Skip to content

build(deps): Bump the production-dependencies group with 2 updates#7

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3bda318332
Open

build(deps): Bump the production-dependencies group with 2 updates#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-3bda318332

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 2 updates: @earendil-works/pi-ai and @earendil-works/pi-coding-agent.

Updates @earendil-works/pi-ai from 0.80.6 to 0.80.10

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v0.80.10

New Features

  • Kimi Coding thinking compatibility — Kimi Coding models now use adaptive thinking correctly; K3 exposes its supported max level and supports replaying empty-signature thinking blocks. See Kimi For Coding setup and Model Options.

Fixed

  • Fixed inherited Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
  • Fixed inherited Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
  • Fixed inherited Kimi Coding K3 thinking-level metadata to expose only the supported max level (#6737).
  • Fixed inherited catalog generation restoring xAI models removed in 0.80.9 (#6736).

v0.80.9

New Features

Added

Changed

  • Changed xAI login to use a prefilled device-authorization link labeled “Sign in with SuperGrok or X Premium,” and changed the default xAI model to Grok 4.5 (#6734 by @​Jaaneek).

Fixed

  • Fixed inherited Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.
  • Fixed cloning or forking a session before its first assistant response to explain that the session must be saved first.

Removed

  • Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#6734 by @​Jaaneek).

v0.80.8

New Features

  • Unified model runtime and provider authentication — ModelRuntime centralizes model configuration, provider-owned /login, and dynamic provider catalogs. See Providers.
  • Live model catalog refresh — /model refreshes configured providers in the background, and pi update --models forces an immediate refresh. See Install and Manage.
  • xAI device-code OAuth and Grok 4.5 Responses support — Sign in to xAI with a device code and use Grok 4.5 with low, medium, or high thinking. See xAI.

Breaking Changes

  • Replaced the SDK's CreateAgentSessionOptions.authStorage and modelRegistry options with the async modelRuntime option. AuthStorage and its storage backends are no longer exported; use ModelRuntime (or a custom pi-ai CredentialStore), or readStoredCredential() for one-off reads of auth.json.
  • Removed redundant ModelRuntime.getAll(), find(), getSnapshot(), and getAuthOptions() projections. Use the pi-ai Models methods getModels(), getModel(), getProviders(), and checkAuth() directly.
  • Replaced SDK request-auth assembly through ModelRegistry.getApiKeyAndHeaders() with ModelRuntime.getAuth(). Passing a provider ID returns provider-scoped auth; passing a model also resolves built-in, models.json, and extension model headers.
  • Changed extension-facing ModelRegistry.refresh() from synchronous void to Promise<void> because models.json loading is asynchronous. Extensions must await it before making synchronous registry reads.
  • Moved canonical dynamic catalog refresh to async ModelRuntime.refresh()/pi-ai Models.refresh(). Legacy extension OAuth modifyModels remains supported as a synchronous compatibility projection after credential initialization.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[0.80.10] - 2026-07-16

Fixed

  • Fixed Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
  • Fixed Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
  • Fixed Kimi Coding K3 thinking-level metadata to expose only the supported max level (#6737).
  • Fixed catalog generation restoring xAI models removed in 0.80.9 (#6736).

[0.80.9] - 2026-07-16

Added

  • Added Kimi K3 support for Kimi Coding, Moonshot AI, Moonshot AI China, OpenRouter, and Vercel AI Gateway.
  • Added Kimi deferred tool loading to OpenAI-compatible Chat Completions through compat.deferredToolsMode.

Changed

  • Changed xAI device OAuth to open a prefilled authorization link and added provider-specific OAuth login labels (#6734 by @​Jaaneek).

Fixed

  • Fixed Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.

Removed

  • Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#6734 by @​Jaaneek).

[0.80.8] - 2026-07-16

Breaking Changes

  • Changed runtime authentication to provider-scoped Models.checkAuth(), getAuth(), login(), and logout() APIs. checkAuth() now returns AuthCheck | undefined, and API-key auth resolvers no longer receive a model.
  • Removed the legacy built-in OAuth provider objects, global OAuth registry APIs, and public low-level built-in login/refresh functions. Use canonical Provider.auth.oauth methods instead; the oauth subpath now retains only extension compatibility types.
  • Renamed the canonical login interaction interface from AuthLoginCallbacks to AuthInteraction; it exposes the provider-neutral prompt()/notify() protocol used by API-key and OAuth flows.
  • Changed the Models request contract: getAuth(model) now includes model headers, while getAuth(providerId) remains provider-scoped, and Models stream options may include transformHeaders. Custom Models implementations must execute the transform after merging auth/model and explicit headers, then remove it before provider dispatch.
  • Changed dynamic model refresh to Models.refresh(options), which refreshes every configured dynamic provider and returns per-provider errors/cancellation state. Provider.refreshModels(context) now receives the effective credential, scoped model storage, network policy, and abort signal.

Added

  • Added provider-owned authentication and availability resolution to Models, including stored OAuth refresh and interactive login support through CredentialStore.
  • Added async non-secret credential enumeration through CredentialStore.list() and credential-aware Provider.filterModels() availability policy.
  • Added neutral auth-flow information/link events and provider-owned Amazon Bedrock and Google Vertex AI credential selection flows.
  • Added ModelsStore with an in-memory default for restoring and persisting dynamic provider catalogs.
  • Added the dynamic Radius pi-messages gateway provider with OAuth and credential-specific catalog refresh.
  • Added Models.refresh({ force: true }) to let providers bypass freshness checks for explicit refreshes.
  • Added xAI device-code OAuth login and routed Grok 4.5 through OpenAI Responses, with low, medium, and high thinking support (#6651 by @​Jaaneek).

Changed

... (truncated)

Commits
  • 8dc7883 Release v0.80.10
  • b8575f6 fix(ai): use adaptive thinking for Kimi Coding
  • aba3245 fix(ai): correct Kimi K3 Moonshot pricing
  • c1b7856 fix(ai): prevent removed xAI models regenerating, closes #6736
  • 78ff249 fix(ai): expose max thinking for Kimi Coding K3
  • f7e0603 Add [Unreleased] section for next cycle
  • 2d16f92 Release v0.80.9
  • aa508b7 docs: audit unreleased changelogs
  • a01baaa feat(xai): prefilled OAuth device link, SuperGrok login label, trimmed model ...
  • c2c32fe fix(ai): correct Kimi K3 gateway output limits
  • Additional commits viewable in compare view

Updates @earendil-works/pi-coding-agent from 0.80.6 to 0.80.10

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.80.10

New Features

  • Kimi Coding thinking compatibility — Kimi Coding models now use adaptive thinking correctly; K3 exposes its supported max level and supports replaying empty-signature thinking blocks. See Kimi For Coding setup and Model Options.

Fixed

  • Fixed inherited Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
  • Fixed inherited Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
  • Fixed inherited Kimi Coding K3 thinking-level metadata to expose only the supported max level (#6737).
  • Fixed inherited catalog generation restoring xAI models removed in 0.80.9 (#6736).

v0.80.9

New Features

Added

Changed

  • Changed xAI login to use a prefilled device-authorization link labeled “Sign in with SuperGrok or X Premium,” and changed the default xAI model to Grok 4.5 (#6734 by @​Jaaneek).

Fixed

  • Fixed inherited Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.
  • Fixed cloning or forking a session before its first assistant response to explain that the session must be saved first.

Removed

  • Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#6734 by @​Jaaneek).

v0.80.8

New Features

  • Unified model runtime and provider authentication — ModelRuntime centralizes model configuration, provider-owned /login, and dynamic provider catalogs. See Providers.
  • Live model catalog refresh — /model refreshes configured providers in the background, and pi update --models forces an immediate refresh. See Install and Manage.
  • xAI device-code OAuth and Grok 4.5 Responses support — Sign in to xAI with a device code and use Grok 4.5 with low, medium, or high thinking. See xAI.

Breaking Changes

  • Replaced the SDK's CreateAgentSessionOptions.authStorage and modelRegistry options with the async modelRuntime option. AuthStorage and its storage backends are no longer exported; use ModelRuntime (or a custom pi-ai CredentialStore), or readStoredCredential() for one-off reads of auth.json.
  • Removed redundant ModelRuntime.getAll(), find(), getSnapshot(), and getAuthOptions() projections. Use the pi-ai Models methods getModels(), getModel(), getProviders(), and checkAuth() directly.
  • Replaced SDK request-auth assembly through ModelRegistry.getApiKeyAndHeaders() with ModelRuntime.getAuth(). Passing a provider ID returns provider-scoped auth; passing a model also resolves built-in, models.json, and extension model headers.
  • Changed extension-facing ModelRegistry.refresh() from synchronous void to Promise<void> because models.json loading is asynchronous. Extensions must await it before making synchronous registry reads.
  • Moved canonical dynamic catalog refresh to async ModelRuntime.refresh()/pi-ai Models.refresh(). Legacy extension OAuth modifyModels remains supported as a synchronous compatibility projection after credential initialization.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.80.10] - 2026-07-16

New Features

  • Kimi Coding thinking compatibility — Kimi Coding models now use adaptive thinking correctly; K3 exposes its supported max level and supports replaying empty-signature thinking blocks. See Kimi For Coding setup and Model Options.

Fixed

  • Fixed inherited Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
  • Fixed inherited Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
  • Fixed inherited Kimi Coding K3 thinking-level metadata to expose only the supported max level (#6737).
  • Fixed inherited catalog generation restoring xAI models removed in 0.80.9 (#6736).

[0.80.9] - 2026-07-16

New Features

Added

Changed

  • Changed xAI login to use a prefilled device-authorization link labeled “Sign in with SuperGrok or X Premium,” and changed the default xAI model to Grok 4.5 (#6734 by @​Jaaneek).

Fixed

  • Fixed inherited Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.
  • Fixed cloning or forking a session before its first assistant response to explain that the session must be saved first.

Removed

  • Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#6734 by @​Jaaneek).

[0.80.8] - 2026-07-16

New Features

  • Unified model runtime and provider authentication — ModelRuntime centralizes model configuration, provider-owned /login, and dynamic provider catalogs. See Providers.
  • Live model catalog refresh — /model refreshes configured providers in the background, and pi update --models forces an immediate refresh. See Install and Manage.
  • xAI device-code OAuth and Grok 4.5 Responses support — Sign in to xAI with a device code and use Grok 4.5 with low, medium, or high thinking. See xAI.

Breaking Changes

  • Replaced the SDK's CreateAgentSessionOptions.authStorage and modelRegistry options with the async modelRuntime option. AuthStorage and its storage backends are no longer exported; use ModelRuntime (or a custom pi-ai CredentialStore), or readStoredCredential() for one-off reads of auth.json.
  • Removed redundant ModelRuntime.getAll(), find(), getSnapshot(), and getAuthOptions() projections. Use the pi-ai Models methods getModels(), getModel(), getProviders(), and checkAuth() directly.
  • Replaced SDK request-auth assembly through ModelRegistry.getApiKeyAndHeaders() with ModelRuntime.getAuth(). Passing a provider ID returns provider-scoped auth; passing a model also resolves built-in, models.json, and extension model headers.

... (truncated)

Commits
  • 8dc7883 Release v0.80.10
  • c29eda6 docs(coding-agent): audit unreleased changelog
  • aba3245 fix(ai): correct Kimi K3 Moonshot pricing
  • c1b7856 fix(ai): prevent removed xAI models regenerating, closes #6736
  • f7e0603 Add [Unreleased] section for next cycle
  • 2d16f92 Release v0.80.9
  • aa508b7 docs: audit unreleased changelogs
  • b97ed20 fix(coding-agent): explain clone failure for unsaved sessions
  • a01baaa feat(xai): prefilled OAuth device link, SuperGrok login label, trimmed model ...
  • 3524cd4 Merge remote-tracking branch 'origin/main' into add-kimi-deferred-tools
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): Bump the production-dependencies group with 2 updates
17953d3 
Bumps the production-dependencies group with 2 updates: [@earendil-works/pi-ai](https://github.com/earendil-works/pi/tree/HEAD/packages/ai) and [@earendil-works/pi-coding-agent](https://github.com/earendil-works/pi/tree/HEAD/packages/coding-agent).


Updates `@earendil-works/pi-ai` from 0.80.6 to 0.80.10
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.10/packages/ai)

Updates `@earendil-works/pi-coding-agent` from 0.80.6 to 0.80.10
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.80.10/packages/coding-agent)

---
updated-dependencies:
- dependency-name: "@earendil-works/pi-ai"
  dependency-version: 0.80.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@earendil-works/pi-coding-agent"
  dependency-version: 0.80.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants