build(deps-dev): bump @earendil-works/pi-coding-agent from 0.79.1 to 0.79.8#78
build(deps-dev): bump @earendil-works/pi-coding-agent from 0.79.1 to 0.79.8#78dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
There was a problem hiding this comment.
Your free trial has ended. If you'd like to continue receiving code reviews, you can add a payment method here.
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Bumps [@earendil-works/pi-coding-agent](https://github.com/earendil-works/pi/tree/HEAD/packages/coding-agent) from 0.79.1 to 0.79.8. - [Release notes](https://github.com/earendil-works/pi/releases) - [Changelog](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/CHANGELOG.md) - [Commits](https://github.com/earendil-works/pi/commits/v0.79.8/packages/coding-agent) --- updated-dependencies: - dependency-name: "@earendil-works/pi-coding-agent" dependency-version: 0.79.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/bun/earendil-works/pi-coding-agent-0.79.6
branch
from
08d0fe1 to
ebb2e75
Compare
| "@earendil-works/pi-ai": "0.79.1", | ||
| "@earendil-works/pi-coding-agent": "0.79.1", | ||
| "@earendil-works/pi-coding-agent": "0.79.8", | ||
| "@earendil-works/pi-tui": "0.79.1", |
There was a problem hiding this comment.
pi-coding-agent
@earendil-works/pi-ai and @earendil-works/pi-tui remain pinned at 0.79.1 in package.json, while pi-coding-agent@0.79.8 now pulls in ^0.79.8 of both packages as its own dependencies. The lockfile reflects this by adding nested @earendil-works/pi-coding-agent/@earendil-works/pi-ai@0.79.8 and @earendil-works/pi-coding-agent/@earendil-works/pi-tui@0.79.8 entries alongside the root 0.79.1 copies, meaning two separate copies of each package will be installed. Any code in this workspace that imports @earendil-works/pi-ai or @earendil-works/pi-tui directly will still get 0.79.1 while the pi CLI runs against 0.79.8.
|
Superseded by direct dependency batch c03db13, which updates the related packages together and passed the full local validation gate. |
|
Closed as superseded by c03db13. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/bun/earendil-works/pi-coding-agent-0.79.6
branch
1 participant
Bumps @earendil-works/pi-coding-agent from 0.79.1 to 0.79.8.
Release notes
Sourced from @earendil-works/pi-coding-agent's releases.
... (truncated)
Changelog
Sourced from @earendil-works/pi-coding-agent's changelog.
... (truncated)
Commits
8eb9704Release v0.79.874677bbdocs: audit unreleased changelogsa2f70e5fix(coding-agent): reset tool test mocksea65a51fix: update vulnerable dependencies0d89a33feat(packages): Add selective pi-ai base entrypoints (#5348)9179734docs(coding-agent): audit unreleased changelog651d10dfeat(ai): enable Mistral prompt caching8025fddmeta: Update readmes slightlyfd1ba2ctest(coding-agent): seed auto-compaction queue fixturecab89d1docs: audit unreleased changelogsNeed help on this PR? Tag
/codesmithwith what you need. Autofix is disabled.Greptile Summary
This is an automated dependabot bump of
@earendil-works/pi-coding-agentfrom0.79.1to0.79.8, picking up several new features (Mistral prompt caching, OpenRouter Fusion alias, post-compaction token estimates) and important security fixes (undiciupgraded from8.3.0to8.5.0, vulnerableprotobufjstransitive dep patched).pi-coding-agentis updated to0.79.8inpackage.jsonand the lockfile; transitive dependenciespi-agent-coreandpi-ai(nested) are also resolved at0.79.8, with new depssemver,@opentelemetry/api, and@opentelemetry/semantic-conventionsadded.@earendil-works/pi-aiand@earendil-works/pi-tuidevDependencies inpackage.jsonremain pinned at0.79.1, resulting in dual versions of both packages in the lockfile alongside the0.79.8copies pulled in bypi-coding-agent.core,opencode,pi) are bumped from1.10.1to1.10.3in the lockfile as a side effect.Confidence Score: 4/5
Safe to merge — this is a devDependency-only bump that brings in security fixes and no production code changes.
The update is limited to a dev tooling package and its transitive dependencies. The security improvements to
undiciare a clear positive. The only concern is that the root-level@earendil-works/pi-aiand@earendil-works/pi-tuidevDeps were not bumped alongsidepi-coding-agent, leaving two copies of each package in the lockfile, which could cause subtle version skew for any workspace scripts that import those packages directly.The root-level
pi-aiandpi-tuiversion pins inpackage.jsondeserve a second look to confirm the intentional version split is acceptable.Important Files Changed
@earendil-works/pi-coding-agentfrom0.79.1to0.79.8; sibling packagespi-aiandpi-tuiremain at0.79.1, causing duplicate versions in the lockfile.pi-coding-agent@0.79.8and its transitive changes:pi-agent-corebumped to0.79.8,undicibumped to8.5.0(security fix), newsemver,@opentelemetry/api, and@opentelemetry/semantic-conventionsentries added, and workspace package versions updated from1.10.1to1.10.3.Flowchart
%%{init: {'theme': 'neutral'}}%% flowchart TD ROOT["package.json (root)"] ROOT -->|"0.79.8 (updated)"| PCA["@earendil-works/pi-coding-agent@0.79.8"] ROOT -->|"0.79.1 (unchanged)"| PAI_ROOT["@earendil-works/pi-ai@0.79.1"] ROOT -->|"0.79.1 (unchanged)"| PTUI_ROOT["@earendil-works/pi-tui@0.79.1"] PCA -->|"^0.79.8"| PAC["@earendil-works/pi-agent-core@0.79.8"] PCA -->|"^0.79.8 (nested)"| PAI_NESTED["@earendil-works/pi-ai@0.79.8"] PCA -->|"^0.79.8 (nested)"| PTUI_NESTED["@earendil-works/pi-tui@0.79.8"] PCA -->|"8.5.0 (security fix)"| UNDICI["undici@8.5.0"] PAC -->|"^0.79.8 (nested)"| PAI_NESTED2["@earendil-works/pi-ai@0.79.8"] PAI_NESTED -->|new| OT_API["@opentelemetry/api@1.9.0"] PAI_NESTED -->|new| OT_SC["@opentelemetry/semantic-conventions@1.41.1"] PAI_NESTED -->|"2.2.6 (bumped)"| MISTRAL["@mistralai/mistralai@2.2.6"] style PAI_ROOT fill:#ffcccc,stroke:#cc0000 style PTUI_ROOT fill:#ffcccc,stroke:#cc0000 style PAI_NESTED fill:#ccffcc,stroke:#009900 style PTUI_NESTED fill:#ccffcc,stroke:#009900 style UNDICI fill:#ccffcc,stroke:#009900%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%% flowchart TD ROOT["package.json (root)"] ROOT -->|"0.79.8 (updated)"| PCA["@earendil-works/pi-coding-agent@0.79.8"] ROOT -->|"0.79.1 (unchanged)"| PAI_ROOT["@earendil-works/pi-ai@0.79.1"] ROOT -->|"0.79.1 (unchanged)"| PTUI_ROOT["@earendil-works/pi-tui@0.79.1"] PCA -->|"^0.79.8"| PAC["@earendil-works/pi-agent-core@0.79.8"] PCA -->|"^0.79.8 (nested)"| PAI_NESTED["@earendil-works/pi-ai@0.79.8"] PCA -->|"^0.79.8 (nested)"| PTUI_NESTED["@earendil-works/pi-tui@0.79.8"] PCA -->|"8.5.0 (security fix)"| UNDICI["undici@8.5.0"] PAC -->|"^0.79.8 (nested)"| PAI_NESTED2["@earendil-works/pi-ai@0.79.8"] PAI_NESTED -->|new| OT_API["@opentelemetry/api@1.9.0"] PAI_NESTED -->|new| OT_SC["@opentelemetry/semantic-conventions@1.41.1"] PAI_NESTED -->|"2.2.6 (bumped)"| MISTRAL["@mistralai/mistralai@2.2.6"] style PAI_ROOT fill:#ffcccc,stroke:#cc0000 style PTUI_ROOT fill:#ffcccc,stroke:#cc0000 style PAI_NESTED fill:#ccffcc,stroke:#009900 style PTUI_NESTED fill:#ccffcc,stroke:#009900 style UNDICI fill:#ccffcc,stroke:#009900Reviews (1): Last reviewed commit: "build(deps-dev): bump @earendil-works/pi..." | Re-trigger Greptile