Skip to content

build(deps-dev): bump the development-dependencies group with 6 updates - #21

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/development-dependencies-131338dd08
Closed

build(deps-dev): bump the development-dependencies group with 6 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/development-dependencies-131338dd08

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 6 updates:

Package From To
@oh-my-pi/pi-ai 18.1.13 18.1.15
@oh-my-pi/pi-coding-agent 18.1.13 18.1.15
@oh-my-pi/pi-tui 18.1.13 18.1.15
@oh-my-pi/omptype 18.1.13 18.1.15
typebox 1.3.25 1.3.29
vitest 4.1.11 5.0.0

Updates @oh-my-pi/pi-ai from 18.1.13 to 18.1.15

Release notes

Sourced from @​oh-my-pi/pi-ai's releases.

v18.1.15

@​oh-my-pi/pi-ai

Fixed

  • GitHub Copilot sign-in keeps the GitHub-owned Copilot CLI OAuth app on Enterprise domains: private instances run their own OAuth registry and reject the github.com-registered OpenCode client, which is now used only for public github.com sign-ins (#11285 by @​H4vC)
  • GitHub Copilot sign-in uses the minimal-grant OpenCode OAuth app again (read:user only): GitHub renders each app's existing per-user grant on the consent page, so Enterprise organizations that block the Copilot CLI app's broad historic grant can log in as on 18.1.4. API request identity still mimics the Copilot CLI, and tokens minted by either app keep working (#11280 by @​H4vC).
  • GitHub Copilot plan/model-policy 403s no longer count as credential failures for credential-lifetime decisions: the token is valid, so stored credentials are preserved instead of wiped (#11280 by @​H4vC).
  • Fixed custom google-generative-ai providers failing mid-turn model fallback when Gemini 3 tool calls are replayed without their original thought signature (#11270).

@​oh-my-pi/pi-coding-agent

Added

  • Added advisor.maxNotesPerUpdate setting and WATCHDOG.yml configuration (default 4): allows reasoning verifiers to batch findings in a single review update without being rate-limited.
  • Headless browser tabs now freeze when a turn settles so idle animated/WebGL pages stop burning CPU/GPU, resuming automatically on next use; tabs idle past browser.idleCloseSec (default 30 minutes) are closed. persist: true on browser.open opts a tab out of both (#8246 by @​H4vC).

Changed

  • When enabled (task.showResolvedModelBadge), subagent model badges show the thinking-level icon, model name, and attached-advisor eye before the agent name in task, eval, job, and HUD rows.

Fixed

  • Task descriptions containing tabs no longer misalign or overflow task rows; tabs are expanded before measuring and rendering.
  • GitHub Copilot model-policy 403s (plan, model policy, org restriction) no longer delete stored credentials, so the provider stays listed in /model after a per-model access denial instead of disappearing until the next /login (#11280 by @​H4vC).
  • Bash results no longer replace a failing command's output with the shell minimizer's lossy summary when the original capture cannot be persisted as an artifact; the raw diagnostics are kept so a failure stays actionable (#11081).
  • Fixed worker subprocesses failing to declare themselves as worker hosts before dispatching selectors, which prevented nested thread worker spawns during /usage stats sync on multi-core systems.
  • Fixed /usage displaying a misleading generic database read failure when activity loading fails; the error detail is now sanitized, collapsed to a single line with shortened paths, and surfaced in the dashboard.
  • Advisor notes now report rate limiting accurately, blockers always interrupt even after a lower-severity note in the same update, and deferred notes flush when the primary run completes, including after advisor quota exhaustion (#11062).
  • Fixed the built-in clangd registration omitting CUDA source and header files (.cu and .cuh) (#10782 by @​alphastorm).
  • Fixed ast_grep skipping CUDA headers and ignoring an explicit lang override for ambiguous file extensions (#10782 by @​alphastorm).
  • Python cells are no longer replayed automatically after a kernel crash, preventing duplicate side effects; the next call starts a fresh kernel.
  • Session rewrites preserve open-reader snapshots and replacement identity when a rename needs an EPERM fallback.
  • Fixed WorkPool children retaining a stale Gemini-formatted yield declaration when pooled items were installed or cleared.

@​oh-my-pi/pi-natives

Fixed

@​oh-my-pi/pi-tui

Fixed

  • Stopped long flicker when moving or resizing an omp pane in Warp. Resize repaints in place there after the drag settles (override with PI_TUI_RESIZE_IN_PLACE=0), with no alternate-screen borrow, no scrollback replay, blanked live rows so shrink drags cannot archive unfinished rows, and overlay toggle echoes repainting the modal instead of probing (#11247 by @​H4vC).

What's Changed

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-ai's changelog.

[18.1.15] - 2026-09-08

Fixed

  • GitHub Copilot sign-in keeps the GitHub-owned Copilot CLI OAuth app on Enterprise domains: private instances run their own OAuth registry and reject the github.com-registered OpenCode client, which is now used only for public github.com sign-ins (#11285 by @​H4vC)
  • GitHub Copilot sign-in uses the minimal-grant OpenCode OAuth app again (read:user only): GitHub renders each app's existing per-user grant on the consent page, so Enterprise organizations that block the Copilot CLI app's broad historic grant can log in as on 18.1.4. API request identity still mimics the Copilot CLI, and tokens minted by either app keep working (#11280 by @​H4vC).
  • GitHub Copilot plan/model-policy 403s no longer count as credential failures for credential-lifetime decisions: the token is valid, so stored credentials are preserved instead of wiped (#11280 by @​H4vC).
  • Fixed custom google-generative-ai providers failing mid-turn model fallback when Gemini 3 tool calls are replayed without their original thought signature (#11270).
  • Fixed Linux zcode:// (Z.AI coding-plan) OAuth sign-in hanging at the paste prompt after a successful browser authorization: native scheme registration now runs update-desktop-database, so xdg-desktop-portal-gtk resolves the handler on the first attempt instead of reporting "No Apps available" and no longer routes the callback to a stale transaction directory (#11279).

[18.1.14] - 2026-09-07

Fixed

  • Fixed reasoning-off requests (e.g. GitHub Copilot gpt-6-astra) surfacing 400 Unsupported value: 'none' … Supported values are: … instead of retrying at the lowest allowed effort: the reasoning-effort fallback now recognizes Supported values phrasing (#11128 by @​H4vC).
  • Fixed Cursor GPT off-tier requests sending raw -none sibling ids (e.g. gpt-5.6-sol-none-fast), which the Run endpoint rejects; they now normalize to the base model id with no reasoning parameter, matching every other effort tier (#11128 by @​H4vC).

[18.1.12] - 2026-09-06

Added

  • Added Muse Code subscription sign-in, credential refresh, inference, and quota reporting in /usage, with durable rate-limit backoff so quota refresh recovers instead of repeatedly retrying.

Fixed

  • Fixed Codex compaction timeouts triggering prolonged retries instead of advancing to the next compaction method.

[18.1.11] - 2026-09-05

Fixed

  • Fixed OpenCode Go usage polls (GET /zen/go/v1/usage) missing x-opencode-session and omp's User-Agent: background polls now attribute with the stable install id so the requests OpenCode flags as Bun fetch carry the required session header.
  • GitHub Copilot sign-in now requests only basic profile access, restoring login for Enterprise organizations that reject repository, gist, and Codespaces permissions (#10656).

[18.1.9] - 2026-09-04

Added

  • Added recoverable native custom-scheme OAuth callbacks for macOS, Linux desktops, and Windows, with a manual fallback for unavailable or remote sessions.

Fixed

  • Fixed Gemini tool continuations through custom Anthropic Messages proxies and OpenAI Responses relays, preserving tool-call and result associations across multi-turn requests.

[18.1.8] - 2026-09-03

Added

  • Added GPT-6 Astra support for preserving prompt caching when changing the thinking level during a conversation across the OpenAI and OpenAI Codex providers.

... (truncated)

Commits
  • a33cc26 chore: bump version to 18.1.15
  • ff24eeb fix(copilot): keep official OAuth client for enterprise domains
  • ff4bd08 Merge branch 'main' into fix/copilot-oauth-scopes-11275
  • 7f5f71f fix(copilot): minimal-grant OAuth app and preserve creds on 403
  • bdd5acb fix(catalog): applied gemini wire policy to custom providers
  • daf0799 chore: bump version to 18.1.14
  • 8735749 refactor(ai): parse effort rejection once, decide from a fixed table
  • 580746d fix(ai): honor explicit non-reasoning error param in effort fallback
  • 91cf801 fix: treat retained-effort disable as explicit; drop changelog dupes
  • a1dbf42 fix: scope explicit-disable fallback cache; strip cross-provider Copilot routing
  • Additional commits viewable in compare view

Updates @oh-my-pi/pi-coding-agent from 18.1.13 to 18.1.15

Release notes

Sourced from @​oh-my-pi/pi-coding-agent's releases.

v18.1.15

@​oh-my-pi/pi-ai

Fixed

  • GitHub Copilot sign-in keeps the GitHub-owned Copilot CLI OAuth app on Enterprise domains: private instances run their own OAuth registry and reject the github.com-registered OpenCode client, which is now used only for public github.com sign-ins (#11285 by @​H4vC)
  • GitHub Copilot sign-in uses the minimal-grant OpenCode OAuth app again (read:user only): GitHub renders each app's existing per-user grant on the consent page, so Enterprise organizations that block the Copilot CLI app's broad historic grant can log in as on 18.1.4. API request identity still mimics the Copilot CLI, and tokens minted by either app keep working (#11280 by @​H4vC).
  • GitHub Copilot plan/model-policy 403s no longer count as credential failures for credential-lifetime decisions: the token is valid, so stored credentials are preserved instead of wiped (#11280 by @​H4vC).
  • Fixed custom google-generative-ai providers failing mid-turn model fallback when Gemini 3 tool calls are replayed without their original thought signature (#11270).

@​oh-my-pi/pi-coding-agent

Added

  • Added advisor.maxNotesPerUpdate setting and WATCHDOG.yml configuration (default 4): allows reasoning verifiers to batch findings in a single review update without being rate-limited.
  • Headless browser tabs now freeze when a turn settles so idle animated/WebGL pages stop burning CPU/GPU, resuming automatically on next use; tabs idle past browser.idleCloseSec (default 30 minutes) are closed. persist: true on browser.open opts a tab out of both (#8246 by @​H4vC).

Changed

  • When enabled (task.showResolvedModelBadge), subagent model badges show the thinking-level icon, model name, and attached-advisor eye before the agent name in task, eval, job, and HUD rows.

Fixed

  • Task descriptions containing tabs no longer misalign or overflow task rows; tabs are expanded before measuring and rendering.
  • GitHub Copilot model-policy 403s (plan, model policy, org restriction) no longer delete stored credentials, so the provider stays listed in /model after a per-model access denial instead of disappearing until the next /login (#11280 by @​H4vC).
  • Bash results no longer replace a failing command's output with the shell minimizer's lossy summary when the original capture cannot be persisted as an artifact; the raw diagnostics are kept so a failure stays actionable (#11081).
  • Fixed worker subprocesses failing to declare themselves as worker hosts before dispatching selectors, which prevented nested thread worker spawns during /usage stats sync on multi-core systems.
  • Fixed /usage displaying a misleading generic database read failure when activity loading fails; the error detail is now sanitized, collapsed to a single line with shortened paths, and surfaced in the dashboard.
  • Advisor notes now report rate limiting accurately, blockers always interrupt even after a lower-severity note in the same update, and deferred notes flush when the primary run completes, including after advisor quota exhaustion (#11062).
  • Fixed the built-in clangd registration omitting CUDA source and header files (.cu and .cuh) (#10782 by @​alphastorm).
  • Fixed ast_grep skipping CUDA headers and ignoring an explicit lang override for ambiguous file extensions (#10782 by @​alphastorm).
  • Python cells are no longer replayed automatically after a kernel crash, preventing duplicate side effects; the next call starts a fresh kernel.
  • Session rewrites preserve open-reader snapshots and replacement identity when a rename needs an EPERM fallback.
  • Fixed WorkPool children retaining a stale Gemini-formatted yield declaration when pooled items were installed or cleared.

@​oh-my-pi/pi-natives

Fixed

@​oh-my-pi/pi-tui

Fixed

  • Stopped long flicker when moving or resizing an omp pane in Warp. Resize repaints in place there after the drag settles (override with PI_TUI_RESIZE_IN_PLACE=0), with no alternate-screen borrow, no scrollback replay, blanked live rows so shrink drags cannot archive unfinished rows, and overlay toggle echoes repainting the modal instead of probing (#11247 by @​H4vC).

What's Changed

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-coding-agent's changelog.

[18.1.15] - 2026-09-08

Added

  • Added the retry.waitForUsageReset setting: when a provider reports usage-limit exhaustion with a reset time (5-hour or weekly quota windows on any provider), the session sleeps until the reset instead of failing fast past retry.maxDelayMs.
  • Added advisor.maxNotesPerUpdate setting and WATCHDOG.yml configuration (default 4): allows reasoning verifiers to batch findings in a single review update without being rate-limited.
  • Headless browser tabs now freeze when a turn settles so idle animated/WebGL pages stop burning CPU/GPU, resuming automatically on next use; tabs idle past browser.idleCloseSec (default 30 minutes) are closed. persist: true on browser.open opts a tab out of both (#8246 by @​H4vC).

Changed

  • When enabled (task.showResolvedModelBadge), subagent model badges show the thinking-level icon, model name, and attached-advisor eye before the agent name in task, eval, job, and HUD rows.

Fixed

  • Task descriptions containing tabs no longer misalign or overflow task rows; tabs are expanded before measuring and rendering.
  • GitHub Copilot model-policy 403s (plan, model policy, org restriction) no longer delete stored credentials, so the provider stays listed in /model after a per-model access denial instead of disappearing until the next /login (#11280 by @​H4vC).
  • Bash results no longer replace a failing command's output with the shell minimizer's lossy summary when the original capture cannot be persisted as an artifact; the raw diagnostics are kept so a failure stays actionable (#11081).
  • Fixed worker subprocesses failing to declare themselves as worker hosts before dispatching selectors, which prevented nested thread worker spawns during /usage stats sync on multi-core systems.
  • Fixed /usage displaying a misleading generic database read failure when activity loading fails; the error detail is now sanitized, collapsed to a single line with shortened paths, and surfaced in the dashboard.
  • Advisor notes now report rate limiting accurately, blockers always interrupt even after a lower-severity note in the same update, and deferred notes flush when the primary run completes, including after advisor quota exhaustion (#11062).
  • Fixed the built-in clangd registration omitting CUDA source and header files (.cu and .cuh) (#10782 by @​alphastorm).
  • Fixed ast_grep skipping CUDA headers and ignoring an explicit lang override for ambiguous file extensions (#10782 by @​alphastorm).
  • Python cells are no longer replayed automatically after a kernel crash, preventing duplicate side effects; the next call starts a fresh kernel.
  • Session rewrites preserve open-reader snapshots and replacement identity when a rename needs an EPERM fallback.
  • Fixed WorkPool children retaining a stale Gemini-formatted yield declaration when pooled items were installed or cleared.
  • Preserve effective context and output limits when model overrides change unrelated settings, such as thinking effort levels.

[18.1.14] - 2026-09-07

Fixed

  • omp update now refuses to overwrite shebang scripts or non-OMP executables behind foreign symlinks and reports the physical binary path it verified (#11152).
  • The startup update notice counts every change in a release: bullets written above a ### heading now count under Other, and +/* markers and lightly indented bullets count like -.
  • Fixed Codex Astra retaining its larger window after disabling Extended Context, including cached models; explicit model overrides still take precedence.
  • Fixed explicit Codex context-window overrides widening past the server-honored maximum; they now clamp to the documented ceiling like upstream Codex (#11157 by @​H4vC).
  • Fixed Astra's extended window over-advertising input by 128K; it now uses the documented 922K input cap inside the 1.05M total context (#11157 by @​H4vC).
  • Bills Astra API requests above 272K input at the documented 2x input / 1.5x output long-context tier; the Codex subscription route stays exempt with free cache writes (#11157 by @​H4vC).
  • Fixed Extended Context silently enabling without a settings source (SDK embedding, early boot); it now matches the off default until opted in (#11157 by @​H4vC).
  • Fixed /copy link captions showing Markdown delimiters for formatted labels and splitting across two rows for multiline labels (#11086 by @​mustafaabidali).
  • Fixed Ask custom answers requiring another submission after paste or remaining on the same multi-select question; pending clipboard text is preserved before submission, and single-question multi-select answers still go through review (#11099 by @​camjac251).
  • The startup update notice no longer counts standalone * * * and - - - separator lines as changes.
  • Fixed /loop replacing the repeating prompt with a mid-turn interjection; steering while the agent runs is now one-off, and only an idle submission becomes the new loop body (#11159 by @​H4vC).
  • Fixed --plugin-dir and omp-installed plugin agents no longer being discovered when the foreign claude-plugins source is disabled; user-scope plugin agent roots are now gated by origin like their skills (#11151).
Commits
  • a33cc26 chore: bump version to 18.1.15
  • b2f832e fix(coding-agent): keep a rejection sink on the yield transition tail
  • f4db0ae fix(coding-agent): roll back to the last published yield contract
  • 6a12d5b Merge branch 'main' into contrib/workpool-yield-prompt-refresh
  • 0114143 fix(coding-agent): own replacement workers, snapshot parked wakes
  • 744b6fe fix(coding-agent): revalidate worker until an install round-trip holds
  • cbc15a7 docs(coding-agent): note tab expansion in task descriptions
  • 63179a9 fix(coding-agent): expand tabs in task descriptions before render
  • 96c1806 fix(coding-agent): park deferred wakes outside turn injection, reacquire work...
  • 74bdf4c feat(coding-agent): clarify subagent model badges
  • Additional commits viewable in compare view

Updates @oh-my-pi/pi-tui from 18.1.13 to 18.1.15

Release notes

Sourced from @​oh-my-pi/pi-tui's releases.

v18.1.15

@​oh-my-pi/pi-ai

Fixed

  • GitHub Copilot sign-in keeps the GitHub-owned Copilot CLI OAuth app on Enterprise domains: private instances run their own OAuth registry and reject the github.com-registered OpenCode client, which is now used only for public github.com sign-ins (#11285 by @​H4vC)
  • GitHub Copilot sign-in uses the minimal-grant OpenCode OAuth app again (read:user only): GitHub renders each app's existing per-user grant on the consent page, so Enterprise organizations that block the Copilot CLI app's broad historic grant can log in as on 18.1.4. API request identity still mimics the Copilot CLI, and tokens minted by either app keep working (#11280 by @​H4vC).
  • GitHub Copilot plan/model-policy 403s no longer count as credential failures for credential-lifetime decisions: the token is valid, so stored credentials are preserved instead of wiped (#11280 by @​H4vC).
  • Fixed custom google-generative-ai providers failing mid-turn model fallback when Gemini 3 tool calls are replayed without their original thought signature (#11270).

@​oh-my-pi/pi-coding-agent

Added

  • Added advisor.maxNotesPerUpdate setting and WATCHDOG.yml configuration (default 4): allows reasoning verifiers to batch findings in a single review update without being rate-limited.
  • Headless browser tabs now freeze when a turn settles so idle animated/WebGL pages stop burning CPU/GPU, resuming automatically on next use; tabs idle past browser.idleCloseSec (default 30 minutes) are closed. persist: true on browser.open opts a tab out of both (#8246 by @​H4vC).

Changed

  • When enabled (task.showResolvedModelBadge), subagent model badges show the thinking-level icon, model name, and attached-advisor eye before the agent name in task, eval, job, and HUD rows.

Fixed

  • Task descriptions containing tabs no longer misalign or overflow task rows; tabs are expanded before measuring and rendering.
  • GitHub Copilot model-policy 403s (plan, model policy, org restriction) no longer delete stored credentials, so the provider stays listed in /model after a per-model access denial instead of disappearing until the next /login (#11280 by @​H4vC).
  • Bash results no longer replace a failing command's output with the shell minimizer's lossy summary when the original capture cannot be persisted as an artifact; the raw diagnostics are kept so a failure stays actionable (#11081).
  • Fixed worker subprocesses failing to declare themselves as worker hosts before dispatching selectors, which prevented nested thread worker spawns during /usage stats sync on multi-core systems.
  • Fixed /usage displaying a misleading generic database read failure when activity loading fails; the error detail is now sanitized, collapsed to a single line with shortened paths, and surfaced in the dashboard.
  • Advisor notes now report rate limiting accurately, blockers always interrupt even after a lower-severity note in the same update, and deferred notes flush when the primary run completes, including after advisor quota exhaustion (#11062).
  • Fixed the built-in clangd registration omitting CUDA source and header files (.cu and .cuh) (#10782 by @​alphastorm).
  • Fixed ast_grep skipping CUDA headers and ignoring an explicit lang override for ambiguous file extensions (#10782 by @​alphastorm).
  • Python cells are no longer replayed automatically after a kernel crash, preventing duplicate side effects; the next call starts a fresh kernel.
  • Session rewrites preserve open-reader snapshots and replacement identity when a rename needs an EPERM fallback.
  • Fixed WorkPool children retaining a stale Gemini-formatted yield declaration when pooled items were installed or cleared.

@​oh-my-pi/pi-natives

Fixed

@​oh-my-pi/pi-tui

Fixed

  • Stopped long flicker when moving or resizing an omp pane in Warp. Resize repaints in place there after the drag settles (override with PI_TUI_RESIZE_IN_PLACE=0), with no alternate-screen borrow, no scrollback replay, blanked live rows so shrink drags cannot archive unfinished rows, and overlay toggle echoes repainting the modal instead of probing (#11247 by @​H4vC).

What's Changed

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-tui's changelog.

[18.1.15] - 2026-09-08

Fixed

  • Stopped long flicker when moving or resizing an omp pane in Warp. Resize repaints in place there after the drag settles (override with PI_TUI_RESIZE_IN_PLACE=0), with no alternate-screen borrow, no scrollback replay, blanked live rows so shrink drags cannot archive unfinished rows, and overlay toggle echoes repainting the modal instead of probing (#11247 by @​H4vC).

[18.1.14] - 2026-09-07

Fixed

  • extractMarkdownLinks() now returns one-row visible labels for formatted and multiline links (#11086 by @​mustafaabidali).
Commits
  • a33cc26 chore: bump version to 18.1.15
  • 65362d9 fix(tui): park cursor and carry settle flag on Warp resize
  • cd852c9 fix(tui): keep mux-tuned borrow path for Warp sessions in multiplexers
  • a78394f fix(tui): swallow enter echo while borrow owns alt buffer
  • 0792889 fix(tui): pre-erase live viewport and guard overlay echo on Warp
  • b8c1015 fix(tui): re-probe delayed Warp echoes post-resolve
  • 00f522c fix(tui): reissue anchor probe at Warp echo geometry
  • c73b79d fix(tui): clear in-place resize state on stop
  • 5b6a668 fix(tui): import bun:test globals in Warp resize test
  • ae29133 fix(tui): block settle paints and single-shot Warp echo
  • Additional commits viewable in compare view

Updates @oh-my-pi/omptype from 18.1.13 to 18.1.15

Release notes

Sourced from @​oh-my-pi/omptype's releases.

v18.1.15

@​oh-my-pi/pi-ai

Fixed

  • GitHub Copilot sign-in keeps the GitHub-owned Copilot CLI OAuth app on Enterprise domains: private instances run their own OAuth registry and reject the github.com-registered OpenCode client, which is now used only for public github.com sign-ins (#11285 by @​H4vC)
  • GitHub Copilot sign-in uses the minimal-grant OpenCode OAuth app again (read:user only): GitHub renders each app's existing per-user grant on the consent page, so Enterprise organizations that block the Copilot CLI app's broad historic grant can log in as on 18.1.4. API request identity still mimics the Copilot CLI, and tokens minted by either app keep working (#11280 by @​H4vC).
  • GitHub Copilot plan/model-policy 403s no longer count as credential failures for credential-lifetime decisions: the token is valid, so stored credentials are preserved instead of wiped (#11280 by @​H4vC).
  • Fixed custom google-generative-ai providers failing mid-turn model fallback when Gemini 3 tool calls are replayed without their original thought signature (#11270).

@​oh-my-pi/pi-coding-agent

Added

  • Added advisor.maxNotesPerUpdate setting and WATCHDOG.yml configuration (default 4): allows reasoning verifiers to batch findings in a single review update without being rate-limited.
  • Headless browser tabs now freeze when a turn settles so idle animated/WebGL pages stop burning CPU/GPU, resuming automatically on next use; tabs idle past browser.idleCloseSec (default 30 minutes) are closed. persist: true on browser.open opts a tab out of both (#8246 by @​H4vC).

Changed

  • When enabled (task.showResolvedModelBadge), subagent model badges show the thinking-level icon, model name, and attached-advisor eye before the agent name in task, eval, job, and HUD rows.

Fixed

  • Task descriptions containing tabs no longer misalign or overflow task rows; tabs are expanded before measuring and rendering.
  • GitHub Copilot model-policy 403s (plan, model policy, org restriction) no longer delete stored credentials, so the provider stays listed in /model after a per-model access denial instead of disappearing until the next /login (#11280 by @​H4vC).
  • Bash results no longer replace a failing command's output with the shell minimizer's lossy summary when the original capture cannot be persisted as an artifact; the raw diagnostics are kept so a failure stays actionable (#11081).
  • Fixed worker subprocesses failing to declare themselves as worker hosts before dispatching selectors, which prevented nested thread worker spawns during /usage stats sync on multi-core systems.
  • Fixed /usage displaying a misleading generic database read failure when activity loading fails; the error detail is now sanitized, collapsed to a single line with shortened paths, and surfaced in the dashboard.
  • Advisor notes now report rate limiting accurately, blockers always interrupt even after a lower-severity note in the same update, and deferred notes flush when the primary run completes, including after advisor quota exhaustion (#11062).
  • Fixed the built-in clangd registration omitting CUDA source and header files (.cu and .cuh) (#10782 by @​alphastorm).
  • Fixed ast_grep skipping CUDA headers and ignoring an explicit lang override for ambiguous file extensions (#10782 by @​alphastorm).
  • Python cells are no longer replayed automatically after a kernel crash, preventing duplicate side effects; the next call starts a fresh kernel.
  • Session rewrites preserve open-reader snapshots and replacement identity when a rename needs an EPERM fallback.
  • Fixed WorkPool children retaining a stale Gemini-formatted yield declaration when pooled items were installed or cleared.

@​oh-my-pi/pi-natives

Fixed

@​oh-my-pi/pi-tui

Fixed

  • Stopped long flicker when moving or resizing an omp pane in Warp. Resize repaints in place there after the drag settles (override with PI_TUI_RESIZE_IN_PLACE=0), with no alternate-screen borrow, no scrollback replay, blanked live rows so shrink drags cannot archive unfinished rows, and overlay toggle echoes repainting the modal instead of probing (#11247 by @​H4vC).

What's Changed

... (truncated)

Commits

Updates typebox from 1.3.25 to 1.3.29

Commits

Updates vitest from 4.1.11 to 5.0.0

Release notes

Sourced from vitest's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

@dependabot
build(deps-dev): bump the development-dependencies group with 6 updates
e05bc6d 
Bumps the development-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@oh-my-pi/pi-ai](https://github.com/can1357/oh-my-pi/tree/HEAD/packages/ai) | `18.1.13` | `18.1.15` |
| [@oh-my-pi/pi-coding-agent](https://github.com/can1357/oh-my-pi/tree/HEAD/packages/coding-agent) | `18.1.13` | `18.1.15` |
| [@oh-my-pi/pi-tui](https://github.com/can1357/oh-my-pi/tree/HEAD/packages/tui) | `18.1.13` | `18.1.15` |
| [@oh-my-pi/omptype](https://github.com/can1357/oh-my-pi/tree/HEAD/packages/omptype) | `18.1.13` | `18.1.15` |
| [typebox](https://github.com/sinclairzx81/typebox) | `1.3.25` | `1.3.29` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.0` |


Updates `@oh-my-pi/pi-ai` from 18.1.13 to 18.1.15
- [Release notes](https://github.com/can1357/oh-my-pi/releases)
- [Changelog](https://github.com/can1357/oh-my-pi/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/can1357/oh-my-pi/commits/v18.1.15/packages/ai)

Updates `@oh-my-pi/pi-coding-agent` from 18.1.13 to 18.1.15
- [Release notes](https://github.com/can1357/oh-my-pi/releases)
- [Changelog](https://github.com/can1357/oh-my-pi/blob/main/packages/coding-agent/CHANGELOG.md)
- [Commits](https://github.com/can1357/oh-my-pi/commits/v18.1.15/packages/coding-agent)

Updates `@oh-my-pi/pi-tui` from 18.1.13 to 18.1.15
- [Release notes](https://github.com/can1357/oh-my-pi/releases)
- [Changelog](https://github.com/can1357/oh-my-pi/blob/main/packages/tui/CHANGELOG.md)
- [Commits](https://github.com/can1357/oh-my-pi/commits/v18.1.15/packages/tui)

Updates `@oh-my-pi/omptype` from 18.1.13 to 18.1.15
- [Release notes](https://github.com/can1357/oh-my-pi/releases)
- [Changelog](https://github.com/can1357/oh-my-pi/blob/main/packages/omptype/CHANGELOG.md)
- [Commits](https://github.com/can1357/oh-my-pi/commits/v18.1.15/packages/omptype)

Updates `typebox` from 1.3.25 to 1.3.29
- [Commits](sinclairzx81/typebox@1.3.25...1.3.29)

Updates `vitest` from 4.1.11 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@oh-my-pi/pi-ai"
  dependency-version: 18.1.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@oh-my-pi/pi-coding-agent"
  dependency-version: 18.1.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@oh-my-pi/pi-tui"
  dependency-version: 18.1.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@oh-my-pi/omptype"
  dependency-version: 18.1.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: typebox
  dependency-version: 1.3.29
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vitest
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
@dependabot
dependabot Bot requested a review from alpertarhan as a code owner September 16, 2026 03:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 23, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/development-dependencies-131338dd08 branch September 23, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@alpertarhan alpertarhan Awaiting requested review from alpertarhan alpertarhan is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants