chore(deps): update dependency promptfoo to v0.121.11

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
promptfoo	0.121.9 → 0.121.11

---

Release Notes

promptfoo/promptfoo (promptfoo)

v0.121.11

Compare Source

Features

• quiverai: add Arrow 1.1 models, vectorize endpoint, and GPT Image-2 pipeline (#​9139) (ce2c62d)

Bug Fixes

• redteam: handle MCP target prompt materialization (#​9149) (a050023)
• redteam: keep fresh target type state in sync (#​9145) (770130f)
• redteam: show target type selector immediately (#​9141) (c143fa6)

v0.121.10

Compare Source

Features

• app: humanize per-cell latency in eval results table (#​8998) (509aa54)
• bedrock: add converse mcp support (#​9134) (c1fe183)
• claude-agent-sdk: bump SDK to 0.2.120 and expose new options (#​8946) (350a24c)
• cli: add eval filter range (#​8895) (f049dd3)
• examples: add integration-inspect-osworld wrapper (#​8932) (5d3279a)
• openapi: generate server spec from route DTOs (#​8928) (c92102b)
• output: add junit xml reports (#​9073) (ec8149c)
• providers: add Atlas Cloud provider (#​8980) (90da094)
• providers: add first-class n parameter support for OpenAI chat completions (#​8914) (6e120b1)
• providers: expose OpenAI prompt cache controls (#​9093) (9ec9c1f)
• providers: update mistral support (#​9018) (130f59f)
• xai: refresh provider support (#​9033) (c2c7abf)

Bug Fixes

• api: add DTO validation for core server routes (#​8922) (87f637f)
• api: correct user-visible response regressions (#​8976) (74e7f95)
• api: harden node package contracts (#​9055) (be44d4e)
• api: make modelAudit safeRespond fire-safe under parse failures (#​8977) (524c5e6)
• api: preserve error details and stack traces in shared helpers (#​8975) (ed0b67b)
• api: validate eval route DTOs (#​8924) (84d5c8c)
• api: validate media, blob, user, and trace DTOs (#​8923) (9a313f5)
• api: validate model audit route DTOs (#​8927) (684ae81)
• api: validate provider route DTOs (#​8925) (b761730)
• app: make update banner dismiss button clickable (#​8942) (79a2864)
• assertions: avoid slow XML candidate matching (#​8941) (df029d2)
• assertions: invert not-llm-rubric results (#​8986) (c45831b)
• assertions: normalize shell command arrays in trajectories (#​9060) (a39fac1)
• assertions: support indexed XML paths (#​8970) (bd3969f)
• cache: hash anthropic cache keys (#​8642) (d1f1e5b)
• cache: hash bedrock cache keys (#​8644) (d65fa5e)
• cache: hash vertex and foundry keys (#​8640) (c7b2486)
• cache: stabilize Anthropic cache hashes across runs (#​9124) (8e72bd1)
• cli: avoid hard exits in recoverable flows (#​9118) (d00bddd)
• cli: explain better-sqlite3 ABI mismatches (#​9000) (fc7573a)
• cli: fail closed on modelaudit signal exits (#​9014) (2f29f65)
• code-scan: honor enable-fork-prs (#​8938) (517ec9d)
• codex: isolate default providers by credential (#​8633) (dddd275)
• config: make resolution errors reusable (#​9008) (6b8d3db)
• deps: update dependency ai to ^6.0.168 (#​9007) (95adf3c)
• deps: update dependency fast-xml-parser to ^5.7.1 (#​9010) (72140be)
• deps: update dependency undici to ^7.25.0 (#​9017) (5be6015)
• deps: update openai packages (#​9092) (efe2cd0)
• deps: update opentelemetry (#​9103) (9106ef0)
• eval: delete traces with eval records (#​8973) (a395551)
• eval: harden OpenAI media blob exports (#​8876) (9d4948b)
• eval: honor prompt suggestion counts (#​9105) (3f98e0d)
• eval: honor sharing disable for blob uploads (#​8940) (77fa02a)
• eval: keep package APIs in library mode (#​9111) (3bc3a22)
• eval: preserve filter range on resume (#​8960) (cd16d65)
• eval: stop HuggingFace empty-page loops (#​8939) (56b3c9f)
• google: drop late live messages after resolution (#​9138) (f21272d)
• google: use AIStudioChatProvider for default grading providers (#​9108) (42ab9dd)
• model-audit: fail closed across report flows (#​9050) (f1d0a6c)
• output: strip nested response metadata (#​9038) (ba3ecaa)
• output: strip nested test case metadata (#​9039) (1179413)
• providers: claude-agent-sdk returns main agent result, not first sub-agent result (#​9056) (a694552)
• providers: drop retired groq reasoning model (#​9025) (937e1c9)
• providers: expose OpenAI prompt cache controls (#​9093) (7fbbdca)
• providers: honor disabled tools in model providers (#​9045) (cfdc9f9)
• providers: honor passthrough for OpenAI embeddings (#​9107) (3eeccdb)
• providers: improve openai pricing accuracy (#​9049) (6cb5be9)
• providers: refresh WatsonX model metadata (#​9015) (355fbaf)
• providers: separate OpenCode fork cache keys (#​9102) (9851681)
• providers: structured 429 classification in Azure assistants (#​8896) (d2c64d2)
• providers: support newer bedrock chat models (#​9024) (f3be26f)
• providers: unify coding agent working dirs (#​9043) (bfcac5b)
• providers: use agent_reference for Azure AI Foundry agents (#​8987) (989a17e)
• redteam: honor coding-agent artifact vars (#​9133) (0187a8c)
• redteam: improve SQL injection grading to distinguish from RBAC issues (#​7284) (2665cac)
• redteam: keep results toolbar visible (#​9125) (1a986ee)
• redteam: make email validation failures recoverable (#​9012) (698b9ae)
• redteam: refine report table layout (#​9127) (3e5371f)
• redteam: validate redteam route DTOs (#​8926) (1b8c4fb)
• server: honor remote generation disable for hosted helpers (#​8967) (61baa48)
• test: prevent test-hygiene race with parallel fixture writers (#​8948) (549e2b7)
• tracing: skip orphan otlp trace rows (#​9132) (a303d36)

Performance Improvements

• providers/http: parallelize createHttpsAgent file reads (#​8956) (108c80b)

Reverts

• feat(providers): add first-class n parameter support for OpenAI chat completions (#​9113) (543b5de)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.