chore(deps-dev): bump the npm-minor-patch group in /pi-extension with 4 updates

[dependabot]

Bumps the npm-minor-patch group in /pi-extension with 4 updates: @earendil-works/pi-coding-agent, @earendil-works/pi-tui, @types/node and typebox.

Updates @earendil-works/pi-coding-agent from 0.84.2 to 0.84.3

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.84.3

New Features

• PowerShell tool — Use optional native PowerShell command execution on Windows. See PowerShell Tool.
• Safer managed updates — Stage, verify, and atomically activate updates for installer-managed installations. See Install and Manage.
• Model and thinking controls — Select thinking levels with /thinking, search defaults, keep selections session-scoped, and persist them explicitly with Ctrl+S. See Models and Thinking.

Breaking Changes

• Renamed the inherited GoogleThinkingLevel type to GoogleApiThinkingLevel and added ResolvedGoogleThinkingLevel for normalized adapter levels.

Added

• Added an optional powershell tool for Windows, configurable through defaultTools and the SDK. See PowerShell Tool.
• Added a /thinking selector and searchable default choices to the model and thinking selectors; Ctrl+S saves the selected model as the global default. See Models and Thinking.
• Added optional routing session IDs to exported compaction summary helpers so callers can preserve provider routing without enabling prompt cache writes.
• Added transcript usage notices for compaction and branch summaries when cache miss notices are enabled.
• Added session_compact_failed extension events so compaction failures and aborts expose their reason, retry state, source, and error message to handlers (#8175).
• Added inherited provider-neutral toolChoice support to simple stream requests.
• Added inherited automatic Anthropic server-side refusal fallback for supported first-party models, including returned-model usage pricing (#8017).
• Added inherited configurable OpenAI-compatible thinking-token budget fields for vLLM, Qwen/SGLang, and llama.cpp servers. See OpenAI Compatibility (#8275 by @​bnsd55).
• Added inherited China-specific ZAI Coding Plan models, including GLM-4.6V vision support and API-equivalent usage cost estimates (#8220).
• Added inherited deepseek-v4-pro-0813 support to the Qwen Token Plan Individual catalog (#8194).

Changed

• Changed experimental installer-managed installations so pi update stages, verifies, and atomically activates the selected release in place. See Install and Manage.
• Changed inherited built-in xAI models to use the Responses API with encrypted reasoning replay and made Grok 4.6 the default xAI model (#8124 by @​Jaaneek).
• Changed inherited Anthropic, Azure OpenAI, Google, Mistral, and OpenAI adapters to send Pi's default User-Agent unless overridden (#8305).
• Changed Windows and WSL keybinding defaults to avoid terminal-reserved shortcuts for image paste, model cycling, editor undo, fullscreen transcript navigation and search, and message queueing (#8372).
• Changed Bun release archives to ship the native clipboard binary only inside the wrapper package, removing a duplicate platform package from each archive.
• Changed package resource glob expansion to use Node.js's built-in implementation with deterministic visible-path matching, reducing the installed runtime dependency tree.
• Changed the bundled Node.js runtime to load jiti only when importing an extension and Babel only when uncached source needs transformation, reducing CLI startup time and bundle size.
• Changed syntax highlighting to initialize only twenty common languages eagerly and defer the remaining grammars until after the initial TUI render, reducing CLI startup time.
• Changed the Node.js CLI and RPC entrypoints to load a bundled runtime, reducing startup filesystem reads while keeping the public library and legacy module paths on the modular runtime for normal dependency identity.
• Changed session sharing to render clickable terminal links, display only the canonical Radius artifact URL, and include the current system prompt and active tool definitions in Radius session shares.

Fixed

• Fixed failed extension factories leaving event subscriptions, provider registrations, and default flag state active (#8424 by @​acmerfight).
• Fixed models.json typings omitting the documented OpenAI-compatible compat.supportsFinishReason provider and model override (#8487 by @​petrroll).
• Fixed /model and /thinking selections being persisted globally unless explicitly saved with Ctrl+S (#5263).
• Fixed JSON and RPC toolcall_start events omitting the tool call id and name (#7953 by @​christianklotz).
• Fixed extensions failing to load when the Node.js CLI runs as a single-executable application (#8237).
• Fixed nested Markdown skills inside .agents/skills/ grouping directories not being discovered.
• Fixed compaction and branch summarization requests exposing tools to providers.
• Fixed single-object edit tool inputs failing validation by accepting them as one-edit arrays in both coding-agent and harness edit tools (#7835).
• Fixed root Markdown files such as README.md and AGENTS.md in skill directories being reported as broken skills unless they declare valid skill frontmatter (#7805).
• Fixed the default Cerebras model referencing an unavailable Z.AI model.
• Fixed inherited OpenAI-compatible Chat Completions reasoning replay to preserve and resend assistant-level reasoning_details verbatim and in order (#7994).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.84.3] - 2026-08-24

New Features

• PowerShell tool — Use optional native PowerShell command execution on Windows. See PowerShell Tool.
• Safer managed updates — Stage, verify, and atomically activate updates for installer-managed installations. See Install and Manage.
• Model and thinking controls — Select thinking levels with /thinking, search defaults, keep selections session-scoped, and persist them explicitly with Ctrl+S. See Models and Thinking.

Breaking Changes

• Renamed the inherited GoogleThinkingLevel type to GoogleApiThinkingLevel and added ResolvedGoogleThinkingLevel for normalized adapter levels.

Added

• Added an optional powershell tool for Windows, configurable through defaultTools and the SDK. See PowerShell Tool.
• Added a /thinking selector and searchable default choices to the model and thinking selectors; Ctrl+S saves the selected model as the global default. See Models and Thinking.
• Added optional routing session IDs to exported compaction summary helpers so callers can preserve provider routing without enabling prompt cache writes.
• Added

usage notices for compaction and branch summaries when cache miss notices are enabled.

• Added session_compact_failed extension events so compaction failures and aborts expose their reason, retry state, source, and error message to handlers (#8175).
• Added inherited provider-neutral toolChoice support to simple stream requests.
• Added inherited automatic Anthropic server-side refusal fallback for supported first-party models, including returned-model usage pricing (#8017).
• Added inherited configurable OpenAI-compatible thinking-token budget fields for vLLM, Qwen/SGLang, and llama.cpp servers. See OpenAI Compatibility (#8275 by @​bnsd55).
• Added inherited China-specific ZAI Coding Plan models, including GLM-4.6V vision support and API-equivalent usage cost estimates (#8220).
• Added inherited deepseek-v4-pro-0813 support to the Qwen Token Plan Individual catalog (#8194).

Changed

• Changed experimental installer-managed installations so pi update stages, verifies, and atomically activates the selected release in place. See Install and Manage.
• Changed inherited built-in xAI models to use the Responses API with encrypted reasoning replay and made Grok 4.6 the default xAI model (#8124 by @​Jaaneek).
• Changed inherited Anthropic, Azure OpenAI, Google, Mistral, and OpenAI adapters to send Pi's default User-Agent unless overridden (#8305).
• Changed Windows and WSL keybinding defaults to avoid terminal-reserved shortcuts for image paste, model cycling, editor undo, fullscreen transcript navigation and search, and message queueing (#8372).
• Changed Bun release archives to ship the native clipboard binary only inside the wrapper package, removing a duplicate platform package from each archive.
• Changed package resource glob expansion to use Node.js's built-in implementation with deterministic visible-path matching, reducing the installed runtime dependency tree.
• Changed the bundled Node.js runtime to load jiti only when importing an extension and Babel only when uncached source needs transformation, reducing CLI startup time and bundle size.
• Changed syntax highlighting to initialize only twenty common languages eagerly and defer the remaining grammars until after the initial TUI render, reducing CLI startup time.
• Changed the Node.js CLI and RPC entrypoints to load a bundled runtime, reducing startup filesystem reads while keeping the public library and legacy module paths on the modular runtime for normal dependency identity.
• Changed session sharing to render clickable terminal links, display only the canonical Radius artifact URL, and include the current system prompt and active tool definitions in Radius session shares.

Fixed

• Fixed failed extension factories leaving event subscriptions, provider registrations, and default flag state active (#8424 by @​acmerfight).
• Fixed models.json typings omitting the documented OpenAI-compatible compat.supportsFinishReason provider and model override (#8487 by @​petrroll).
• Fixed /model and /thinking selections being persisted globally unless explicitly saved with Ctrl+S (#5263).
• Fixed JSON and RPC toolcall_start events omitting the tool call id and name (#7953 by @​christianklotz).
• Fixed extensions failing to load when the Node.js CLI runs as a single-executable application (#8237).
• Fixed nested Markdown skills inside .agents/skills/ grouping directories not being discovered.

... (truncated)

Commits

• 4e58f32 Release v0.84.3
• 7623e8a docs: audit unreleased changelogs
• 80e6276 feat(coding-agent): add optional PowerShell tool (#8512)
• 4af9d21 feat(coding-agent): update managed installations in place
• a470b12 fix(coding-agent): expose finish reason compatibility override (#8487)
• 81152d8 docs(coding-agent): clarify custom footer usage APIs (#8482)
• 27b7a62 fix(coding-agent): use Windows-friendly keybinding defaults
• 460191c feat(coding-agent): include context in Radius session shares
• a69bef7 fix(coding-agent): discard failed extension factory state (#8424)
• bcad846 fix(coding-agent): update end-of-options CLI test
• Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 0.84.2 to 0.84.3

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v0.84.3

New Features

• PowerShell tool — Use optional native PowerShell command execution on Windows. See PowerShell Tool.
• Safer managed updates — Stage, verify, and atomically activate updates for installer-managed installations. See Install and Manage.
• Model and thinking controls — Select thinking levels with /thinking, search defaults, keep selections session-scoped, and persist them explicitly with Ctrl+S. See Models and Thinking.

Breaking Changes

• Renamed the inherited GoogleThinkingLevel type to GoogleApiThinkingLevel and added ResolvedGoogleThinkingLevel for normalized adapter levels.

Added

• Added an optional powershell tool for Windows, configurable through defaultTools and the SDK. See PowerShell Tool.
• Added a /thinking selector and searchable default choices to the model and thinking selectors; Ctrl+S saves the selected model as the global default. See Models and Thinking.
• Added optional routing session IDs to exported compaction summary helpers so callers can preserve provider routing without enabling prompt cache writes.
• Added transcript usage notices for compaction and branch summaries when cache miss notices are enabled.
• Added session_compact_failed extension events so compaction failures and aborts expose their reason, retry state, source, and error message to handlers (#8175).
• Added inherited provider-neutral toolChoice support to simple stream requests.
• Added inherited automatic Anthropic server-side refusal fallback for supported first-party models, including returned-model usage pricing (#8017).
• Added inherited configurable OpenAI-compatible thinking-token budget fields for vLLM, Qwen/SGLang, and llama.cpp servers. See OpenAI Compatibility (#8275 by @​bnsd55).
• Added inherited China-specific ZAI Coding Plan models, including GLM-4.6V vision support and API-equivalent usage cost estimates (#8220).
• Added inherited deepseek-v4-pro-0813 support to the Qwen Token Plan Individual catalog (#8194).

Changed

• Changed experimental installer-managed installations so pi update stages, verifies, and atomically activates the selected release in place. See Install and Manage.
• Changed inherited built-in xAI models to use the Responses API with encrypted reasoning replay and made Grok 4.6 the default xAI model (#8124 by @​Jaaneek).
• Changed inherited Anthropic, Azure OpenAI, Google, Mistral, and OpenAI adapters to send Pi's default User-Agent unless overridden (#8305).
• Changed Windows and WSL keybinding defaults to avoid terminal-reserved shortcuts for image paste, model cycling, editor undo, fullscreen transcript navigation and search, and message queueing (#8372).
• Changed Bun release archives to ship the native clipboard binary only inside the wrapper package, removing a duplicate platform package from each archive.
• Changed package resource glob expansion to use Node.js's built-in implementation with deterministic visible-path matching, reducing the installed runtime dependency tree.
• Changed the bundled Node.js runtime to load jiti only when importing an extension and Babel only when uncached source needs transformation, reducing CLI startup time and bundle size.
• Changed syntax highlighting to initialize only twenty common languages eagerly and defer the remaining grammars until after the initial TUI render, reducing CLI startup time.
• Changed the Node.js CLI and RPC entrypoints to load a bundled runtime, reducing startup filesystem reads while keeping the public library and legacy module paths on the modular runtime for normal dependency identity.
• Changed session sharing to render clickable terminal links, display only the canonical Radius artifact URL, and include the current system prompt and active tool definitions in Radius session shares.

Fixed

• Fixed failed extension factories leaving event subscriptions, provider registrations, and default flag state active (#8424 by @​acmerfight).
• Fixed models.json typings omitting the documented OpenAI-compatible compat.supportsFinishReason provider and model override (#8487 by @​petrroll).
• Fixed /model and /thinking selections being persisted globally unless explicitly saved with Ctrl+S (#5263).
• Fixed JSON and RPC toolcall_start events omitting the tool call id and name (#7953 by @​christianklotz).
• Fixed extensions failing to load when the Node.js CLI runs as a single-executable application (#8237).
• Fixed nested Markdown skills inside .agents/skills/ grouping directories not being discovered.
• Fixed compaction and branch summarization requests exposing tools to providers.
• Fixed single-object edit tool inputs failing validation by accepting them as one-edit arrays in both coding-agent and harness edit tools (#7835).
• Fixed root Markdown files such as README.md and AGENTS.md in skill directories being reported as broken skills unless they declare valid skill frontmatter (#7805).
• Fixed the default Cerebras model referencing an unavailable Z.AI model.
• Fixed inherited OpenAI-compatible Chat Completions reasoning replay to preserve and resend assistant-level reasoning_details verbatim and in order (#7994).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-tui's changelog.

[0.84.3] - 2026-08-24

Fixed

• Fixed duplicate fullscreen right-click paste in VS Code-based terminals on Windows (#8186).
• Fixed padded text exceeding narrow terminal widths (#8252).
• Fixed wrapped Markdown table links leaking color into borders and neighboring cells, including tables inside blockquotes (#8335).

Commits

• 4e58f32 Release v0.84.3
• 27b7a62 fix(coding-agent): use Windows-friendly keybinding defaults
• 7d4c0e0 feat(coding-agent): bundle Node runtime (#8474)
• 8f2ae3f fix(tui): prevent wrapped table link color leaks (#8363)
• 7681849 fix(settings-selector): nit spacing
• 2ff8ba6 fix(coding-agent): keep model and thinking level changes session scoped (#8356)
• f0c5d86 fix(tui): fit text padding to narrow widths, closes #8252
• 374e56e fix(tui): avoid duplicate VS Code right-click paste
• 0e0021f Add [Unreleased] section for next cycle
• See full diff in compare view

Updates @types/node from 26.2.0 to 26.3.0

Commits

• See full diff in compare view

Updates typebox from 1.3.15 to 1.3.18

Commits

• d03f3c3 Version 1.3.18 (#1673)
• 97506d9 Memory: Ensure Immutability for Assign, Discard and Update (#1672)
• bdefa4e Version 1.3.17 (#1671)
• 8f8d861 Version 1.3.16 (#1670)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions