Skip to content

build(deps): bump pnpm/action-setup from 4 to 6 - #116

Open
dependabot[bot] wants to merge 371 commits into
masterfrom
dependabot/github_actions/pnpm/action-setup-6
Open

dependabot[bot] wants to merge 371 commits into
masterfrom
dependabot/github_actions/pnpm/action-setup-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor

Bumps pnpm/action-setup from 4 to 6.

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.0

Added support for pnpm v11.

v5.0.0

Updated the action to use Node.js 24.

v4.4.0

Updated the action to use Node.js 24.

v4.3.0

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v4.2.0...v4.3.0

v4.2.0

When there's a .npmrc file at the root of the repository, pnpm will be fetched from the registry that is specified in that .npmrc file #179

v4.1.0

Add support for package.yaml #156.

Commits
  • 0977fd9 docs: Update README to include devEngines.packageManager (#273)
  • 48261ac fix: update pnpm to v11.19.0 (#283)
  • 75677f7 ci: use pnpm 11 for pr-check (#284)
  • 769ae71 refactor: introduce restore keys for cache (#280)
  • 6fed91f docs(README): point users to the successor pnpm/setup action (#282)
  • 0ebf471 fix: update pnpm to v11.7.0 (#267)
  • 0e279bb fix: update pnpm to 11.1.1 (#248)
  • 3e83581 fix: drop patchPnpmEnv so standalone+self-update works on Windows (#258)
  • 551b42e docs(README): fix cache_dependency_path type (#257)
  • 739bfe4 fix: self-update bootstrap to packageManager-pinned version (#233) (#256)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

ALX99 added 30 commits June 22, 2026 20:20
Prompts with a confirmation dialog if the buffer has unsaved changes,
otherwise closes silently.
feat: merge pi-web branch (browser UI + missions extension)

Squashes 50 commits from the pi-web branch onto master:

- missions extension (replaces goals/): evidence-gated /mission autonomous
  loop. Phase 1 ships the state machine + controller-enforced verification
  with a claim/attempt lease; phase 2 (agent_end auto-re-entry) is specced
  but not in this commit. 17 source files + 14 test files in
  home/.pi/agent/extensions/missions/. SQLite at $PI_AGENT_DIR/missions.db.
- pi-web: HTTP + WebSocket bridge from a browser-based chat UI to the pi
  SDK. Vendor routes, cross-platform open-browser helper, Preact frontend
  (chat, sidebar, pickers, tool-call view, htm bind). 9 source files + 5
  test files in pi-web/.
- removes home/.pi/agent/extensions/goals/ (~935 lines) per
  c206d60 refactor(missions).
- AGENTS.md updated to reflect missions replacing goals and to correct the
  pi extension loader rule (subdirectory index.ts pattern).
- docs/superpowers/: 4 implementation plans and 3 design specs covering
  both missions phases and the pi-web UI.

68 files changed, +19352/-937.

Stash @{0} holds the master's pre-merge uncommitted state (4 tracked
edits in subagents/, settings.json, keylayout; 9 untracked files
including probe*.lua and FINDINGS.md). It is unrelated to this merge
and was set aside so the working tree was clean for the squash.

fix(ask_question): only register tool when UI is available

Previously the tool was registered unconditionally and returned
'Error: UI not available' when invoked in agent / non-interactive
mode. This surfaced as a confusing error to agents that had no way
to know the tool couldn't actually be used.

Move the registerTool call inside a session_start handler and gate
it on ctx.hasUI. The tool is now absent from the agent's tool list
in non-interactive runs, so it can't be called and can't error.

Verified: 'make check' (tsc + eslint + node:test) passes — 129 tests.
Passing the buffer's file path to MiniFiles.open crashed on any
buffer whose file did not exist on disk (deleted, never saved, or
special buffers like terminal, help, or fugitive). mini.files
requires a directory, so now use fnamemodify(name, ':h') and fall
back to cwd when the buffer has no parent.
When the LLM submits multiple ask_question tool calls in one
turn, pi's agent loop runs them in parallel and the first call's UI
component is overwritten by the second, leaving the first promise
orphaned. Mark the tool as sequential so calls run one at a time,
matching the fact that a modal can never physically be parallel.
30-minute timeout could let macOS sleep during long sessions.
Process exit handler ensures cleanup even on abrupt shutdown.
Make the staged-check command return explicit human-readable output instead of relying on exit codes. Document what each column of git status -s means.
Use the numeric character reference for shift-7 so macOS emits an ampersand from the Colemak-DH layout.
Allow TUI question prompts to collect multiple choices while preserving single-choice behavior outside the TUI. Also updates related pi extension behavior and setup cleanup.
Replace the custom pi init skill (gather/filter/verify) with the Codex /init slash command prompt template verbatim. This generates a concise AGENTS.md with prescribed sections: project structure, build commands, coding style, testing, and PR guidelines.
bug: prevent pi-web static file path escape
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 15, 2026
@ALX99
ALX99 force-pushed the master branch 4 times, most recently from 420be7f to 6e16756 Compare August 23, 2026 04:35
@ALX99
ALX99 force-pushed the dependabot/github_actions/pnpm/action-setup-6 branch from 41590e3 to 544e265 Compare August 23, 2026 04:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant