build(deps): bump the root-npm group across 1 directory with 6 updates

[dependabot]

Bumps the root-npm group with 6 updates in the / directory:

Package	From	To
@oh-my-pi/pi-agent-core	16.1.20	17.1.8
@oh-my-pi/pi-ai	16.1.20	17.1.8
@oh-my-pi/pi-coding-agent	16.1.20	17.1.8
@oh-my-pi/pi-utils	16.1.20	17.1.8
katex	0.17.0	0.18.1
typescript	6.0.3	7.0.2

Updates @oh-my-pi/pi-agent-core from 16.1.20 to 17.1.8

Release notes

Sourced from @​oh-my-pi/pi-agent-core's releases.

v17.1.8

@​oh-my-pi/pi-ai

Fixed

• Fixed an HTTP 400 error when resuming or replaying OpenAI history after an interrupted native Computer Use turn.
• Fixed connection 404 errors when using Google Vertex AI in multi-region locations (eu and us) by correctly resolving regional endpoint (REP) hosts.
• Fixed a resource leak in SqliteAuthCredentialStore.close() where unclosed prepared statements kept the SQLite connection alive, preventing database file cleanup (especially on Windows where files remained locked).

@​oh-my-pi/pi-catalog

Added

• Added resolveVertexEndpointHost(location) utility to resolve the correct Vertex AI API endpoint hostnames for global, multi-region, and regional locations.

Fixed

• Fixed an issue where calculateCost under-reported Anthropic cache-write costs by honoring the usage.cttl breakdown to correctly price 1-hour retention writes at 2x the base input rate.

@​oh-my-pi/pi-coding-agent

Breaking Changes

• Changed tab.screenshot() to no longer accept a per-call save path; it now saves screenshots under browser.screenshotDir (or the OS temp directory if unset) and returns the saved path.

Added

• Added omp cleanse, a new command that automatically detects language-ecosystem checkers, parses diagnostics (such as Cargo Clippy JSON), distributes repair workloads across concurrent subagents, and runs verification checks with a live progress bar.

Changed

• Reworked the /guided-goal command from a modal-based popup flow into a natural, conversational chat interface where the agent asks follow-up questions directly in the session.
• Reduced startup memory usage by lazy-loading HTML session export assets only on their first use.

Fixed

• Fixed Advisor notes appending stale-review-window warnings when newer primary turns are queued during a review.
• Fixed layout padding alignment issues in bordered output blocks and web-search result panels.
• Fixed excluded web search providers remaining visible in the Web Search Provider Order settings list.
• Fixed internal Hub peer messages being exposed as ordinary tool-call updates in clients like Paseo.
• Fixed compatibility issues when installing legacy pi extensions by updating the legacy shim to correctly bridge missing runtime symbols and exports (such as isContextOverflow, isRetryableAssistantError, and JSON parsing utilities).
• Fixed an issue where routine daemon operations (like list, logs, stop, or describe) could inadvertently trigger a restart loop for detached daemons in a backoff window.
• Fixed marketplace plugin MCP discovery to correctly honor the mcpServers manifest field in plugin configuration files.
• Fixed user-initiated shell executions (! and $) being misattributed as agent actions in advisor transcripts.
• Fixed unnecessary prompt-cache invalidations by preserving the active auto-thinking effort level when per-turn classification fails.
• Fixed the omp process name showing up as bun in Linux process managers (like ps and top).
• Fixed agent shell commands inheriting environment variables from the launch directory's .env file, ensuring they only receive the parent environment and explicit tool overrides.
• Fixed the /new command retaining completed or failed async jobs from the previous session.
• Improved error handling in omp update to display a friendly timeout message if the download times out while streaming the binary.
• Fixed the write tool incorrectly treating semicolon-joined read selectors as filesystem paths and creating unintended directory structures.

... (truncated)

Commits

• f446b8a chore: bump version to 17.1.8
• cce29cb chore: bump version to 17.1.7
• daeb683 feat(agent): restructured tool call dispatch to validate arguments earlier
• da6d11d feat(agent): introduced prepareToolCall phase supporting argument replacement
• 01d8347 chore: bump version to 17.1.6
• ae01a76 fix(agent): hardened pre-model-call gate state cleanup and API surface
• 6bbfc11 Merge PR #6543: feat(agent): add a pre-model-call gate that can stop the turn...
• 7d3f9d3 chore: bump version to 17.1.5
• b361232 chore: normalized changelog sections after merging community fixes
• 9d76e16 Merge PR #6706: fix(ai): preserve custom Anthropic web-search history (@​roboomp)
• Additional commits viewable in compare view

Updates @oh-my-pi/pi-ai from 16.1.20 to 17.1.8

Release notes

Sourced from @​oh-my-pi/pi-ai's releases.

v17.1.8

@​oh-my-pi/pi-ai

Fixed

• Fixed an HTTP 400 error when resuming or replaying OpenAI history after an interrupted native Computer Use turn.
• Fixed connection 404 errors when using Google Vertex AI in multi-region locations (eu and us) by correctly resolving regional endpoint (REP) hosts.
• Fixed a resource leak in SqliteAuthCredentialStore.close() where unclosed prepared statements kept the SQLite connection alive, preventing database file cleanup (especially on Windows where files remained locked).

@​oh-my-pi/pi-catalog

Added

• Added resolveVertexEndpointHost(location) utility to resolve the correct Vertex AI API endpoint hostnames for global, multi-region, and regional locations.

Fixed

• Fixed an issue where calculateCost under-reported Anthropic cache-write costs by honoring the usage.cttl breakdown to correctly price 1-hour retention writes at 2x the base input rate.

@​oh-my-pi/pi-coding-agent

Breaking Changes

• Changed tab.screenshot() to no longer accept a per-call save path; it now saves screenshots under browser.screenshotDir (or the OS temp directory if unset) and returns the saved path.

Added

• Added omp cleanse, a new command that automatically detects language-ecosystem checkers, parses diagnostics (such as Cargo Clippy JSON), distributes repair workloads across concurrent subagents, and runs verification checks with a live progress bar.

Changed

• Reworked the /guided-goal command from a modal-based popup flow into a natural, conversational chat interface where the agent asks follow-up questions directly in the session.
• Reduced startup memory usage by lazy-loading HTML session export assets only on their first use.

Fixed

• Fixed Advisor notes appending stale-review-window warnings when newer primary turns are queued during a review.
• Fixed layout padding alignment issues in bordered output blocks and web-search result panels.
• Fixed excluded web search providers remaining visible in the Web Search Provider Order settings list.
• Fixed internal Hub peer messages being exposed as ordinary tool-call updates in clients like Paseo.
• Fixed compatibility issues when installing legacy pi extensions by updating the legacy shim to correctly bridge missing runtime symbols and exports (such as isContextOverflow, isRetryableAssistantError, and JSON parsing utilities).
• Fixed an issue where routine daemon operations (like list, logs, stop, or describe) could inadvertently trigger a restart loop for detached daemons in a backoff window.
• Fixed marketplace plugin MCP discovery to correctly honor the mcpServers manifest field in plugin configuration files.
• Fixed user-initiated shell executions (! and $) being misattributed as agent actions in advisor transcripts.
• Fixed unnecessary prompt-cache invalidations by preserving the active auto-thinking effort level when per-turn classification fails.
• Fixed the omp process name showing up as bun in Linux process managers (like ps and top).
• Fixed agent shell commands inheriting environment variables from the launch directory's .env file, ensuring they only receive the parent environment and explicit tool overrides.
• Fixed the /new command retaining completed or failed async jobs from the previous session.
• Improved error handling in omp update to display a friendly timeout message if the download times out while streaming the binary.
• Fixed the write tool incorrectly treating semicolon-joined read selectors as filesystem paths and creating unintended directory structures.

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-ai's changelog.

[17.1.8] - 2026-07-28

Fixed

• Fixed an HTTP 400 error when resuming or replaying OpenAI history after an interrupted native Computer Use turn.
• Fixed connection 404 errors when using Google Vertex AI in multi-region locations (eu and us) by correctly resolving regional endpoint (REP) hosts.
• Fixed a resource leak in SqliteAuthCredentialStore.close() where unclosed prepared statements kept the SQLite connection alive, preventing database file cleanup (especially on Windows where files remained locked).

[17.1.7] - 2026-07-27

Changed

• Upstream 403 Forbidden responses (e.g. Anthropic permission_error plan/model denials, Copilot model-policy rejections) now rotate through sibling credentials like usage limits do, instead of failing the session on the first denied account. The denied credential is soft-blocked for 60s and re-validated — never removed — and the original 403 surfaces only once every sibling has been tried.
• Usage report filtering in the auth-broker remote store is memoized per (reports, snapshot) with a precomputed per-provider OAuth credential map, replacing an O(reports × credentials) scan on every credential-selection and status refresh
• Cursor and Devin Connect-frame readers no longer copy every stream chunk through Buffer.concat when the pending buffer is empty

[17.1.6] - 2026-07-27

Added

• Added getProxyForUrl() for transports that need provider-specific and standard proxy environment resolution with NO_PROXY support (#6770).
• Added SiliconFlow and SiliconFlow (China) to the built-in API-key login provider catalog so omp login siliconflow / omp login siliconflow-cn stores a reusable credential validated against each region's /v1/models endpoint.

[17.1.5] - 2026-07-27

Fixed

• Fixed OpenAI Responses replay treating a tool output as paired with a matching call that appeared later in the input, or a tool call as paired with an earlier output. Pair repair now respects wire order before preserving or synthesizing each side.
• Fixed adaptive-thinking Anthropic models omitting the interleaved-thinking beta on signature-enforcing proxies, which caused persisted interleaved assistant turns to fail on replay (#6717).
• Kimi Code now sends its session-stable prompt cache key on both supported transports: prompt_cache_key for OpenAI-compatible requests and metadata.user_id for Anthropic-compatible requests. Explicit keys survive side-channel session IDs, while cacheRetention: "none" still disables automatic affinity (#6049).
• Fresh encrypted auth-broker snapshot caches are revalidated within a short startup budget, so one-shot clients see newly imported or revoked credentials immediately when the broker is reachable while retaining cache fallback for transport and server failures.
• Fixed custom anthropic-messages endpoints dropping native web-search call/result blocks in the leaked-thinking wrapper, preserving signed continuation history in source order without carrying a preceding text signature onto later unsigned blocks (#6703).

[17.1.4] - 2026-07-26

Added

• MiniMax Token Plan accounts now report quota in omp usage. GET /v1/token_plan/remains returns one bucket per plan quota, each carrying a rolling interval window and a weekly window, so minimax-code surfaces real remaining percentages instead of an empty report. A model the plan does not include comes back looking like an untouched quota; those buckets are dropped from the report and named in its metadata. The mainland id minimax-code-cn is untouched.
• OAuth logins now stamp authorizedAt (epoch ms of the interactive login) on the stored credential, and every refresh-persist path preserves it. Anthropic expires the whole OAuth grant family ~30 days after authorization regardless of refresh-token rotation (observed as invalid_grant: "Refresh token expired" on the latest rotated token, exactly 30 days after login, across four production accounts), so the login anchor is what makes re-login deadlines computable. Exported ANTHROPIC_OAUTH_GRANT_TTL_MS alongside the anthropic OAuth flow.
• Added GET /v1/credentials/disabled to the auth broker and AuthBrokerClient.listDisabledCredentials: disabled-credential tombstones (DisabledCredentialSummary — identity, verbatim disable cause, disable timestamp; never token material) so auto-disabled accounts stay visible to clients instead of silently vanishing from the snapshot. AuthStorage.listDisabledCredentials serves the same data locally from SQLite; clients of brokers predating the endpoint get an empty list (404 mapped, no error).
• Added AuthStorage.revalidateCredentials() and the optional AuthCredentialStore.refreshSnapshot hook: remote broker stores re-fetch GET /v1/snapshot on demand so callers pairing live per-credential data with stored identities (omp usage) never render against the up-to-an-hour-stale disk-cached snapshot; local SQLite stores are always current and only reload.
• Added an optional per-request codexSseMaxAttempts stream option to bound Codex SSE pre-response retries while preserving the six-attempt default when omitted.
• Fixed Cursor requests failing with Connect error internal: Unable to parse image: ... whenever the session history contained an image: rootPromptMessagesJson image parts now embed a data:<mime>;base64, URI instead of bare base64, matching the convention used by the OpenAI-completions provider (#6564).

Fixed

• Fixed OpenAI Responses native history replay sending output-only status fields back as input, preventing input[N].status failures in long-running sessions. (#6513 by @​Ant39140)
• Cursor no longer discards a local tool result when the transport fails mid-execution. The provider waits for in-flight exec dispatches before pushing done, but the error path skipped that wait, so a handler decoded from the last chunk landed its result after the Agent had already finalized the call from the terminal error and cleared its buffer — losing the real outcome of a tool that may already have run side effects. Both exits now drain the same barrier.
• Cursor exec handlers returning the bare-result form no longer record a failed call as successful. When an SDK handler returns only a protocol result (no paired toolResult), the synthesized transcript entry was always "Tool produced no transcript result" with isError: false, even for a rejected or error result — so Cursor saw a failure while the rebuilt transcript showed success. The synthesized entry now derives its state and message from the result's own oneof variant — including MCP, where an application-level tool failure rides inside the success variant as is_error rather than as a separate variant.
• Fixed Cursor models silently failing to maintain the todo list. Cursor resolves its native update_todos/read_todos tools server-side, but the bridge looked for them under flattened updateTodosToolCall/readTodosToolCall properties, which a decoded agent.v1.ToolCall never has — the variant only arrives through the tool oneof — so no native todo call was ever recognized. The synthesized todo tool call was also emitted as locally runnable with a {todos} payload the local tool's schema rejects, so any update that did surface ended as a validation error and local todo state never followed Cursor's. Todo calls are now read from the oneof, both native todo blocks are marked as already-resolved, and local state is mirrored from the server's confirmed success snapshot (leaving state untouched on UpdateTodosError). TODO_STATUS_CANCELLED now maps to abandoned instead of reverting the task to pending.

... (truncated)

Commits

• f446b8a chore: bump version to 17.1.8
• b778617 chore: reformat + rewrite changelogs
• d06650e revert(test): dropped unrelated CI-flake timeout bumps from #6833 and #6750
• 05e9889 Merge PR #6833: fix(tui): wrapped Markdown list and output block layout (@​usr...
• 3f9d930 fix(catalog): bill cache-write tokens the ttl breakdown omits
• 4385632 Merge PR #6878: fix(catalog): price cache writes by ttl breakdown (@​roboomp)
• 9f5fb4d test(ai): assert close() releases the SQLite connection
• 3fcebdf Merge PR #6762: fix(ai): finalize all prepared statements in SqliteAuthCreden...
• c15f598 Merge PR #6821: fix: google-vertex support multi-region endpoints (@​bryanster)
• 5bcbca1 Merge PR #6824: fix(ai): preserve reasoning IDs for computer replay (@​lyc-aon)
• Additional commits viewable in compare view

Updates @oh-my-pi/pi-coding-agent from 16.1.20 to 17.1.8

Release notes

Sourced from @​oh-my-pi/pi-coding-agent's releases.

v17.1.8

@​oh-my-pi/pi-ai

Fixed

• Fixed an HTTP 400 error when resuming or replaying OpenAI history after an interrupted native Computer Use turn.
• Fixed connection 404 errors when using Google Vertex AI in multi-region locations (eu and us) by correctly resolving regional endpoint (REP) hosts.
• Fixed a resource leak in SqliteAuthCredentialStore.close() where unclosed prepared statements kept the SQLite connection alive, preventing database file cleanup (especially on Windows where files remained locked).

@​oh-my-pi/pi-catalog

Added

• Added resolveVertexEndpointHost(location) utility to resolve the correct Vertex AI API endpoint hostnames for global, multi-region, and regional locations.

Fixed

• Fixed an issue where calculateCost under-reported Anthropic cache-write costs by honoring the usage.cttl breakdown to correctly price 1-hour retention writes at 2x the base input rate.

@​oh-my-pi/pi-coding-agent

Breaking Changes

• Changed tab.screenshot() to no longer accept a per-call save path; it now saves screenshots under browser.screenshotDir (or the OS temp directory if unset) and returns the saved path.

Added

• Added omp cleanse, a new command that automatically detects language-ecosystem checkers, parses diagnostics (such as Cargo Clippy JSON), distributes repair workloads across concurrent subagents, and runs verification checks with a live progress bar.

Changed

• Reworked the /guided-goal command from a modal-based popup flow into a natural, conversational chat interface where the agent asks follow-up questions directly in the session.
• Reduced startup memory usage by lazy-loading HTML session export assets only on their first use.

Fixed

• Fixed Advisor notes appending stale-review-window warnings when newer primary turns are queued during a review.
• Fixed layout padding alignment issues in bordered output blocks and web-search result panels.
• Fixed excluded web search providers remaining visible in the Web Search Provider Order settings list.
• Fixed internal Hub peer messages being exposed as ordinary tool-call updates in clients like Paseo.
• Fixed compatibility issues when installing legacy pi extensions by updating the legacy shim to correctly bridge missing runtime symbols and exports (such as isContextOverflow, isRetryableAssistantError, and JSON parsing utilities).
• Fixed an issue where routine daemon operations (like list, logs, stop, or describe) could inadvertently trigger a restart loop for detached daemons in a backoff window.
• Fixed marketplace plugin MCP discovery to correctly honor the mcpServers manifest field in plugin configuration files.
• Fixed user-initiated shell executions (! and $) being misattributed as agent actions in advisor transcripts.
• Fixed unnecessary prompt-cache invalidations by preserving the active auto-thinking effort level when per-turn classification fails.
• Fixed the omp process name showing up as bun in Linux process managers (like ps and top).
• Fixed agent shell commands inheriting environment variables from the launch directory's .env file, ensuring they only receive the parent environment and explicit tool overrides.
• Fixed the /new command retaining completed or failed async jobs from the previous session.
• Improved error handling in omp update to display a friendly timeout message if the download times out while streaming the binary.
• Fixed the write tool incorrectly treating semicolon-joined read selectors as filesystem paths and creating unintended directory structures.

... (truncated)

Commits

• f446b8a chore: bump version to 17.1.8
• 753a017 fix(coding-agent): used bun for package contents test
• a10fe07 fix(coding-agent): suppressed credential disable tombstones for active accounts
• b778617 chore: reformat + rewrite changelogs
• d06650e revert(test): dropped unrelated CI-flake timeout bumps from #6833 and #6750
• 604dd05 test(coding-agent): accept npm 12 pack --json object output
• ef13efc Merge PR #6750: perf(coding-agent): load HTML export assets on first use (@​us...
• c7b10c3 Merge PR #6763: fix(cli): preserve live task-isolation sandboxes on worktree ...
• ac6cd57 Merge PR #6820: fix(coding-agent): preserve parent todos in vibe mode (@​Iron-...
• be0e593 Merge PR #6880: fix(session): preserve auto-thinking level on classifier fail...
• Additional commits viewable in compare view

Updates @oh-my-pi/pi-utils from 16.1.20 to 17.1.8

Release notes

Sourced from @​oh-my-pi/pi-utils's releases.

v17.1.8

@​oh-my-pi/pi-ai

Fixed

• Fixed an HTTP 400 error when resuming or replaying OpenAI history after an interrupted native Computer Use turn.
• Fixed connection 404 errors when using Google Vertex AI in multi-region locations (eu and us) by correctly resolving regional endpoint (REP) hosts.
• Fixed a resource leak in SqliteAuthCredentialStore.close() where unclosed prepared statements kept the SQLite connection alive, preventing database file cleanup (especially on Windows where files remained locked).

@​oh-my-pi/pi-catalog

Added

• Added resolveVertexEndpointHost(location) utility to resolve the correct Vertex AI API endpoint hostnames for global, multi-region, and regional locations.

Fixed

• Fixed an issue where calculateCost under-reported Anthropic cache-write costs by honoring the usage.cttl breakdown to correctly price 1-hour retention writes at 2x the base input rate.

@​oh-my-pi/pi-coding-agent

Breaking Changes

• Changed tab.screenshot() to no longer accept a per-call save path; it now saves screenshots under browser.screenshotDir (or the OS temp directory if unset) and returns the saved path.

Added

• Added omp cleanse, a new command that automatically detects language-ecosystem checkers, parses diagnostics (such as Cargo Clippy JSON), distributes repair workloads across concurrent subagents, and runs verification checks with a live progress bar.

Changed

• Reworked the /guided-goal command from a modal-based popup flow into a natural, conversational chat interface where the agent asks follow-up questions directly in the session.
• Reduced startup memory usage by lazy-loading HTML session export assets only on their first use.

Fixed

• Fixed Advisor notes appending stale-review-window warnings when newer primary turns are queued during a review.
• Fixed layout padding alignment issues in bordered output blocks and web-search result panels.
• Fixed excluded web search providers remaining visible in the Web Search Provider Order settings list.
• Fixed internal Hub peer messages being exposed as ordinary tool-call updates in clients like Paseo.
• Fixed compatibility issues when installing legacy pi extensions by updating the legacy shim to correctly bridge missing runtime symbols and exports (such as isContextOverflow, isRetryableAssistantError, and JSON parsing utilities).
• Fixed an issue where routine daemon operations (like list, logs, stop, or describe) could inadvertently trigger a restart loop for detached daemons in a backoff window.
• Fixed marketplace plugin MCP discovery to correctly honor the mcpServers manifest field in plugin configuration files.
• Fixed user-initiated shell executions (! and $) being misattributed as agent actions in advisor transcripts.
• Fixed unnecessary prompt-cache invalidations by preserving the active auto-thinking effort level when per-turn classification fails.
• Fixed the omp process name showing up as bun in Linux process managers (like ps and top).
• Fixed agent shell commands inheriting environment variables from the launch directory's .env file, ensuring they only receive the parent environment and explicit tool overrides.
• Fixed the /new command retaining completed or failed async jobs from the previous session.
• Improved error handling in omp update to display a friendly timeout message if the download times out while streaming the binary.
• Fixed the write tool incorrectly treating semicolon-joined read selectors as filesystem paths and creating unintended directory structures.

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-utils's changelog.

[17.1.8] - 2026-07-28

Added

• Added setProcessName utility to set the OS-visible process name on Linux via bun:ffi, bypassing Bun's process.title limitations.

Fixed

• Fixed child shell environment filtering to drop launch-directory .env values in addition to Bun-autoloaded .env.local values.

[17.1.5] - 2026-07-27

Fixed

• getShellConfig no longer throws No bash shell found on Windows hosts without a discoverable bash. resolveWindowsShell searches Git for Windows install roots (machine, per-user, GIT_INSTALL_ROOT, scoop app dirs — scoop shims sh.exe/git.exe but never bash.exe), then bash.exe/sh.exe on PATH, and finally falls back to cmd.exe from ComSpec with /c args, so shell resolution always succeeds.

[17.1.4] - 2026-07-26

Fixed

• Fixed postmortem signal and fatal shutdown exits being intercepted by temporary process.exit guards during extension startup (#6488).
• Corrected Windows shell resolution errors to identify the active global, project, overlay, or runtime source for shellPath instead of directing every user to the retired settings.json file (#6579).
• Contained timed-out child lifecycle rejections so ptree callers cannot leak an unhandled TimeoutError after settling (#6635).
• Fixed an invalid configured shellPath being silently masked whenever an earlier caller had already resolved a shell in the same process; the guidance error now surfaces regardless of cache state.

[17.0.9] - 2026-07-23

Breaking Changes

• Renamed getAutoQaDbDir to getAutoQaDbPath for accuracy; update any usage accordingly

[17.0.5] - 2026-07-18

Changed

• Updated installRuntimeModuleResolver to return an uninstaller function that restores the stock node:module resolver once all runtime roots are unregistered.
• Added documentation regarding a known limitation with Bun 1.3.14's createRequire behavior when the module resolver patch is active.

[17.0.2] - 2026-07-17

Added

• Added a structured log sink API (registerLogSink, LogEvent, LogLevel) to the centralized logger, enabling out-of-band consumers (such as OpenTelemetry) to receive log events without affecting local file or console logging.

Changed

• Bounded default ptree.ChildProcess stderr retention to a 32 KiB tail to prevent memory leaks in long-lived subprocesses. Full stderr capture must now be explicitly requested at spawn time using { stderr: "full" } on spawn or exec.

Fixed

... (truncated)

Commits

• f446b8a chore: bump version to 17.1.8
• b778617 chore: reformat + rewrite changelogs
• f0db9aa fix(utils): base child-shell filtering on real launcher values
• 532e4c3 fix(utils): filter NODE_ENV dotenv files and keep escaped quotes in dotenv va...
• 0a57276 Merge PR #6814: fix(cli): stop forwarding project dotenv to shells (@​roboomp)
• c307f73 fix: fall back to musl libc soname when loading prctl
• 315fb78 Merge PR #6818: fix(cli): set kernel process name via prctl on linux (@​roboomp)
• cce29cb chore: bump version to 17.1.7
• be98b64 fix(utils): raised postmortem probe watchdog to tolerate slow ci spawns
• b9f1c32 fix(utils): parsed dotenv with bun-compatible syntax
• Additional commits viewable in compare view

Updates katex from 0.17.0 to 0.18.1

Release notes

Sourced from katex's releases.

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

• htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

v0.18.0

0.18.0 (2026-07-17)

Features

• prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

• users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

Changelog

Sourced from katex's changelog.

0.18.1 (2026-07-19)

Bug Fixes

• htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

0.18.0 (2026-07-17)

Features

• prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

• users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

Commits

• cdf479f chore(release): 0.18.1 [ci skip]
• 87a2b30 fix(htmlData): allow escaped commas in \htmlData (#4236)
• 2318066 chore(deps): bump codecov/codecov-action from 6 to 7 (#4227)
• 3b5b6a0 chore(deps): bump actions/checkout from 6 to 7 (#4232)
• 4e9d31a chore(deps): update dependency js-yaml to v4.2.0 [security] (#4244)
• b7ca8f0 chore(deps): update dependency webpack-dev-server to v5.2.5 [security] (#4242)
• bf1a59f chore: use pixel diff as fallback for byte-to-byte (#4245)
• 4d9d0ae chore(release): 0.18.0 [ci skip]
• 6f5c44f feat: prefix css classes (#4229)
• 2c6143a refactor: remove direct hasOwnProperty call (#4230)
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.