Skip to content

chore(deps): bump the webui-dependencies group across 1 directory with 17 updates - #583

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/WebUI/webui-dependencies-c17818d4a8
Open

chore(deps): bump the webui-dependencies group across 1 directory with 17 updates#583
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/WebUI/webui-dependencies-c17818d4a8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the webui-dependencies group with 16 updates in the /WebUI directory:

Package From To
@ai-sdk/mcp 2.0.39 2.0.41
@ai-sdk/openai 4.0.50 4.0.53
@ai-sdk/openai-compatible 3.0.39 3.0.41
@ai-sdk/vue 4.0.83 4.0.87
@earendil-works/pi-coding-agent 0.84.3 0.84.4
@langchain/classic 1.0.45 1.0.46
@lmnr-ai/pi-extension 0.1.0 0.1.1
ai 7.0.83 7.0.87
mammoth 1.12.1 1.12.2
pi-hermes-memory 0.9.6 0.9.7
three 0.183.2 0.185.1
typebox 1.3.19 1.3.23
zod 4.4.3 4.5.4
electron 42.10.1 44.1.0
typescript 6.0.3 7.0.2
vite-plugin-electron 1.1.1 1.1.2

Updates @ai-sdk/mcp from 2.0.39 to 2.0.41

Changelog

Sourced from @​ai-sdk/mcp's changelog.

2.0.41

Patch Changes

  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

2.0.40

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33
Commits

Updates @ai-sdk/openai from 4.0.50 to 4.0.53

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.53

Patch Changes

  • 7439d7a: Fix workflow deserialization for OpenAI Responses models.

4.0.52

Patch Changes

  • 1c68540: Preserve explicit prompt cache breakpoints on scalar Responses tool results.
  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

4.0.51

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33
Commits

Updates @ai-sdk/openai-compatible from 3.0.39 to 3.0.41

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

3.0.41

Patch Changes

  • 23eb659: Support text and thinking parts in array-based chat completion content while ignoring unknown part types.
  • Updated dependencies [aa45741]
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

3.0.40

Patch Changes

  • Updated dependencies [90192f1]
    • @​ai-sdk/provider-utils@​5.0.33
Commits

Updates @ai-sdk/vue from 4.0.83 to 4.0.87

Changelog

Sourced from @​ai-sdk/vue's changelog.

4.0.87

Patch Changes

  • Updated dependencies [850d863]
    • ai@7.0.87

4.0.86

Patch Changes

  • Updated dependencies [11109ae]
    • ai@7.0.86

4.0.85

Patch Changes

  • Updated dependencies [55a9981]
  • Updated dependencies [dd32de2]
  • Updated dependencies [aa45741]
  • Updated dependencies [cc29073]
    • ai@7.0.85
    • @​ai-sdk/provider-utils@​5.0.34

4.0.84

Patch Changes

  • Updated dependencies [6669d69]
  • Updated dependencies [a6463ca]
  • Updated dependencies [e604532]
  • Updated dependencies [90192f1]
    • ai@7.0.84
    • @​ai-sdk/provider-utils@​5.0.33
Commits

Updates @earendil-works/pi-coding-agent from 0.84.3 to 0.84.4

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.84.4

New Features

  • Terminal capability overrides — Override detected terminal hyperlink, image, and truecolor support. See Capability Overrides.
  • Extension UI prompt events — Integrations can distinguish active agent work from time spent waiting for ctx.ui prompts. See Extension UI prompt events.
  • RPC queue clearing — Retrieve and clear queued steering and follow-up messages with clear_queue. See RPC clear_queue.
  • Fullscreen selection copy controls — Disable automatic selection copying in fullscreen mode and use Ctrl+X to copy the active selection. See UI & Display.
  • DeepSeek V4 Flash Vision (experimental) — Use the vision-capable model through the built-in DeepSeek provider. See API Keys.

Added

  • Added ui_prompt_start and ui_prompt_end extension events so host integrations can distinguish active agent work from waiting on user-facing ctx.ui prompts (#8355 by @​cristinaponcela).
  • Added detectSupportedImageMimeTypeFromFile() to the public library exports (#8600 by @​xl0).
  • Added inherited experimental vision-capable deepseek-v4-flash-vision-exp model support.
  • Added transcript usage notices for compaction and branch summaries when cache miss notices are enabled.
  • Added RPC clear_queue to retrieve and remove queued steering and follow-up messages (#8432).
  • Added environment variables and advanced settings for overriding auto-detected terminal hyperlink, image, and truecolor capabilities (#8665).
  • Added fullscreenCopyOnSelect to disable automatic fullscreen selection copy; when disabled, Ctrl+X copies the active text selection before falling back to the last assistant message, while /tree still copies the selected message (#7720).

Fixed

  • Fixed toggling thinking visibility clearing partial output from running Bash tools (#8611).
  • Fixed Windows shell aborts crashing Pi when taskkill.exe is unavailable on PATH (#6596).
  • Fixed resumed sessions corrupting the next appended entry when their JSONL file lacks a trailing newline (#8345).
  • Fixed extension messages sent with triggerTurn: false while the agent is running being inserted between a tool call and its result, which made providers that validate message order reject the replayed history. They are now appended once the turn's tool results are in (#8537).
  • Fixed compaction and branch summaries forcing toolChoice: "none" (#8649, #8638).
  • Fixed large tool results crossing the auto-compaction threshold being sent to the provider before compaction. Pi now compacts between tool execution and the next assistant response in the same run, and restores interactive progress when that run resumes (#6879).
  • Fixed Google Vertex requests failing with HttpsProxyAgent is not a constructor when the bundled Node.js runtime uses an HTTP(S) proxy (#8610).
  • Fixed saving a default model from a non-empty model scope so it remains available in that scope.
  • Fixed inherited @ file autocomplete ranking to prefer direct and shallower matches over similarly ranked nested paths (#8669).
  • Fixed inherited OpenAI-compatible streams serializing thinking signatures repeatedly during streaming (#8671).
  • Fixed inherited main-screen rendering crashing when image-heavy output exceeded V8's string length limit (#8028).
  • Fixed inherited fullscreen double-click word selection splitting paths and kebab-case tokens on / and - (#8676).
  • Fixed inherited Cloudflare AI Gateway catalogs omitting supported workers-ai/* passthrough models.
  • Fixed inherited OpenAI-compatible reasoning replay to merge consecutive streamed text and summary reasoning_details deltas.
  • Fixed inherited OpenRouter reasoning controls so reasoning-mandatory models do not receive effort: "none" (#8614 by @​davidbrai).
  • Fixed inherited OpenAI-compatible Chat Completions ignoring an explicitly requested toolChoice when no tools are defined.
  • Fixed inherited fragmented Mistral tool calls splitting when continuation chunks omit the tool-call ID (#8387).
Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.84.4] - 2026-08-28

New Features

  • Terminal capability overrides — Override detected terminal hyperlink, image, and truecolor support. See Capability Overrides.
  • Extension UI prompt events — Integrations can distinguish active agent work from time spent waiting for ctx.ui prompts. See Extension UI prompt events.
  • RPC queue clearing — Retrieve and clear queued steering and follow-up messages with clear_queue. See RPC clear_queue.
  • Fullscreen selection copy controls — Disable automatic selection copying in fullscreen mode and use Ctrl+X to copy the active selection. See UI & Display.
  • DeepSeek V4 Flash Vision (experimental) — Use the vision-capable model through the built-in DeepSeek provider. See API Keys.

Added

  • Added supportsMidConvoEffort to custom Anthropic Messages model compatibility settings.
  • Added transcript notices for Anthropic thinking blocks dropped during provider recovery when cache miss notices are enabled.
  • Added ui_prompt_start and ui_prompt_end extension events so host integrations can distinguish active agent work from waiting on user-facing ctx.ui prompts (#8355 by @​cristinaponcela).
  • Added detectSupportedImageMimeTypeFromFile() to the public library exports (#8600 by @​xl0).
  • Added inherited experimental vision-capable deepseek-v4-flash-vision-exp model support.
  • Added transcript usage notices for compaction and branch summaries when cache miss notices are enabled.
  • Added RPC clear_queue to retrieve and remove queued steering and follow-up messages (#8432).
  • Added environment variables and advanced settings for overriding auto-detected terminal hyperlink, image, and truecolor capabilities (#8665).
  • Added fullscreenCopyOnSelect to disable automatic fullscreen selection copy; when disabled, Ctrl+X copies the active text selection before falling back to the last assistant message, while /tree still copies the selected message (#7720).

Changed

  • Changed fullscreen scrollbars to reveal on pointer entry, support optional scrollbarTrack and scrollbarThumb theme colors with muted and text fallbacks, keep one thumb color across normal and expanded states, and support track-click jumping.
  • Changed fullscreen transcript search arrows to underline on hover and capitalized the search placeholder.
  • Changed selectors in /thinking, /model, /scoped-models, /trust, per-model thinking settings, and theme settings to keep active options marked while browsing. /scoped-models now uses consistent per-item toggles and strikes through unavailable models (#8900).

Fixed

  • Fixed toggling thinking visibility clearing partial output from running Bash tools (#8611).
  • Fixed Windows shell aborts crashing Pi when taskkill.exe is unavailable on PATH (#6596).
  • Fixed resumed sessions corrupting the next appended entry when their JSONL file lacks a trailing newline (#8345).
  • Fixed extension messages sent with triggerTurn: false while the agent is running being inserted between a tool call and its result, which made providers that validate message order reject the replayed history. They are now appended once the turn's tool results are in (#8537).
  • Fixed compaction and branch summaries forcing toolChoice: "none" (#8649, #8638).
  • Fixed large tool results crossing the auto-compaction threshold being sent to the provider before compaction. Pi now compacts between tool execution and the next assistant response in the same run, and restores interactive progress when that run resumes (#6879).
  • Fixed Google Vertex requests failing with HttpsProxyAgent is not a constructor when the bundled Node.js runtime uses an HTTP(S) proxy (#8610).
  • Fixed saving a default model from a non-empty model scope so it remains available in that scope.
  • Fixed inherited @ file autocomplete ranking to prefer direct and shallower matches over similarly ranked nested paths (#8669).
  • Fixed inherited OpenAI-compatible streams serializing thinking signatures repeatedly during streaming (#8671).
  • Fixed inherited main-screen rendering crashing when image-heavy output exceeded V8's string length limit (#8028).
  • Fixed inherited fullscreen double-click word selection splitting paths and kebab-case tokens on / and - (#8676).
  • Fixed inherited Cloudflare AI Gateway catalogs omitting supported workers-ai/* passthrough models.
  • Fixed inherited OpenAI-compatible reasoning replay to merge consecutive streamed text and summary reasoning_details deltas.
  • Fixed inherited OpenRouter reasoning controls so reasoning-mandatory models do not receive effort: "none" (#8614 by @​davidbrai).
  • Fixed inherited OpenAI-compatible Chat Completions ignoring an explicitly requested toolChoice when no tools are defined.
  • Fixed inherited fragmented Mistral tool calls splitting when continuation chunks omit the tool-call ID (#8387).
Commits
  • b79e4cc Release v0.84.4
  • bba6be9 docs: audit unreleased changelogs
  • e54d45d docs(coding-agent): remove issue-specific regression test placement rule (#8775)
  • 56700d4 fix(coding-agent): compact before post-tool model requests (#8782)
  • 4e49492 feat(tui): allow disable copy on fullscreen, ctrl + x copies selection (#8731)
  • 1defa15 fix(coding-agent): expose https-proxy-agent named export (#8723)
  • ccfe79e feat(extensions): ui prompt events (#8355)
  • e868230 feat(tui): add terminal capability overrides closes #8665
  • 42f7f29 docs(settings): default model and thinking
  • b07e17f fix(coding-agent): preserve partial Bash output when toggling thinking
  • Additional commits viewable in compare view

Updates @langchain/classic from 1.0.45 to 1.0.46

Release notes

Sourced from @​langchain/classic's releases.

@​langchain/classic@​1.0.46

Patch Changes

  • Updated dependencies [53dbfc2]:
    • @​langchain/openai@​1.5.11
Commits
  • 21fff39 chore: version packages (#11517)
  • 6b613fe fix(infra): add oxfmt formatter
  • b522160 chore(infra): update to changesets 3 (#11516)
  • ba81a3c chore: version packages (#11462)
  • e927605 fix(aws): recognize claude 5 models in supportedToolChoiceValuesForModel (#11...
  • ffadf85 chore(deps): bump the minor-and-patch group across 1 directory with 39 update...
  • 679f79b chore(deps): bump the aws group across 1 directory with 7 updates (#11484)
  • 0f54ed6 chore(deps): bump the build-and-test group across 1 directory with 3 updates ...
  • 147e082 chore(deps): bump google-auth-library from 10.9.1 to 11.0.2 in the google gro...
  • 7969427 chore(deps): bump changesets/action from 1.9.0 to 2.1.1 in the gh-actions-maj...
  • Additional commits viewable in compare view

Updates @langchain/openai from 1.5.10 to 1.5.11

Release notes

Sourced from @​langchain/openai's releases.

@​langchain/openai@​1.5.11

Patch Changes

  • #11448 53dbfc2 Thanks @​hntrl! - fix(openai): resolve encrypted content with zdr when streaming

    OpenAI recently changed the disposition of encrypted_content to contain the canonical payload on the final done event. Encrypted content also does not need to be a parameter in the include call options in order to propagate.

Commits
  • 21fff39 chore: version packages (#11517)
  • 6b613fe fix(infra): add oxfmt formatter
  • b522160 chore(infra): update to changesets 3 (#11516)
  • ba81a3c chore: version packages (#11462)
  • e927605 fix(aws): recognize claude 5 models in supportedToolChoiceValuesForModel (#11...
  • ffadf85 chore(deps): bump the minor-and-patch group across 1 directory with 39 update...
  • 679f79b chore(deps): bump the aws group across 1 directory with 7 updates (#11484)
  • 0f54ed6 chore(deps): bump the build-and-test group across 1 directory with 3 updates ...
  • 147e082 chore(deps): bump google-auth-library from 10.9.1 to 11.0.2 in the google gro...
  • 7969427 chore(deps): bump changesets/action from 1.9.0 to 2.1.1 in the gh-actions-maj...
  • Additional commits viewable in compare view

Updates @lmnr-ai/pi-extension from 0.1.0 to 0.1.1

Release notes

Sourced from @​lmnr-ai/pi-extension's releases.

0.1.1

What's Changed

Full Changelog: lmnr-ai/lmnr-pi-extension@v0.1.0...v0.1.1

Commits
  • aab17d7 Merge pull request #3 from lmnr-ai/fix/remove-default-input-output-truncation
  • 3d6ec10 chore: bump version to 0.1.1 (remove input/output truncation)
  • f9f4280 fix: remove span input/output truncation entirely
  • See full diff in compare view

Updates ai from 7.0.83 to 7.0.87

Changelog

Sourced from ai's changelog.

7.0.87

Patch Changes

  • 850d863: fix(ai): preserve approval descriptors in UI message streams

7.0.86

Patch Changes

  • 11109ae: feat(ai): support signed tool approvals in WorkflowAgent
  • Updated dependencies [1329d5a]
    • @​ai-sdk/gateway@​4.0.70

7.0.85

Patch Changes

  • 55a9981: Ensure canonical hashes preserve undefined array element positions.
  • dd32de2: fix(ai): sum Gateway image-generation costs across split requests
  • aa45741: fix(provider/anthropic): preserve native message batch request counts in provider metadata and support the full language-model option surface in batch requests
  • cc29073: feat(ai): expose individual image generation calls
  • Updated dependencies [d2507af]
  • Updated dependencies [aa45741]
    • @​ai-sdk/gateway@​4.0.69
    • @​ai-sdk/provider@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.34

7.0.84

Patch Changes

  • 6669d69: Expose parsed structured output in streamText end callbacks.
  • a6463ca: fix(ai): allow tool approval secrets in ToolLoopAgent settings and prepareCall
  • e604532: fix(ai): handle stateful and empty-match regular expressions in smoothStream
  • Updated dependencies [805bbfc]
  • Updated dependencies [90192f1]
    • @​ai-sdk/gateway@​4.0.68
    • @​ai-sdk/provider-utils@​5.0.33
Commits

Updates mammoth from 1.12.1 to 1.12.2

Changelog

Sourced from mammoth's changelog.

1.12.2

  • Avoid prototype pollution when reading the styles defined in a document. This avoids an issue where a maliciously crafted document could be used to set externalFileAccess to true.
Commits
  • 8706034 Bump version to 1.12.2
  • 2888fa1 Create objects without prototypes when used as map with arbitrary keys
  • 31f0c37 Avoid prototype pollution when reading styles
  • See full diff in compare view

Updates pi-hermes-memory from 0.9.6 to 0.9.7

Release notes

Sourced from pi-hermes-memory's releases.

v0.9.7

pi-hermes-memory v0.9.7

This maintenance release fixes project-memory writes against the wrong working directory, stops llmThinkingOverride: "max" from silently becoming off, and lands store and session-index fixes that were already on main after 0.9.6.

Highlights

Project memory follows the session, not the process

Pi can load the extension with no session. Factory process.cwd() was the wrong source for project identity, so the Web UI (and any host that opens a project whose cwd differs from launch cwd) wrote MEMORY.md into the wrong project folder. Binding now happens at session_start from ctx.cwd. Memory tools rebind at execute time. (#208, fixes #167)

max thinking is a real override

Config accepted thinking levels only through xhigh. llmThinkingOverride: "max" was dropped with no warning. With a model override, maintenance calls then fell back to off. ThinkingLevel is now Pi's ModelThinkingLevel. Peers are >=0.80.6 (Pi added max in 0.80.6, not 0.81.0). Auth types come from public modelRegistry.getApiKeyAndHeaders(), so ProviderHeaders can be string | null. (#209, fixes #198 and #201)

Clean process exit on Node 24

better-sqlite3 12.x could SIGABRT on Node 24 at shutdown after all work had finished. The dependency is now ^13.0.3. The APIs this extension uses are unchanged. (#205, fixes #193)

Session index and snapshot hygiene

Background review runs with --no-session. Those ephemeral prompts were still landing in session search. Recovery snapshots on dormant stores were never pruned once writes stopped. /reload waited on an LLM memory flush even though Pi keeps the session. (#203, #204, #200)

Changes

  • Write project memory from ctx.cwd at session_start and tool execute, not factory process.cwd(). (#208, @​chandra447)
  • Derive thinking and auth types from the Pi SDK. Accept llmThinkingOverride: "max". Raise peers to >=0.80.6. (#209, @​chandra447)
  • Upgrade better-sqlite3 to v13 for clean Node 24 exit. (#205, @​chandra447)
  • Sweep .recovery-* / .retired-* snapshot retention across dormant memory stores at session start. (#204, @​chandra447)
  • Exclude ephemeral background-review sessions from the session index, and prune matching leftover rows. (#203, @​chandra447)
  • Skip the shutdown memory flush on /reload. Add opt-in PI_TIMING=1 lifecycle spans. (#200, @​AndriiSemenkov)
  • Bump package version to 0.9.7. (#210)

Upgrade

pi install npm:pi-hermes-memory@0.9.7
Commits
  • 671a27f chore(release): bump version to 0.9.7 (#210)
  • 3055ee5 fix: derive thinking/auth types from Pi SDK (#209)
  • 0fa9695 fix: write project memory using session cwd (#208)
  • 5f6fa99 fix(deps): upgrade better-sqlite3 to v13 for clean Node 24 exit (#205)
  • 08bbbc4 fix(store): sweep snapshot retention across dormant stores (#204)
  • 87bf011 fix: exclude ephemeral review sessions from live index (#203)
  • 8720c57 fix: skip reload flush and add lifecycle timings (#200)
  • 71beae8 fix: preserve child extension source specs (#189)
  • See full diff in compare view

Updates three from 0.183.2 to 0.185.1

Commits

Updates typebox from 1.3.19 to 1.3.23

Commits

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

  • 84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)
  • e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

  • e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema
  • 87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines
  • 99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)
  • e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open
  • 7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar
  • eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

  • a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)
  • d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)
  • 212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)
  • e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)
  • fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator
  • 6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)
  • 6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution
  • 019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates
  • 652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller
  • 571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card
  • 9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

  • 2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm
  • 8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.

npm install zod@latest

At a glance:

@dependabot
chore(deps): bump the webui-dependencies group across 1 directory wit…
bb7f85b 
…h 17 updates

Bumps the webui-dependencies group with 16 updates in the /WebUI directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/mcp](https://github.com/vercel/ai/tree/HEAD/packages/mcp) | `2.0.39` | `2.0.41` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.50` | `4.0.53` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `3.0.39` | `3.0.41` |
| [@ai-sdk/vue](https://github.com/vercel/ai/tree/HEAD/packages/vue) | `4.0.83` | `4.0.87` |
| [@earendil-works/pi-coding-agent](https://github.com/earendil-works/pi/tree/HEAD/packages/coding-agent) | `0.84.3` | `0.84.4` |
| [@langchain/classic](https://github.com/langchain-ai/langchainjs) | `1.0.45` | `1.0.46` |
| [@lmnr-ai/pi-extension](https://github.com/lmnr-ai/lmnr-pi-extension) | `0.1.0` | `0.1.1` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.83` | `7.0.87` |
| [mammoth](https://github.com/mwilliamson/mammoth.js) | `1.12.1` | `1.12.2` |
| [pi-hermes-memory](https://github.com/chandra447/pi-hermes-memory) | `0.9.6` | `0.9.7` |
| [three](https://github.com/mrdoob/three.js) | `0.183.2` | `0.185.1` |
| [typebox](https://github.com/sinclairzx81/typebox) | `1.3.19` | `1.3.23` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` |
| [electron](https://github.com/electron/electron) | `42.10.1` | `44.1.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vite-plugin-electron](https://github.com/electron-vite/vite-plugin-electron) | `1.1.1` | `1.1.2` |



Updates `@ai-sdk/mcp` from 2.0.39 to 2.0.41
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/mcp/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/mcp@2.0.41/packages/mcp)

Updates `@ai-sdk/openai` from 4.0.50 to 4.0.53
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.53/packages/openai)

Updates `@ai-sdk/openai-compatible` from 3.0.39 to 3.0.41
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.41/packages/openai-compatible)

Updates `@ai-sdk/vue` from 4.0.83 to 4.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/vue/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/vue@4.0.87/packages/vue)

Updates `@earendil-works/pi-coding-agent` from 0.84.3 to 0.84.4
- [Release notes](https://github.com/earendil-works/pi/releases)
- [Changelog](https://github.com/earendil-works/pi/blob/main/packages/coding-agent/CHANGELOG.md)
- [Commits](https://github.com/earendil-works/pi/commits/v0.84.4/packages/coding-agent)

Updates `@langchain/classic` from 1.0.45 to 1.0.46
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/classic@1.0.45...@langchain/classic@1.0.46)

Updates `@langchain/openai` from 1.5.10 to 1.5.11
- [Release notes](https://github.com/langchain-ai/langchainjs/releases)
- [Commits](https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.10...@langchain/openai@1.5.11)

Updates `@lmnr-ai/pi-extension` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/lmnr-ai/lmnr-pi-extension/releases)
- [Commits](lmnr-ai/lmnr-pi-extension@v0.1.0...v0.1.1)

Updates `ai` from 7.0.83 to 7.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.87/packages/ai)

Updates `mammoth` from 1.12.1 to 1.12.2
- [Release notes](https://github.com/mwilliamson/mammoth.js/releases)
- [Changelog](https://github.com/mwilliamson/mammoth.js/blob/master/NEWS)
- [Commits](mwilliamson/mammoth.js@1.12.1...1.12.2)

Updates `pi-hermes-memory` from 0.9.6 to 0.9.7
- [Release notes](https://github.com/chandra447/pi-hermes-memory/releases)
- [Changelog](https://github.com/chandra447/pi-hermes-memory/blob/main/CHANGELOG.md)
- [Commits](chandra447/pi-hermes-memory@v0.9.6...v0.9.7)

Updates `three` from 0.183.2 to 0.185.1
- [Release notes](https://github.com/mrdoob/three.js/releases)
- [Commits](https://github.com/mrdoob/three.js/commits)

Updates `typebox` from 1.3.19 to 1.3.23
- [Commits](sinclairzx81/typebox@1.3.19...1.3.23)

Updates `zod` from 4.4.3 to 4.5.4
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.5.4)

Updates `electron` from 42.10.1 to 44.1.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.10.1...v44.1.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `vite-plugin-electron` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/electron-vite/vite-plugin-electron/releases)
- [Changelog](https://github.com/electron-vite/vite-plugin-electron/blob/main/CHANGELOG-v0.md)
- [Commits](electron-vite/vite-plugin-electron@v1.1.1...v1.1.2)

---
updated-dependencies:
- dependency-name: "@ai-sdk/mcp"
  dependency-version: 2.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@ai-sdk/vue"
  dependency-version: 4.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@earendil-works/pi-coding-agent"
  dependency-version: 0.84.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@langchain/classic"
  dependency-version: 1.0.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@langchain/openai"
  dependency-version: 1.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: "@lmnr-ai/pi-extension"
  dependency-version: 0.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: ai
  dependency-version: 7.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: mammoth
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: pi-hermes-memory
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: three
  dependency-version: 0.185.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webui-dependencies
- dependency-name: typebox
  dependency-version: 1.3.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: webui-dependencies
- dependency-name: electron
  dependency-version: 44.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: webui-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: webui-dependencies
- dependency-name: vite-plugin-electron
  dependency-version: 1.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: webui-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants