build(deps-dev): bump the npm-dependencies group with 5 updates

[dependabot]

Bumps the npm-dependencies group with 5 updates:

Package	From	To
@colbymchenry/codegraph	1.2.0	1.4.1
@earendil-works/pi-coding-agent	0.80.3	0.80.6
@types/node	26.1.0	26.1.1
typescript	6.0.3	7.0.2
vitest	4.1.9	4.1.10

Updates @colbymchenry/codegraph from 1.2.0 to 1.4.1

Updates @earendil-works/pi-coding-agent from 0.80.3 to 0.80.6

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.80.6

New Features

• max thinking level - New opt-in thinking level above xhigh, natively supported on GPT-5.6 and adaptive Claude models, available across CLI (--thinking max), SDK, RPC, and model selection. Custom themes can define thinkingMax. See CLI Reference.
• Input-based pricing tiers - Request-wide input-token pricing tiers for accurate long-context cost accounting (e.g. GPT-5.4/5.5/5.6 long-context rates), also configurable for custom models in models.json and modelOverrides. See Model Configuration.

Added

• Added the opt-in max thinking level across CLI, SDK, RPC, model selection, and themes. Custom themes can define thinkingMax; existing themes fall back to thinkingXhigh.
• Added request-wide input-token pricing tiers to custom model costs in models.json, modelOverrides, and extension-registered providers.
• Added ~ (home directory) expansion for the shellPath setting (#6470 by @​aaronkyriesenbach).

Fixed

• Fixed inherited post-compaction output-token budgeting to ignore stale assistant usage from before the compaction boundary (#6464).
• Fixed inherited GPT-5.4 and GPT-5.5 long-context cost accounting while retaining the intentional 272K default context limit for models that require an explicit override.
• Fixed inherited GPT-5.6 metadata to keep direct OpenAI requests in the 272K short-context tier while exposing the Codex backend's 372K context window with long-context pricing, and removed the nonexistent bare gpt-5.6 alias.
• Fixed inherited Anthropic message conversion to preserve thinking blocks with empty thinking text but a valid signature instead of dropping them, avoiding thinking-block errors on newer Claude models (#6457 by @​davidbrai).

v0.80.5

Release 0.80.5

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.80.6] - 2026-07-09

New Features

• max thinking level - New opt-in thinking level above xhigh, natively supported on GPT-5.6 and adaptive Claude models, available across CLI (--thinking max), SDK, RPC, and model selection. Custom themes can define thinkingMax. See CLI Reference.
• Input-based pricing tiers - Request-wide input-token pricing tiers for accurate long-context cost accounting (e.g. GPT-5.4/5.5/5.6 long-context rates), also configurable for custom models in models.json and modelOverrides. See Model Configuration.

Added

• Added the opt-in max thinking level across CLI, SDK, RPC, model selection, and themes. Custom themes can define thinkingMax; existing themes fall back to thinkingXhigh.
• Added request-wide input-token pricing tiers to custom model costs in models.json, modelOverrides, and extension-registered providers.
• Added ~ (home directory) expansion for the shellPath setting (#6470 by @​aaronkyriesenbach).

Fixed

• Fixed inherited post-compaction output-token budgeting to ignore stale assistant usage from before the compaction boundary (#6464).
• Fixed inherited GPT-5.4 and GPT-5.5 long-context cost accounting while retaining the intentional 272K default context limit for models that require an explicit override.
• Fixed inherited GPT-5.6 metadata to keep direct OpenAI requests in the 272K short-context tier while exposing the Codex backend's 372K context window with long-context pricing, and removed the nonexistent bare gpt-5.6 alias.
• Fixed inherited Anthropic message conversion to preserve thinking blocks with empty thinking text but a valid signature instead of dropping them, avoiding thinking-block errors on newer Claude models (#6457 by @​davidbrai).

[0.80.5] - 2026-07-09

[0.80.4] - 2026-07-09

New Features

• Prompt cache miss visibility - Significant cache misses can be shown in transcripts via showCacheMissNotices. See Model & Thinking.
• Project-local resource configuration - pi config -l and Tab switching manage global vs project-local package resources. See Enable and Disable Resources.
• Extension lifecycle and provider hooks - Extensions get agent_settled, before_provider_headers, entry renderers, and InlineExtension. See agent_start / agent_end / agent_settled, before_provider_headers, and InlineExtension.
• New inherited model and transport support - GPT-5.6 metadata, Copilot Claude Sonnet 5, and zstd Codex SSE transport are available through inherited provider support. See Providers and Model Options.

Added

• Added inherited OpenAI GPT-5.6 model metadata for gpt-5.6, gpt-5.6-sol, gpt-5.6-terra, and gpt-5.6-luna, plus verified openai-codex support for gpt-5.6-sol, gpt-5.6-terra, and gpt-5.6-luna.
• Added inherited Claude Sonnet 5 to the GitHub Copilot model catalog (#6200).
• Added inherited zstd request-body compression for the OpenAI Codex Responses SSE transport.
• Added /login <provider> support with provider autocomplete.
• Added public SDK exports for CLI-equivalent model and scoped-model resolution (#6201).
• Added extension and RPC agent_settled events plus session-level idle waiting for fully settled agent runs (#6363).
• Added before_provider_headers extension hook support for injecting provider request headers (#6350 by @​pmateusz).
• Added an InlineExtension type for named inline extension factories (#6267 by @​any-victor).
• Added extension entry renderers for persisted display-only session entries that are rendered in interactive mode without being sent to the model context.
• Added project-local resource override management to pi config, including project mode startup with pi config -l and Tab switching between global and project scopes (#6309).
• Added inherited InMemorySessionStorage and JsonlSessionStorage exports from the agent harness (#6435).
• Added inherited custom metadata support in JSONL session headers (#6417 by @​ArcadiaLin).
• Added a showCacheMissNotices setting and /settings toggle for significant prompt-cache miss transcript notices.

Fixed

• Fixed inherited retry classification for gRPC ResourceExhausted provider errors such as NVIDIA NIM transient exhaustion responses (#6449 by @​davidbrai).

... (truncated)

Commits

• 2b3fda9 Release v0.80.6
• 1775fe4 docs: audit unreleased changelogs
• 1a2542b feat(coding-agent): expand ~ in shellPath setting (#6470)
• a9ecf30 feat(ai): add input-based pricing tiers
• fbdd463 feat(ai): add max thinking level
• e351319 Add [Unreleased] section for next cycle
• cc62baa Release v0.80.5
• a98778e test(coding-agent): fix interactive mode fixture
• ef793a9 Add [Unreleased] section for next cycle
• 912d095 Release v0.80.4
• Additional commits viewable in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

• See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)
• vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by @​SveLil and @​hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

Commits

• db616d2 chore: release v4.1.10 (#10718)
• bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions