Update all minor and patch updates - #208
Merged
Merged
Conversation
pyck-renovate
Bot
force-pushed
the
renovate/all-minor-and-patch-updates
branch
from
August 24, 2026 15:04
ec8d115 to
38948c0
Compare
pyck-renovate
Bot
force-pushed
the
renovate/all-minor-and-patch-updates
branch
from
August 24, 2026 15:31
38948c0 to
a4fca48
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.84.1→0.84.20.84.31.18.15→1.18.21v1.18.220.16.2→0.16.40.12.3→0.12.52.1.227→2.1.2412.97.0→2.98.0v4.2.0→v4.3.03.52.0→3.53.12.12.2→2.13.14.2.3→4.2.41.36.3→1.36.40.4.80→0.4.87Release Notes
earendil-works/pi (@earendil-works/pi-coding-agent)
v0.84.2Compare Source
New Features
Added
Ctrl+Shift+F, incremental match highlighting, configurable search match theme colors, and next/previous navigation withEnter/Ctrl+GandShift+Enter/Ctrl+Shift+G.read,bash,edit, andwritetools underPI_EXPERIMENTAL=1.defaultToolssetting for configuring the initial built-in tool selection globally or per project.--use-theme <name[/name]>to choose an initial per-run interactive theme without changing saved settings (#7722 by @rwachtler).expandPromptTemplatesto extensionpi.sendUserMessage()options for explicitly dispatching commands and expanding skills and prompt templates. Seepi.sendUserMessage()(#7857 by @mrexodia).createGatewayBindingFetch()for routing Cloudflare AI Gateway requests through a Workers AI binding without an API token (#7901 by @Maximo-Guk).AssistantMessage.endTurnto preserve OpenAI Codex's terminalend_turnsignal for diagnostics (#7766).Changed
User-Agentheader.AI_AGENT=piprocess marker and how it differs fromPI_CODING_AGENT=true(#7747).additional_toolswhere supported while retaining tool-search and top-level fallbacks (#7709).Fixed
README.mdandAGENTS.mdin skill directories being reported as broken skills unless they declare valid skill frontmatter (#7805).edittool inputs failing validation by accepting them as one-edit arrays in both coding-agent and harness edit tools (#7835).nanoiddevelopment dependency to address a denial-of-service vulnerability.message_updateevents dropping cumulative usage during streaming. See JSON Event Mode and RPCmessage_update(#7982 by @christianklotz).pi.sendMessage(..., { triggerTurn: false })steering an active run instead of only recording the custom message (#8022 by @cristinaponcela).defaultToolssetting dropping extension and SDK custom tools when selecting built-in defaults.toolsfrontmatter field (#7598 by @alexsavio).Alt+Enterinput over SSH being misread as Escape, addedPI_TUI_ESC_TIMEOUTfor high-latency terminals, and limited that timeout to lone Escape input (#7899 by @powerfooI).anomalyco/opencode (anomalyco/opencode)
v1.18.21Compare Source
Core
Bugfixes
euandusmulti-region Gemini requests through REP endpointsDesktop
Bugfixes
Thank you to 1 community contributor:
v1.18.20Compare Source
Core
Bugfixes
task_id.finish_reason: network_error.network-errorandnetwork_error.max_completion_tokenswithout applying an extra output cap.opencode run.v1.18.19Compare Source
Core
Improvements
Bugfixes
/connect. (@OpeOginni)Desktop
Bugfixes
Thank you to 4 community contributors:
v1.18.18Compare Source
Core
Bugfixes
v1.18.17Compare Source
Core
Bugfixes
Desktop
Bugfixes
Thank you to 6 community contributors:
v1.18.16Compare Source
Core
Bugfixes
Desktop
Improvements
Bugfixes
Thank you to 1 community contributor:
astral-sh/ruff (astral-sh/ruff)
v0.16.4Compare Source
Released on 2026-08-20.
Preview features
flake8-use-pathlib] Add autofix forPTH116(#26460)refurb] Restrictdelete-full-sliceto lists (FURB131) (#27711)refurb] SkipFURB101andFURB103when theopenargument is a file descriptor (#27643)Bug fixes
InvalidInstructionon Windows CPUs that do not supportPOPCNT(#27803)pyflakes] Emit semantic syntax errors in string type definitions asF722(#27835)pylint] Allowos._exitimports inimport-private-name(PLC2701) (#27738)Rule changes
ruff] Addctypes.LittleEndianStructureand related types to existing exception (RUF012) (#27753)nonlocal(#27628)Server
Documentation
Other changes
Contributors
v0.16.3Compare Source
Released on 2026-08-13.
Preview features
pylint] Fix false negatives on negative numbers (PLR6104) (#27251)pyupgrade] Add rule to replacewhile 1withwhile True(UP048) (#27190)Bug fixes
flake8-bandit] Also check keyword arguments (S602,S603,S607,S609) (#27687)pylint] Allowcontinueinfinallyon Python 3.8 (#27626)pylint] FixPLE1307false positive with bools (#27651)pylint] Fix false positives and negatives with%bformat character (PLE1300,PLE1307) (#27560)pylint] Improve handling of concatenated strings (PLE1300) (#27659)Rule changes
numpy] Makenp.chararrayautofix backwards-compatible (NPY201) (#27527)Performance
Exprsize to 64 bytes (#27591)CLI
ruff check --statisticsoutput (#27646)Documentation
ruff] Also suggestasyncio.TaskGroup(RUF006) (#27461)Other changes
Contributors
astral-sh/uv (astral-sh/uv)
v0.12.5Compare Source
Released on 2026-08-14.
Python
Enhancements
Preview features
--indexand--default-indexto select configured package indexes by name with theindex-by-namepreview feature (#17455)cache-physical-spaceon filesystems that do not support physical-space accounting (#21133)Bug fixes
v0.12.4Compare Source
Released on 2026-08-13.
Enhancements
Requires-Python: >= 3.5.*(#21012)Preview features
uv check --no-install-projectand respectUV_NO_INSTALL_PROJECTto install dependencies without building or installing the project (#21085)uv checkhonor uv's color and progress settings, including quiet mode (#21086)Performance
Bug fixes
pythonw.exelaunchers for virtual environments created from managed Python minor-version links (#19235)uv lockto proceed when.venvis an unusable project environment (#21068)fork-strategywhen ordering forks created fromenvironmentsor existing lockfileresolution-markers(#21000)!=3.11.*, !=3.12.*inuv.lock(#21045)uv addupdates it (#21008)PYTHONEXECUTABLEand__PYVENV_LAUNCHER__overrides (#21075)uv version --bumpvalues (#21076)cli/cli (cli/cli)
v2.98.0: GitHub CLI 2.98.0Compare Source
Security
A security vulnerability has been identified, and fixed, that binds the local forwarded port to all available network interfaces by default.
Users of
gh codespace ports forwardare advised to updateghto versionv2.98.0as soon as possible.For more information see: GHSA-vfhh-p7hm-pxfh
Support worktrees in
pr checkoutUsers can now checkout a pull request into a git worktree by using the new
--worktree PATHflag ingh pr checkout:Add semantic search to
search issuesThe
gh search issuescommand now supports semantic search for issues. Users can select the search type by passing the--search-typeflag:For more information about semantic search see: "Improved Search for github issues is now generally available".
What's Changed
✨ Features
🐛 Fixes
RESTWithNexterror type, repairinggh statusand attestation retries by @williammartin in #13988gh release createby @williammartin in #14065📚 Docs & Chores
New Contributors
Full Changelog: cli/cli@v2.97.0...v2.98.0
docker/setup-buildx-action (docker/setup-buildx-action)
v4.3.0Compare Source
Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0
go-task/task (go-task/task)
v3.53.1Compare Source
🚀 Features
experimental feature for 3 years, but is now enabled by default. Massive
thanks to all those that contributed and gave feedback (too many to list
here). We've also given the
Remote Taskfiles documentation a
bit of a polish (#1317, #2906 by @pd93).
timeoutthat terminates a command once it exceeds thegiven duration (Go duration syntax). It covers shell commands, task calls,
deferred commands,
depsand theifcondition, obeysignore_error, andreports exit code
124. Callers that join arun: onceorwhen_changedtask already running now honor their own
timeout, and inherit that task'sfailure instead of being told it succeeded (#1569, #2898 by @vmaerten).
(monorepos). Fingerprinting is up to 86% faster and make up to 70% fewer
memory allocations on the more advanced scenarios. Benchmarks were added as
well. We're basically skipping work when not needed. (#2853, #2883 by
@Napolitain, #2884 by @Napolitain).
source files now reuses a single buffer, reducing memory allocations by ~98%
and wall-clock time by ~7% (#2925 by @vmaerten).
includes.excludescan now exclude a whole namespace: append:*to thenamespace name, e.g.
excludes: ['debug:*']. Bare entries still match asingle task name exactly (#2300, #2959 by @xmxxc).
enum.refin--interactiveprompts. Required vars usingenum.refnow show the selection list like static enums, instead of fallingback to free-form input (#2817 by @vmaerten).
task --completion nu. They completetask names and aliases, every flag with its description, and the values of
--completion,--outputand--sort(#2966 by @vmaerten).--verbosemode, a task whosecommand exits non-zero now reports
task: "<name>" failed: <error>instead ofstopping without a trace (#2240 by @Drino).
🐛 Fixes
checksum:not being verified when a remote Taskfile came fromthe cache (#2980 by @vmaerten).
{{.CHECKSUM}}/{{.TIMESTAMP}}) ignoring amethod:set at the Taskfile level: the variable now follows the same methodresolution as the up-to-date check. Only the variable matching the effective
method is injected, so a task inheriting a Taskfile-level
method: timestampgets
{{.TIMESTAMP}}and no longer a{{.CHECKSUM}}(which now renders as anempty string), and neither variable is injected when the effective method is
none(#2924 by @vmaerten).ref:infor: matrix:andenum:only accepting literal lists. Refscomputed with template functions like
keysorsplitListno longer failwith "must resolve to a list" (#2544, #2956 by @no-hup).
Escat an interactive variable prompt not cancelling the run(#2942 by @anilnatha).
joinUrlcollapsing the//in a URL scheme (e.g. producinghttp:/localhostinstead ofhttp://localhost) (#2915 by @vsaraikin).ignore_erroron a command inside aforloop. Editors no longer flag a Taskfile that Task runs perfectly fine (#2044
by @gokeefe-atb).
ignore_erroron atask:call, andif,setandshopton a commandinside a
forloop (#2967 by @vmaerten).📚 Documentation & Website
(#2184 by @jubr).
and its frontmatter on the website (#2981 by @pd93).
golangci/golangci-lint (golangci/golangci-lint)
v2.13.1Compare Source
Released on 2026-08-20
ginkgolinter: from 0.23.1 to 0.24.0gofmt: fromd62b90etoe84e050staticcheck: from 0.8.0-rc.1 to 0.8.0wsl_v5: from 5.8.0 to 5.9.0v2.13.0Compare Source
Released on 2026-08-19
dupword: from 0.1.7 to 0.1.8 (new optionskip-raw-strings)errcheck: from 1.10.0 to 1.20.0exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)exhaustruct: deprecated and replaced byexhaustruct_v5fatcontext: from 0.9.0 to 0.10.0 (new options:check-loops,check-function-literals)goconst: from 1.10.0 to 1.11.0 (new options:ignore-map-keys,exclude-types)gofumpt: from 0.9.2 to 0.11.0 (new options:extra.group-params,extra.clothe-returns,extra.balance-calls)gomoddirectives: from 0.8.0 to 0.9.0 (new option:replace-allow-all)gosec: from 2.26.1 to 2.27.1govet-modernize: from 0.44.0 to 0.49.0 (fmtappendfis removed. New analyzersatomictypes,embedlit,errorsastype,importcomment,reflecttypeassert,slicesclip, andslicesbackward.waitgroupis renamedwaitgroupgo)iface: from 1.4.3 to 1.5.0 (new analyzer:unusedmethod)noinlineerr: from 1.0.5 to 1.0.6nonamedreturns: from 1.0.6 to 1.0.8 (new option:allow-unused-named-returns)recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)unparam: from5beb8c8to3f964bcclickhouse-go-linter: from 1.2.0 to 1.2.1errname: from 1.1.1 to 1.1.2exhaustruct: from 5.0.2 to 5.0.3funcorder: add missingFunctionfieldginkgolinter: from 0.23.0 to 0.23.1gocheckcompilerdirectives: from 1.3.0 to 1.4.0gocritic: from 0.14.3 to 0.14.4gomoddirectives: add missingIgnoreForbiddenfieldiface: from 1.4.2 to 1.4.3mirror: from 1.3.0 to 1.3.3nilnil: from 1.1.1 to 1.1.2protogetter: from 0.3.20 to 0.3.21helm/helm (helm/helm)
v4.2.4: Helm v4.2.4Compare Source
Helm v4.2.4 is a patch release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
Notable Changes
Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.