chore(deps-dev): bump the dev-dependencies group with 4 updates

[dependabot]

Bumps the dev-dependencies group with 4 updates: @earendil-works/pi-coding-agent, @earendil-works/pi-tui, @types/node and typebox.

Updates @earendil-works/pi-coding-agent from 1.0.2 to 1.1.0

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v1.1.0

New Features

• Program status reporting: terminals and agent dashboards that support OSC 7501 see whether Pi is working, blocked on a dialog or login, done, or failed. See Program status.
• Claude Haiku 5.5: anthropic/claude-haiku-5-5, with adaptive thinking up to xhigh/max effort.
• Adjust default tools with +name/-name: --tools entries like pi -t +codemode,-write change the default selection instead of replacing it. See Tools.
• GPT-6 Luna and image classification: OpenAI's GPT-6 Luna is available as a classifier model through the Decisions API, and codemode's models.classify() accepts images for classifiers that support them. See Use classifier models.
• Native llama.cpp decision models: Julia-1, Laya, Kev, lev, and OpenJev served by llama.cpp 0.6.0 or later run natively as classifiers through /v1/systemone. See Classification.

Added

• Added +name and -name entries to --tools, which change the default tool selection instead of replacing it, for example pi -t +codemode
• Added durationMs to the tool render context and to tool_execution_end extension events: the recorded execution time of a final tool result (#10549)
• Added outputPad to the tool render context (#10557 by @​rwachtler)
• Added OpenAI's GPT-6 Luna as a classifier model through the Decisions API, available with OPENAI_API_KEY (see Use classifier models)
• Added images to codemode's models.classify() context, so classifiers that accept images, such as GPT-6 Luna, can judge them
• Added program status reporting with OSC 7501: terminals and agent dashboards that support it see whether Pi is working, blocked on a dialog or login, done, or failed. PI_PROGRAM_STATUS=1|0 overrides detection (see Terminal setup) (#10607)
• Added aborted to agent_settled session, extension, and JSON events, so integrations can tell a cancelled run from a finished one (#10607)
• Added Claude Haiku 5.5 (anthropic/claude-haiku-5-5), with adaptive thinking up to xhigh/max effort and prompt caching on Bedrock
• Added native llama.cpp decision models: Julia-1, Laya, Kev, lev, and OpenJev served by llama.cpp 0.6.0 or later are listed only as classifiers through /v1/systemone instead of as chat models (see Classification) (#10382)

Changed

• Changed outputPad to also apply to ! command output, tool output, and summary blocks (#9946, #10557 by @​rwachtler)
• Changed pi mcp login --timeout to limit the whole sign-in, including requests to the authorization server, instead of only the wait for the browser (#10565)

Fixed

• Fixed bash and PowerShell results losing Took after reloading a session, and the live Took including wall-clock steps; both now show the recorded execution time (#10549)
• Fixed managed installs keeping every old release; pi update now keeps only the new release and the one it updated from (#10392, #10511 by @​davidbrai)
• Fixed standalone binaries loading .env, .env.local, and .env.development from the launch directory into Pi's environment (#10473)
• Fixed !! command headers losing their dim color once output arrives (#10557 by @​rwachtler)
• Fixed the codemode description not marking searchTools(), describeTool(), and describeNamespace() as async, which led models to serialize the unawaited promise as {} (#10555)
• Fixed codemode output items running together, so models could not tell where one text() or console.log() output ended and the next began. With several text items, each now starts with a ==> text N/M <== line, and console calls follow the other output in one <console_output> block with one line per call
• Fixed /mcp waiting for all servers to connect before opening; the manager now updates live and remains usable while enabling, reconnecting, or disabling servers (#10562)
• Fixed images being dropped as "could not be resized" when running under node --watch on Node 24.19+ and 26.x, where Node posts its own messages on the image resize worker channel (#10527)
• Fixed clipboard paste doing nothing in Termux, and failed copies there omitting the Termux:API install hint (#10391)
• Fixed ! and RPC bash output keeping fragments of color codes, such as a stray m, when a code was split across output chunks (#10504)
• Fixed MCP OAuth sign-ins that could not be cancelled while waiting on the authorization server and kept running after the session ended. The sign-in screen now cancels with Esc at every step, session shutdown aborts a running sign-in, and each request to the authorization server times out after 15 seconds (#10565)
• Fixed shutdown waiting up to 15 seconds to refresh an MCP OAuth token that was about to expire, only to close the server's session (#10565)
• Fixed the fullscreen text selection surviving session switches and other transcript rebuilds, which highlighted unrelated text in the new transcript (#9311, #10567 by @​christianklotz)
• Fixed OpenAI models on Bedrock ignoring the thinking level and always running at Bedrock's default reasoning effort (#9331, #10142 by @​jsanter27)
• Fixed model headers in models.json not overriding the originator and User-Agent headers of Codex requests (#10429 by @​lucasmeijer)
• Fixed server_busy and servers are currently busy provider errors ending the turn instead of being retried (#10543)
• Fixed Mistral responses that end with finish_reason: "error" not being retried (#10487)
• Reduced context-limit request failures by estimating input at 3.5 characters per token instead of 4 when calculating output limits (#10497)
• Fixed Radius models disabled by an organization owner still being listed
• Fixed Anthropic browser login failing with "localhost refused to connect" when port 53692 is reserved or in use, for example by Hyper-V/WSL port exclusions on Windows: login now falls back to a free loopback port (#10571)
• Fixed session costs undercounting long prompts on models with prompt-length pricing tiers, such as Claude Haiku 5.5, Gemini 3.1 Pro, and GPT-5.4, through OpenCode, OpenCode Go, OpenRouter, Vercel AI Gateway, Google, MiniMax, and other providers
• Fixed Markdown links not being clickable in Herdr (#10573)

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[1.1.0] - 2026-10-07

New Features

• Program status reporting: terminals and agent dashboards that support OSC 7501 see whether Pi is working, blocked on a dialog or login, done, or failed. See Program status.
• Claude Haiku 5.5: anthropic/claude-haiku-5-5, with adaptive thinking up to xhigh/max effort.
• Adjust default tools with +name/-name: --tools entries like pi -t +codemode,-write change the default selection instead of replacing it. See Tools.
• GPT-6 Luna and image classification: OpenAI's GPT-6 Luna is available as a classifier model through the Decisions API, and codemode's models.classify() accepts images for classifiers that support them. See Use classifier models.
• Native llama.cpp decision models: Julia-1, Laya, Kev, lev, and OpenJev served by llama.cpp 0.6.0 or later run natively as classifiers through /v1/systemone. See Classification.

Added

• Added +name and -name entries to --tools, which change the default tool selection instead of replacing it, for example pi -t +codemode
• Added durationMs to the tool render context and to tool_execution_end extension events: the recorded execution time of a final tool result (#10549)
• Added outputPad to the tool render context (#10557 by @​rwachtler)
• Added OpenAI's GPT-6 Luna as a classifier model through the Decisions API, available with OPENAI_API_KEY (see Use classifier models)
• Added images to codemode's models.classify() context, so classifiers that accept images, such as GPT-6 Luna, can judge them
• Added program status reporting with OSC 7501: terminals and agent dashboards that support it see whether Pi is working, blocked on a dialog or login, done, or failed. PI_PROGRAM_STATUS=1|0 overrides detection (see Terminal setup) (#10607)
• Added aborted to agent_settled session, extension, and JSON events, so integrations can tell a cancelled run from a finished one (#10607)
• Added Claude Haiku 5.5 (anthropic/claude-haiku-5-5), with adaptive thinking up to xhigh/max effort and prompt caching on Bedrock
• Added native llama.cpp decision models: Julia-1, Laya, Kev, lev, and OpenJev served by llama.cpp 0.6.0 or later are listed only as classifiers through /v1/systemone instead of as chat models (see Classification) (#10382)

Changed

• Changed outputPad to also apply to ! command output, tool output, and summary blocks (#9946, #10557 by @​rwachtler)
• Changed pi mcp login --timeout to limit the whole sign-in, including requests to the authorization server, instead of only the wait for the browser (#10565)

Fixed

• Fixed bash and PowerShell results losing Took after reloading a session, and the live Took including wall-clock steps; both now show the recorded execution time (#10549)
• Fixed managed installs keeping every old release; pi update now keeps only the new release and the one it updated from (#10392, #10511 by @​davidbrai)
• Fixed standalone binaries loading .env, .env.local, and .env.development from the launch directory into Pi's environment (#10473)
• Fixed !! command headers losing their dim color once output arrives (#10557 by @​rwachtler)
• Fixed the codemode description not marking searchTools(), describeTool(), and describeNamespace() as async, which led models to serialize the unawaited promise as {} (#10555)
• Fixed codemode output items running together, so models could not tell where one text() or console.log() output ended and the next began. With several text items, each now starts with a ==> text N/M <== line, and console calls follow the other output in one <console_output> block with one line per call
• Fixed /mcp waiting for all servers to connect before opening; the manager now updates live and remains usable while enabling, reconnecting, or disabling servers (#10562)
• Fixed images being dropped as "could not be resized" when running under node --watch on Node 24.19+ and 26.x, where Node posts its own messages on the image resize worker channel (#10527)
• Fixed clipboard paste doing nothing in Termux, and failed copies there omitting the Termux:API install hint (#10391)
• Fixed ! and RPC bash output keeping fragments of color codes, such as a stray m, when a code was split across output chunks (#10504)
• Fixed MCP OAuth sign-ins that could not be cancelled while waiting on the authorization server and kept running after the session ended. The sign-in screen now cancels with Esc at every step, session shutdown aborts a running sign-in, and each request to the authorization server times out after 15 seconds (#10565)
• Fixed shutdown waiting up to 15 seconds to refresh an MCP OAuth token that was about to expire, only to close the server's session (#10565)
• Fixed the fullscreen text selection surviving session switches and other transcript rebuilds, which highlighted unrelated text in the new transcript (#9311, #10567 by @​christianklotz)
• Fixed OpenAI models on Bedrock ignoring the thinking level and always running at Bedrock's default reasoning effort (#9331, #10142 by @​jsanter27)
• Fixed model headers in models.json not overriding the originator and User-Agent headers of Codex requests (#10429 by @​lucasmeijer)
• Fixed server_busy and servers are currently busy provider errors ending the turn instead of being retried (#10543)
• Fixed Mistral responses that end with finish_reason: "error" not being retried (#10487)
• Reduced context-limit request failures by estimating input at 3.5 characters per token instead of 4 when calculating output limits (#10497)
• Fixed Radius models disabled by an organization owner still being listed
• Fixed Anthropic browser login failing with "localhost refused to connect" when port 53692 is reserved or in use, for example by Hyper-V/WSL port exclusions on Windows: login now falls back to a free loopback port (#10571)
• Fixed session costs undercounting long prompts on models with prompt-length pricing tiers, such as Claude Haiku 5.5, Gemini 3.1 Pro, and GPT-5.4, through OpenCode, OpenCode Go, OpenRouter, Vercel AI Gateway, Google, MiniMax, and other providers

... (truncated)

Commits

• abe508e Release v1.1.0
• e916310 test(coding-agent): wait for streaming and watcher events instead of fixed sl...
• 70759f4 fix: address actionable npm audit findings
• dce4ae6 docs: audit changelogs for v1.1.0
• 503c605 feat(tui,coding-agent): report program status via OSC 7501
• f10993b fix(coding-agent): cancel MCP OAuth sign-ins and stop refreshing on close
• 27c7b6f fix(coding-agent): strip ANSI sequences split across user bash output chunks
• 592fb57 fix(coding-agent): read Termux clipboard on Android platform
• adae824 docs(coding-agent): document azure provider id, Foundry models, and deploymen...
• b30a6dd fix(coding-agent): ignore Node's own worker messages in image resize
• Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 1.0.2 to 1.1.0

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v1.1.0

New Features

• Program status reporting: terminals and agent dashboards that support OSC 7501 see whether Pi is working, blocked on a dialog or login, done, or failed. See Program status.
• Claude Haiku 5.5: anthropic/claude-haiku-5-5, with adaptive thinking up to xhigh/max effort.
• Adjust default tools with +name/-name: --tools entries like pi -t +codemode,-write change the default selection instead of replacing it. See Tools.
• GPT-6 Luna and image classification: OpenAI's GPT-6 Luna is available as a classifier model through the Decisions API, and codemode's models.classify() accepts images for classifiers that support them. See Use classifier models.
• Native llama.cpp decision models: Julia-1, Laya, Kev, lev, and OpenJev served by llama.cpp 0.6.0 or later run natively as classifiers through /v1/systemone. See Classification.

Added

• Added +name and -name entries to --tools, which change the default tool selection instead of replacing it, for example pi -t +codemode
• Added durationMs to the tool render context and to tool_execution_end extension events: the recorded execution time of a final tool result (#10549)
• Added outputPad to the tool render context (#10557 by @​rwachtler)
• Added OpenAI's GPT-6 Luna as a classifier model through the Decisions API, available with OPENAI_API_KEY (see Use classifier models)
• Added images to codemode's models.classify() context, so classifiers that accept images, such as GPT-6 Luna, can judge them
• Added program status reporting with OSC 7501: terminals and agent dashboards that support it see whether Pi is working, blocked on a dialog or login, done, or failed. PI_PROGRAM_STATUS=1|0 overrides detection (see Terminal setup) (#10607)
• Added aborted to agent_settled session, extension, and JSON events, so integrations can tell a cancelled run from a finished one (#10607)
• Added Claude Haiku 5.5 (anthropic/claude-haiku-5-5), with adaptive thinking up to xhigh/max effort and prompt caching on Bedrock
• Added native llama.cpp decision models: Julia-1, Laya, Kev, lev, and OpenJev served by llama.cpp 0.6.0 or later are listed only as classifiers through /v1/systemone instead of as chat models (see Classification) (#10382)

Changed

• Changed outputPad to also apply to ! command output, tool output, and summary blocks (#9946, #10557 by @​rwachtler)
• Changed pi mcp login --timeout to limit the whole sign-in, including requests to the authorization server, instead of only the wait for the browser (#10565)

Fixed

• Fixed bash and PowerShell results losing Took after reloading a session, and the live Took including wall-clock steps; both now show the recorded execution time (#10549)
• Fixed managed installs keeping every old release; pi update now keeps only the new release and the one it updated from (#10392, #10511 by @​davidbrai)
• Fixed standalone binaries loading .env, .env.local, and .env.development from the launch directory into Pi's environment (#10473)
• Fixed !! command headers losing their dim color once output arrives (#10557 by @​rwachtler)
• Fixed the codemode description not marking searchTools(), describeTool(), and describeNamespace() as async, which led models to serialize the unawaited promise as {} (#10555)
• Fixed codemode output items running together, so models could not tell where one text() or console.log() output ended and the next began. With several text items, each now starts with a ==> text N/M <== line, and console calls follow the other output in one <console_output> block with one line per call
• Fixed /mcp waiting for all servers to connect before opening; the manager now updates live and remains usable while enabling, reconnecting, or disabling servers (#10562)
• Fixed images being dropped as "could not be resized" when running under node --watch on Node 24.19+ and 26.x, where Node posts its own messages on the image resize worker channel (#10527)
• Fixed clipboard paste doing nothing in Termux, and failed copies there omitting the Termux:API install hint (#10391)
• Fixed ! and RPC bash output keeping fragments of color codes, such as a stray m, when a code was split across output chunks (#10504)
• Fixed MCP OAuth sign-ins that could not be cancelled while waiting on the authorization server and kept running after the session ended. The sign-in screen now cancels with Esc at every step, session shutdown aborts a running sign-in, and each request to the authorization server times out after 15 seconds (#10565)
• Fixed shutdown waiting up to 15 seconds to refresh an MCP OAuth token that was about to expire, only to close the server's session (#10565)
• Fixed the fullscreen text selection surviving session switches and other transcript rebuilds, which highlighted unrelated text in the new transcript (#9311, #10567 by @​christianklotz)
• Fixed OpenAI models on Bedrock ignoring the thinking level and always running at Bedrock's default reasoning effort (#9331, #10142 by @​jsanter27)
• Fixed model headers in models.json not overriding the originator and User-Agent headers of Codex requests (#10429 by @​lucasmeijer)
• Fixed server_busy and servers are currently busy provider errors ending the turn instead of being retried (#10543)
• Fixed Mistral responses that end with finish_reason: "error" not being retried (#10487)
• Reduced context-limit request failures by estimating input at 3.5 characters per token instead of 4 when calculating output limits (#10497)
• Fixed Radius models disabled by an organization owner still being listed
• Fixed Anthropic browser login failing with "localhost refused to connect" when port 53692 is reserved or in use, for example by Hyper-V/WSL port exclusions on Windows: login now falls back to a free loopback port (#10571)
• Fixed session costs undercounting long prompts on models with prompt-length pricing tiers, such as Claude Haiku 5.5, Gemini 3.1 Pro, and GPT-5.4, through OpenCode, OpenCode Go, OpenRouter, Vercel AI Gateway, Google, MiniMax, and other providers
• Fixed Markdown links not being clickable in Herdr (#10573)

... (truncated)

Changelog

Sourced from @​earendil-works/pi-tui's changelog.

[1.1.0] - 2026-10-07

Breaking Changes

• Terminal implementations must provide setProgramStatus(status); a terminal without OSC 7501 support can implement it as a no-op (#10607)

Added

• Added Box.setPaddingX(...) and Text.setPaddingX(...) (#10557 by @​rwachtler)
• Added Terminal.setProgramStatus() and formatProgramStatus() for the Program Status Protocol (OSC 7501). ProcessTerminal asks the terminal for support at startup and sends reports only if it answers; PI_PROGRAM_STATUS=1|0 overrides detection (#10607)
• Added TuiAltScreen.resetTextSelection(), which drops the text selection and multi-click state, for example before a host replaces the transcript (#9311, #10567 by @​christianklotz)

Fixed

• Fixed Markdown links not being clickable in Herdr: TERM_PROGRAM=herdr is now detected as supporting OSC 8 hyperlinks (#10573)

[1.0.4] - 2026-10-05

[1.0.3] - 2026-10-05

Changed

• Home/End now always move the editor cursor to the line start/end; fullscreen transcript top/bottom moved to Ctrl+Home/Ctrl+End, which no longer move the editor cursor (#10314)

Commits

• abe508e Release v1.1.0
• dce4ae6 docs: audit changelogs for v1.1.0
• 503c605 feat(tui,coding-agent): report program status via OSC 7501
• b236384 fix(tui): detect Herdr as supporting OSC 8 hyperlinks
• 1833698 fix(coding-agent): apply outputPad to all transcript blocks (#10557)
• 83c9e26 fix(tui,coding-agent): clear fullscreen selection on transcript rebuild (#10567)
• 28dcce2 Add [Unreleased] section for next cycle
• 7c10bd4 Release v1.0.4
• 997d31f Add [Unreleased] section for next cycle
• d78dc83 Release v1.0.3
• Additional commits viewable in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

• See full diff in compare view

Updates typebox from 1.3.34 to 1.3.36

Commits

• b180922 Version 1.3.36 (#1704)
• 3837e51 Version 1.3.35 (#1701)
• 4eac3e4 Documentation
• 5a13bfc Documentation (#1700)
• e0ac8ce Specification
• 5d966b9 Specification
• 99749bb Documentation
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Bumps the dev-dependencies group: @earendil-works/pi-coding-agent and @earendil-works/pi-tui go from 1.0.2 to 1.1.0, @types/node from 26.6.4 to 26.6.5, and typebox from 1.3.34 to 1.3.36. The pi updates bring new features like program status reporting (OSC 7501), Claude Haiku 5.5, and +name/-name tool adjustments, plus numerous fixes.

Migration

• @earendil-works/pi-tui 1.1.0 requires Terminal implementations to provide setProgramStatus(status); a terminal without OSC 7501 support can implement it as a no-op.

^{Written for commit bd7bc49. Summary will update on new commits.}