chore(deps): update bump-dependencies#48
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.168→2.1.1812.1.185(+2)0.78.1→0.79.60.79.9(+2)0.45.2→0.47.00.137.0→0.141.02.2.4-1~debian.13~trixie→2.2.5-1~debian.13~trixie5:29.5.3-1~debian.13~trixie→5:29.6.0-1~debian.13~trixiev1.70.0→v1.71.0v1.3.0→v1.4.0f072159→45da69df072159→45da69d1.16.2→1.17.81.17.9Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
anthropics/claude-code (@anthropic-ai/claude-code)
v2.1.181Compare Source
/config key=valuesyntax to set any setting from the prompt (e.g./config thinking=false) — works in interactive,-p, and Remote Controlsandbox.allowAppleEventsopt-in setting that lets sandboxed commands send Apple Events on macOSCLAUDE_CLIENT_PRESENCE_FILEenvironment variable: point it at a marker file to suppress mobile push notifications while you're at the machineImproved N memoriesline to no longer list individual files outside verbose modeANTHROPIC_BASE_URLand on Foundry due to a per-request attestation token changing every turnopen,osascript, and browser-based auth flows failing with error -600 on macOS by adding the Apple Events entitlementTypeError: Cannot read properties of null) when.claude.jsoncontains corrupted null project entries/recapand conversation forks using the previous model immediately after a model switchawsCredentialExportcredentials with a short remaining lifetime causing credential refreshes every minute, and now accepts the JSON shape fromaws configure export-credentialsclaude mcp get/listshowing✓ Connectedwhen tools/list fails; they now show! Connected · tools fetch failedwith the error detail/remote-controlleaving a stale "connecting…" line; it now confirms in the transcript once connectedgitcannot be resolved on Windows/effortor/model) failing with ENOENT when~/.claude/settings.jsonis a relative symlink under a symlinked~/.claude/stats"Most active day" and daily token chart dates showing one day early in UTC-negative timezones/copyand copy-on-select on Linux not detecting a clipboard utility installed after Claude Code startedv2.1.179Compare Source
denyRead/allowReadglob over a large directory tree making the Bash tool description enormous and the session unusable on Linuxv2.1.178Compare Source
TeamCreateandTeamDeletetools. WithCLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1set, every session now has one implicit team — spawn teammates directly with the Agent tool'snameparameter, no setup step needed. Theteam_nameparameter on the Agent tool is still accepted but ignored.Tool(param:value)syntax for permission rules to match a tool's input parameters (with*wildcard), e.g.Agent(model:opus)to block Opus subagents.claude/skillsdirectories now load when working on files there; on a name clash, the nested skill appears as<dir>:<name>so both stay available.claude/directories: the agent, workflow, and output-style closest to the working directory now wins when names collide; project-scope workflow saves now target the closest existing.claude/workflows//doctorwith consistent flat tree layout across all sections, clearer section status icons, and highlighted command names/bugnow requires a description before submitting, and no longer uses model-refusal text as the GitHub issue title.claude/skillsskills with directory-qualified names being blocked by permission prompts in non-interactive runsclaude agentsworkers failing with401 Invalid bearer tokenwhen the daemon was started from a shell with a custom API gateway viaANTHROPIC_BASE_URLandANTHROPIC_AUTH_TOKEN--fallback-model: compaction now falls back to the configured fallback model chain on overload or model-availability errors/bgor←←after a turn finished showing "Working" forever in the agents list.claude/skillsor.claude/hooksis a symlinkCLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE=1preventing fresh marketplace installs from cloningmcp__server,mcp__server__*,mcp__*) in subagentdisallowedToolsbeing silently ignoredunow steps through NORMAL/VISUAL-mode commands one at a time instead of merging commands in quick succession into a single undo stepvscode://) not opening when clicked inclaude agentsv2.1.177Compare Source
v2.1.176Compare Source
languagesetting to pin a specific language)footerLinksRegexessetting for regex-matched link badges in the footer row, configurable via user or managed settingsawsCredentialExportare now cached until theirExpirationinstead of a fixed 1 houravailableModelsenforcement: alias model picks can no longer be redirected to a blocked model viaANTHROPIC_DEFAULT_*_MODELenvironment variables, and/fastnow refuses to toggle when it would switch to a model outside the allowlistifconditions for Read/Edit/Write tool paths: documented patterns likeEdit(src/**),Read(~/.ssh/**), andRead(.env)now match correctly.claude/settings.jsonis a symlink with an absolute target/copyand mouse-selection copy not reaching the system clipboard inside tmux over SSH, and tmux paste buffer not loading on versions older than 3.2/cdand worktree moves leaving the session reporting the previous directory's git branchclaude agents: pressing back in one window no longer detaches other windows attached to the same session/bgmid-turn had nothing left to continueclaude agentssearchclaude --bg -cn <name>not seeding the session name~/.claude/daemonhas the ReadOnly attribute setclaude daemon statusexplains version-skew behaviorv2.1.175Compare Source
enforceAvailableModelsmanaged setting — when enabled, theavailableModelsallowlist also constrains the Default model (a Default that would resolve to a disallowed model now falls back to the first allowed model), and user or project settings can no longer widen a managedavailableModelslistv2.1.174Compare Source
wheelScrollAccelerationEnabledsetting to disable mouse-wheel scroll acceleration in fullscreen mode/modelpicker hiding the model family that Default resolves to — Opus now appears as its own row on Max/Team Premium/Enterprise plans, Sonnet on Pro/Team plans, and Opus on pay-as-you-go API accounts/modelpicker showing a hardcoded Sonnet version label whenANTHROPIC_DEFAULT_SONNET_MODELpins a different Sonnetus-gov-*) deriving the wrong inference profile prefix (globalinstead ofus-gov), causing 400 errors on derived model IDsANTHROPIC_*provider env (gateway URL, custom headers,/modelaliases) from the shell that started the background daemon/advisordialog pre-selecting a saved advisor model that is blocked by theavailableModelsallowlistagent()subagents missing per-agent attribution headers/usage) showing cache misses, long context, subagents, and per-skill/agent/plugin/MCP breakdowns over the last 24h or 7dv2.1.173Compare Source
[1m]suffix not being normalized — Fable 5 includes 1M context by default, so the suffix is now stripped automaticallyv2.1.172Compare Source
~/.awsconfig files whenAWS_REGIONisn't set, matching AWS SDK precedence;/statusshows where the region came from/pluginmodelattribute to theclaude_code.lines_of_code.countOTEL metric.mcp.jsonapprovals, trust) when dispatched onto a pre-warmed worker/modelsuggestions in theclaude agentsdispatch input rendering with a misleading slash prefix and showing models disabled for your orgavailableModelsrestrictions not being applied to subagent model overrides, the agent dispatch model picker, and the advisor modelavailableModelsallowlists hiding the/modelpicker's Opus and Sonnet 1M rows when entries use version-specific IDs likeclaude-opus-4-8/modelpicker on Bedrock offering models the provider doesn't serve — selecting one silently switched the session model and lit the selection marker on multiple rows[1M][1m]) whenANTHROPIC_DEFAULT_OPUS_MODELalready includes oneopusplanmodel setting not shipping with 1M context in plan mode for entitled users; theopusplan[1m]workaround now also correctly switches to Opus in plan modeWebFetch(domain:*.example.com)wildcard domain rules never matching subdomains in allow, deny, and ask position, and file permission rules with mid-pattern wildcards (e.g.Read(secrets-*/config.json)) being rejected at startupCLAUDE_MEMORY_STORES) in remote sessionsDate.now()/Math.random()/pluginmarketplace list losing its cursor after backing out of a long plugin list, and Esc from the plugin browser returning to the wrong tab/goalstatus chip no longer re-renders the terminal at 5 Hz while idle, and fewer UI re-renders while subagents run in parallel/code-reviewnow keeps theultraoption visible when you're not signed in to claude.ai, with an explanation that the cloud review requires a claude.ai account/loopin remote sessions, where pending loops don't keep the container alivev2.1.170Compare Source
v2.1.169Compare Source
post-sessionlifecycle hook that runs after the session ends and before the workspace is deleted, so you can snapshot uncommitted work or export logs; also made the child-process SIGTERM→SIGKILL window configurable (default unchanged at 5s)--safe-modeflag (andCLAUDE_CODE_SAFE_MODE) to start Claude Code with all customizations (CLAUDE.md, plugins, skills, hooks, MCP servers) disabled for troubleshooting/cdcommand to move a session to a new working directory without breaking the prompt cache mid-sessiondisableBundledSkillssetting andCLAUDE_CODE_DISABLE_BUNDLED_SKILLSenvironment variable to hide bundled skills, workflows, and built-in slash commands from the modelallowedMcpServers/deniedMcpServers) not being enforced on reconnect, IDE-typed configs,--mcp-configservers during the first session after install, or before remote settings loaded; also fixed slow cold starts for orgs without remote settingsclaude -pbeing slow or appearing to hang on Windows while waiting for the slash-command/skill scan (regression in 2.1.161)claude agents --jsonomitting blocked and just-dispatched background sessions; added--allto include completed sessions, plus newidandstatefieldsenvvalues (e.g.ANTHROPIC_MODEL) when dispatched onto a pre-warmed worker.in_usePID lock files accumulating without bound; stale markers from crashed sessions are now swept once per day/workflowsnow opens immediately even while a turn is in progressTaskCreatereliability: malformed inputs are repaired automatically and validation errors for unloaded tools include the schemaAPI_FORCE_IDLE_TIMEOUT=0to opt out--ide,--chrome,--bare,--remote-control, and other flags across retire→wake, and respawn state validation was hardenedEnterWorktreeclaude.exeis held by another processclaude agentswhen running multiple concurrent sessionsearendil-works/pi (@earendil-works/pi-coding-agent)
v0.79.6Compare Source
Fixed
fetchoverride instead of reinstalling the undici global fetch over it.thinking: { type: "disabled" }compatibility parameter.v0.79.5Compare Source
New Features
auth.jsonAPI key entries can now includeenvoverrides for provider-specific Cloudflare, Azure OpenAI, Google Vertex, Amazon Bedrock, cache retention, and proxy settings without changing the project shell. See Auth File.httpProxyonce in global settings to applyHTTP_PROXYandHTTPS_PROXYto Pi-managed HTTP clients. See Network.Added
http-refererandx-title) for Vercel AI Gateway models (#5798 by @rwachtler).xpfooter marker when experimental features are enabled.httpProxysetting that applies asHTTP_PROXYandHTTPS_PROXYfor Pi-managed HTTP clients (#5790).auth.jsonAPI keyenvvalues so provider-specific environment overrides can be scoped to Pi and propagated to inherited provider configuration (#5728).Changed
marked18.0.5.Fixed
thinkingandreasoning_effort(#5818).reasoning_effortwith the provider'shigh/maxeffort mapping (#5770).pi updateon Windows to exit naturally instead of callingprocess.exit(0), avoiding a Node.js/libuv assertion after version-check network requests (#5805).google-vertexGemini model metadata to maplatestaliases to the current models, add Gemini 3.5 Flash for Vertex, correct Gemini 2.5 Flash Vertex cache pricing, and remove shut-down Vertex preview models (#5761).v0.79.4Compare Source
New Features
darkorlighttheme. See Selecting a Theme.SHA256SUMSfiles for verifying standalone binary downloads. See Quickstart Install.Added
SHA256SUMSintegrity files to standalone binary GitHub release assets (#5739).Fixed
/treehelp rendering to show compact wrapped controls instead of truncating them on narrow terminals (#5055).signal-exitfrom re-sending the signal and leaving the terminal in raw/Kitty keyboard mode (#5724).pi.getActiveTools()returns active tool names whilepi.getAllTools()returns tool metadata (#5729).pi list,pi install, andpi updateto terminate after completing even if an extension leaves background handles open (#5687).pi updatefor pnpm global installs whose configuredglobal-bin-dirno longer matches the active pnpm home (#5689).@^1.2.7) so installed package resources still load instead of being treated as mismatched exact pins (#5695).prompt_cache_retention(#5702).$ENV_VARsyntax for environment variables (#5661).v0.79.3Compare Source
Fixed
v0.79.2Compare Source
New Features
Added
PI_EXPERIMENTAL=1that asks for a dark/light theme choice (preselecting the detected appearance) and opt-in analytics data sharing on first launch with the default agent directory; opting in stores atrackingIdinsettings.json(#5587 by @vegarsti).Fixed
~/.pi/agentstate when running from$HOME, and madepi updateuse only saved or explicit project trust without prompting (#5619).maximum context length (N)errors (#5677).stop_detailsexplanations in error messages (#5666 by @rwachtler).thinking.type: "disabled"payload (#5567 by @tmustier).tool_execution_updateevents (#5573).+messages no longer render as-(#5657).--modelresolution for authenticated custom model IDs whose slash prefix matches an unauthenticated built-in provider (#5643)./forkto keep session parent chains connected when the forked path contains labels (#5669)./shareand/exportHTML exports to use the active fallback theme when the configured custom theme no longer exists (#5596).:<thinking>suffixes to preserve the requested thinking level when the provider template model does not advertise reasoning (#5560 by @haoqixu).v0.79.1Compare Source
New Features
xhigheffort support.${1:-7}for optional values. See Prompt Template Arguments.defaultProjectTrustlets users choose whether unresolved project trust asks, always trusts, or never trusts by default, and extensions can inspect effective trust decisions. See Project Trust andctx.isProjectTrusted().#or$so suggestions open without slash-command prefixes. See Autocomplete Providers.Added
${1:-7}(#5553 by @dannote).areExperimentalFeaturesEnabledfeature guard to allow users to opt in to early features (#5547 by @vegarsti).ctx.isProjectTrusted()for extensions to observe the effective project trust decision, including temporary trust decisions (#5523).defaultProjectTrustsetting to choose whether unresolved project trust asks, always trusts, or never trusts by default.ctx.ui.addAutocompleteProvider()wrappers (#4703).@earendil-works/pi-aifor the Anthropic and Amazon Bedrock providers, with adaptive thinking andxhigheffort support.Fixed
AWS_REGION(#5527 by @AJM10565).thinking: { type: "disabled" }compatibility parameter (#5330).maxTokensasmax_tokens(#5331).thinking: { type: "disabled" }compatibility parameter (#5531).maxTokensmetadata to 128,000, correcting an upstream value that duplicated the input sub-limit as the output limit (#5559)./reloadto apply updatedsteeringModeandfollowUpModesettings to the current session (#5377).models.jsonsyntax to skip startup config migrations and report the normal file-path-aware models error instead of a raw JSON parse stack trace (#5418).--help/--versionoutput and simplifiedlist/confighelp text./newfrom ephemeral sessions to keep the new session ephemeral instead of persisting it by default (#5045).nameandmodelOverrides.namedo not replace model IDs in the footer or primary model lists (#4841).v0.79.0Compare Source
New Features
--approve/--no-approvecontrols for non-interactive modes. See Project Trust.project_trust, decide, remember, or defer project trust before project-local resources load. Seeproject_trust.CH). See Interactive Mode.Added
project_trustextension event so global and CLI extensions can decide or defer project trust during startup and runtime cwd switches.Fixed
./hookssubpath that pointed at non-existent build output./reloadto persist project trust when an implicitly trusted session creates a project.pidirectory.models.jsonschema support and inherited OpenAI Responses custom-provider handling forcompat.supportsDeveloperRole: false(#5456).extended-keys-format csi-uand document the tmux 3.2-3.4 fallback (#5432).google-gemini/gemini-cli (@google/gemini-cli)
v0.47.0Compare Source
What's Changed
Full Changelog: google-gemini/gemini-cli@v0.46.0...v0.47.0
v0.47.0-preview.0Compare Source
What's Changed
Configuration
📅 Schedule: (UTC)
* * * * 3)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.