chore(deps): update bump-dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Update	Pending
@anthropic-ai/claude-code	2.1.221 → 2.1.228			patch	2.1.232 (+2)
@earendil-works/pi-coding-agent (source)	0.83.0 → 0.84.1			minor	0.84.2
@google/gemini-cli	0.53.1 → 0.54.4			minor	0.55.1
@openai/codex (source)	0.146.1 → 0.147.0			minor
debian_13/unzip	6.0-29 → 6.0-29+deb13u1			patch
go (source)	1.26.5 → 1.26.6			patch
golang.org/x/vuln	v1.6.0 → v1.7.0			minor
opencode-ai	1.18.13 → 1.18.16			patch	1.18.18 (+1)

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.228

Compare Source

• Fixed interactive sessions that could stop redrawing entirely, while the process kept running, after a rare internal layout error
• Fixed git / Git Bash not being found on Windows when Claude Code is launched from a parent folder of the git installation
• Fixed /tui reverting the session to an earlier model when /model had been changed since the last response
• Fixed cross-session messaging sometimes starting without an inbox in the first session after install or upgrade
• Fixed Remote Control /resume while connected leaking the resumed conversation's title or history into the connected session
• Fixed claude self-hosted-runner sessions failing on every fresh runner when the checkout hook fails for a repository the session doesn't push to; that repository is now skipped with a warning
• Fixed self-hosted runners ending sessions in the gap between a background task finishing and the follow-up turn starting
• Fixed session cleanup deleting contents inside a project's memory folder
• Fixed background plugin-cache cleanup deleting a plugin's cache when its only version is a symlinked development checkout
• Fixed a settings-merge issue where a marketplace entry redefined in a higher-precedence settings tier could inherit another tier's custom headers; marketplace entries now merge as whole entries
• Fixed the deferred-tools reminder occasionally being sent to the model twice after a skill invocation
• Hardened skills synced from claude.ai: they no longer shadow local commands or MCP prompts, their descriptions are sanitized and labeled, and on your machine their bodies don't run ! commands or expand @ files
• Improved cross-session messages: the sender and body now display inline instead of a collapsed line, and messages to Remote Control sessions on other machines show your Remote Control session name as the sender
• Improved Vertex AI credential handling: expired or missing Google Cloud credentials now fail within seconds instead of retrying for minutes
• Improved compaction progress: the retry countdown and stall hint now appear during compaction instead of only a progress bar
• Updated terminal title busy-spinner glyphs to reduce tab-bar jitter on some terminals
• Changed the Write tool so newer models can overwrite an existing file they haven't read this session, matching the Edit tool's rules; older models still require the read first
• Removed the outdated note about auto mode sessions costing slightly more from the first-use notice for Pro, Max, and Team plans

v2.1.227

Compare Source

• Fixed feature flags being evaluated without the user's subscription tier when a session started with an expired login token, which could wrongly prompt Max plan users to enable usage credits for Fable
• Fixed every Bash command failing under claude-code-action with allowed_non_write_users on GitHub-hosted runners
• Fixed /tui bringing back a conversation that had been rewound to before its first message
• Improved slash-command menu: blue now marks only the selected row, matched characters are bolded instead of recolored, and emoji or accented names keep their glyphs
• Improved performance: fewer event-loop stalls on file-not-found suggestions and at-mention size checks

v2.1.226

Compare Source

• Bug fixes and reliability improvements

v2.1.225

Compare Source

• Added gateway spend-limit support to Claude Code's usage warning; the limit-reached message now names the cap, its reset time, and the operator's message (requires the gateway on 2.1.225)
• Added a workspace trust prompt to claude agents for untrusted directories, matching the behavior of claude
• Fixed a transient 401 replacing a long-lived CLAUDE_CODE_OAUTH_TOKEN with a stored login's short-lived token, breaking headless sessions until restart
• Fixed MCP OAuth servers on macOS intermittently failing with a burst of 401 errors, as if never authenticated, after a keychain read timed out
• Fixed auto mode counting a safety-filter refusal of its own permission check toward the consecutive-block limit; the action is still denied, but the model is now told to move on rather than retry
• Fixed cross-session messages staying parked without a notice or expiry in headless sessions and during startup
• Fixed conversation history breaking on Remote Control session resume after very large conversations were compacted
• Fixed hovering over a session in another project in the agents list changing the directory the next agent starts in
• Fixed claude self-hosted-runner registering and then failing every session when --base-dir cannot be created or written; it now exits at startup with a clear error
• Fixed Claude Code on the web sessions being misreported as stuck, re-sending a growing event backlog on every reconnect
• Improved Remote Control: photos attached from the Claude app are now shown to Claude directly instead of being read from disk with a separate tool call
• [VSCode] Fixed Focus view folding away the latest to-do list, a pending question's context, and settled answers; thinking-only folds show "Thought for Ns" and re-collapse when their turn completes
• SendMessage can now start a conversation with your Remote Control sessions on other machines by name (ListAgents shows them as name [ref]), instead of only replying after they message you first
• SendMessage: a Remote Control recipient you already confirmed is never swapped for a same-named session on this machine when its own list couldn't be checked

v2.1.224

Compare Source

• Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans
• Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning
• Added a cancel-and-confirm step when removing an unavailable paste changes a command's text
• Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one
• Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
• Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings
• Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)
• Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects
• Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors
• Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS
• Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why
• Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model
• Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects
• Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided
• Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race
• Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message
• Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token
• Fixed Remote Control and SDK clients showing a blank "(no content)" message after /clear and other output-less commands
• Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session
• Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval
• Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; /clear resets now propagate to attached clients
• Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast
• Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply)
• Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged
• Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your CLAUDE.md instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large
• Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user
• Changed recalled paste placeholder numbers to renumber when accepted into the input
• Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or /resume
• [VSCode] Fixed the extension showing Remote Control as connected after the connection failed
• Fixed a session resume silently reconnecting Remote Control after the user turned it off (--resume, SDK hosts, and the VS Code extension)
• [VSCode] Fixed sessions not honoring remoteControlAtStartup when explicitly enabled

v2.1.223

Compare Source

• Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org
• Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead
• Added a /teleport hint in cloud sessions showing how to continue locally with claude --teleport <session id>
• Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks
• Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog
• Fixed workflow scripts being able to use dynamic import() to run code outside the workflow sandbox
• Fixed a permission gap where an agent definition's bypassPermissions mode ignored the org bypass-permissions disable policy
• Fixed resuming a session after a mid-session /cd coming back empty
• Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as vertex_ai/claude-* or bedrock/anthropic.claude-*
• Fixed modelOverrides keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented
• Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local managed-settings.json or MDM profile; admin env now merges per key
• Fixed sandboxed commands failing to start on Linux when sandbox.filesystem.denyWrite covers the working directory
• Fixed forked background agents getting stuck "already resuming" for the rest of the session when rebuilding the fork's parent prompt failed during resume
• Fixed a resumed session failing every turn, or leaving the interactive app on an unresponsive error screen, when its history held a malformed diagnostics attachment
• Fixed a rare hang when parsing unusual git push output
• Changed CLAUDE_CODE_DISABLE_1M_CONTEXT to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200K
• Changed auto-compact to keep sessions on unrecognized model IDs within the assumed context window instead of letting them grow past it; set CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1 to restore the previous behavior
• Changed /review to be an alias of /code-review, which reviews the current diff or a PR (/code-review <level> <pr#>); use /code-review ultra for a deep cloud review
• Changed /code-review with no effort level to reuse the level you typed last; type a level like /code-review high to change it

v2.1.222

Compare Source

• Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type
• Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames)
• Fixed /usage-credits on Team and Enterprise showing "you've already sent a usage credit request" for members whose earlier request was dismissed, blocking them from sending a new one
• Fixed the startup connectivity check hanging and then failing behind an HTTPS proxy; it now uses the same proxy-aware transport as API requests and times out with a clear message
• Fixed "Connection closed mid-response" errors being reported on responses that had actually completed
• Fixed /usage overattributing usage to MCP servers: a server's share now reflects only the requests that actually consumed its tool results, instead of every turn after any call to it
• Fixed sessions not linking to pull requests created after the branch was pushed, including through the GitHub REST API
• Fixed org-restricted model: opus-style subagent and teammate family aliases dropping to the parent model instead of stepping down to the newest org-allowed model in the family
• Fixed stream idle timeout firing on custom ANTHROPIC_BASE_URL gateways despite server keep-alive pings arriving on the wire
• Fixed claude.ai connectors being falsely marked as needing authorization when the session token is invalid — they now show a /login hint instead
• Fixed tool errors not being displayed for tools no longer available locally, for example after an MCP server is removed
• Fixed SendMessage rejecting a long summary — it now truncates instead, so sends no longer fail on a character limit
• Fixed the spinner's effort label in a subagent's transcript view showing the session's effort level instead of the subagent's own effort: setting
• Fixed rare crashes when a file watcher hit a filesystem error or during file-watcher teardown
• Fixed screen readers re-reading the whole input line on every backspace in --ax-screen-reader mode — end-of-line deletions now echo just the deleted characters
• Fixed host model-selection keys not taking precedence over a stale on-disk managed-settings.json when CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST is set
• Improved auto mode safety: messages sent to other agent sessions via SendMessage are now evaluated by the permission classifier before dispatch
• Improved the refusal when Claude tries to invoke a skill with disable-model-invocation: Claude is now told to ask you to run the skill instead of replicating its workflow
• Improved the /diff view, the Remote Control workspace diff, and file-edit diffs in Claude Code on the web sessions to use raw git blob content, ignoring workspace-configured diff drivers and textconv
• Changed Remote Control auto-start so repo-local settings (.claude/settings.json or .claude/settings.local.json) can no longer turn it on (they can still turn it off); enable it at user scope via /config
• Removed ultraplan feature

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.84.1

Compare Source

New Features

• Qwen Token Plan Individual — Use the built-in provider for models documented for Individual subscriptions. See API Keys.
• Authentication readiness checks — Use pi auth check to verify provider or model credentials, optionally emitting the resolved credential.
• Improved fullscreen interaction — Select words and paragraphs with multiple clicks and configure half-page transcript scrolling. See TUI Fullscreen Viewport.
• Terminating blocked tool calls — Extension tool_call handlers can stop all-terminating batches without another model call. See Tool Events.

Added

• Added Qwen Token Plan Individual as a built-in provider with its documented subscription model catalog and the shared international QWEN_TOKEN_PLAN_API_KEY. See API Keys (#​7659 by @​arasovic).
• Added pi auth check provider/model auth preflight with optional credential output (#​7152).
• Added terminate support to blocked extension tool_call events so all-terminating batches can skip the automatic follow-up model call. See Tool Events (#​7715 by @​muyiyr).
• Added inherited double-click word and whitespace selection, granularity-aware drag selection, and triple-click paragraph selection in fullscreen mode (#​7725, #​7733 by @​volsa).
• Added inherited unbound half-page transcript scrolling actions for fullscreen mode. See TUI Fullscreen Viewport (#​7735).

Changed

• Softened the bash tool's PI_* environment guideline in an attempt to reduce unnecessary inspection commands (#​7128).
• Reduced worst-case automatic terminal theme detection delay from 200 ms to 100 ms by probing color-scheme and background support concurrently.

Fixed

• Fixed Bun standalone binaries crashing on startup when the cwd contains a bunfig.toml with preload by compiling with --no-compile-autoload-bunfig (#​7685 by @​geril07).
• Fixed extension TUI method wrappers recursing indefinitely when delegating to the original method (#​7731).
• Fixed right-click not pasting clipboard text in fullscreen mode on Windows.
• Fixed inherited Agent.reset() clearing transcript and runtime state during active runs; it now rejects until the agent is idle (#​7717 by @​wesleyzhangwq).
• Fixed inherited LaTeX relation, multiplication, and named-operator spacing, and matrix composition with stacked fractions, operator limits, and adjacent matrices.
• Reduced inherited fullscreen mouse event volume under tmux, Zellij, and GNU Screen by using button-motion tracking instead of all-motion tracking.

v0.84.0

Compare Source

New Features

• Fullscreen TUI mode — Switch between regular and fullscreen modes at runtime, with a sticky editor and footer, independently scrollable transcript, and draggable scrollbars. See UI & Display.
• Mermaid and LaTeX rendering — Render Mermaid diagrams and terminal-friendly Unicode math in interactive transcripts. See Markdown settings and TUI Markdown.
• Per-directory context overrides — Use AGENTS.override.md to replace context files for a specific directory. See Context Files.
• Advanced custom model sampling — Configure arbitrary OpenAI-compatible samplingParams and opt-in vLLM thinking_token_budget values. See Sampling Parameters.
• Baseten provider — Use built-in Baseten authentication and model support. See API Keys.

Breaking Changes

• Renamed the inherited pi-ai ModelsStreamTransforms interface to ModelsRequestTransforms because its header transformation now applies to all authenticated provider requests.

• Changed JSON and RPC message_update events to emit only assistantMessageEvent deltas, removing the cumulative message and assistantMessageEvent.partial fields that caused quadratic output growth. Clients that need partial messages must assemble deltas between message_start and message_end; the latter remains authoritative (#​7290).

• ModelRegistry.getApiKeyAndHeaders() now returns ProviderHeaders with string | null values and preserves null header-deletion markers. Extensions that inspect returned headers must handle null; extensions forwarding them to pi-ai streams should pass them through unchanged. This prevents placeholder OpenAI credentials from being sent through Cloudflare AI Gateway (#​7030).

• Changed ModelRegistry.refresh() to accept ModelsRefreshOptions and return ModelsRefreshResult instead of discarding cancellation and provider errors.

• Changed ModelRuntime.setRuntimeApiKey() to accept auth cancellation options rather than catalog refresh options. Call refresh({ providers: [providerId], signal }) separately when remote freshness is required.

• Required config-form extension OAuth refreshToken(credentials, signal) callbacks to accept and honor a concrete abort signal.

• Replaced dynamic provider refresh context store access with the read-only context.stored snapshot and generation-checked context.publish() transaction.

  Providers built with createProvider({ fetchModels }): no catalog-publication migration is required. Before and after, return the fetched models and register the resulting provider; createProvider() owns restoration, persistence, and in-memory publication.

  // Before
  const beforeProvider = createProvider({
    // ...
    fetchModels: async ({ signal }) => {
      const response = await fetch(catalogUrl, { signal });
      return parseModels(await response.json());
    },
  });
  pi.registerProvider(beforeProvider);
  
  // After: unchanged
  const afterProvider = createProvider({
    // ...
    fetchModels: async ({ signal }) => {
      const response = await fetch(catalogUrl, { signal });
      return parseModels(await response.json());
    },
  });
  pi.registerProvider(afterProvider);

  Handwritten native Provider.refreshModels(): replace direct store access and pre-publication mutation with generation-guarded publications.

  // Before
  refreshModels: async (context) => {
    const stored = await context.store.read();
    if (stored) currentModels = stored.models;
    if (!context.allowNetwork) return;
  
    const refreshed = await fetchModels(context.signal);
    currentModels = refreshed;
    await context.store.write({ models: refreshed, checkedAt: Date.now() });
  },
  
  // After
  refreshModels: async (context) => {
    if (context.stored) {
      const restored = context.stored.models;
      if (!(await context.publish({
        update: () => { currentModels = restored; },
      }))) return;
    }
    if (!context.allowNetwork) return;
  
    const refreshed = await fetchModels(context.signal);
    if (context.signal.aborted) return;
    await context.publish({
      persist: { models: refreshed, checkedAt: Date.now() },
      update: () => { currentModels = refreshed; },
    });
  },

  For the config-form pi.registerProvider(name, { refreshModels }), callbacks that only return models remain unchanged; pi publishes the returned list. If such a callback previously used context.store for custom persistence, read context.stored and call context.publish({ persist: entry }). In publish(), omit persist to leave storage unchanged, pass a ModelsStoreEntry to write it, or pass persist: null to delete it.

• Replaced the inherited pi-agent-core harness session model with the v4 lane-based Session, SessionStorage, and SessionRepo APIs, including durable operation records, global facts, shared sequence numbers, and tree-scoped lane views.

• Promoted the inherited v2 session and AgentHarness API from pi-agent-core's experimental entrypoint to its default export and removed the experimental subpaths.

• Removed the inherited legacy JSONL and in-memory repository APIs. Use pi-agent-core's v4 JsonlSessionRepo or InMemorySessionRepo, both implementing the new SessionRepo contract.

• Added the inherited required pi-agent-core FileSystem.renameFile() operation for atomic JSONL publication; custom harness file-system implementations must provide same-filesystem replacement semantics (#​7707 by @​davidbrai).

• Replaced experimental remote-session list summaries with durable SessionMetadata; RemoteSession.sessions no longer exposes runtime phase, model, thinking, attachment, or lock state, which remains available from acquired SessionSnapshot values (#​7708).

Added

• Added built-in Baseten provider support with BASETEN_API_KEY authentication and zai-org/GLM-5.2 as the default model.
• Added experimental remote-session client APIs: the transport-neutral PiClient, CBOR protocol, Unix-socket transport, and @earendil-works/pi-coding-agent/client RemoteSession controller with transcript reducers. See Pi Client and Remote Protocol (#​7344, #​7348, #​7371, #​7409).
• Added CredentialSynchronizationError for credential changes that commit successfully but fail to synchronize local model state.
• Added chainable pi.registerMarkdownTransformer() hooks for display-only transformation of user and assistant Markdown. See pi.registerMarkdownTransformer() (#​7231 by @​xl0).
• Added an experimental fullscreen TUI mode, selectable through --tui-mode fullscreen or /settings (#​7304).
• Added runtime switching between regular and fullscreen TUI modes through /settings.
• Added a sticky editor, status, widget, and footer dock to fullscreen mode while keeping the transcript independently scrollable.
• Added a draggable transcript scrollbar to fullscreen mode with configurable auto, always, and hidden modes through /settings; always reserves the rightmost column.
• Added page scrolling and marked-message navigation shortcuts to fullscreen mode.
• Added an optional scrollbarThumb theme color for fullscreen scrollbar thumbs, falling back to selectedBg.
• Added configurable themed Unicode rendering for supported Mermaid diagrams in interactive messages, including optional rendering while streaming. See Markdown settings (#​7624 by @​xl0).
• Added opt-in Ctrl+P/Ctrl+N prompt history navigation, with explicit history bindings taking precedence over application shortcuts while the editor is focused.
• Added per-directory AGENTS.override.md context files, which replace AGENTS.md or CLAUDE.md in the same directory while preserving context from other directories. See Context Files (#​7681 by @​Marvae).
• Added AI_AGENT=pi to CLI and RPC child-process environments for generic agent attribution. See Environment Variables (#​7493 by @​renaudhartert-db).
• Added inherited terminal-friendly Unicode rendering for LaTeX expressions in Markdown. See TUI Markdown.
• Added stacked transient notifications in fullscreen mode.
• Added arbitrary OpenAI-compatible model sampling parameters through samplingParams in models.json, model overrides, extension providers, and stream options. See Sampling Parameters (#​7568 by @​mrexodia).
• Added inherited opt-in vLLM thinking_token_budget support for OpenAI-compatible models, reserving output tokens for the final answer (#​7638 by @​bnsd55).
• Added inherited support for OpenAI-compatible streams that omit finish_reason, using compat.supportsFinishReason to infer normal and tool-use stops when the stream ends. See OpenAI Compatibility.
• Added inherited deferred provider request contracts, durable response handles, authenticated fetch/cancel dispatch, and faux-provider support for pending, ready, failed, and cancelled responses (#​7339 by @​davidbrai).
• Added inherited vendor-neutral telemetry contracts plus agent-owned typed AI-request and harness schemas, composed span starters, and callback helpers. See the agent telemetry schema reference.
• Added inherited structured Amazon Bedrock failure diagnostics with HTTP status, modeled error code, and AWS request id when available (#​7286 by @​brianstanley).
• Added inherited AgentOptions.shouldStopAfterTurn for gracefully stopping after a completed turn before queued messages or another model call are processed. See Agent Options (#​7367 by @​acmerfight).
• Added inherited v4 JsonlSessionRepo support for append-only JSONL harness sessions (#​7611 by @​davidbrai).
• Added inherited bounded branch-entry and indexed open-operation recovery queries to the v4 session API (#​7448, #​7646).
• Added the inherited compile-complete AgentHarness v2 scaffold; unfinished operation paths reject with HarnessNotImplemented while durable execution is implemented.

Changed

• Added inherited optional cancellation to pi-ai ModelsStore reads, writes, and deletions; catalog orchestration binds these waits to the provider refresh signal.
• Reduced the inherited default fullscreen mouse wheel step from three lines to one for finer scrolling.

Fixed

• Fixed the footer showing (sub) for generic OAuth/OpenID sign-ins without a known subscription; extension OAuth providers can opt in with isSubscription.
• Fixed inherited OAuth token refreshes so stalled requests release the credential-store lock (#​7508).
• Fixed inherited tool argument validation to preserve values that already match an anyOf/oneOf union arm before coercion, avoiding nullable unions converting null to another primitive value (#​7328).
• Fixed inherited Fireworks GLM 5.2 requests sending the unsupported prompt_cache_retention field when long cache retention is enabled, and enabled session affinity for automatic prompt caching (#​7676).
• Fixed inherited JsonlSessionRepo enforcing session IDs globally across working directories; IDs are now unique within each working directory.
• Fixed inherited JSONL session forks and torn-tail repairs to publish atomically, avoiding partially written or corrupted sessions after interrupted writes (#​7707 by @​davidbrai).
• Fixed path-containing find globs returning no results on Windows (#​6817).
• Fixed messages queued during manual /compact failing instead of being sent after compaction completes.
• Fixed Git Bash, MSYS, Cygwin, and WSL drive paths passed to built-in file tools resolving against the current Windows drive instead of their native drive (#​7064, #​7547).
• Fixed project-level nested provider retry settings replacing unmodified global provider retry settings (#​7572).
• Fixed inherited GitHub Copilot Grok 4.5 requests to use the supported Responses API (#​7560).
• Fixed fullscreen shutdown leaking terminal capability-query replies into the parent shell prompt.
• Fixed bare exact --model IDs shared by multiple providers choosing the first catalog entry instead of the sole authenticated provider or a clear ambiguity error (#​7327).
• Fixed standalone x64 binaries requiring Haswell-era AVX2/BMI2 instructions by compiling release executables against Bun's baseline runtime (#​7390 by @​davidbrai).
• Fixed Ctrl+X copy confirmations in fullscreen mode adding a transcript status line instead of showing the transient Copied! marker.
• Fixed Kitty image previews in fullscreen mode overlapping the sticky editor and footer dock while scrolling.
• Fixed image-heavy fullscreen sessions lagging when layout changes retransmitted visible Kitty image payloads and rendered the transcript twice per frame.
• Fixed spaces in /settings searches toggling the highlighted setting while typing multi-word queries such as TUI mode or Quiet startup.
• Fixed custom editors not inheriting the default editor's autocomplete dropdown item limit (#​7333).
• Fixed malformed resource arrays in package manifests crashing session startup (#​7187).
• Fixed the DOOM overlay example downloading its shareware WAD from a dead URL.
• Fixed setToolsExpanded(false) to be a no-op when tool output is already collapsed, avoiding redundant Tool output: collapsed startup notices from extensions (#​7292).
• Fixed extension-driven model calls in custom compaction, handoff, and Q&A examples to dispatch through the coding-agent model runtime so custom providers and resolved auth options are preserved (#​7325).
• Fixed long-running sessions using stale credentials after another process updates auth.json without serializing concurrent credential reads and delaying startup (#​7319).
• Fixed concurrent models-store.json reads forming a file-lock convoy and delaying startup.
• Updated the packaged brace-expansion dependency to 5.0.8 to address GHSA-mh99-v99m-4gvg (#​7316).
• Fixed forced model availability refreshes remaining blocked behind a stalled earlier refresh (#​7301, #​7421 by @​a-yeyang).
• Fixed /model catalog refresh failures to identify every catalog that failed.
• Fixed provider login remaining stuck after saving credentials when a model catalog refresh stalls by separating local credential consistency from bounded background freshness (#​7027, #​7113, #​7418).
• Fixed /scoped-models waiting for remote catalogs before rendering instead of showing cached models and cancelling refresh on close (#​7153).
• Fixed /model <name> waiting for catalog refresh before checking cached model matches (#​7443).
• Fixed stale availability snapshots and errors publishing after a newer availability pass.
• Fixed stale pi.dev, Radius, llama.cpp, and extension catalog refreshes publishing after a newer provider refresh.
• Fixed cancellation while waiting for file-backed credential or model-catalog locks, preventing cancelled mutations from running or committing later.
• Fixed concurrent in-memory credential mutations losing unrelated provider updates by serializing their read-modify-write sections.
• Updated undici to 8.9.0 and the packaged brace-expansion to 5.0.9 to address GHSA-8xcm-r25x-g524, GHSA-4cwx-7wf7-3272, GHSA-m8rv-5g2x-5cg5, GHSA-jr45-8vmc-qm54, GHSA-v3r7-h72x-cjcm, and GHSA-rgw5-rvv9-x895.
• Fixed GitHub Copilot compaction and branch summaries using the Individual endpoint instead of the credential-resolved Business or Enterprise endpoint (#​6768).
• Fixed extension model calls dropping credential-resolved endpoints when forwarding request authentication, including custom compaction with GitHub Copilot Business and Enterprise accounts (#​7579).
• Fixed fullscreen transcript navigation leaving no editor-accessible Home, End, PageUp, or PageDown variants by adding Ctrl-modified editor bindings (#​7574).
• Fixed extension event-bus listeners surviving session reloads and disposal (#​7656 by @​tudoroancea).
• Fixed /copy failing to read clipboard text on Wayland when no X11 clipboard is available (#​7387).
• Fixed slow connections failing during the initial connection attempt by increasing the connect timeout (#​7435 by @​muyiyr).
• Fixed oversized images returned by extension and built-in tools bypassing automatic image resizing. See Image settings (#​7330 by @​tizmagik).
• Fixed session discovery missing sessions stored through symlinked directories (#​7552 by @​muyiyr).
• Fixed manual compaction racing with threshold auto-compaction (#​7370 by @​davidbrai).
• Fixed responses truncated below their intended output limit ending the run instead of compacting and retrying once (#​7540 by @​davidbrai).
• Fixed Git package updates leaving dependencies missing when git clean cannot remove an ignored dependency directory (#​7570 by @​mrexodia).
• Fixed find results from POSIX and Windows filesystem roots losing the first path segment or gaining duplicate trailing separators (#​7569 by @​petrroll).
• Fixed transient version-check, catalog, managed-tool, and package-management HTTP failures not being retried (#​7632 by @​petrroll).
• Fixed interactive errors ignoring the configured output padding.
• Fixed the inherited OpenCode Go provider display name.
• Fixed inherited provider error normalization treating arrays and class instances as structured response bodies instead of preserving their original errors (#​7205 by @​erikogenvik).
• Fixed inherited Anthropic streams dropping text or thinking included in the initial content-block event (#​7358 by @​davidbrai).
• Fixed inherited Google history conversion dropping signed empty text and thinking blocks required for replay (#​7362 by @​jingtao-wisdomgraph).
• Fixed inherited OpenAI Codex cached WebSocket sessions being shared across different account credentials (#​7364).
• Fixed inherited transient Google Generative AI and Vertex AI provider errors bypassing automatic retries (#​7471 by @​vish-pr).
• Fixed inherited Gemini 3 tool call ids being discarded during history conversion, breaking signed multi-turn replay (#​7494 by @​muyiyr).
• Restored inherited GitHub Copilot models returned through account-specific policy responses (#​7672 by @​muyiyr).
• Replaced the inherited retired Qwen Token Plan qwen3.8-max-preview model with qwen3.8-max (#​7670 by @​QuintinShaw).
• Fixed inherited terminal width accounting for Indic conjunct grapheme clusters (#​6987 by @​petrroll).
• Fixed inherited nested fullscreen stack layouts ignoring child minimum sizes.
• Fixed inherited batched terminal color-scheme reports being parsed as one malformed response (#​7550).
• Fixed inherited terminal progress clearing to emit the complete OSC 9;4 sequence (#​7581).
• Fixed inherited iTerm2 image payloads omitting the size metadata required by the xterm.js image addon (#​7612).
• Fixed inherited width truncation leaving OSC 8 hyperlinks unterminated (#​7657 by @​xXJSONDeruloXx).
• Updated inherited GPT-5.6 Terra and Luna pricing across OpenAI and passthrough model catalogs.
• Fixed inherited Fireworks Kimi K3 models to use the OpenAI-compatible API with native reasoning-effort levels and deferred tools (#​7199, #​7230 by @​XBeg9).
• Updated the inherited Groq Qwen reasoning override for the replacement qwen/qwen3.6-27b model.
• Fixed inherited Windows Shift+Enter detection by reading modifier state from the native Win32 helper.
• Fixed the inherited pi-tui npm package omitting the source and build scripts needed to rebuild its Windows and Darwin native addons.
• Fixed inherited Windows console truecolor detection when Windows Terminal does not provide WT_SESSION to child shells.
• Fixed inherited phantom fullscreen text selection from unmatched mouse events when changing terminal pane focus.
• Fixed inherited keyboard input rendering latency on Windows by letting input preempt the throttled render timer.
• Fixed inherited agent harness path handling on Windows for file basenames, recursive skill loading, and prompt template names.

google-gemini/gemini-cli (@​google/gemini-cli)

v0.54.4

Compare Source

What's Changed

• fix(patch): cherry-pick 56f9688 to release/v0.54.0-pr-28700 to patch version v0.54.0 and create version 0.54.1 by @​gemini-cli-robot in #​28710
• chore: bump version to 0.54.2 by @​DavidAPierce in #​28712
• Fix/revert version bump by @​DavidAPierce in #​28715

Full Changelog: google-gemini/gemini-cli@v0.54.0...v0.54.4

v0.54.0

Compare Source

What's Changed

• Changelog for v0.53.0-preview.0 by @​gemini-cli-robot in #​28507
• Changelog for v0.52.0 by @​gemini-cli-robot in #​28508
• chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by @​gemini-cli-robot in #​28510
• fix(caretaker): sanitize and wrap issue title in untrusted_context by @​chadd28 in #​28352
• chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by @​chadd28 in #​28409
• fix(core): rotate session ID on model fallback to prevent stateful API errors by @​amelidev in #​28469
• feat(caretaker-triage): post comment before auto-closing issues by @​chadd28 in #​28411
• fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage by @​amelidev in #​28517
• fix(core): filter out thought parts from getHistoryTurns when context management is disabled by @​DavidAPierce in #​28509
• fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by @​luisfelipe-alt in #​28531
• fix(core): enforce explicit tag length and validation in file keychain by @​luisfelipe-alt in #​28523
• chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by @​gemini-cli-robot in #​28552
• feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utilities by @​joneba-google in #​28432
• feat(pr-generator-agent): implement Antigravity agent runner and prompt templates … by @​joneba-google in #​28434
• fix(core): skip merged function-response turns when finding the active loop by @​adamfweidman in #​28565
• fix(patch): cherry-pick f47d6c6 to release/v0.54.0-preview.0-pr-28566 to patch version v0.54.0-preview.0 and create version 0.54.0-preview.1 by @​gemini-cli-robot in #​28609

Full Changelog: google-gemini/gemini-cli@v0.53.1...v0.54.0

v0.54.0-preview.1

Compare Source

What's Changed

• fix(patch): cherry-pick [f47d6c6](https://redirect.

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Wednesday (* * * * 3)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Dockerfile

Post-upgrade command './scripts/update-go-shas.sh' has not been added to the allowed list in allowedCommands

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.