chore(deps-dev): bump the bun group across 1 directory with 2 updates

[dependabot]

Bumps the bun group with 2 updates in the / directory: @biomejs/biome and @oh-my-pi/pi-coding-agent.

Updates @biomejs/biome from 2.5.3 to 2.5.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.4

2.5.4

Patch Changes

• #10665 55ff995 Thanks @​dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

• #10894 f4fb10e Thanks @​ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

• #10939 f2799db Thanks @​Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

• #10945 ae15d98 Thanks @​Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

• #10842 5e1abfe Thanks @​JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

  The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

• #10891 ecca79e Thanks @​ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.

• #10886 60c8043 Thanks @​dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.

  - test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
  -   expect(a).toBe(b);
  - });
  + test.each([[1, 2]])(
  +   "a description that is long enough to push the hugged opening line beyond the print width",
  +   (a, b) => {
  +     expect(a).toBe(b);
  +   },
  + );

• #10895 01a85f0 Thanks @​ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.

What's Changed

• feat(yml/fmt): basic block properties by @​ematipico in biomejs/biome#10873
• feat(useSortedClasses): sort important-suffix classes in sort_v4 by @​johncarmack1984 in biomejs/biome#10880
• fix(format/js): wrap curried test each calls by @​dyc3 in biomejs/biome#10886
• fix(markdown): parse whitespace after list markers by @​tidefield in biomejs/biome#10869
• fix(inference): use correct function when cloning data by @​ematipico in biomejs/biome#10891
• docs(noDuplicateProperties): note that @​keyframes declarations are ignored by @​dfedoryshchev in biomejs/biome#10893
• fix(lint): prevent noCommentText fix from looping forever by @​JamBalaya56562 in biomejs/biome#10842
• fix(core): cleanup old sockets in Unix by @​ematipico in biomejs/biome#10895
• feat(inference): inference engine via salsa by @​ematipico in biomejs/biome#10888
• chore(deps): update dependency @​types/node to v24.13.3 by @​renovate[bot] in biomejs/biome#10920
• chore(deps): update github-actions by @​renovate[bot] in biomejs/biome#10921

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.4

Patch Changes

• #10665 55ff995 Thanks @​dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

• #10894 f4fb10e Thanks @​ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

• #10939 f2799db Thanks @​Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

• #10945 ae15d98 Thanks @​Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

• #10842 5e1abfe Thanks @​JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

  The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

• #10891 ecca79e Thanks @​ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.

• #10886 60c8043 Thanks @​dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.

  - test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
  -   expect(a).toBe(b);
  - });
  + test.each([[1, 2]])(
  +   "a description that is long enough to push the hugged opening line beyond the print width",
  +   (a, b) => {
  +     expect(a).toBe(b);
  +   },
  + );

• #10895 01a85f0 Thanks @​ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.

Commits

• bfc3f3d ci: release (#10887)
• See full diff in compare view

Updates @oh-my-pi/pi-coding-agent from 16.4.8 to 17.0.2

Release notes

Sourced from @​oh-my-pi/pi-coding-agent's releases.

v17.0.2

@​oh-my-pi/pi-agent-core

Fixed

• Improved error visibility in interactive clients by surfacing provider stream failures through the assistant message lifecycle, preventing silent loading spinners.
• Fixed an issue where Cursor provider contexts omitted host-supplied MCP tools from main and side-channel requests.

@​oh-my-pi/pi-ai

Fixed

• Automatically invalidate and rotate OAuth credentials when an "invalidated oauth token" error occurs.
• Fixed auth-broker snapshot validation rejecting API keys stored via the /login flow, restoring support for gateway/broker setups serving login-sourced keys on custom hosts.
• Fixed an issue where literal reasoning tags (e.g., <think>) inside Markdown code blocks or inline code were incorrectly treated as reasoning boundaries, which corrupted the rendered Markdown.
• Classified HTTP 402 and "balance exhausted" quota responses as persistent usage limits, enabling automatic rotation of multi-account requests to a sibling credential.
• Fixed kimi-code Anthropic-format requests ignoring custom provider base URLs.
• Fixed an issue where GPT-5.6 Codex Responses-Lite requests failed with an HTTP 400 error due to invalid tool_choice parameters after tools were rewritten, by automatically downgrading forced hosted choices to tool_choice: "auto" while preserving explicit tool-use constraints.
• Fixed Cursor streams prematurely reporting success before late CONNECT or gRPC terminal failures were observed, and resolved issues rejecting transport ends without a turnEnded signal.

@​oh-my-pi/pi-catalog

Changed

• Increased the maximum output tokens (maxTokens) from 32,768 to 65,536 for Kimi K2.7-Code models on Fireworks.

Fixed

• Fixed a regression where the context window for openai-codex GPT-5.6 models (Luna, Sol, Terra) incorrectly fell back to 272,000 instead of preserving its 372,000 capacity.
• Fixed Umans PAYG models incorrectly displaying as "Free" in /models by correctly sourcing their published per-token rates.
• Fixed native moonshot/kimi-k3 capabilities and pricing, ensuring it correctly reflects its official pricing, 1M context window, image input support, reasoning capabilities, and 128k output token limit.

@​oh-my-pi/pi-coding-agent

Added

• Added native Warp CLI-agent events for rich session status, tool approvals, and completion notifications.
• Added support for ChatGPT/Codex subscriptions in the generate_image tool, allowing image generation without a metered OPENAI_API_KEY even when using other active models.
• Added an optional provider parameter to generate_image to override the global providers.image setting for a single request.
• Added OpenTelemetry log and metric export support alongside existing trace exports, enabling forwarding of centralized-logger events and GenAI-semconv metrics when configured.
• Enhanced retry.fallbackChains wildcards to support id-prefixed targets and keys, allowing more flexible model fallback routing across different providers.
• Added an opt-in per-project model role storage mode with global fallback from the model selector.
• Added per-advisor on/off toggle (enabled: false in WATCHDOG.yml): advisors stay in the roster but their runtime is never built — they show ○ in /advisor status rather than disappearing. Existing configs are backward-compatible (defaults to true when absent).
• Colored the status line's advisor ++ badge by roster health (green all running, yellow quota-exhausted, red failed, dim paused); per-advisor glyphs (●/○/✕) show in /advisor status.
• Added real provider quota display (usage percent, window, reset timer) to /advisor status and the /advisor configure preview.

Changed

• Changed Bash command timeouts to render with a warning (yellow) border instead of an error (red) border, while still indicating to the model that the command did not complete normally.
• Made the hashline seen-line guard opt-in and off by default via edit.enforceSeenLines, and improved handling of column-clipped lines so single-line edits on long lines apply without a full-width re-read.

... (truncated)

Commits

• 0f9fcee test(plan): seeded anthropic runtime key in issue-816 repro
• d527259 chore: bump version to 17.0.2
• 0f26558 chore: reformat
• eac51b6 Merge: darkphilosophy/feat/advisor-per-agent-toggle
• 38b73a5 style(tests): removed unused fixture variable and formatted plan test
• 85b9c01 test(plan): made plan-role apply and restore regressions deterministic
• f4c8143 fix(advisor): never let a failing advisor stall or abort the primary agent
• 731a2cb test(natives): gave timeout drain repro a spawn-proof deadline
• 2a6d551 revert(status-line): restored single-row status bar with priority drop
• 206cb93 test(bash): asserted timeout settles as flagged result
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[rblaine95]

@dependabot rebase

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.