fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@earendil-works/pi-coding-agent (source)	0.87.1 → 0.99.2			dependencies	minor
@google/gemini-cli	0.61.0 → 0.62.0			dependencies	minor
@​steipete/summarize	0.24.0 → 0.25.0			dependencies	minor
grafana/grafana	13.2.2 → 13.2.3				patch
grafana/tempo	3.0.3 → 3.1.0				minor
mcporter	0.14.1 → 0.14.2			dependencies	patch

---

Release Notes

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.99.2

Compare Source

New Features

• MCP servers stay out of the way: servers with the default codemode exposure are no longer listed in the codemode description and no longer block the first prompt. They appear in a short system prompt section, and scripts find their tools with searchTools() and describeNamespace(). See Control tool exposure.
• More MCP authentication options: oauth.clientName for servers that only accept known OAuth clients, and "auth": { "provider": "<provider>" } to authenticate HTTP servers with a provider's /login token. See Authenticate with OAuth.
• Anthropic workload identity federation from the Anthropic SDK environment variables. See Use an API key from the environment.
• /reload enables tools newly added to the defaultTools setting. See Tools.

Added

• Added a description field for MCP servers (pi mcp add --description), shown with the server in the system prompt and used to rank its tools in tool search, and a describeNamespace(name) codemode helper that returns a namespace's instructions and tool names. describeNamespace() and searchTools() accept a namespace as mcp__dev-radius, mcp__dev_radius, dev-radius, or dev_radius.
• Added an oauth.clientName setting for MCP servers (pi mcp add --oauth-client-name) to change the client name sent during OAuth client registration, for servers that only accept known clients (#​10226).
• Added "auth": { "provider": "<provider>" } for HTTP MCP servers to send a provider's current /login token as the bearer token instead of using MCP OAuth. The token is read on every request, so provider refreshes apply. Only allowed in the global mcp.json and from extensions, and requires https except on loopback hosts.
• Added Anthropic workload identity federation from the ANTHROPIC_FEDERATION_RULE_ID, ANTHROPIC_ORGANIZATION_ID, and ANTHROPIC_IDENTITY_TOKEN_FILE environment variables (see Providers) (#​10177, #​10242 by @​philfreo).
• /reload now enables tools newly added to the defaultTools setting. Tools removed from it stay enabled, tools turned off during the session stay off unless newly added, and --tools, --no-tools, and --no-builtin-tools still override the setting (#​10245).

Changed

• MCP servers with the default codemode exposure no longer appear in the codemode description; scripts find them with searchTools(). codemode-deferred is now an alias for codemode. Use direct exposure for tools the model should see without searching (#​10212).
• The codemode description no longer includes deferred tools, tool counts, or MCP server instructions, so it no longer changes when MCP servers connect or change their tools. The tool_search description no longer lists the servers whose tools it can load, for the same reason. Servers are listed instead in an mcp_servers system prompt section with a one-line summary, updated at the start of each prompt; a changed section is appended to the conversation. Scripts read server instructions with describeNamespace() (#​10212).
• The first prompt no longer waits for MCP servers without direct tools. They connect in the background and are waited for when a codemode script names them, a script searches tools, or tool_search runs (#​10212).

Fixed

• Fixed new sessions intermittently ignoring the saved default model, or warning that no models are available, when it belongs to an extension-registered native provider with a stored credential (#​9962, #​10190 by @​davidbrai).
• Fixed the /mcp sign-in URL not being clickable when it wraps across lines, by emitting it as a terminal hyperlink with a Cmd/Ctrl+click to open line like /login (#​10186).
• Fixed codemode image() accepting malformed base64 data or unsupported image types, which persisted an invalid image block that made every later provider request fail with HTTP 400 (#​10215).
• Fixed codemode failing to start its script worker from the standalone Windows executable (#​10204).
• Fixed prompt submission slowing down with session length, because resolving the session's model selection looked up the model catalog once per assistant message (#​10198).
• Fixed model lookups slowing down for providers with a refreshed pi.dev catalog, because merging remote catalog models took quadratic time.
• Fixed the built-in-tool-renderer.ts and minimal-mode.ts extension examples removing the built-in tools' summaries and guidelines from the system prompt (#​10072, #​10193 by @​christianklotz).
• Fixed context overflow detection for Z.AI CN endpoint Prompt exceeds max length errors (#​10208).
• Fixed Anthropic requests failing when a tool schema uses keywords Anthropic strict tool use rejects, such as minimum/maximum; such tools are now sent non-strict (#​9953).
• Fixed provider retries firing immediately when a Retry-After header contains an unparseable date; they now use exponential backoff (#​9571).
• Fixed extension commands registered without a string name or handler crashing pi when typing /; the extension now fails to load with an error instead (#​10054).
• Fixed collapsed codemode and MCP tool results filling the screen when the output is one long line, such as minified JSON. Like bash output, the preview is now limited to wrapped lines instead of logical lines.
• Fixed codemode.mode: "only" listing read, bash, edit, and write in the system prompt's tool list although requests only declare codemode (#​10192).
• Fixed codemode scripts calling the wrong MCP tool when two tool names differ only in - and _, such as read-file and read_file. Like in Codex, MCP tool and namespace names now replace - with _ (mcp__my-server__x is now mcp__my_server__x), colliding tools of a server all get a hash suffix, and server names that differ only in - and _ are rejected (#​10239).

v0.99.1

Compare Source

New Features

• GPT-6.1 Sol — Available on OpenAI, Azure OpenAI, and OpenAI Codex, and now the default OpenAI Codex model. See Select a model.

Added

• Added GPT-6.1 Sol (gpt-6.1-sol) to the OpenAI, Azure OpenAI Responses, and OpenAI Codex providers.

Changed

• Changed the default OpenAI Codex model to GPT-6.1 Sol (gpt-6.1-sol).

Fixed

• Fixed /login with OpenAI failing in the bundled release with a missing openai-chatgpt.js module error.

v0.99.0

Compare Source

New Features

• Codemode and MCP — Connect MCP servers and let models run JavaScript that calls tools in parallel. See MCP Servers and Enable codemode.
• System theme — Pi's colors now come from your terminal's own palette by default. See Use your terminal's colors.
• Sign in with ChatGPT — Use a ChatGPT subscription with the OpenAI provider through /login openai. See Authenticate interactively.
• Virtual models — Extensions can route each request to a different physical model. See Virtual Models.
• Classifier models — Run Jev classifiers from codemode scripts, or use any llama.cpp model as a classifier. See How codemode works and Classification.

Added

• Added codemode, tool search, and MCP support as built-in extensions. The codemode tool runs model-written JavaScript in a QuickJS sandbox that calls pi's tools; enable it with defaultTools or --tools and configure it with codemode.mode and codemode.inlineBudget. tool_search finds tools that are not declared to the model and declares them. MCP servers over stdio or streamable HTTP, with OAuth, come from mcp.json (global, or per project once trusted) or pi.registerMcpServer() and are managed with /mcp and pi mcp add|remove|list|login|logout. See MCP Servers and Enable codemode (#​10040).
• Added extension tool APIs for orchestrating tools: exposure (direct, model-only, codemode, deferred, or hidden), namespace, annotations, outputSchema with structuredContent, isError results, prepareLoadout(), and ctx.executeTool() for nested tool calls, which emit events with parentToolCallId and are recorded as bounded nestedCalls on the calling tool's result. See Tool exposure.
• Added a warning when an extension that registers the same tool, command, or flag replaces a built-in extension (#​10174 by @​cristinaponcela).
• Added experimental virtual models: extensions register them with pi.registerVirtualModel() and pick a physical model and thinking level for each request. The footer shows the routed model, /session lists cost per physical model, and examples/extensions/jev-router.ts routes with the Jev classifier. See Virtual Models.
• Added Sign in with ChatGPT to the OpenAI provider in /login, which uses a ChatGPT subscription with the OpenAI API. Pi stores a stable deviceId in the global settings for this login and omits it from bug reports.
• Added the system theme, now the default, which derives pi's colors from the terminal's reported foreground, background, and ANSI palette and rebuilds them when the terminal switches between light and dark. See Use your terminal's colors.
• Added #rgb, oklch(), and okhsl() colors and an optional appearance field to theme files, and theme.style(), theme.colors, and theme.appearance for extensions. See Themes and TUI.
• Added a classifier model for every llama.cpp chat model, answered from next-token label probabilities. See Classification.
• Added inherited Jev classifier models on OpenRouter, Cloudflare Workers AI, Vercel AI Gateway, and OpenCode Zen.
• Added the fullscreenWheelScrollLines setting and /settings entry for fullscreen mouse-wheel scrolling. The default "auto" accelerates fast wheel spins outside local macOS terminals (#​9758).
• Added per-input disposition to successful RPC prompt, steer, and follow_up responses, AgentSession.steer()/followUp(), and RpcClient.prompt()/steer()/followUp(); RpcClient.prompt() also accepts streamingBehavior (#​9098, #​9803).
• Added image generation to ModelRuntime: generateImages() with runtime-resolved auth (stored credentials, OAuth, runtime API keys, models.json headers), plus getModelsOfType(), getModelOfType(), getAvailableOfType(), getAllModels(), and getAllAvailable(). OpenRouter image models are listed under the openrouter provider and share its credential; an upstream ID can have separate chat and image entries. models.json providers and extension registrations without a model list keep built-in image generation. Extension model lists can include discriminated chat, image, and classifier entries with operation implementations; when supplied, they replace the provider catalog across every operation. Chat-facing reads (getModels(), getAvailableSnapshot(), the model picker) are unchanged.
• Added classifier support to ModelRuntime, including classify(), classifier model accessors, runtime-resolved authentication, and the built-in TypeSafe jev-latest model.
• Added types=chat,image,classifier to pi.dev model catalog requests so remote refreshes overlay every supported model type; entries of unknown model types are ignored.
• Added the provider_stream_event extension event for observing parsed provider events before normalization, with an opt-in /debug-provider example viewer (#​9784, #​9901 by @​davidbrai).
• Added a show/hide toggle (H) in HTML exports for custom messages marked display: false. Messages remain hidden by default and can also be revealed from the sidebar (#​8896, #​10020 by @​rwachtler).
• Added inherited Claude Sonnet 5.5 support for Anthropic with adaptive thinking and a 1M context window.
• Added a Built-in section in pi config to disable the built-in mcp, llama.cpp, codemode, and tool-search extensions globally or per project, stored as -builtin:<name> in the extensions setting. SDK inline extensions opt in with builtin: true.
• Added +name and -name entries to the defaultTools setting to add or remove tools without repeating the defaults, for example "defaultTools": ["+codemode"]. Project entries of this form apply on top of the user setting. Documented how to enable codemode without MCP and how to use classifier models such as Jev from codemode scripts.
• Added the token usage and cost of codemode models.classify() calls to the codemode tool result, so they count toward the session cost; the codemode result shows each call's cost.

Changed

• Switched the build from the TypeScript native preview to TypeScript 7.0 with an ES2024 target, and replaced tsx with Node's built-in type stripping for running from source (#​9965).
• Removed the [Themes] section from the startup banner. Custom themes remain available in /settings, and theme conflicts are still reported.
• Changed the startup header to show the pi logo with the version instead of the app name.
• Changed the built-in dark and light themes to the revised pi colors, written in OKHSL.
• Changed light/dark terminal detection to use the reported background color first, then the terminal's light/dark report, then COLORFGBG. The first-time setup no longer shows the detected appearance.
• Renamed the inherited OpenAI Codex provider to "OpenAI Codex (legacy)"; Sign in with ChatGPT on the OpenAI provider supersedes it.
• Changed inherited terminal detection to treat TERM=*-direct as truecolor.
• Built-in extensions and tools are named builtin:<name> (for example builtin:mcp and builtin:read) in errors, diagnostics, RPC source info, and bug reports, instead of <inline:name> and <builtin:name>. Their slash commands no longer carry a [t] autocomplete tag.
• --no-extensions also disables the built-in extensions, including the llama.cpp provider. Load one explicitly with -e builtin:<name>, for example pi -ne -e builtin:mcp.
• Tool calls without a custom call renderer, including direct MCP tool calls, now show their arguments: as key=value pairs on the title line when collapsed and one key: value line per argument when expanded. MCP calls are titled server/tool and their results collapse to 5 lines.
• bash and powershell structured results, which codemode scripts receive, now hold up to 1 MiB of output instead of the model-facing 2000 lines or 50KB, and add truncated and full_output_path. Longer output keeps its first and last 512 KiB. Empty output is "" instead of (no output).

Fixed

• Fixed X11 clipboard text being misidentified as an image when the clipboard owner accepts unadvertised image targets (#​9786).
• Prevented managed git packages from automatically installing Pi peer dependencies and added warnings for extension packages that list host-provided modules in dependencies (#​9863).
• Fixed pinned git extensions loaded with -e continuing to use the first downloaded commit after the ref changes (#​9982).
• Fixed RpcClient skipping the next event listener when a listener unsubscribes while handling an event, which could make waitForIdle() time out after collectEvents() (#​9990).
• Fixed full-file read calls rendering as :1 when models send null for omitted offset and limit (#​9996).
• Fixed new sessions being lost when pi exits before the first assistant response. The session file is now created when the first user message is sent (#​10000).
• Fixed unloaded llama.cpp autoload presets overwriting a cached runtime context window with the GGUF training context (#​10077, #​10158 by @​cristinaponcela).
• Fixed custom themes ignoring terminal.trueColor and other terminal capability overrides and rendering with 256 colors (#​9973, #​10039 by @​christianklotz).
• Fixed pasting files copied in Finder inserting the file icon image instead of the file paths; paths are quoted in bash mode (#​9999, #​10136 by @​christianklotz).
• Fixed the startup header, loaded resources, and chat notices keeping their old colors after a theme change.
• Fixed the Fireworks default model pointing at the removed Kimi K2.6 model; it now defaults to Kimi K3.
• Fixed the OpenCode Go default model pointing at the removed Kimi K2.6 model; it now defaults to Kimi K3.
• Fixed the Together default model pointing at the removed Kimi K2.6 model; it now defaults to Kimi K3.
• Reduced CPU use while streaming in long sessions and when previewing themes: the footer caches session usage totals, collapsed bash results cache their preview, and sanitizeBinaryOutput() no longer splits output into per-character arrays.
• Fixed the usage of tools called through ctx.executeTool(), for example from codemode scripts, being dropped from the session cost; it is now added to the calling tool's result usage.
• Fixed inherited /skill autocomplete appearing empty when loaded skill names did not contain the letters in skill (#​9944).
• Fixed inherited path and @ autocomplete not working after opening wrappers such as (, [, {, <, or a backtick.
• Fixed inherited image stretching in terminals that use the Kitty graphics protocol (#​8938, #​9957 by @​rwachtler).
• Fixed inherited shell cursor staying hidden after exit when an extension closed an overlay during shutdown (#​10026).
• Fixed inherited keyboard input being lost after a mouse click in a /settings submenu closed it.
• Fixed inherited 1-hour Anthropic cache writes through Vercel AI Gateway being priced at the 5-minute rate (#​9210).
• Fixed inherited model-level samplingParams being dropped by direct stream()/complete() calls on OpenAI-compatible APIs (#​9506).
• Fixed inherited Mistral GLM requests failing with "Expected at most one leading ThinkChunk" after empty content deltas (#​9674).
• Fixed inherited OpenAI Fast mode requests being priced at the standard rate (#​10034).
• Fixed inherited Mistral reasoning models ignoring the requested thinking level (#​9678).
• Fixed inherited OpenCode Zen and OpenCode Go qwen3.8-flash thinking being replayed as plain text on later turns (#​10047).
• Fixed inherited OpenAI Responses streams from servers that omit output_index, such as llama.cpp, running mixed-up tool calls; such streams now end with an error (#​9974).
• Fixed inherited Anthropic and OpenAI Codex browser sign-in waiting indefinitely after the provider redirected with an authorization error, and Anthropic sign-in failing when its callback port is in use.
• Fixed inherited GitHub Copilot Claude Opus 5.5 offering unsupported thinking levels when upstream model metadata is incomplete.

google-gemini/gemini-cli (@​google/gemini-cli)

v0.62.0

Compare Source

What's Changed

• fix(a2a-server): add early return on unsupported store in tasks metadata endpoint by @​jesussamuel-byte in #​29334
• Changelog for v0.61.0-preview.0 by @​gemini-cli-robot in #​29344
• Changelog for v0.60.0 by @​gemini-cli-robot in #​29345
• fix(core,acp): format MCP tool call titles as structured signatures and segregate explanations by @​jvargassanchez-dot in #​29341
• chore(release): bump version to 0.62.0-nightly.20260915.gae28844fb by @​gemini-cli-robot in #​29346
• fix(core): retain oauth refresh token on refresh and make credential deletion idempotent by @​villahernandez-coder in #​29339
• fix(ui): guard against negative layout dimensions in border rendering by @​diegogodinezr in #​29347
• test(integration): deflake run_shell_command and file-system-interactive tests by @​DavidAPierce in #​29185
• fix(core): improve PTY file descriptor cleanup and execution lifecycle management by @​jesussamuel-byte in #​29340
• chore/release: bump version to 0.62.0-nightly.20260918.g9450ade79 by @​gemini-cli-robot in #​29383
• fix(core): synchronize ConPTY process exit lifecycle and harden PTY output finalization by @​jvargassanchez-dot in #​29379
• fix(cli): suppress uncaught AbortError logs during request cancellation by @​urielefrenvirtusa in #​29343
• fix(core,cli): improve terminal buffer memory management and format Windows diagnostic paths by @​jesussamuel-byte in #​29380
• fix(vscode-ide-companion): preserve terminal focus when closing diff tabs by @​amelidev in #​29378
• fix(core): update auth error documentation link to valid anchor and add fallback (#​26140) by @​villahernandez-coder in #​29377
• fix(core): normalize proxy-agent esbuild interop for environment proxy resolution by @​diegogodinezr in #​29401
• fix(cli): emit tool_call update prior to request_permission in ACP mode by @​urielefrenvirtusa in #​29439
• Feat/gemini 3.8 flash 3.5 flash lite by @​DavidAPierce in #​29443
• Check for vsc integration test presence when attempting to run. by @​DavidAPierce in #​29462

Full Changelog: google-gemini/gemini-cli@v0.61.0...v0.62.0

grafana/grafana (grafana/grafana)

v13.2.3

Security

• Security: Fix CVE-2026-13719
• Security: Fix CVE-2026-13720
• Security: Fix CVE-2026-81841

openclaw/mcporter (mcporter)

v0.14.2

Compare Source

Highlights: npm installs retain OAuth refresh protection, Windows daemon startup tolerates transient process-query failures, and long help flags remain readable.

• Bundle the patched MCP client in npm releases so installed packages preserve request-correlated OAuth refresh locking; verify the installed tarball in CI and release gates.

• Update the MCP client/server to 2.2.0, legacy SDK fixtures to 1.31.0, Hono to 4.13.10, pnpm to 10.34.6, and lint/format tooling; retain the OAuth correlation patch, Node 24 support, and the 48-hour dependency release-age policy.

• Retry transient Windows process-query failures once before blocking daemon startup or retirement, while retaining strict ownership checks and refusing malformed observations.

• Refresh MCP clients and fixtures, bundling and test tooling, and Hono; preserve OAuth refresh-token correlation when OAuth overrides a configured Authorization header, Node 24 support, and the 48-hour dependency release-age policy.

• Size the top-level help's global-flag column to its longest flag, so --log-level <debug|info|warn|error> no longer runs into its description. Thanks @​KrasimirKralev.

Verification: npm, registry tarball, native assets, and browser Gatekeeper proof. npm integrity: sha512-3ajjKzPLe/39hN582XqMuOw3S9vHQfLpSBq72zVakT03xso3GDXHcht/eVLu/l2MDqulIOtLevnTKreUxymHJQ==.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.