chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@earendil-works/pi-coding-agent (source)	0.84.1 → 0.84.2			devDependencies	patch
@steipete/oracle (source)	0.17.2 → 0.18.0			devDependencies	minor
zsh-users/zsh-completions	e099c4a → 2798b16				digest

---

Release Notes

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.84.2

Compare Source

New Features

• Fullscreen transcript search — Search and navigate matches in fullscreen mode. See TUI Fullscreen Viewport.
• Configurable default tools — Choose startup built-in tools globally or per project. See Tools.
• Configurable fullscreen exit output — Print the transcript or only a resume hint on exit. See Interactive Mode.

Added

• Added fullscreen transcript search with Ctrl+Shift+F, incremental match highlighting, configurable search match theme colors, and next/previous navigation with Enter/Ctrl+G and Shift+Enter/Ctrl+Shift+G.
• Added experimental strict JSON-schema constrained sampling for the default read, bash, edit, and write tools under PI_EXPERIMENTAL=1.
• Added a fullscreen exit output setting to choose between printing the final transcript and only a session resume hint.
• Added the defaultTools setting for configuring the initial built-in tool selection globally or per project.
• Added --use-theme <name[/name]> to choose an initial per-run interactive theme without changing saved settings (#​7722 by @​rwachtler).
• Added expandPromptTemplates to extension pi.sendUserMessage() options for explicitly dispatching commands and expanding skills and prompt templates. See pi.sendUserMessage() (#​7857 by @​mrexodia).
• Added inherited createGatewayBindingFetch() for routing Cloudflare AI Gateway requests through a Workers AI binding without an API token (#​7901 by @​Maximo-Guk).
• Added inherited AssistantMessage.endTurn to preserve OpenAI Codex's terminal end_turn signal for diagnostics (#​7766).
• Added inherited unbound single-line transcript scrolling actions for fullscreen mode. See TUI Fullscreen Viewport (#​7903 by @​midastruth).

Changed

• Changed inherited Kimi Coding requests to use pi's runtime User-Agent header.
• Replaced the inherited Mistral SDK transport with a native Chat Completions HTTP stream, eliminating its generated client and schema runtime overhead.
• Documented the generic AI_AGENT=pi process marker and how it differs from PI_CODING_AGENT=true (#​7747).
• Changed inherited OpenAI Responses deferred tool loading to prefer message-anchored additional_tools where supported while retaining tool-search and top-level fallbacks (#​7709).
• Reduced inherited fullscreen rendering allocation churn by painting full-width layout rows directly instead of recompositing them on every frame.

Fixed

• Fixed managed-tool downloads delaying TUI startup and hiding diagnostics in fullscreen mode by mounting the TUI first and showing download progress and warnings inside it.
• Fixed opening a model selector immediately after startup cancelling and restarting the in-progress model catalog refresh.
• Fixed inherited GitHub Copilot login triggering API rate limits while enabling model policies by limiting concurrent policy updates (#​6187).
• Fixed fullscreen transcript search snapping back to the current match during manual scrolling and fragmented mouse input leaking into the search query.
• Fixed inherited required LaTeX arguments starting on a new line being parsed as empty (#​7760).
• Updated the transitive nanoid development dependency to address a denial-of-service vulnerability.
• Fixed fallback rendering for extension tool results to collapse long output and honor tool expansion (#​7979).
• Fixed JSON and RPC message_update events dropping cumulative usage during streaming. See JSON Event Mode and RPC message_update (#​7982 by @​christianklotz).
• Fixed pi.sendMessage(..., { triggerTurn: false }) steering an active run instead of only recording the custom message (#​8022 by @​cristinaponcela).
• Fixed the defaultTools setting dropping extension and SDK custom tools when selecting built-in defaults.
• Fixed the subagent example rejecting YAML array syntax for the tools frontmatter field (#​7598 by @​alexsavio).
• Fixed the subagent example dropping parent session model, thinking, and tool configuration (#​7897 by @​virtuald).
• Fixed custom system prompts concatenating the current working directory with later appended prompt content (#​7887 by @​distributedlock).
• Fixed inherited OpenAI Responses function and custom tool calls losing namespaces during streaming, proxying, and replay (#​7709).
• Fixed inherited upstream request buffer failures not triggering automatic assistant retries.
• Fixed inherited built-in and custom DeepSeek API models sending output limits through an unsupported field.
• Fixed inherited Amazon Bedrock replay rejecting tool arguments that contain empty object keys while preserving all valid nested values (#​7882 by @​muyiyr).
• Fixed inherited DeepSeek compatibility detection for base URLs whose hostname contains uppercase letters (#​7933 by @​yearth).
• Fixed inherited Google Generative AI and Vertex AI responses with tool calls incorrectly treating output-limit or provider-error stops as normal tool use (#​8059).
• Fixed inherited fullscreen mouse drag selection and OSC 8 link activation in terminals that report generic SGR mouse release button codes (#​7963).
• Fixed inherited focused fullscreen overlays not receiving mouse wheel or viewport scroll keys such as PageUp and PageDown (#​7894).
• Fixed inherited LaTeX control spaces split across line endings causing complete expressions to fall back to raw source.
• Fixed split Alt+Enter input over SSH being misread as Escape, added PI_TUI_ESC_TIMEOUT for high-latency terminals, and limited that timeout to lone Escape input (#​7899 by @​powerfooI).
• Fixed inherited idle fullscreen sessions repainting and clearing text selection when the terminal loses focus (#​7892 by @​terrorobe).
• Fixed fullscreen selection copy to use the host clipboard and report failure instead of claiming success when OSC 52 is unsupported (#​8110 by @​Panoplos).

steipete/oracle (@​steipete/oracle)

v0.18.0

Compare Source

Changed

• Browser: stop copying cookies from a live Chrome profile by default because ChatGPT token rotation can invalidate the user's interactive session. Use the persistent --browser-manual-login profile (recommended), inline cookies, or explicitly restore the old behavior with --browser-cookie-sync / browser.cookieSync=true. Fixes #​367.
• Browser: route the generic current-Pro aliases (gpt-5-pro, gpt-5.1-pro, gpt-5.2-pro, and gpt-5.4-pro) to GPT-5.6 Sol with Pro effort. Use the explicit gpt-5.5-pro model to keep the historical GPT-5.5 target; an explicit thinking-time setting still overrides the alias default. Fixes #​373. Thanks @​pdurlej!

Fixed

• Browser: detect a disabled ChatGPT effort tier (e.g. an exhausted Pro allotment) before clicking it, and report the account's own reset notice instead of a misleading "selection unverified" failure. Thanks @​enieuwy!

v0.17.3

Compare Source

Highlight: browser-mode answers and recovery are reliable again — no more
discarded responses, and authenticated sessions survive a reattach.

Fixed

• Browser: treat the skip-ahead control labels as placeholder signals only when the entire turn text is short chrome text, so substantial assistant answers that mention those labels are no longer discarded.
• Browser: align reattach recovery cookie sync with the launch path for manual-login profiles with explicit cookie sync, so recovery can reopen an authenticated conversation with supplied cookies instead of skipping sync. Thanks @​enieuwy!
• Browser: recognize the Japanese 詳細設定 → 推論レベル controls in ChatGPT's unified Intelligence picker, allowing explicit Pro effort selection without weakening the fail-closed guard for unknown languages. Thanks @​kiyo-e!
• Browser: honor explicit --browser-headless for locally launched Chrome/Chromium binaries while preserving the headful default. Explicit --browser-headless still conflicts with --browser-attach-running; a saved browser.headless preference is ignored in attach-running mode. Thanks @​enieuwy!

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.