Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 5 updates - #959

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/production-dependencies-2ff1c8037a
Open

chore(deps): bump the production-dependencies group across 1 directory with 5 updates#959
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/production-dependencies-2ff1c8037a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
@oh-my-pi/pi-coding-agent 17.2.1 17.2.14
ajv 8.18.0 8.20.0
better-sqlite3 12.6.2 12.11.1
commander 14.0.2 14.0.3
ws 8.21.1 8.21.3

Updates @oh-my-pi/pi-coding-agent from 17.2.1 to 17.2.14

Release notes

Sourced from @​oh-my-pi/pi-coding-agent's releases.

v17.2.14

@​oh-my-pi/pi-ai

Added

  • Added forceReasoningOff and disableReasoning options to disable reasoning in OpenAI and Azure OpenAI models

@​oh-my-pi/pi-coding-agent

Added

  • Added externalThinking setting for private scratchpad reasoning via the new think tool

Full Changelog: can1357/oh-my-pi@v17.2.13...v17.2.14

v17.2.13

@​oh-my-pi/pi-agent-core

Fixed

  • Fixed Cursor sessions re-executing settled tools when an owned dialect projector rebuilds toolCall blocks: snapshotAssistantContentBlock now copies kCursorExecResolved explicitly so agent-loop still skips already-settled calls.

@​oh-my-pi/pi-ai

Changed

  • Standardized first-party outbound User-Agent headers on omp/<version> via the shared USER_AGENT utility.

Fixed

  • Fixed the Amazon Bedrock and Cursor transports ignoring StreamOptions.headers; both built their request headers from scratch, so caller-supplied tracing or attribution headers were silently dropped while working on every other provider (#8107 by @​svperfecta).
  • Fixed Antigravity Flash turns hanging after successful response headers when the endpoint never emitted an SSE event; the provider now cancels the stalled body and fails over after 60 seconds while retaining the longer allowance for Pro reasoning starts.
  • Fixed Cursor exec-bridge bash/grep calls failing ArkType validation when the server omitted optional frame fields: synthesized and executed tool args now drop undefined keys (cwd, case, skip, timeout) instead of writing optional: value || undefined.
  • Fixed Cursor sessions double-executing settled tools when tools.format is an owned dialect (e.g. gemini): wrapInbandToolStream rebuilt toolCall blocks without copying kCursorExecResolved, so agent-loop re-ran bash/grep/todo and appended a second result for the same call id.
  • Fixed Codex Responses Lite requests for opaque model codenames such as Daybreak omitting the required reasoning.context: "all_turns" value and failing with HTTP 400.
  • Fixed Cursor personal usage reporting for current Pro / Pro+ / Ultra /api/usage-summary payloads that expose individualUsage.plan (and optional onDemand) instead of the older individualUsage.overall bucket (#7998 by @​dnth).
  • Allowed passive Google callers to accept empty or thinking-only STOP responses as successful silence instead of exhausting the provider's empty-response retry budget. (#8223)
  • Fixed the AWS credential resolver ignoring role_arn profiles: shared-config role chaining (source_profile recursion, web_identity_token_file, credential_source) now resolves via STS AssumeRole/AssumeRoleWithWebIdentity, honoring role_session_name/duration_seconds/external_id, so Bedrock is detected on EKS/IRSA and multi-account setups instead of reporting "No models available" (#8209).
  • Fixed Bedrock availability being under-detected on Nitro/EKS hosts: the EC2 metadata probe now recognizes Nitro DMI markers (board_asset_tag instance ids, Amazon EC2 vendor fields) in addition to the Xen ec2 UUID prefix (#8209).
  • Fixed DeepSeek Responses targets (opencode-go) rejecting a thinking-mode continuation with 400 The reasoning_text in the thinking mode must be passed back to the API after a prewalk hand-off plus mid-run compaction: the Responses input builder re-encoded replayed assistant turns without a reasoning item, so the request enabled reasoning but shipped no reasoning_text. The encoder now synthesizes a reasoning_text reasoning item for every replayed assistant turn when the target requires reasoning replay in thinking mode (requiresReasoningContentForAllAssistantTurns / requiresReasoningContentForToolCalls), mirroring the chat-completions reasoning_content safety net (#8248).

@​oh-my-pi/pi-catalog

Changed

  • Standardized catalog discovery User-Agent headers on omp/<version> via the shared USER_AGENT utility.

Fixed

... (truncated)

Commits
  • 052095e test(coding-agent): fixed think-tool CI failures in gallery and activation tests
  • eb5e167 test(coding-agent): included think tool in HIDDEN_TOOLS expectation
  • e5ebb2a chore: bump version to 17.2.14
  • 10fd422 feat: introduced external thinking support and private scratchpad think tool
  • 2157bec chore: bump version to 17.2.13
  • af52e1d refactor(coding-agent): verified binary updates by explicit path
  • 87a18e3 feat(cli): enabled binary updates and script-shim takeover on windows
  • 54ce9e4 fix(ai): synthesized reasoning_text on DeepSeek Responses replay
  • b524dfe refactor: standardized outbound User-Agent headers on shared utility constant
  • 8fed936 refactor(ai): rebranded openrouter identifiers and user agent to omp
  • Additional commits viewable in compare view

Updates ajv from 8.18.0 to 8.20.0

Release notes

Sourced from ajv's releases.

v8.20.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

v8.19.0

What's Changed

Full Changelog: ajv-validator/ajv@v8.18.0...v8.19.0

Commits

Updates better-sqlite3 from 12.6.2 to 12.11.1

Release notes

Sourced from better-sqlite3's releases.

v12.11.1

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.11.0...v12.11.1

v12.11.0

⚠️CAUTION: NOT A VIABLE RELEASE

Use v12.11.1 instead.

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.10.1...v12.11.0

v12.10.1

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.10.0...v12.10.1

v12.10.0

What's Changed

Full Changelog: WiseLibs/better-sqlite3@v12.9.1...v12.10.0

v12.9.1

⚠️CAUTION: NOT A VIABLE RELEASE

Electron v39+ prebuilds are not building successfully at the moment. Stick to v12.9.0 for now.

What's Changed

New Contributors

Full Changelog: WiseLibs/better-sqlite3@v12.9.0...v12.9.1

... (truncated)

Commits

Updates commander from 14.0.2 to 14.0.3

Release notes

Sourced from commander's releases.

v14.0.3

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)
  • simple readability improvements to README (#2465)
Changelog

Sourced from commander's changelog.

[14.0.3] (2026-01-31)

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)
  • simple readability improvements to README (#2465)
Commits

Updates ws from 8.21.1 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

  • The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

  • Fixed a test for CITGM (2eb3be0b).
Commits
  • c791e70 [dist] 8.21.3
  • e97a20e [fix] Reject offers with client_max_window_bits below config
  • 787ebf2 [dist] 8.21.2
  • b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
  • e4bb883 [security] Use GitHub PVR as main reporting channel
  • 2eb3be0 [test] Skip test on Node.js versions where it does not apply
  • See full diff in compare view

@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/production-dependencies-2ff1c8037a branch 6 times, most recently from 7cd0751 to 1a6682d Compare August 14, 2026 06:34
@dependabot
chore(deps): bump the production-dependencies group across 1 director…
bedacdd 
…y with 5 updates

Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@oh-my-pi/pi-coding-agent](https://github.com/can1357/oh-my-pi/tree/HEAD/packages/coding-agent) | `17.2.1` | `17.2.14` |
| [ajv](https://github.com/ajv-validator/ajv) | `8.18.0` | `8.20.0` |
| [better-sqlite3](https://github.com/WiseLibs/better-sqlite3) | `12.6.2` | `12.11.1` |
| [commander](https://github.com/tj/commander.js) | `14.0.2` | `14.0.3` |
| [ws](https://github.com/websockets/ws) | `8.21.1` | `8.21.3` |



Updates `@oh-my-pi/pi-coding-agent` from 17.2.1 to 17.2.14
- [Release notes](https://github.com/can1357/oh-my-pi/releases)
- [Commits](https://github.com/can1357/oh-my-pi/commits/v17.2.14/packages/coding-agent)

Updates `ajv` from 8.18.0 to 8.20.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v8.18.0...v8.20.0)

Updates `better-sqlite3` from 12.6.2 to 12.11.1
- [Release notes](https://github.com/WiseLibs/better-sqlite3/releases)
- [Commits](WiseLibs/better-sqlite3@v12.6.2...v12.11.1)

Updates `commander` from 14.0.2 to 14.0.3
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v14.0.2...v14.0.3)

Updates `ws` from 8.21.1 to 8.21.3
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.1...8.21.3)

---
updated-dependencies:
- dependency-name: "@oh-my-pi/pi-coding-agent"
  dependency-version: 17.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ajv
  dependency-version: 8.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: better-sqlite3
  dependency-version: 12.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: commander
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/production-dependencies-2ff1c8037a branch from 1a6682d to bedacdd Compare August 14, 2026 22:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants