Bump the bun-dependencies group with 6 updates

[dependabot]

Bumps the bun-dependencies group with 6 updates:

Package	From	To
@earendil-works/pi-coding-agent	0.81.1	0.82.1
@earendil-works/pi-tui	0.81.1	0.82.1
@opencode-ai/plugin	1.18.4	1.18.9
@types/node	22.20.1	26.1.2
ink	6.8.0	7.1.1
typescript	5.9.3	7.0.2

Updates @earendil-works/pi-coding-agent from 0.81.1 to 0.82.1

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.82.1

New Features

• Claude Opus 5 — Available on Anthropic and Amazon Bedrock with adaptive thinking (including xhigh), inference profiles, and prompt caching. See Providers.
• Anthropic gateway bearer auth — ANTHROPIC_AUTH_TOKEN authenticates against Anthropic-compatible gateways that require Authorization: Bearer, including compaction and branch summaries. See Environment Variables or Auth File.
• Faster, more resilient model catalogs — pi.dev catalogs revalidate with If-None-Match so unchanged providers answer with an empty 304, and llama.cpp models stay listed across restarts. See llama.cpp.

Added

• Exposed the outputPad setting to custom message renderers. See Extensions (#7045 by @​xl0).
• Added inherited ANTHROPIC_AUTH_TOKEN bearer authentication for Anthropic-compatible gateways. See Providers (#5871).
• Added inherited Claude Opus 5 support for Anthropic and Amazon Bedrock with adaptive thinking, inference profiles, prompt caching, and preserved AWS validation messages (#7081 by @​unexge, #7083 by @​davidbrai).

Changed

• Changed pi.dev model catalog refreshes to revalidate with If-None-Match, so unchanged provider catalogs answer with an empty 304 instead of a full download.
• Changed inherited Radius OAuth device authorization, token exchange, and refresh requests to use the configured gateway directly.
• Changed inherited model loading errors to append the underlying cause, so auth failures such as OAuth refresh failed for openai-codex report the provider response instead of a bare wrapper message.

Fixed

• Fixed compaction and branch summaries for providers whose authentication resolves entirely to request headers (#5871)
• Fixed unavailable scoped models being hidden from /models, allowing them to be removed without editing settings manually (#6949, #7032 by @​christianklotz).
• Fixed startup context file discovery to skip directories that match context file names such as AGENTS.md, which produced EISDIR warnings (#7106 by @​mrexodia).
• Fixed the llama.cpp extension to persist its model catalog, so llama.cpp models stay listed before the first successful refresh. See llama.cpp (#7072 by @​davidbrai).

v0.82.0

New Features

• Constrained tool sampling — Tools can prefer or require strict JSON Schema sampling or use OpenAI Lark/regex grammars, with model capability metadata preventing unsupported requests. See Constrained Sampling for Tools.
• OpenRouter and Kimi Code sign-in — Use /login to authorize OpenRouter or a Kimi Code subscription without manually configuring API keys. See OpenRouter.
• Session-aware, streaming bash integrations — Bash tools receive current session/model metadata, while direct RPC bash commands stream correlated output. See Bash Tool Session Environment and RPC bash events.

Added

• Added inherited Tool.constrainedSampling with strict JSON Schema (prefer/require) and OpenAI Lark/regex grammar variants across OpenAI, Anthropic, Amazon Bedrock, Google Gemini, and Mistral. See Constrained Sampling for Tools.
• Added inherited supportsGrammarTools and supportsStrictTools compatibility flags, expanded supportsStrictMode coverage, and generated model capability metadata to gate constrained sampling.
• Added inherited Kimi Code subscription OAuth login for the Kimi For Coding provider, including device authorization and automatic token refresh (#6935 by @​zaycruz).
• Added inherited OpenRouter OAuth PKCE login through /login, minting a user-controlled API key. See OpenRouter (#6927 by @​rsaryev).
• Exposed PI_SESSION_ID, PI_SESSION_FILE, PI_PROVIDER, PI_MODEL, and PI_REASONING_LEVEL to commands run by built-in and factory-created bash tools. See Bash Tool Session Environment.
• Added streaming bash_execution_update events for direct RPC bash commands, correlated with request IDs. See RPC bash events (#6971 by @​ananthakumaran).

Changed

• Changed inherited generated model catalogs to expose only provider-verified reasoning effort levels from models.dev (#6928 by @​davidbrai).

Fixed

• Fixed inherited DNS lookup failures such as getaddrinfo, ENOTFOUND, and EAI_AGAIN to trigger automatic assistant retries (#6946 by @​christianklotz).
• Fixed inherited OpenRouter Anthropic cache breakpoints to advance through tool results and enabled cache control for ~anthropic/*-latest aliases (#6941 by @​mteam88).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.82.1] - 2026-07-25

New Features

• Claude Opus 5 — Available on Anthropic and Amazon Bedrock with adaptive thinking (including xhigh), inference profiles, and prompt caching. See Providers.
• Anthropic gateway bearer auth — ANTHROPIC_AUTH_TOKEN authenticates against Anthropic-compatible gateways that require Authorization: Bearer, including compaction and branch summaries. See Environment Variables or Auth File.
• Faster, more resilient model catalogs — pi.dev catalogs revalidate with If-None-Match so unchanged providers answer with an empty 304, and llama.cpp models stay listed across restarts. See llama.cpp.

Added

• Exposed the outputPad setting to custom message renderers. See Extensions (#7045 by @​xl0).
• Added inherited ANTHROPIC_AUTH_TOKEN bearer authentication for Anthropic-compatible gateways. See Providers (#5871).
• Added inherited Claude Opus 5 support for Anthropic and Amazon Bedrock with adaptive thinking, inference profiles, prompt caching, and preserved AWS validation messages (#7081 by @​unexge, #7083 by @​davidbrai).

Changed

• Changed pi.dev model catalog refreshes to revalidate with If-None-Match, so unchanged provider catalogs answer with an empty 304 instead of a full download.
• Changed inherited Radius OAuth device authorization, token exchange, and refresh requests to use the configured gateway directly.
• Changed inherited model loading errors to append the underlying cause, so auth failures such as OAuth refresh failed for openai-codex report the provider response instead of a bare wrapper message.

Fixed

• Fixed compaction and branch summaries for providers whose authentication resolves entirely to request headers (#5871)
• Fixed unavailable scoped models being hidden from /models, allowing them to be removed without editing settings manually (#6949, #7032 by @​christianklotz).
• Fixed startup context file discovery to skip directories that match context file names such as AGENTS.md, which produced EISDIR warnings (#7106 by @​mrexodia).
• Fixed the llama.cpp extension to persist its model catalog, so llama.cpp models stay listed before the first successful refresh. See llama.cpp (#7072 by @​davidbrai).

[0.82.0] - 2026-07-24

New Features

• Constrained tool sampling — Tools can prefer or require strict JSON Schema sampling or use OpenAI Lark/regex grammars, with model capability metadata preventing unsupported requests. See Constrained Sampling for Tools.
• OpenRouter and Kimi Code sign-in — Use /login to authorize OpenRouter or a Kimi Code subscription without manually configuring API keys. See OpenRouter.
• Session-aware, streaming bash integrations — Bash tools receive current session/model metadata, while direct RPC bash commands stream correlated output. See Bash Tool Session Environment and RPC bash events.

Added

• Added inherited Tool.constrainedSampling with strict JSON Schema (prefer/require) and OpenAI Lark/regex grammar variants across OpenAI, Anthropic, Amazon Bedrock, Google Gemini, and Mistral. See Constrained Sampling for Tools.
• Added inherited supportsGrammarTools and supportsStrictTools compatibility flags, expanded supportsStrictMode coverage, and generated model capability metadata to gate constrained sampling.
• Added inherited Kimi Code subscription OAuth login for the Kimi For Coding provider, including device authorization and automatic token refresh (#6935 by @​zaycruz).
• Added inherited OpenRouter OAuth PKCE login through /login, minting a user-controlled API key. See OpenRouter (#6927 by @​rsaryev).
• Exposed PI_SESSION_ID, PI_SESSION_FILE, PI_PROVIDER, PI_MODEL, and PI_REASONING_LEVEL to commands run by built-in and factory-created bash tools. See Bash Tool Session Environment.
• Added streaming bash_execution_update events for direct RPC bash commands, correlated with request IDs. See RPC bash events (#6971 by @​ananthakumaran).

Changed

• Changed inherited generated model catalogs to expose only provider-verified reasoning effort levels from models.dev (#6928 by @​davidbrai).

Fixed

... (truncated)

Commits

• b4f2936 Release v0.82.1
• 62a7074 docs: audit changelogs for commits since v0.82.0
• 58c0bc2 fix(coding-agent): exclude directories from resource loader (#7106)
• b1c444d feat(coding-agent): revalidate remote model catalogs with ETag
• 518855d feat(coding-agent): expose output padding to custom renderers (#7045)
• 2a2b0a3 fix(coding-agent): cache llama.cpp model catalog (#7072)
• eafe11f feat(coding-agent): add vitest eval harness (#7085)
• a3ee1d2 fix(coding-agent): expose unavailable scoped models (#7032)
• 24e5cc0 fix(ai): support Anthropic bearer token env (#6148)
• 7df73a0 Add [Unreleased] section for next cycle
• Additional commits viewable in compare view

Updates @earendil-works/pi-tui from 0.81.1 to 0.82.1

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v0.82.1

New Features

• Claude Opus 5 — Available on Anthropic and Amazon Bedrock with adaptive thinking (including xhigh), inference profiles, and prompt caching. See Providers.
• Anthropic gateway bearer auth — ANTHROPIC_AUTH_TOKEN authenticates against Anthropic-compatible gateways that require Authorization: Bearer, including compaction and branch summaries. See Environment Variables or Auth File.
• Faster, more resilient model catalogs — pi.dev catalogs revalidate with If-None-Match so unchanged providers answer with an empty 304, and llama.cpp models stay listed across restarts. See llama.cpp.

Added

• Exposed the outputPad setting to custom message renderers. See Extensions (#7045 by @​xl0).
• Added inherited ANTHROPIC_AUTH_TOKEN bearer authentication for Anthropic-compatible gateways. See Providers (#5871).
• Added inherited Claude Opus 5 support for Anthropic and Amazon Bedrock with adaptive thinking, inference profiles, prompt caching, and preserved AWS validation messages (#7081 by @​unexge, #7083 by @​davidbrai).

Changed

• Changed pi.dev model catalog refreshes to revalidate with If-None-Match, so unchanged provider catalogs answer with an empty 304 instead of a full download.
• Changed inherited Radius OAuth device authorization, token exchange, and refresh requests to use the configured gateway directly.
• Changed inherited model loading errors to append the underlying cause, so auth failures such as OAuth refresh failed for openai-codex report the provider response instead of a bare wrapper message.

Fixed

• Fixed compaction and branch summaries for providers whose authentication resolves entirely to request headers (#5871)
• Fixed unavailable scoped models being hidden from /models, allowing them to be removed without editing settings manually (#6949, #7032 by @​christianklotz).
• Fixed startup context file discovery to skip directories that match context file names such as AGENTS.md, which produced EISDIR warnings (#7106 by @​mrexodia).
• Fixed the llama.cpp extension to persist its model catalog, so llama.cpp models stay listed before the first successful refresh. See llama.cpp (#7072 by @​davidbrai).

v0.82.0

New Features

• Constrained tool sampling — Tools can prefer or require strict JSON Schema sampling or use OpenAI Lark/regex grammars, with model capability metadata preventing unsupported requests. See Constrained Sampling for Tools.
• OpenRouter and Kimi Code sign-in — Use /login to authorize OpenRouter or a Kimi Code subscription without manually configuring API keys. See OpenRouter.
• Session-aware, streaming bash integrations — Bash tools receive current session/model metadata, while direct RPC bash commands stream correlated output. See Bash Tool Session Environment and RPC bash events.

Added

• Added inherited Tool.constrainedSampling with strict JSON Schema (prefer/require) and OpenAI Lark/regex grammar variants across OpenAI, Anthropic, Amazon Bedrock, Google Gemini, and Mistral. See Constrained Sampling for Tools.
• Added inherited supportsGrammarTools and supportsStrictTools compatibility flags, expanded supportsStrictMode coverage, and generated model capability metadata to gate constrained sampling.
• Added inherited Kimi Code subscription OAuth login for the Kimi For Coding provider, including device authorization and automatic token refresh (#6935 by @​zaycruz).
• Added inherited OpenRouter OAuth PKCE login through /login, minting a user-controlled API key. See OpenRouter (#6927 by @​rsaryev).
• Exposed PI_SESSION_ID, PI_SESSION_FILE, PI_PROVIDER, PI_MODEL, and PI_REASONING_LEVEL to commands run by built-in and factory-created bash tools. See Bash Tool Session Environment.
• Added streaming bash_execution_update events for direct RPC bash commands, correlated with request IDs. See RPC bash events (#6971 by @​ananthakumaran).

Changed

• Changed inherited generated model catalogs to expose only provider-verified reasoning effort levels from models.dev (#6928 by @​davidbrai).

Fixed

• Fixed inherited DNS lookup failures such as getaddrinfo, ENOTFOUND, and EAI_AGAIN to trigger automatic assistant retries (#6946 by @​christianklotz).
• Fixed inherited OpenRouter Anthropic cache breakpoints to advance through tool results and enabled cache control for ~anthropic/*-latest aliases (#6941 by @​mteam88).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-tui's changelog.

[0.82.1] - 2026-07-25

[0.82.0] - 2026-07-24

Fixed

• Fixed debug and crash logs to use the configured TUI log directory, including PI_CODING_AGENT_DIR, instead of always writing under ~/.pi/agent (#6958 by @​davidbrai).
• Fixed narrow terminals crashing when the editor's bottom scroll indicator exceeded the terminal width (#7015 by @​christianklotz).

Commits

• b4f2936 Release v0.82.1
• 7df73a0 Add [Unreleased] section for next cycle
• 083e616 Release v0.82.0
• ee0dca4 docs: audit unreleased changelog entries
• 37bedb7 fix(tui): truncate narrow editor scroll indicators (#7015)
• fe42ba5 write tui debug/crash logs into the configured pi agent dir (#6958)
• dd6bea4 Add [Unreleased] section for next cycle
• See full diff in compare view

Updates @opencode-ai/plugin from 1.18.4 to 1.18.9

Updates @types/node from 22.20.1 to 26.1.2

Commits

• See full diff in compare view

Updates ink from 6.8.0 to 7.1.1

Release notes

Sourced from ink's releases.

v7.1.1

• Fix: Preserve last <Static> line erased after a full-clear frame (#974) e51dfdd
• Make measureElement() also return position coordinates (#968) c073b27

---

vadimdemedes/ink@v7.1.0...v7.1.1

v7.1.0

• Add suspendTerminal() to hand the terminal to a child process (#972) 9e8ed1f

---

vadimdemedes/ink@v7.0.6...v7.1.0

v7.0.6

• Fix stale frames on Windows when output exactly fills the terminal (#971) 2c08d55

---

vadimdemedes/ink@v7.0.5...v7.0.6

v7.0.5

• Fix: Handle incomplete stack frames in error overview (#965) b2350c1

---

vadimdemedes/ink@v7.0.4...v7.0.5

v7.0.4

• Fix: Share resize listener via emitLayoutListeners instead of per-hook listeners (#952) 89d43d8
• Fix: Remove useEffectEvent functions from useEffect dependency arrays (#960) 9d534f7

---

vadimdemedes/ink@v7.0.3...v7.0.4

v7.0.3

• Fix: Drop stale <Static> output from fullStaticOutput on identity change (#950) 669c438
• Fix: <Static> remount via key change drops new items (#948) be9f44c
• Fix useBoxMetrics not accepting ref objects with an initial null value (#945) 7c2267c

---

vadimdemedes/ink@v7.0.2...v7.0.3

v7.0.2

• Fix: Defer raw mode disable to prevent process hang on component swap dd052ea

---

... (truncated)

Commits

• 70af033 7.1.1
• e51dfdd Fix: Preserve last \<Static> line erased after a full-clear frame (#974)
• 665eb44 Fix docs
• c073b27 Make measureElement() also return position coordinates (#968)
• 25766ae 7.1.0
• 9e8ed1f Add suspendTerminal() to hand the terminal to a child process (#972)
• c41a7a0 7.0.6
• 2c08d55 Fix stale frames on Windows when output exactly fills the terminal (#971)
• cb222fe 7.0.5
• dca5c06 Fix: Update to xo 2 (#962)
• Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml