[dependabot]

Bumps the npm group with 6 updates:

Package	From	To
@daytonaio/sdk	0.222.0	0.223.0
e2b	2.52.1	2.53.1
@earendil-works/pi-agent-core	1.0.3	1.0.4
@earendil-works/pi-ai	1.0.3	1.0.4
@earendil-works/pi-coding-agent	1.0.3	1.0.4
@earendil-works/pi-tui	1.0.3	1.0.4

Updates @daytonaio/sdk from 0.222.0 to 0.223.0

Release notes

Sourced from @​daytonaio/sdk's releases.

v0.223.0

0.223.0 (2026-10-07)

🚀 Features

• sdk: expose mouse and keyboard hold endpoints across all SDK clients (#335)

Chores

• sync go.sum for v0.222.0 (#324)
• pin Poetry to the version Dependabot uses, in CI and the nix shell (#331)
• deps: batch dependabot updates 2026-10-05 (#325)
• deps: batch dependabot updates 2026-10-06 (#330)
• sdk-go: bump to v0.223.0 (#336)

❤️ Thank You

• daytonaBot
• Mirko Džaja @​MDzaja
• Mislav Ivanda @​mislavivanda

Commits

• 3e10dd9 chore(sdk-go): bump to v0.223.0 (#336)
• 4164f16 feat(sdk): expose mouse and keyboard hold endpoints across all SDK clients (#...
• c164823 ci: publish gems via RubyGems trusted publishing (OIDC) (#334)
• 2b6906c ci: publish npm packages via trusted publishing (OIDC) (#333)
• ad8f4e5 ci: run SDK publish workflow on GitHub-hosted runners (#332)
• b92d6a0 chore: pin Poetry to the version Dependabot uses, in CI and the nix shell (#331)
• 0fd49d9 chore(deps): batch dependabot updates 2026-10-06 (#330)
• b1c8cd5 chore(deps): batch dependabot updates 2026-10-05 (#325)
• 8063aba chore: sync go.sum for v0.222.0 (#324)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​daytonaio/sdk since your current version.

Updates e2b from 2.52.1 to 2.53.1

Changelog

Sourced from e2b's changelog.

2.53.1

Patch Changes

• cd4c62b: Publish the changes from the previous release, which was versioned but failed to publish to npm and PyPI.

2.53.0

Minor Changes

• 1de92fc: Add SandboxNotRunningError / SandboxNotRunningException and SandboxUnreachableError / SandboxUnreachableException for envd requests that fail because the sandbox cannot be reached. Both extend TimeoutError / TimeoutException, which these cases raised before, so existing instanceof TimeoutError / except TimeoutException handling keeps working.

  • SandboxNotRunning* — the proxy answered 502 "The sandbox was not found" (killed, paused or timed out), either directly or from the health probe the SDK runs after a dropped connection or an unexplained Unavailable (e.g. the sandbox was killed mid-command). Retrying will not help.
  • SandboxUnreachable* — the sandbox is not confirmed stopped but cannot be reached: 502 "port is not open", other 502s, or a connection failure whose health probe got no answer. The original error is the cause / __cause__.
  • A connection failure whose health probe finds the sandbox running still raises the original transport error. The probe itself runs without connection retries.

  Breaking (JS): commands.run / connect, pty.create / connect and files.watchDir on a gone sandbox now throw SandboxNotRunningError instead of SandboxNotFoundError, like every other call. SandboxNotFoundError is only raised by the control plane API.

Patch Changes

• 8f51c9f: Share the sandbox create/connect/fork response mapping (JS and Python) and the Python Commands.run / Commands.connect handle setup

• b3bb653: Remove the E2B_USER_AGENT_SOURCE environment variable. The SDKs no longer add a source/<value> User-Agent token, append ?source= to Code Interpreter requests, or log trace IDs and add (trace_id=…) to error messages when it is set to ci, so SDK behavior no longer depends on that variable.

  Code Interpreter errors for statuses other than 404 and 502 now use the same <status> <reason>[: <body>] message in JS and Python: JS includes the response body, and Python falls back to the reason phrase when the body is empty.

Commits

• c0f426a [skip ci] Release new versions
• 2438c92 [skip ci] Release new versions
• 1de92fc feat(sdk): add SandboxNotRunningError and SandboxUnreachableError for a sandb...
• b3bb653 fix(sdk): remove E2B_USER_AGENT_SOURCE and CI-only request diagnostics (#1927)
• 8f51c9f chore(sdk): share sandbox create response mapping and command handle setup (#...
• See full diff in compare view

Updates @earendil-works/pi-agent-core from 1.0.3 to 1.0.4

Release notes

Sourced from @​earendil-works/pi-agent-core's releases.

v1.0.4

New Features

• Tool patterns and --no-mcp: --tools and --exclude-tools accept * patterns, for example --tools read,codemode,'mcp__radius__*' keeps only one MCP server's tools. --tools now keeps MCP tools unless an entry starts with mcp__, and --no-mcp turns off MCP for one run. See Tools and MCP tools.
• Codemode persists images: tools.read() on an image file now gives back an image block that image() can show. See Call tools.

Added

• Added * patterns to --tools and --exclude-tools, for example --tools read,codemode,'mcp__radius__*'
• Added --no-mcp to disable the built-in MCP support for one run

Fixed

• Fixed syntax highlighting losing colors after the first line of multiline strings and comments in fenced code blocks (#10143)
• Fixed codemode scripts not receiving images from read: tools.read() now resolves to an image block for image files, which image() shows (#10251)
• Fixed MCP OAuth sign-in failing with invalid_redirect_uri on servers with OpenID Connect client registration, such as mcp.modem.dev: pi now registers as a native client (#10493)
• Fixed --tools removing MCP tools, which left pi --tools codemode without any MCP servers. --tools now keeps MCP tools unless an entry starts with mcp__
• Fixed MCP session shutdown returning while a server was still connecting, leaving its transport open until the server answered or timed out (#10249)
• Fixed system prompt rules and the skills hint naming tools hidden by prepareLoadout. Hidden tools are left out of the rules, the skills hint names no tool when the file reader is hidden, and codemode shows each tool's prompt guidelines with its declaration; ToolLoadout gains getPromptGuidelines() (#10343)
• Fixed Bedrock requests that fail with The pending stream has been canceled after a stalled HTTP/2 connection not being retried automatically (#10379)
• Fixed codemode scripts that patch built-ins (for example Array.prototype.toJSON = ...) crashing pi and leaving the tool call unsettled. Built-ins are now frozen before the script runs, so such patches have no effect (#10444)

Changelog

Sourced from @​earendil-works/pi-agent-core's changelog.

[1.0.4] - 2026-10-05

Commits

• 7c10bd4 Release v1.0.4
• 997d31f Add [Unreleased] section for next cycle
• See full diff in compare view

Updates @earendil-works/pi-ai from 1.0.3 to 1.0.4

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v1.0.4

New Features

• Tool patterns and --no-mcp: --tools and --exclude-tools accept * patterns, for example --tools read,codemode,'mcp__radius__*' keeps only one MCP server's tools. --tools now keeps MCP tools unless an entry starts with mcp__, and --no-mcp turns off MCP for one run. See Tools and MCP tools.
• Codemode persists images: tools.read() on an image file now gives back an image block that image() can show. See Call tools.

Added

• Added * patterns to --tools and --exclude-tools, for example --tools read,codemode,'mcp__radius__*'
• Added --no-mcp to disable the built-in MCP support for one run

Fixed

• Fixed syntax highlighting losing colors after the first line of multiline strings and comments in fenced code blocks (#10143)
• Fixed codemode scripts not receiving images from read: tools.read() now resolves to an image block for image files, which image() shows (#10251)
• Fixed MCP OAuth sign-in failing with invalid_redirect_uri on servers with OpenID Connect client registration, such as mcp.modem.dev: pi now registers as a native client (#10493)
• Fixed --tools removing MCP tools, which left pi --tools codemode without any MCP servers. --tools now keeps MCP tools unless an entry starts with mcp__
• Fixed MCP session shutdown returning while a server was still connecting, leaving its transport open until the server answered or timed out (#10249)
• Fixed system prompt rules and the skills hint naming tools hidden by prepareLoadout. Hidden tools are left out of the rules, the skills hint names no tool when the file reader is hidden, and codemode shows each tool's prompt guidelines with its declaration; ToolLoadout gains getPromptGuidelines() (#10343)
• Fixed Bedrock requests that fail with The pending stream has been canceled after a stalled HTTP/2 connection not being retried automatically (#10379)
• Fixed codemode scripts that patch built-ins (for example Array.prototype.toJSON = ...) crashing pi and leaving the tool call unsettled. Built-ins are now frozen before the script runs, so such patches have no effect (#10444)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[1.0.4] - 2026-10-05

Fixed

• Fixed Bedrock requests that fail with The pending stream has been canceled after a stalled HTTP/2 connection not being retried automatically (#10379)

Commits

• 7c10bd4 Release v1.0.4
• 5b6c792 fix(ai): retry HTTP/2 pending stream cancellation
• 997d31f Add [Unreleased] section for next cycle
• See full diff in compare view

Updates @earendil-works/pi-coding-agent from 1.0.3 to 1.0.4

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v1.0.4

New Features

• Tool patterns and --no-mcp: --tools and --exclude-tools accept * patterns, for example --tools read,codemode,'mcp__radius__*' keeps only one MCP server's tools. --tools now keeps MCP tools unless an entry starts with mcp__, and --no-mcp turns off MCP for one run. See Tools and MCP tools.
• Codemode persists images: tools.read() on an image file now gives back an image block that image() can show. See Call tools.

Added

• Added * patterns to --tools and --exclude-tools, for example --tools read,codemode,'mcp__radius__*'
• Added --no-mcp to disable the built-in MCP support for one run

Fixed

• Fixed syntax highlighting losing colors after the first line of multiline strings and comments in fenced code blocks (#10143)
• Fixed codemode scripts not receiving images from read: tools.read() now resolves to an image block for image files, which image() shows (#10251)
• Fixed MCP OAuth sign-in failing with invalid_redirect_uri on servers with OpenID Connect client registration, such as mcp.modem.dev: pi now registers as a native client (#10493)
• Fixed --tools removing MCP tools, which left pi --tools codemode without any MCP servers. --tools now keeps MCP tools unless an entry starts with mcp__
• Fixed MCP session shutdown returning while a server was still connecting, leaving its transport open until the server answered or timed out (#10249)
• Fixed system prompt rules and the skills hint naming tools hidden by prepareLoadout. Hidden tools are left out of the rules, the skills hint names no tool when the file reader is hidden, and codemode shows each tool's prompt guidelines with its declaration; ToolLoadout gains getPromptGuidelines() (#10343)
• Fixed Bedrock requests that fail with The pending stream has been canceled after a stalled HTTP/2 connection not being retried automatically (#10379)
• Fixed codemode scripts that patch built-ins (for example Array.prototype.toJSON = ...) crashing pi and leaving the tool call unsettled. Built-ins are now frozen before the script runs, so such patches have no effect (#10444)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[1.0.4] - 2026-10-05

New Features

• Tool patterns and --no-mcp: --tools and --exclude-tools accept * patterns, for example --tools read,codemode,'mcp__radius__*' keeps only one MCP server's tools. --tools now keeps MCP tools unless an entry starts with mcp__, and --no-mcp turns off MCP for one run. See Tools and MCP tools.
• Codemode persists images: tools.read() on an image file now gives back an image block that image() can show. See Call tools.

Added

• Added * patterns to --tools and --exclude-tools, for example --tools read,codemode,'mcp__radius__*'
• Added --no-mcp to disable the built-in MCP support for one run

Fixed

• Fixed syntax highlighting losing colors after the first line of multiline strings and comments in fenced code blocks (#10143)
• Fixed codemode scripts not receiving images from read: tools.read() now resolves to an image block for image files, which image() shows (#10251)
• Fixed MCP OAuth sign-in failing with invalid_redirect_uri on servers with OpenID Connect client registration, such as mcp.modem.dev: pi now registers as a native client (#10493)
• Fixed --tools removing MCP tools, which left pi --tools codemode without any MCP servers. --tools now keeps MCP tools unless an entry starts with mcp__
• Fixed MCP session shutdown returning while a server was still connecting, leaving its transport open until the server answered or timed out (#10249)
• Fixed system prompt rules and the skills hint naming tools hidden by prepareLoadout. Hidden tools are left out of the rules, the skills hint names no tool when the file reader is hidden, and codemode shows each tool's prompt guidelines with its declaration; ToolLoadout gains getPromptGuidelines() (#10343)
• Fixed Bedrock requests that fail with The pending stream has been canceled after a stalled HTTP/2 connection not being retried automatically (#10379)
• Fixed codemode scripts that patch built-ins (for example Array.prototype.toJSON = ...) crashing pi and leaving the tool call unsettled. Built-ins are now frozen before the script runs, so such patches have no effect (#10444)

Commits

• 7c10bd4 Release v1.0.4
• 3cdfbec docs(coding-agent): audit changelog for next release
• c30840c fix(coding-agent): keep hidden tools out of prompt rules and skills hint
• 8c91179 fix(coding-agent): close MCP connections that are still connecting on shutdown
• 04b97ef fix(coding-agent): keep MCP tools with --tools, add tool patterns and --no-mcp
• 147b502 fix(mcp): send application_type in OAuth dynamic client registration
• 021eae6 fix(coding-agent): resolve codemode read calls on images to image blocks
• b9ab918 fix(coding-agent): keep syntax colors on multiline tokens (#10356)
• 997d31f Add [Unreleased] section for next cycle
• See full diff in compare view

Updates @earendil-works/pi-tui from 1.0.3 to 1.0.4

Release notes

Sourced from @​earendil-works/pi-tui's releases.

v1.0.4

New Features

• Tool patterns and --no-mcp: --tools and --exclude-tools accept * patterns, for example --tools read,codemode,'mcp__radius__*' keeps only one MCP server's tools. --tools now keeps MCP tools unless an entry starts with mcp__, and --no-mcp turns off MCP for one run. See Tools and MCP tools.
• Codemode persists images: tools.read() on an image file now gives back an image block that image() can show. See Call tools.

Added

• Added * patterns to --tools and --exclude-tools, for example --tools read,codemode,'mcp__radius__*'
• Added --no-mcp to disable the built-in MCP support for one run

Fixed

• Fixed syntax highlighting losing colors after the first line of multiline strings and comments in fenced code blocks (#10143)
• Fixed codemode scripts not receiving images from read: tools.read() now resolves to an image block for image files, which image() shows (#10251)
• Fixed MCP OAuth sign-in failing with invalid_redirect_uri on servers with OpenID Connect client registration, such as mcp.modem.dev: pi now registers as a native client (#10493)
• Fixed --tools removing MCP tools, which left pi --tools codemode without any MCP servers. --tools now keeps MCP tools unless an entry starts with mcp__
• Fixed MCP session shutdown returning while a server was still connecting, leaving its transport open until the server answered or timed out (#10249)
• Fixed system prompt rules and the skills hint naming tools hidden by prepareLoadout. Hidden tools are left out of the rules, the skills hint names no tool when the file reader is hidden, and codemode shows each tool's prompt guidelines with its declaration; ToolLoadout gains getPromptGuidelines() (#10343)
• Fixed Bedrock requests that fail with The pending stream has been canceled after a stalled HTTP/2 connection not being retried automatically (#10379)
• Fixed codemode scripts that patch built-ins (for example Array.prototype.toJSON = ...) crashing pi and leaving the tool call unsettled. Built-ins are now frozen before the script runs, so such patches have no effect (#10444)

Changelog

Sourced from @​earendil-works/pi-tui's changelog.

[1.0.4] - 2026-10-05

Commits

• 7c10bd4 Release v1.0.4
• 997d31f Add [Unreleased] section for next cycle
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions