fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
aqua:astral-sh/uv	tools	patch	0.12.20 → 0.12.21
aqua:aws/aws-cli	tools	patch	2.37.5 → 2.37.6
aqua:herdrdev/herdr	tools	patch	0.9.2 → 0.9.3
lefthook	devDependencies	patch	^2.1.14 → ^2.1.15
pi-mcp-adapter	dependencies	minor	3.2.0 → 3.3.0

---

Release Notes

astral-sh/uv (aqua:astral-sh/uv)

v0.12.21

Compare Source

Released on 2026-09-29.

Python

• Update CPython to use OpenSSL 3.5.9 (#​22076)

Enhancements

• Omit empty [manifest] tables from lockfiles that contain only manifest subtables (#​22070)

Preview features

• Omit redundant runtime constraints from uv.lock, including those involving pre-releases, with the resolution-inputs preview feature (#​22004, #​22068)

Bug fixes

• Prevent uv python pin --rm from removing a global .python-versions file without --global (#​21992)
• Fix installed-package checks incorrectly reporting post-releases as incompatible with exclusive lower bounds on pre-releases (#​22049)

aws/aws-cli (aqua:aws/aws-cli)

v2.37.6

Compare Source

herdrdev/herdr (aqua:herdrdev/herdr)

v0.9.3

Compare Source

This is a hotfix release for v0.9.2. See the v0.9.2 notes for the full feature release: https://github.com/herdrdev/herdr/releases/tag/v0.9.2

Fixed

• Terminal shortcuts that send Escape followed by a key work again in panes. On macOS, Option+Left/Right and Option+Backspace from Ghostty's defaults or iTerm2's Natural Text Editing preset move and delete by word again, instead of typing b and f or deleting one character. Escape-based Shift+Enter bindings insert a newline in Claude Code instead of submitting. Clicking a pane still doesn't send a stray Escape. (#​4751)
• Alt+[ followed quickly by another key no longer merges into a different key. (#​4751)

evilmartians/lefthook (lefthook)

v2.1.15

Compare Source

• fix: do not pipe stdin into post-checkout git-lfs hook (#​1523) by @​rwinkelman
• fix: remove color blending (#​1558) by @​mrexox
• fix: resolve push-files fallback against the remote-tracking ref (#​1485) by @​hamodywe
• test: regression for valid fish shell completion output (#​1527) by @​rwinkelman
• fix: sanitize slashes in remote ref when building the checkout dir name (#​1486) by @​hamodywe
• fix: quote paths in the generated hook shim (#​1509) by @​addielaruee
• feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#​1547) by @​Yash121l

nicobailon/pi-mcp-adapter (pi-mcp-adapter)

v3.3.0

Compare Source

Highlights

• You can now tell a read-only MCP tool from one that deletes data. The hints servers declare on their tools show up when you describe a tool and in the approval prompt.
• New approveTools: "destructive" setting asks before any tool that may change or delete data, without making you list tool names.
• A tool call no longer fails with "Request timed out" while you are still answering the server's input form.
• The model gets a better idea of what a tool returns, even when the server declares no output schema.
• MCP prompt slash commands now suggest argument names as you type.

Added

• The hints a server declares on its tools (read-only, destructive, idempotent, open-world, title) are now kept, including in the metadata cache, and shown in mcp({ describe }), in tools.describe inside mcpScript, and in the tool approval prompt. Search results and direct-tool descriptions stay the same, so nothing is added to every turn's context.
• approveTools: "destructive" asks before any tool that may change or delete data. Only tools the server marks read-only or non-destructive run without a prompt; tools with no hints still ask. It works globally or per server.
• For tools that declare no output schema, mcp({ describe }) and tools.describe in mcpScript now show the output shape seen so far this session, after a successful call returns structured content or a JSON text result. Only field names and types are shown, never values. The shape is kept in memory only and is labeled as observed, not a contract.
• MCP prompt slash commands now suggest declared argument names as you type. Arguments you already entered are kept, suggestions follow the server's latest prompt list, and nothing connects to a server just to show them. Thanks to @​quifox for PR #​733.
• Jev semantic search works with an existing OpenRouter key. Set SYSTEMONE_ENDPOINT=https://openrouter.ai/api/alpha/decisions and OPENROUTER_API_KEY is used as the key, with the model defaulting to typesafe/jev-1.13. The key is never sent to any other endpoint.

Changed

• A mistyped approveTools value no longer turns approval off silently. Any value other than true, false, "destructive", or a list of tool name patterns now asks before every tool.
• Dropped the unused @modelcontextprotocol/ext-apps dependency. MCP Apps already run from a bundled app bridge, and the package made a plain npm install pull in the old MCP SDK v1 and its HTTP server dependencies.

Fixed

• A tool call no longer times out while you are answering the server's input prompt. The request timeout (60 seconds by default) kept running while the form was open, so a slow answer failed the call with "Request timed out" and the answer was lost. The timeout now pauses while the prompt is open.
• Jev no longer rejects responses that carry extra provider details, such as OpenRouter's id, provider, and usage.cost. The documented OpenRouter setup previously failed with "Jev returned an invalid response."
• Typechecking the adapter's sources with @types/node 25 no longer fails in the Unix socket transport. Thanks to @​abdwhb-png for PR #​732.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.