — no more discarded responses, and authenticated sessions survive a reattach.

Fixed

• Browser: treat the skip-ahead control labels as placeholder signals only when the entire turn text is short chrome text, so substantial assistant answers that mention those labels are no longer discarded.
• Browser: align reattach recovery cookie sync with the launch path for manual-login profiles with explicit cookie sync, so recovery can reopen an authenticated conversation with supplied cookies instead of skipping sync. Thanks @​enieuwy!
• Browser: recognize the Japanese 詳細設定 → 推論レベル controls in ChatGPT's unified Intelligence picker, allowing explicit Pro effort selection without weakening the fail-closed guard for unknown languages. Thanks @​kiyo-e!
• Browser: honor explicit --browser-headless for locally launched Chrome/Chromium binaries while preserving the headful default. Explicit --browser-headless still conflicts with --browser-attach-running; a saved browser.headless preference is ignored in attach-running mode. Thanks @​enieuwy!

0.17.2 — 2026-08-10

Highlight: browser mode works with ChatGPT's redesigned model picker again — model selection moved under Advanced → Model, and the gpt-*-pro aliases now select the right model and the Pro effort tier.

Fixed

• Browser: navigate ChatGPT's unified picker, where the model version lives under Advanced → Model and effort under Advanced → Effort. The gpt-5.5-pro family of aliases now resolves to the GPT-5.5 model with Pro thinking time instead of failing against the removed flat menu; an explicit --browser-thinking-time still wins (#362, thanks @​shivamiitgoa).
• Security: restrict existing and newly created session transcripts, model metadata, and browser artifacts to the current user, without following symlinks during upgrade hardening. Thanks @​bunlongheng!

Added

• Browser: a pro thinking-time level that selects ChatGPT's Pro effort tier on the model it is already using. It fails closed: an unconfirmed selection aborts the run rather than silently submitting at a cheaper tier.

Changed

• Dependencies: update Google GenAI, Node types, Chrome DevTools protocol, esbuild, tsx, shiki, tokentally (now pricing cached tokens), hono, protobufjs, vite, and related transitives.
• Developer workflow: remove the obsolete scoped-commit helper and allow standard Git commands in isolated worktrees.

Commits

• 6b17e6d chore(release): prepare 0.17.3
• 5ed6a98 browser: sync cookies during authenticated session recovery (#371)
• 38e82d0 fix(browser): bound Pro answer-now placeholder detection (#369)
• 3104799 browser: honor explicit --browser-headless (#368)
• f5b9c81 fix(browser): recognize Japanese Intelligence effort labels (#365)
• 5941f08 chore(deps): migrate to pnpm 11 (#364)
• c0e26dd chore(changelog): open 0.17.3
• 4bd5989 chore(release): prepare 0.17.2
• 5aaca9c chore(deps): refresh dependency graph (#363)
• 7b364aa fix(browser): navigate Advanced model submenu (#362)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.