Skip to content

chore(deps): update bump-dependencies#45

Merged
joecorall merged 3 commits into
mainfrom
renovate.bump-dependencies
Jun 6, 2026
Merged

chore(deps): update bump-dependencies#45
joecorall merged 3 commits into
mainfrom
renovate.bump-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jun 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Update Pending
@anthropic-ai/claude-code 2.1.156 → 2.1.161 age confidence patch 2.1.167 (+4)
@earendil-works/pi-coding-agent (source) 0.77.0 → 0.78.0 age confidence minor 0.78.1
@google/gemini-cli 0.44.1 → 0.45.0 age confidence minor 0.45.2 (+1)
@openai/codex (source) 0.135.0 → 0.136.0 age confidence minor 0.137.0
github.com/securego/gosec/v2 v2.26.1 → v2.27.1 age confidence minor
go (source) 1.26.3 → 1.26.4 age confidence patch
opencode-ai 1.15.12 → 1.15.13 age confidence patch 1.16.2 (+2)

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.161

Compare Source

  • OTEL_RESOURCE_ATTRIBUTES values are now included as labels on metric datapoints, so you can slice usage metrics by custom dimensions like team or repo
  • claude agents rows now show done/total before the detail when work is fanned out; peek shows the longest-running item
  • /mcp now collapses claude.ai connectors you've never signed in to behind a "Show unused connectors" row
  • Parallel tool calls: a failed Bash command no longer cancels other calls in the same batch — each tool returns its own result independently
  • Fullscreen mode: clipboard now uses wl-copy/xclip/xsel on Linux when available, copies to both the clipboard and PRIMARY selection for middle-click paste, and the "hold {key} for native selection" hint now shows the correct key per terminal
  • Fixed the /effort dialog, workflow animations, and prompt keyword shimmer not honoring the "Reduce motion" setting
  • Fixed forceLoginOrgUUID/forceLoginMethod managed-settings policies blocking third-party provider sessions (Bedrock, Vertex, Foundry, Mantle) alongside the org pin (regression in 2.1.146)
  • Fixed background subagent output corrupting claude -p stdout when using --output-format text or json
  • Fixed /usage-credits starting a re-login for Team and Enterprise admins instead of pointing to the organization's usage settings page
  • Fixed /autofix-pr reporting "cannot run on the default branch" when the session is inside a git worktree or another repository
  • Fixed --resume picker not showing sessions from the current directory when it isn't a git worktree (e.g., jj workspaces)
  • Fixed Windows hooks that invoke bash explicitly (e.g., /usr/bin/bash script.sh) failing with "command not found" or "cannot execute binary file"
  • Fixed OpenTelemetry log events (user_prompt, api_request, tool_result, tool_decision) being silently dropped when emitted before telemetry initialization completed
  • Fixed claude mcp list/get/add printing secrets to the terminal: ${VAR} references are no longer expanded, and credential headers and URL secrets are redacted
  • Fixed Workflow agents spawned with isolation: "worktree" in background sessions being blocked from editing files inside their own worktree
  • Fixed background sessions dispatched from claude agents booting on a stale model from the daemon's environment instead of the model in settings.json
  • Fixed a potential crash when rendering Write tool results after resuming a session
  • Fixed completed subagents getting stuck showing as running when an error occurs while finalizing their result
  • Fixed EADDRINUSE errors from tools that bind Unix sockets under $TMPDIR when CLAUDE_CODE_TMPDIR is set to a deep path
  • Improved terminal rendering performance by stabilizing the layout engine's JIT compilation profile
  • Improved rendering performance for large file writes
  • [VSCode] Added a tip suggesting disabling terminal GPU acceleration (or running /terminal-setup) to fix garbled glyphs

v2.1.160

Compare Source

  • Added a prompt before writing to shell startup files (.zshenv, .zlogin, .bash_login) and ~/.config/git/, which could otherwise lead to unintended command execution
  • acceptEdits mode now prompts before writing build-tool config files that grant code execution (.npmrc, .yarnrc*, bunfig.toml, .bazelrc, .pre-commit-config.yaml, .devcontainer/, etc.)
  • Edit no longer requires a separate Read after viewing a file with grep: single-file grep/egrep/fgrep commands now satisfy the read-before-edit check
  • Fixed copy-on-select not writing to the Windows clipboard on WSL — now uses PowerShell interop instead of OSC 52, which terminals like MobaXterm don't support
  • Fixed restoring a completed session from claude agents dropping chat history and re-running the original prompt
  • Fixed background sessions re-attached after overnight retire losing their conversation and re-running the original prompt
  • Fixed claude --bg occasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machine
  • Fixed an issue on Windows where the directory a background session was started in could not be deleted after claude rm until the background daemon exited
  • Fixed background agents that resumed work being shown under Completed in the agents list
  • Fixed claude agents freezing for several seconds when returning to the session list due to the auto-updater re-checking on every exit
  • Fixed Esc, arrow keys, and typing becoming unresponsive on Windows when attached to a background session or in the agent view while the host is under heavy CPU load
  • Fixed background agents emitting terminal sync-output markers to terminals that don't support them (Apple Terminal, tmux), causing render artifacts when entering a running agent
  • Fixed mouse wheel scrolling prompt history instead of the transcript right after opening a session from the agents list
  • Fixed CJK IME composition appearing at the bottom-left of the screen instead of at the input caret in the claude agents view
  • Fixed valid file:///C:/... links being rewritten to a broken path on Windows terminals with hyperlink support
  • Fixed voice mode failing to connect when the project directory or branch name contains non-ASCII or special characters
  • Fixed the auto mode unavailability message on third-party providers (Bedrock/Vertex/Foundry) to point to the CLAUDE_CODE_ENABLE_AUTO_MODE opt-in instead of incorrectly blaming the model
  • Fixed /effort ultracode incorrectly blaming the dynamic workflows setting when the model cannot run xhigh; ultracode is no longer offered on models that do not support it
  • Fixed model-not-found errors suggesting --model when running via the SDK or other hosts where the CLI flag doesn't apply
  • Fixed Claude's past replies disappearing from scrollback when resuming a brief mode session with brief mode turned off
  • Fixed vim mode p pasting on the line below instead of at the cursor when the register was yanked with v$
  • Improved performance of opening recently-inactive background agent sessions in claude agents
  • Improved auto mode classifier latency by reducing reasoning on routine actions, lowering the chance of "could not evaluate this action" blocks
  • Improved background-session teardown (claude rm/stop, idle reap) to send SIGTERM to running shell subprocesses before SIGKILL, so cleanup handlers run
  • Removed CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE; the environment variable is now a no-op
  • Removed the JetBrains plugin install suggestion from startup
  • Renamed the dynamic-workflow trigger keyword from workflow to ultracode. The word "workflow" no longer triggers a run; asking for one in your own words still works. The trigger keyword is highlighted in violet in the prompt input

v2.1.159

Compare Source

  • Internal infrastructure improvements (no user-facing changes)

v2.1.158

Compare Source

  • Auto mode is now available on Bedrock, Vertex, and Foundry for Opus 4.7 and Opus 4.8. Opt in by setting CLAUDE_CODE_ENABLE_AUTO_MODE=1

v2.1.157

Compare Source

  • Plugins in .claude/skills directories are now automatically loaded, no marketplace required
  • Added claude plugin init <name> to scaffold a new plugin in .claude/skills
  • Added autocomplete for /plugin arguments: subcommands, installed plugin names, and plugins from known marketplaces
  • claude agents: the agent field in settings.json is now honored for dispatched sessions, with --agent <name> to override it
  • EnterWorktree can now switch between Claude-managed worktrees mid-session
  • tool_decision telemetry events now include tool_parameters (bash commands, MCP/skill names) when OTEL_LOG_TOOL_DETAILS=1
  • Worktrees managed by Claude are now left unlocked when the agent finishes, so git worktree remove/prune can clean them up
  • Fixed unprocessable images (zero-byte, corrupt) attached via paste, MCP, or dialog crashing the request instead of becoming a text placeholder
  • Fixed sandbox network permission prompts appearing in auto and bypass-permissions mode when using the desktop app, IDE extensions, or SDK
  • Fixed claude agents completed sessions not retiring when an idle subagent was still parked or had leaked a backgrounded shell
  • Fixed claude agents pressing Esc not cancelling a slow "opening…", leaving the list unresponsive
  • Fixed background agent worktrees under .claude/worktrees/ being orphaned after the 30-day job retention sweep
  • Fixed background sessions re-attached after a sleep/wake not telling the model the correct date
  • Fixed copy-on-select in claude agents not reaching the system clipboard inside tmux with set-clipboard on (regression in 2.1.153)
  • Fixed --resume not reporting background subagents that were running when the previous Claude Code process exited
  • Fixed the --resume session picker leaving its contents on the terminal after exiting in fullscreen mode
  • Fixed --worktree and --worktree --tmux returning to the canonical repo root instead of the current linked worktree
  • Fixed the /model picker showing an incorrect "Newer version available" hint when the selected model is already the newest in its family; the pinned-model row now shows the model's description instead of its raw ID
  • Fixed literal markdown markers (backticks, asterisks) appearing in the in-progress message text in fullscreen mode
  • Fixed the terminal freezing after approving the managed-settings security dialog at startup
  • Fixed a rare duplicate line appearing in scrollback after the terminal UI redraws
  • Fixed right-click paste duplicating the clipboard in the VS Code, Cursor, and Windsurf integrated terminals
  • WSL: fixed image paste (alt+v keybinding), screenshot paste on Windows 11, and added support for dragging images from Windows Explorer
  • Improved performance of long and resumed conversations by eliminating redundant message-rendering recomputations
  • /terminal-setup now disables GPU acceleration in VS Code/Cursor/Windsurf integrated terminals to prevent garbled-text rendering
  • The Feature of the Week credit-claim status now appears as a notification in the status area instead of a line above the prompt
  • claude agents: slash-command autocomplete in the dispatch input now matches substrings
  • Removed the "bash commands will be sandboxed" startup banner — sandbox status still shows in /status and when a command is blocked
  • Removed the "/ide for …" startup hint toast
  • [IDE] Fixed clicking Stop while a background subagent is running not actually stopping it
  • [VSCode] Fixed the fast mode indicator not appearing on Opus 4.8
  • Pressing backspace right after a workflow trigger keyword now dismisses the workflow request (same as alt+w) instead of deleting a character
  • Added a "Workflow keyword trigger" setting in /config to stop the word "workflow" in a prompt from triggering a dynamic workflow
earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.78.0

Compare Source

New Features
  • Named startup sessions - --name / -n sets the session display name before startup across interactive, print, JSON, and RPC modes. See Naming Sessions and Session Options.
  • Clickable file tool paths - built-in file tool titles render OSC 8 file:// hyperlinks when the terminal supports them, including supported tmux clients.
Added
  • Exported convertToPng for extension authors (#​5167 by @​xl0).
  • Exported parseArgs and type Args for extension authors (#​5202 by @​xl0).
  • Added --name / -n to set the session display name at startup (#​5153).
  • Added a resume command hint when exiting interactive sessions (#​5176 by @​yzhg1983).
  • Added OSC 8 file:// hyperlinks to file paths shown in built-in file tool titles (#​5189 by @​mpazik).
  • Added custom Amazon Bedrock request header support inherited from @earendil-works/pi-ai (#​5178 by @​stephanmck).
Fixed
  • Clarified the WezTerm/WSL IME hardware cursor docs to state that cursor visibility remains opt-in (#​5200).
  • Fixed the GitLab Duo custom provider example to use adaptive thinking for Claude models, expose xhigh thinking, and include newer verified model IDs (#​5201).
  • Fixed Bun release archive creation to install and copy the matching @mariozechner/clipboard base package and native sidecars (#​5184).
  • Fixed early interactive input typed before the prompt loop starts so it is buffered instead of dropped (#​5195 by @​yzhg1983).
  • Fixed OpenRouter Moonshot Kimi K2.6 requests to use system instead of unsupported developer messages (#​5159).
  • Fixed OpenCode Go Kimi K2.6 thinking requests to send thinking objects instead of invalid string values, and fixed OpenCode Zen Grok Build thinking requests to omit unsupported reasoning_effort (#​5169).
  • Fixed OpenAI Codex Responses SSE streams to abort response body reads after terminal events.
  • Fixed OpenCode Kimi K2.6 generated metadata to use Anthropic-style thinking metadata instead of invalid reasoning-effort parameters.
  • Fixed OSC 8 hyperlinks to pass through tmux when the client supports them (#​5189 by @​mpazik).
  • Fixed ANSI text wrapping to avoid stack overflows on very long wrapped lines (#​5185).
google-gemini/gemini-cli (@​google/gemini-cli)

v0.45.0

Compare Source

What's Changed
New Contributors

Full Changelog: google-gemini/gemini-cli@v0.44.1...v0.45.0

v0.45.0-preview.1

Compare Source

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.45.0-preview.0...v0.45.0-preview.1

v0.45.0-preview.0

Compare Source

What's Changed

New Contributors

Full Changelog: google-gemini/gemini-cli@v0.44.0-preview.0...v0.45.0-preview.0

v0.45.0-nightly.20260602.g665228e98

Compare Source

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.45.0-nightly.20260530.g013914071...v0.45.0-nightly.20260602.g665228e98

v0.45.0-nightly.20260530.g013914071

Compare Source

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.45.0-nightly.20260529.gc82e2b597...v0.45.0-nightly.20260530.g013914071

v0.45.0-nightly.20260529.gc82e2b597

Compare Source

What's Changed

Full Changelog: google-gemini/gemini-cli@v0.45.0-nightly.20260528.g5cac7c10f...v0.45.0-nightly.20260529.gc82e2b597

v0.45.0-nightly.20260528.g5cac7c10f

Compare Source

What's Changed

New Contributors

Full Changelog: google-gemini/gemini-cli@v0.45.0-nightly.20260527.g41c9260ca...v0.45.0-nightly.20260528.g5cac7c10f

v0.45.0-nightly.20260527.g41c9260ca

Compare Source

What's Changed

New Contributors

Full Changelog: google-gemini/gemini-cli@v0.44.0-nightly.20260521.g57c42a5c4...v0.45.0-nightly.20260527.g41c9260ca

securego/gosec (github.com/securego/gosec/v2)

v2.27.1

Compare Source

Changelog

v2.27.0

Compare Source

Changelog

golang/go (go)

v1.26.4

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Only on Wednesday (* * * * 3)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Jun 2, 2026
@renovate renovate Bot force-pushed the renovate.bump-dependencies branch from ebce48d to 2aa4dad Compare June 2, 2026 21:54
@renovate

renovate Bot commented Jun 2, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Dockerfile
Post-upgrade command './scripts/update-go-shas.sh' has not been added to the allowed list in allowedCommands

@renovate renovate Bot force-pushed the renovate.bump-dependencies branch from 2aa4dad to f69560e Compare June 6, 2026 10:18
@joecorall joecorall enabled auto-merge (squash) June 6, 2026 10:23
@joecorall joecorall merged commit e3cbab9 into main Jun 6, 2026
4 checks passed
@joecorall joecorall deleted the renovate.bump-dependencies branch June 6, 2026 10:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joecorall