Skip to content

chore(deps): bump the minor-and-patch group with 8 updates#524

Merged
izadoesdev merged 3 commits into
stagingfrom
dependabot/npm_and_yarn/staging/minor-and-patch-9fb84ffa57
Jul 1, 2026
Merged

chore(deps): bump the minor-and-patch group with 8 updates#524
izadoesdev merged 3 commits into
stagingfrom
dependabot/npm_and_yarn/staging/minor-and-patch-9fb84ffa57

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates:

Package From To
@earendil-works/pi-agent-core 0.75.5 0.80.2
@earendil-works/pi-ai 0.75.5 0.80.2
@biomejs/biome 2.4.13 2.5.1
@opentelemetry/sdk-node 0.217.0 0.219.0
@json-render/react 0.18.0 0.19.0
@tanstack/react-pacer 0.22.0 0.22.1
cnfast 0.0.6 0.0.8
@slack/web-api 7.16.0 7.17.0

Updates @earendil-works/pi-agent-core from 0.75.5 to 0.80.2

Release notes

Sourced from @​earendil-works/pi-agent-core's releases.

v0.80.2

Changed

  • Changed inherited pi-ai ApiKeyCredential to use the auth.json-compatible discriminator type: "api_key" and provider-scoped env values instead of type: "api-key" and metadata.
  • Renamed the inherited agent-core public harness shell execution options type from ExecutionEnvExecOptions to ShellExecOptions.

Fixed

  • Fixed inherited Anthropic-compatible custom models to use explicit compatibility metadata instead of provider-name heuristics for session-affinity headers and unsupported tool-field omissions.
  • Fixed inherited request-scoped apiKey and env values to participate in provider auth resolution, so providers such as Cloudflare can derive request-specific base URLs from explicit call options (#6021).
  • Restored inherited temporary legacy per-API stream aliases such as streamSimpleOpenAICompletions on the pi-ai compat entrypoint (#6016, #6017).
  • Restored inherited runtime detectCompat fallback in openai-completions for models without explicit compat metadata (#6020).

v0.80.1

Fixed

  • Fixed inherited Amazon Bedrock scoped AWS_PROFILE endpoint resolution for built-in inference profile endpoints.
  • Fixed inherited Fireworks Anthropic-compatible requests to apply session-affinity and unsupported tool-field defaults for custom Fireworks models.
  • Fixed inherited Together MiniMax M2.7 metadata to avoid unsupported Together reasoning toggles.

v0.80.0

Changed

  • Added Ctrl+J as a default newline keybinding alongside Shift+Enter.
  • Renamed the displayed zai provider label to ZAI Coding Plan (Global) for clarity (#5965).
  • pi-ai's old global API (stream/complete/completeSimple, getModel/getModels/getProviders, registerApiProvider, getEnvApiKey, ...) moved off the @earendil-works/pi-ai root entrypoint to @earendil-works/pi-ai/compat. Extensions are not affected at runtime: the extension loader resolves the pi-ai root to the compat entrypoint (a strict superset), so existing extensions keep working unchanged. Extension sources that typecheck against pi-ai's published types should switch those imports to @earendil-works/pi-ai/compat (or migrate to the new createModels()/provider-factory API). The compat entrypoint and the loader alias will be removed in a future release with a migration guide.

Fixed

  • Fixed session names to normalize newline characters before storing or displaying labels (#5999 by @​haoqixu).
  • Fixed the session selector to order threaded session trees by the latest activity anywhere in each subtree (#5784 by @​Perlence).
  • Fixed extension-related crash and startup-failure reporting to suggest restarting with pi -ne.
  • Fixed inherited OpenAI Responses streams to fail before missing terminal events and fixed context usage and compaction estimates to ignore malformed all-zero assistant usage after truncated responses (#5526 by @​dmmulroy).
  • Fixed inherited OpenAI Codex Responses WebSocket sessions to reconnect once when OpenAI's connection limit is reached before output starts (#5973).
  • Fixed inherited Amazon Bedrock endpoint resolution to honor scoped AWS_PROFILE values.
  • Fixed inherited Cloudflare providers to require account/gateway configuration and route built-in compat calls through provider auth.
  • Fixed provider-scoped auth environment values to reach inherited Models/ImagesModels API calls and compat API-key injection.
  • Fixed inherited OpenCode Go GLM-5.2 metadata to expose xhigh reasoning and send the provider's max reasoning effort (#5967).
  • Fixed pi --resume to load user package themes and resolve automatic light/dark theme settings.
  • Fixed models.json custom providers so stored credentials can satisfy auth without a redundant provider-level apiKey (#5953).

Removed

  • Removed inherited selective-provider @earendil-works/pi-ai/base and @earendil-works/pi-agent-core/base entrypoints; use the root packages with explicit Models provider factories instead.

v0.79.10

New Features

  • Extension compaction event context - Extension session_before_compact and session_compact events now include reason and willRetry, so extensions can distinguish manual /compact, threshold auto-compaction, and overflow retry flows. See session_before_compact / session_compact and Custom Summarization via Extensions.
  • Safer update flow - pi update installs the exact checked Pi version, and update notices show the changelog URL, making upgrades more predictable. See Install and Manage.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-agent-core's changelog.

[0.80.2] - 2026-06-23

Changed

  • Renamed the public harness shell execution options type from ExecutionEnvExecOptions to ShellExecOptions.

[0.80.1] - 2026-06-23

[0.80.0] - 2026-06-23

Breaking Changes

  • AgentHarnessOptions.models is required and is the only auth path: the harness streams turns, compaction, and branch summarization through the provided Models instance (models.streamSimple()/completeSimple()), resolving auth through the providers. AgentHarnessOptions.getApiKeyAndHeaders is removed — apps that resolved keys per request now express that as provider auth (ApiKeyAuth/OAuthAuth) on the providers in the Models collection. Build one with createModels() + provider factories (or builtinModels() from @earendil-works/pi-ai/providers/all); tests use fauxProvider().
  • compact(), generateSummary(), and generateBranchSummary() take a Models parameter and no longer accept explicit apiKey/headers.
  • StreamFn is defined structurally ((model, context, options?) => AssistantMessageEventStream | Promise<...>); Models.streamSimple satisfies it.
  • Removed the @earendil-works/pi-agent-core/base selective-provider entrypoint; use the root package with an explicit Models instance instead.

Fixed

  • Fixed harness session names to normalize newline characters before storing labels (#5999 by @​haoqixu).
  • Fixed harness compaction estimates to ignore malformed all-zero assistant usage after truncated responses (#5526 by @​dmmulroy).

[0.79.10] - 2026-06-22

[0.79.9] - 2026-06-20

Fixed

  • Fixed Node execution environment commands through legacy WSL bash.exe to pass scripts over stdin so shell variables expand in the target bash (#5893).

[0.79.8] - 2026-06-19

Added

  • Added @earendil-works/pi-agent-core/base for bundlers that want to pair the agent core with selective @earendil-works/pi-ai/base provider registration (#5348 by @​FredKSchott).

[0.79.7] - 2026-06-18

[0.79.6] - 2026-06-16

[0.79.5] - 2026-06-16

[0.79.4] - 2026-06-15

[0.79.3] - 2026-06-13

[0.79.2] - 2026-06-12

Fixed

... (truncated)

Commits
  • 0201806 Release v0.80.2
  • 9096d5f docs: update changelog entries
  • 49fbe68 fix(ai): align api key credentials with auth json
  • b377623 Type name change
  • e000743 Add [Unreleased] section for next cycle
  • 1c4a9ba Release v0.80.1
  • 86528dd Add [Unreleased] section for next cycle
  • f08e968 Release v0.80.0
  • 526351d docs: audit unreleased changelogs
  • cd95c27 fix(ai): require OpenAI Responses terminal events
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​earendil-works/pi-agent-core since your current version.


Updates @earendil-works/pi-ai from 0.75.5 to 0.80.2

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v0.80.2

Changed

  • Changed inherited pi-ai ApiKeyCredential to use the auth.json-compatible discriminator type: "api_key" and provider-scoped env values instead of type: "api-key" and metadata.
  • Renamed the inherited agent-core public harness shell execution options type from ExecutionEnvExecOptions to ShellExecOptions.

Fixed

  • Fixed inherited Anthropic-compatible custom models to use explicit compatibility metadata instead of provider-name heuristics for session-affinity headers and unsupported tool-field omissions.
  • Fixed inherited request-scoped apiKey and env values to participate in provider auth resolution, so providers such as Cloudflare can derive request-specific base URLs from explicit call options (#6021).
  • Restored inherited temporary legacy per-API stream aliases such as streamSimpleOpenAICompletions on the pi-ai compat entrypoint (#6016, #6017).
  • Restored inherited runtime detectCompat fallback in openai-completions for models without explicit compat metadata (#6020).

v0.80.1

Fixed

  • Fixed inherited Amazon Bedrock scoped AWS_PROFILE endpoint resolution for built-in inference profile endpoints.
  • Fixed inherited Fireworks Anthropic-compatible requests to apply session-affinity and unsupported tool-field defaults for custom Fireworks models.
  • Fixed inherited Together MiniMax M2.7 metadata to avoid unsupported Together reasoning toggles.

v0.80.0

Changed

  • Added Ctrl+J as a default newline keybinding alongside Shift+Enter.
  • Renamed the displayed zai provider label to ZAI Coding Plan (Global) for clarity (#5965).
  • pi-ai's old global API (stream/complete/completeSimple, getModel/getModels/getProviders, registerApiProvider, getEnvApiKey, ...) moved off the @earendil-works/pi-ai root entrypoint to @earendil-works/pi-ai/compat. Extensions are not affected at runtime: the extension loader resolves the pi-ai root to the compat entrypoint (a strict superset), so existing extensions keep working unchanged. Extension sources that typecheck against pi-ai's published types should switch those imports to @earendil-works/pi-ai/compat (or migrate to the new createModels()/provider-factory API). The compat entrypoint and the loader alias will be removed in a future release with a migration guide.

Fixed

  • Fixed session names to normalize newline characters before storing or displaying labels (#5999 by @​haoqixu).
  • Fixed the session selector to order threaded session trees by the latest activity anywhere in each subtree (#5784 by @​Perlence).
  • Fixed extension-related crash and startup-failure reporting to suggest restarting with pi -ne.
  • Fixed inherited OpenAI Responses streams to fail before missing terminal events and fixed context usage and compaction estimates to ignore malformed all-zero assistant usage after truncated responses (#5526 by @​dmmulroy).
  • Fixed inherited OpenAI Codex Responses WebSocket sessions to reconnect once when OpenAI's connection limit is reached before output starts (#5973).
  • Fixed inherited Amazon Bedrock endpoint resolution to honor scoped AWS_PROFILE values.
  • Fixed inherited Cloudflare providers to require account/gateway configuration and route built-in compat calls through provider auth.
  • Fixed provider-scoped auth environment values to reach inherited Models/ImagesModels API calls and compat API-key injection.
  • Fixed inherited OpenCode Go GLM-5.2 metadata to expose xhigh reasoning and send the provider's max reasoning effort (#5967).
  • Fixed pi --resume to load user package themes and resolve automatic light/dark theme settings.
  • Fixed models.json custom providers so stored credentials can satisfy auth without a redundant provider-level apiKey (#5953).

Removed

  • Removed inherited selective-provider @earendil-works/pi-ai/base and @earendil-works/pi-agent-core/base entrypoints; use the root packages with explicit Models provider factories instead.

v0.79.10

New Features

  • Extension compaction event context - Extension session_before_compact and session_compact events now include reason and willRetry, so extensions can distinguish manual /compact, threshold auto-compaction, and overflow retry flows. See session_before_compact / session_compact and Custom Summarization via Extensions.
  • Safer update flow - pi update installs the exact checked Pi version, and update notices show the changelog URL, making upgrades more predictable. See Install and Manage.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[0.80.2] - 2026-06-23

Changed

  • Changed ApiKeyCredential to use the auth.json-compatible discriminator type: "api_key" and provider-scoped env values instead of type: "api-key" and metadata.

Fixed

  • Fixed Anthropic-compatible custom models to use explicit compatibility metadata instead of provider-name heuristics for session-affinity headers and unsupported tool-field omissions.
  • Fixed request-scoped apiKey and env values to participate in provider auth resolution, so providers such as Cloudflare can derive request-specific base URLs from explicit call options (#6021).
  • Restored temporary legacy per-API stream aliases such as streamSimpleOpenAICompletions on the compat entrypoint (#6016, #6017).
  • Restored runtime detectCompat fallback in openai-completions for models without explicit compat metadata (#6020).

[0.80.1] - 2026-06-23

Fixed

  • Fixed a regression in Amazon Bedrock scoped AWS_PROFILE endpoint resolution for built-in inference profile endpoints.
  • Fixed Fireworks Anthropic-compatible requests to apply session-affinity and unsupported tool-field defaults for custom Fireworks models.
  • Fixed Together MiniMax M2.7 metadata to avoid unsupported Together reasoning toggles.

[0.80.0] - 2026-06-23

Breaking Changes

  • The root entrypoint (@earendil-works/pi-ai) is now core-only and side-effect free. The old global API moved to the temporary @earendil-works/pi-ai/compat entrypoint, a strict superset of the root: switching a file's import path is the only migration step. Moved symbols include stream/complete/streamSimple/completeSimple, getModel/getModels/getProviders (now deprecated aliases of getBuiltinModel/getBuiltinModels/getBuiltinProviders from @earendil-works/pi-ai/providers/all), registerApiProvider/unregisterApiProviders/resetApiProviders/getApiProvider, getEnvApiKey/findEnvKeys, setBedrockProviderModule, the per-API lazy stream wrappers (anthropicMessagesApi, ...), and the image-generation API.
  • Renamed the Provider type to ProviderId. Provider now names the runtime provider interface (id, name, auth, model listing, stream behavior).
  • API implementation modules moved from src/providers/ to @earendil-works/pi-ai/api/*, renamed by API id (anthropic -> api/anthropic-messages, google -> api/google-generative-ai, mistral -> api/mistral-conversations, amazon-bedrock -> api/bedrock-converse-stream), each exporting exactly stream and streamSimple. The old per-impl export names (streamAnthropic, streamSimpleAnthropic, ...) and legacy raw API subpaths (./anthropic, ./google, ./openai-completions, ...) are gone; import raw API implementations through @earendil-works/pi-ai/api/*.
  • Removed the @earendil-works/pi-ai/base selective-provider entrypoint; use the root/core APIs with explicit createModels() collections and provider factories for isolated bundles.

Migration guide:

  • Read packages/ai/README.md in full for the new Models API, provider factories, auth configuration, image generation, and custom provider examples.

  • To keep the old global API temporarily, change imports from @earendil-works/pi-ai to @earendil-works/pi-ai/compat. The compat entrypoint preserves stream/complete, generated catalog reads, API registry helpers, env API-key helpers, lazy API wrappers, and image globals, but it will be removed in a future release.

  • To migrate to the new runtime, create a Models collection and call methods on it:

    import { builtinModels } from "@earendil-works/pi-ai/providers/all";
const models = builtinModels();
const model = models.getModel("anthropic", "claude-haiku-4-5");
if (!model) throw new Error("model not found");
const message = await models.complete(model, {
messages: [{ role: "user", content: "Hello", timestamp: Date.now() }],
});

  • For an isolated provider set, register provider factories explicitly:

... (truncated)

Commits
  • 0201806 Release v0.80.2
  • 9096d5f docs: update changelog entries
  • e1a2dc0 fix(ai): restore detectCompat runtime fallback in openai-completions
  • ef231c4 fix(ai): resolve request-scoped auth before provider calls
  • 04fce80 Merge remote-tracking branch 'origin/main'
  • 49fbe68 fix(ai): align api key credentials with auth json
  • 386d079 fix(ai): restore legacy compat stream aliases
  • 6184307 fix(ai): require explicit anthropic compat metadata
  • e000743 Add [Unreleased] section for next cycle
  • 1c4a9ba Release v0.80.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​earendil-works/pi-ai since your current version.


Updates @biomejs/biome from 2.4.13 to 2.5.1

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.1

2.5.1

Patch Changes

  • #10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.

    -@import url("print.css") print,
-/* comment */
-screen;
+@import url("print.css") print, /* comment */ screen;

  • #10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.

    -    "path": "src\account\setup-passkey.tsx",
+    "path": "src\\account\\setup-passkey.tsx",

  • #10626 5f837df Thanks @​tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.

  • #10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.

  • #10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.

  • #10667 d8c3e87 Thanks @​Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.

  • #10696 ef2373f Thanks @​ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.

  • #10705 4ccb410 Thanks @​ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.

  • #10669 aa0a6eb Thanks @​Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.

  • #10689 844b1be Thanks @​ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

    If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.

  • #10695 043fbb5 Thanks @​ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.

  • #10712 5941df2 Thanks @​Conaclos! - Improved the diagnostic and the documentation of useFlatMap.

  • #10615 23814f1 Thanks @​qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.

  • #10688 ec69489 Thanks @​ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.

  • #10701 6c2e0d7 Thanks @​ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.1

Patch Changes

  • #10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.

    -@import url("print.css") print,
-/* comment */
-screen;
+@import url("print.css") print, /* comment */ screen;

  • #10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.

    -    "path": "src\account\setup-passkey.tsx",
+    "path": "src\\account\\setup-passkey.tsx",

  • #10626 5f837df Thanks @​tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.

  • #10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.

  • #10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.

  • #10667 d8c3e87 Thanks @​Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.

  • #10696 ef2373f Thanks @​ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.

  • #10705 4ccb410 Thanks @​ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.

  • #10669 aa0a6eb Thanks @​Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.

  • #10689 844b1be Thanks @​ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

    If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.

  • #10695 043fbb5 Thanks @​ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.

  • #10712 5941df2 Thanks @​Conaclos! - Improved the diagnostic and the documentation of useFlatMap.

  • #10615 23814f1 Thanks @​qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.

  • #10688 ec69489 Thanks @​ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.

  • #10701 6c2e0d7 Thanks @​ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.

  • #10681 888515b Thanks @​Conaclos! - Fixed useExportType that reported useless details in some diagnostics.

... (truncated)

Commits

Updates @opentelemetry/sdk-node from 0.217.0 to 0.219.0

Release notes

Sourced from @​opentelemetry/sdk-node's releases.

experimental/v0.219.0

0.219.0

💥 Breaking Changes

  • fix(configuration)!: stop removing null values from parsed config object #6679 @​trentm
    • It is now the responsibility of the user of a parsed declarative config object, typically just the sdk-node package, to handle null values.
  • fix(api-logs)!: Removed NOOP_LOGGER and NoopLogger exports from @opentelemetry/api-logs. Use createNoopLogger(): Logger instead. #6713 @​dyladan
  • feat(api-logs)!: rename scopeAttributes to attributes in LoggerOptions #6573 @​pichlermarc
  • fix(sdk-node)!: remove buildSamplerFromConfig export #6784 @​trentm

🚀 Features

🐛 Bug Fixes

  • fix(sdk-node): pass all config properties to log record exporters in declarative config #6708 @​MikeGoldsmith
  • fix(sdk-node): warn and ignore zero exporter timeout in declarative config #6711 @​MikeGoldsmith
  • fix(sdk-node): pass gRPC credentials and headers to span exporter in declarative config #6705 @​MikeGoldsmith
  • fix(otlp-transformer): do not attempt to skip groups #6704 @​pichlermarc
  • fix(otlp-grpc-exporter-base): recreate client after 5 consecutive DEADLINE_EXCEEDED to recover from connection dropped deadlock #6296 @​afharo
  • fix(browser-detector): use the right semantic convention for user agent resource attribute #6729 @​david-luna
  • fix(browser-detector): user agent resource attribute always #6754 @​david-luna
  • fix(opentelemetry-exporter-prometheus): handle additional edge cases in metric name conversion #6727 @​cjihrig
  • fix(sdk-logs): avoid null dereference in BatchLogRecordProcessor._flushAll when an in-flight export completes between awaits #6763 @​Janealter
  • fix(configuration): improve environment variable substitution to handle all the cases shown in the spec #6757 @​trentm

📚 Documentation

  • docs(otlp-exporter-base): index the package's public API in generated docs so types like OTLPExporterNodeConfigBase resolve and link from consumer exporter pages #6725 @​devareddy05

🏠 Internal

  • refactor(configuration): remove redundant env var parsing in EnvironmentConfigFactory #6710 @​MikeGoldsmith

experimental/v0.218.0

0.218.0

🚀 Features

  • feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @​pichlermarc
  • feat(configuration): show all config validation errors, if there are multiple #6683 @​trentm
  • feat(sdk-node): allow startNodeSDK() without an arg #6688 @​trentm

🏠 Internal

... (truncated)

Commits
  • 13a035b chore: prepare next release (#6756)
  • 4b13587 Merge commit from fork
  • 71d195c chore(renovate): set minimumReleaseAge to 3 days (#6792)
  • 555fca6 Update renovate.json to use matchManagers (#6141)
  • b711a81 docs(otlp-exporter-base): add typedoc entry points so public API is indexed a...
  • da70402 fix(ci): supply-chain sec: disable caching in release-related workflow (#6790)
  • 002267b chore: complete the move to the smaller SPDX license header (#6791)
  • 056ef9c feat(sdk-metrics): implement metric reader metrics (#6449)
  • 3bd69ce fix(configuration): improve environment variable substitution to handle all t...
  • bfbda7c docs(exporter-trace-otlp-grpc): import CompressionAlgorithm from otlp-exporte...
  • Additional commits viewable in compare view

Updates @json-render/react from 0.18.0 to 0.19.0

Changelog

Sourced from @​json-render/react's changelog.

0.19.0

New Features

  • Custom directives API — @json-render/core now supports custom directives via defineDirective, letting you declare new JSON shapes (like $format, $math) that resolve to computed values at render time. Directives compose naturally — nest $format over $math over $state and they resolve inside-out. All four renderers (React, Vue, Svelte, Solid) have built-in directive resolution (#279)
  • @json-render/directives — New package shipping seven ready-made directives: $format (date, currency, number, percent via Intl), $math (add, subtract, multiply, divide, mod, min, max, round, floor, ceil, abs), $concat, $count, $truncate, $pluralize, and $join. Also exports createI18nDirective for $t translation keys with {{param}} interpolation, and standardDirectives for one-line registration (#279)

Improvements

  • Example READMEs — Added documentation to the chat, dashboard, game-engine, and no-ai examples (#277)

Contributors

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​json-render/react since your current version.


Updates @tanstack/react-pacer from 0.22.0 to 0.22.1

Release notes

Sourced from @​tanstack/react-pacer's releases.

@​tanstack/react-pacer@​0.22.1

Patch Changes

  • Allow standalone devtools panels to render without required TanStack Devtools props. (#216)

  • Updated dependencies [47d02e2]:

    • @​tanstack/pacer@​0.21.1
Changelog

Sourced from @​tanstack/react-pacer's changelog.

0.22.1

Patch Changes

  • Allow standalone devtools panels to render without required TanStack Devtools props. (#216)

  • Updated dependencies [47d02e2]:

    • @​tanstack/pacer@​0.21.1
Commits

Updates cnfast from 0.0.6 to 0.0.8

Changelog

Sourced from cnfast's changelog.

0.0.8

Patch Changes

  • fix

0.0.7

Patch Changes

  • fix

  • a5d9603: Cache variadic cn(...) results by argument sequence on V8.

    Repeated multi-arg calls (cn("base", cond && "variant", ...)) previously rebuilt and re-hashed the joined class string on every render. On V8 a freshly built string is not hash-cached, so each cn call paid a full flatten and hash for the cache lookup. The new cache keys on the stable individual argument strings instead, whose hashes V8 already caches, and skips the rebuild on a hit. This is ~4x faster on the cached re-render path and lifts the suite geomean to 3.8x on V8.

    The cache is gated to V8 (Chrome, Node, Edge, Deno). JavaScriptCore (Safari, Bun) and SpiderMonkey (Firefox) hash fresh strings cheaply and gain nothing from the extra layer, so they take the original path unchanged. Output stays byte-identical across all engines.

Commits

Updates @slack/web-api from 7.16.0 to 7.17.0

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​7.17.0

Minor Changes

  • 2085900: feat: expose public read-only ts getter on ChatStreamer for fallback to chat.update when a stream expires server-side

    import { WebClient } from "@slack/web-api";
const client = new WebClient(process.env.SLACK_BOT_TOKEN);
const streamer = client.chatStream({
channel: "C0123456789",
thread_ts: "1700...
Description has been truncated


Summary by cubic
Bump minor and patch dependencies across API, dashboard, docs, Slack, and UI. Notable upgrades: @earendil-works/pi-* 0.80, @opentelemetry/sdk-node 0.219, @json-render/react 0.19, @biomejs/biome 2.5, and @slack/web-api 7.17.


Dependencies

Core: @earendil-works/pi-agent-core → 0.80.2, @earendil-works/pi-ai → 0.80.2, @opentelemetry/sdk-node → 0.219.0, @slack/web-api → 7.17.0
Tooling/UI: @biomejs/biome → 2.5.1, @json-render/react → 0.19.0, @tanstack/react-pacer → 0.22.1, cnfast → 0.0.8
Biome config: ignore *.svg; disable useSortedAttributes, useReadonlyClassProperties, useOptionalChain; keep noShadow off



Migration

@earendil-works/pi-ai 0.80: the root entrypoint no longer exposes the old global API. If importing from @earendil-works/pi-ai, switch to @earendil-works/pi-ai/compat or adopt createModels() with @earendil-works/pi-ai/providers/all.
@earendil-works/pi-agent-core 0.80: harness now requires a Models instance; getApiKeyAndHeaders is removed. Type rename: ShellExecOptions.
@opentelemetry/sdk-node 0.219: declarative config now preserves null; ensure config handles them. Removed buildSamplerFromConfig export.



Written for commit 18dfe289eba7f3d232911e700ab0f8d23d4c43c7. Summary will update on new commits.

@dependabot
chore(deps): bump the minor-and-patch group with 8 updates
11b1293 
Bumps the minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@earendil-works/pi-agent-core](https://github.com/earendil-works/pi/tree/HEAD/packages/agent) | `0.75.5` | `0.80.2` |
| [@earendil-works/pi-ai](https://github.com/earendil-works/pi/tree/HEAD/packages/ai) | `0.75.5` | `0.80.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.13` | `2.5.1` |
| [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js) | `0.217.0` | `0.219.0` |
| [@json-render/react](https://github.com/vercel-labs/json-render/tree/HEAD/packages/react) | `0.18.0` | `0.19.0` |
| [@tanstack/react-pacer](https://github.com/TanStack/pacer/tree/HEAD/packages/react-pacer) | `0.22.0` | `0.22.1` |
| [cnfast](https://github.com/aidenybai/cnfast/tree/HEAD/packages/cnfast) | `0.0.6` | `0.0.8` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `7.16.0` | `7.17.0` |


Updates `@earendil-works/pi-agent-core` from 0.75.5 to 0.80.2
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/agent/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.2/packages/agent)

Updates `@earendil-works/pi-ai` from 0.75.5 to 0.80.2
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.2/packages/ai)

Updates `@biomejs/biome` from 2.4.13 to 2.5.1
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.1/packages/@biomejs/biome)

Updates `@opentelemetry/sdk-node` from 0.217.0 to 0.219.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-js@experimental/v0.217.0...experimental/v0.219.0)

Updates `@json-render/react` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/vercel-labs/json-render/releases)
- [Changelog](https://github.com/vercel-labs/json-render/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel-labs/json-render/commits/v0.19.0/packages/react)

Updates `@tanstack/react-pacer` from 0.22.0 to 0.22.1
- [Release notes](https://github.com/TanStack/pacer/releases)
- [Changelog](https://github.com/TanStack/pacer/blob/main/packages/react-pacer/CHANGELOG.md)
- [Commits](https://github.com/TanStack/pacer/commits/@tanstack/react-pacer@0.22.1/packages/react-pacer)

Updates `cnfast` from 0.0.6 to 0.0.8
- [Changelog](https://github.com/aidenybai/cnfast/blob/main/packages/cnfast/CHANGELOG.md)
- [Commits](https://github.com/aidenybai/cnfast/commits/HEAD/packages/cnfast)

Updates `@slack/web-api` from 7.16.0 to 7.17.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@7.16.0...@slack/web-api@7.17.0)

---
updated-dependencies:
- dependency-name: "@earendil-works/pi-agent-core"
  dependency-version: 0.80.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@earendil-works/pi-ai"
  dependency-version: 0.80.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@opentelemetry/sdk-node"
  dependency-version: 0.219.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@json-render/react"
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@tanstack/react-pacer"
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: cnfast
  dependency-version: 0.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@slack/web-api"
  dependency-version: 7.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from izadoesdev as a code owner July 1, 2026 04:16
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@vercel

vercel Bot commented Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
dashboard Ready Ready Preview, Comment Jul 1, 2026 8:18am
databuddy-status Ready Ready Preview, Comment Jul 1, 2026 8:18am
documentation Ready Ready Preview, Comment Jul 1, 2026 8:18am

@unkey-deploy

unkey-deploy Bot commented Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Unkey Deploy

Name Status Preview Inspect Updated (UTC)
api (preview) Ready Visit Preview Inspect Jul 1, 2026 8:17am

@socket-security

socket-security Bot commented Jul 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​json-render/​react@​0.18.0 ⏵ 0.19.077100100 +192100
Updated@​earendil-works/​pi-agent-core@​0.75.5 ⏵ 0.80.378 +1100100 +198 +1100
Updated@​earendil-works/​pi-ai@​0.75.5 ⏵ 0.80.381 +4100100 +198 +1100
Updatedcnfast@​0.0.6 ⏵ 0.0.881 +110098 +192100
Updated@​opentelemetry/​resources@​2.7.1 ⏵ 2.8.0991008793100
Updated@​tanstack/​react-pacer@​0.22.0 ⏵ 0.22.110010010091100
Updated@​opentelemetry/​sdk-node@​0.217.0 ⏵ 0.219.098100100 +196100
Updated@​slack/​web-api@​7.16.0 ⏵ 7.17.0100 +110010097100
Updated@​biomejs/​biome@​2.4.13 ⏵ 2.5.1100 +110010099 +2100

View full report

@izadoesdev

izadoesdev commented Jul 1, 2026

Copy link
Copy Markdown
Member

Reviewed and repaired this one before merging.

What changed after review:

  • Rebased/merged current staging so this is landing on the latest staging head.
  • Added the missing bun.lock updates required by the grouped package bumps.
  • Aligned the root @slack/web-api override with the app bump to 7.17.0, so the Slack package is not silently pinned back to the old version.
  • Updated biome.json for Biome 2.5 compatibility/noise control: moved noShadow to its new rule group, excluded SVGs from new lint churn, and disabled newly surfaced assist/style rules that would otherwise create unrelated repo-wide formatting work.

Verification:

  • Local: bun install --frozen-lockfile, bun run lint, bun run check-types passed.
  • Local full bun run test could not be trusted in the temp worktree because Docker/service containers are unavailable and the temp checkout has no .env; the initial failure was missing DATABASE_URL/REDIS_URL, not this dependency bump.
  • Fresh GitHub checks are green: Lint, Check Types, Test, Dashboard Playwright, CodeQL/Analyze, health checks, Socket, and Vercel previews.

Decision: approving and merging into staging.

izadoesdev
izadoesdev approved these changes Jul 1, 2026
View reviewed changes

@izadoesdev izadoesdev left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved after adding the missing lockfile/config repair and confirming fresh CI is green.

@izadoesdev
izadoesdev merged commit 54186ea into staging Jul 1, 2026
15 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/staging/minor-and-patch-9fb84ffa57 branch July 1, 2026 08:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@izadoesdev izadoesdev izadoesdev approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@izadoesdev