chore(deps): bump undici and @earendil-works/pi-coding-agent

[dependabot]

Bumps undici to 8.9.0 and updates ancestor dependency @earendil-works/pi-coding-agent. These dependencies need to be updated together.

Updates undici from 8.5.0 to 8.9.0

Release notes

Sourced from undici's releases.

v8.9.0

⚠️ Security fixes

High severity

• GHSA-4cwx-7wf7-3272: malformed qualified private Cache-Control directives could cause cross-user information disclosure in shared caches or a parse-time crash. The cache parser now treats empty qualified directives conservatively and safely handles mixed qualified and unqualified directives. Fixed by 4fe5bc5f with regression coverage in 9f09b49a.

Medium severity

• GHSA-m8rv-5g2x-5cg5: a malicious type property on a duck-typed blob-like HTTP/1.1 request body could inject CRLF sequences into the generated content-type header. Undici now coerces and validates the value before adding it to the request. Fixed by 7d3cf924.
• GHSA-jr45-8vmc-qm54: optional whitespace around = in qualified no-cache and private directives could bypass shared-cache restrictions and disclose authenticated data across users. Cache-Control parsing now normalizes these forms and applies conservative cache decisions. Fixed by c601fff1.
• GHSA-8xcm-r25x-g524: the retry interceptor could expose a stale Content-Length after resuming a partial response, potentially causing downstream response desynchronization, hangs, or corruption. Undici now rejects partial responses whose Content-Length is inconsistent with Content-Range. Fixed by e11a68ed, with corrected fixtures in 2b3f7493.
• GHSA-v3r7-h72x-cjcm: unsanitized domain and unparsed values passed to setCookie() could inject cookie attributes. Undici now validates cookie domains, paths, and unparsed attributes more strictly. Fixed by 10d93fc3.

Additional hardening

Undici now validates non-string header values after coercion, including array elements, preventing crafted toString() or Symbol.toPrimitive implementations from introducing CRLF sequences. This defense-in-depth change was made in 354a151f.

What's Changed

• fix(decompress): preserve response trailers by @​Ram-blip in nodejs/undici#5572
• build(deps-dev): bump ws from 8.21.0 to 8.21.1 by @​dependabot[bot] in nodejs/undici#5576
• fix: validate coerced header values for CRLF by @​mcollina in nodejs/undici#5579
• fix: handle frozen globalThis in setGlobalDispatcher by @​mhayk in nodejs/undici#5574
• Ignore auto-generated .npmrc on Windows by @​tsctx in nodejs/undici#5583

New Contributors

• @​mhayk made their first contribution in nodejs/undici#5574

Full Changelog: nodejs/undici@v8.8.0...v8.9.0

v8.8.0

What's Changed

• fetch: use ReadableStreamTee for cloning streams by @​KhafraDev in nodejs/undici#5517
• fix(benchmarks): adjust got after v15 upgrade by @​slagiewka in nodejs/undici#5526
• feat(mock): support asynchronous reply options callbacks by @​Develop-KIM in nodejs/undici#5534
• docs: clarify proxy threat model by @​mcollina in nodejs/undici#5530
• docs: clarify MockAgent pool usage by @​vibhor-aggr in nodejs/undici#5542
• docs: clarify parser timeout precision by @​vibhor-aggr in nodejs/undici#5543
• fix: handle flat alternating header arrays in cache normalizeHeaders by @​mcollina in nodejs/undici#5536
• chore(benchmarks): require(esm) on ESM-only packages by @​slagiewka in nodejs/undici#5527
• fix: run idle socket validation off setImmediate instead of setTimeout by @​carlotestor in nodejs/undici#5499
• docs: add custom interceptor example by @​vibhor-aggr in nodejs/undici#5548
• fix(h1): ignore type of service errors by @​mcollina in nodejs/undici#5547
• fix(fetch): convert null init in Response.json by @​Ram-blip in nodejs/undici#5540
• fix(redirect): remove body headers after POST-to-GET by @​Ram-blip in nodejs/undici#5551
• build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @​dependabot[bot] in nodejs/undici#5556
• fix(h2): allow stream-bodied requests to multiplex on a busy session by @​GiHoon1123 in nodejs/undici#5538
• fix(h2): destroy aborted stream synchronously instead of via setImmediate by @​staylor in nodejs/undici#5559
• fix(decompress): skip HEAD responses by @​Ram-blip in nodejs/undici#5564
• ci: build undici with node.js v26 by @​shivarm in nodejs/undici#5237

... (truncated)

Commits

• 21a8e1e Bumped v8.9.0 (#5589)
• 7d3cf92 fix: validate blob body content type
• c601fff fix(cache): harden cache directive parsing
• 2b3f749 test(retry): correct broken content-range fixtures in retry-handler.js
• e11a68e fix(retry): reject partial content length mismatch
• 9f09b49 test: cover crash on mixed unqualified and qualified private cache directives
• 4fe5bc5 fix: handle empty qualified private cache directive
• 10d93fc fix: harden cookie domain, path, and unparsed attribute validation
• a17e301 Ignore auto-generated .npmrc on Windows (#5583)
• a0922b0 fix: handle frozen globalThis in setGlobalDispatcher (#5574)
• Additional commits viewable in compare view

Updates @earendil-works/pi-coding-agent from 0.80.10 to 0.84.2

Release notes

Sourced from @​earendil-works/pi-coding-agent's releases.

v0.84.2

New Features

• Fullscreen transcript search — Search and navigate matches in fullscreen mode. See TUI Fullscreen Viewport.
• Configurable default tools — Choose startup built-in tools globally or per project. See Tools.
• Configurable fullscreen exit output — Print the transcript or only a resume hint on exit. See Interactive Mode.

Added

• Added fullscreen transcript search with Ctrl+Shift+F, incremental match highlighting, configurable search match theme colors, and next/previous navigation with Enter/Ctrl+G and Shift+Enter/Ctrl+Shift+G.
• Added experimental strict JSON-schema constrained sampling for the default read, bash, edit, and write tools under PI_EXPERIMENTAL=1.
• Added a fullscreen exit output setting to choose between printing the final transcript and only a session resume hint.
• Added the defaultTools setting for configuring the initial built-in tool selection globally or per project.
• Added --use-theme <name[/name]> to choose an initial per-run interactive theme without changing saved settings (#7722 by @​rwachtler).
• Added expandPromptTemplates to extension pi.sendUserMessage() options for explicitly dispatching commands and expanding skills and prompt templates. See pi.sendUserMessage() (#7857 by @​mrexodia).
• Added inherited createGatewayBindingFetch() for routing Cloudflare AI Gateway requests through a Workers AI binding without an API token (#7901 by @​Maximo-Guk).
• Added inherited AssistantMessage.endTurn to preserve OpenAI Codex's terminal end_turn signal for diagnostics (#7766).
• Added inherited unbound single-line transcript scrolling actions for fullscreen mode. See TUI Fullscreen Viewport (#7903 by @​midastruth).

Changed

• Changed inherited Kimi Coding requests to use pi's runtime User-Agent header.
• Replaced the inherited Mistral SDK transport with a native Chat Completions HTTP stream, eliminating its generated client and schema runtime overhead.
• Documented the generic AI_AGENT=pi process marker and how it differs from PI_CODING_AGENT=true (#7747).
• Changed inherited OpenAI Responses deferred tool loading to prefer message-anchored additional_tools where supported while retaining tool-search and top-level fallbacks (#7709).
• Reduced inherited fullscreen rendering allocation churn by painting full-width layout rows directly instead of recompositing them on every frame.

Fixed

• Fixed managed-tool downloads delaying TUI startup and hiding diagnostics in fullscreen mode by mounting the TUI first and showing download progress and warnings inside it.
• Fixed opening a model selector immediately after startup cancelling and restarting the in-progress model catalog refresh.
• Fixed inherited GitHub Copilot login triggering API rate limits while enabling model policies by limiting concurrent policy updates (#6187).
• Fixed fullscreen transcript search snapping back to the current match during manual scrolling and fragmented mouse input leaking into the search query.
• Fixed inherited required LaTeX arguments starting on a new line being parsed as empty (#7760).
• Updated the transitive nanoid development dependency to address a denial-of-service vulnerability.
• Fixed fallback rendering for extension tool results to collapse long output and honor tool expansion (#7979).
• Fixed JSON and RPC message_update events dropping cumulative usage during streaming. See JSON Event Mode and RPC message_update (#7982 by @​christianklotz).
• Fixed pi.sendMessage(..., { triggerTurn: false }) steering an active run instead of only recording the custom message (#8022 by @​cristinaponcela).
• Fixed the defaultTools setting dropping extension and SDK custom tools when selecting built-in defaults.
• Fixed the subagent example rejecting YAML array syntax for the tools frontmatter field (#7598 by @​alexsavio).
• Fixed the subagent example dropping parent session model, thinking, and tool configuration (#7897 by @​virtuald).
• Fixed custom system prompts concatenating the current working directory with later appended prompt content (#7887 by @​distributedlock).
• Fixed inherited OpenAI Responses function and custom tool calls losing namespaces during streaming, proxying, and replay (#7709).
• Fixed inherited upstream request buffer failures not triggering automatic assistant retries.
• Fixed inherited built-in and custom DeepSeek API models sending output limits through an unsupported field.
• Fixed inherited Amazon Bedrock replay rejecting tool arguments that contain empty object keys while preserving all valid nested values (#7882 by @​muyiyr).
• Fixed inherited DeepSeek compatibility detection for base URLs whose hostname contains uppercase letters (#7933 by @​yearth).
• Fixed inherited Google Generative AI and Vertex AI responses with tool calls incorrectly treating output-limit or provider-error stops as normal tool use (#8059).
• Fixed inherited fullscreen mouse drag selection and OSC 8 link activation in terminals that report generic SGR mouse release button codes (#7963).
• Fixed inherited focused fullscreen overlays not receiving mouse wheel or viewport scroll keys such as PageUp and PageDown (#7894).

... (truncated)

Changelog

Sourced from @​earendil-works/pi-coding-agent's changelog.

[0.84.2] - 2026-08-14

New Features

• Fullscreen transcript search — Search and navigate matches in fullscreen mode. See TUI Fullscreen Viewport.
• Configurable default tools — Choose startup built-in tools globally or per project. See Tools.
• Configurable fullscreen exit output — Print the transcript or only a resume hint on exit. See Interactive Mode.

Added

• Added fullscreen transcript search with Ctrl+Shift+F, incremental match highlighting, configurable search match theme colors, and next/previous navigation with Enter/Ctrl+G and Shift+Enter/Ctrl+Shift+G.
• Added experimental strict JSON-schema constrained sampling for the default read, bash, edit, and write tools under PI_EXPERIMENTAL=1.
• Added a fullscreen exit output setting to choose between printing the final transcript and only a session resume hint.
• Added the defaultTools setting for configuring the initial built-in tool selection globally or per project.
• Added --use-theme <name[/name]> to choose an initial per-run interactive theme without changing saved settings (#7722 by @​rwachtler).
• Added expandPromptTemplates to extension pi.sendUserMessage() options for explicitly dispatching commands and expanding skills and prompt templates. See https://github.com/earendil-works/pi/blob/main/packages/coding-agent[https://github.com/earendil-works/pi/blob/main/packages/coding-agent`https://github.com/earendil-works/pi/blob/main/packages/coding-agentphttps://github.com/earendil-works/pi/blob/main/packages/coding-agentihttps://github.com/earendil-works/pi/blob/main/packages/coding-agent.https://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentdhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentUhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentrhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentMhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentahttps://github.com/earendil-works/pi/blob/main/packages/coding-agentghttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agent(https://github.com/earendil-works/pi/blob/main/packages/coding-agent)https://github.com/earendil-works/pi/blob/main/packages/coding-agent`https://github.com/earendil-works/pi/blob/main/packages/coding-agent]https://github.com/earendil-works/pi/blob/main/packages/coding-agent(https://github.com/earendil-works/pi/blob/main/packages/coding-agentdhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentohttps://github.com/earendil-works/pi/blob/main/packages/coding-agentchttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agent/https://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentxhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentthttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentihttps://github.com/earendil-works/pi/blob/main/packages/coding-agentohttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agent.https://github.com/earendil-works/pi/blob/main/packages/coding-agentmhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentdhttps://github.com/earendil-works/pi/blob/main/packages/coding-agent#https://github.com/earendil-works/pi/blob/main/packages/coding-agentphttps://github.com/earendil-works/pi/blob/main/packages/coding-agentihttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentdhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentuhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentrhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentmhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agentahttps://github.com/earendil-works/pi/blob/main/packages/coding-agentghttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentchttps://github.com/earendil-works/pi/blob/main/packages/coding-agentohttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentthttps://github.com/earendil-works/pi/blob/main/packages/coding-agentehttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentthttps://github.com/earendil-works/pi/blob/main/packages/coding-agent-https://github.com/earendil-works/pi/blob/main/packages/coding-agentohttps://github.com/earendil-works/pi/blob/main/packages/coding-agentphttps://github.com/earendil-works/pi/blob/main/packages/coding-agentthttps://github.com/earendil-works/pi/blob/main/packages/coding-agentihttps://github.com/earendil-works/pi/blob/main/packages/coding-agentohttps://github.com/earendil-works/pi/blob/main/packages/coding-agentnhttps://github.com/earendil-works/pi/blob/main/packages/coding-agentshttps://github.com/earendil-works/pi/blob/main/packages/coding-agent)https://github.com/earendil-works/pi/blob/main/packages/coding-agent (#7857 by @​mrexodia).
• Added inherited createGatewayBindingFetch() for routing Cloudflare AI Gateway requests through a Workers AI binding without an API token (#7901 by @​Maximo-Guk).
• Added inherited AssistantMessage.endTurn to preserve OpenAI Codex's terminal end_turn signal for diagnostics (#7766).
• Added inherited unbound single-line transcript scrolling actions for fullscreen mode. See TUI Fullscreen Viewport (#7903 by @​midastruth).

Changed

• Changed inherited Kimi Coding requests to use pi's runtime User-Agent header.
• Replaced the inherited Mistral SDK transport with a native Chat Completions HTTP stream, eliminating its generated client and schema runtime overhead.
• Documented the generic AI_AGENT=pi process marker and how it differs from PI_CODING_AGENT=true (#7747).
• Changed inherited OpenAI Responses deferred tool loading to prefer message-anchored additional_tools where supported while retaining tool-search and top-level fallbacks (#7709).
• Reduced inherited fullscreen rendering allocation churn by painting full-width layout rows directly instead of recompositing them on every frame.

Fixed

• Fixed root Markdown files such as README.md and AGENTS.md in skill directories being reported as broken skills unless they declare valid skill frontmatter (#7805).
• Fixed single-object edit tool inputs failing validation by accepting them as one-edit arrays in both coding-agent and harness edit tools (#7835).
• Fixed managed-tool downloads delaying TUI startup and hiding diagnostics in fullscreen mode by mounting the TUI first and showing download progress and warnings inside it.
• Fixed opening a model selector immediately after startup cancelling and restarting the in-progress model catalog refresh.
• Fixed inherited GitHub Copilot login triggering API rate limits while enabling model policies by limiting concurrent policy updates (#6187).
• Fixed fullscreen transcript search snapping back to the current match during manual scrolling and fragmented mouse input leaking into the search query.
• Fixed inherited required LaTeX arguments starting on a new line being parsed as empty (#7760).
• Updated the transitive nanoid development dependency to address a denial-of-service vulnerability.
• Fixed fallback rendering for extension tool results to collapse long output and honor tool expansion (#7979).
• Fixed JSON and RPC message_update events dropping cumulative usage during streaming. See JSON Event Mode and RPC message_update (#7982 by @​christianklotz).
• Fixed pi.sendMessage(..., { triggerTurn: false }) steering an active run instead of only recording the custom message (#8022 by @​cristinaponcela).
• Fixed the defaultTools setting dropping extension and SDK custom tools when selecting built-in defaults.
• Fixed the subagent example rejecting YAML array syntax for the tools frontmatter field (#7598 by @​alexsavio).
• Fixed the subagent example dropping parent session model, thinking, and tool configuration (#7897 by @​virtuald).
• Fixed custom system prompts concatenating the current working directory with later appended prompt content (#7887 by @​distributedlock).
• Fixed inherited OpenAI Responses function and custom tool calls losing namespaces during streaming, proxying, and replay (#7709).
• Fixed inherited upstream request buffer failures not triggering automatic assistant retries.
• Fixed inherited built-in and custom DeepSeek API models sending output limits through an unsupported field.
• Fixed inherited Amazon Bedrock replay rejecting tool arguments that contain empty object keys while preserving all valid nested values (#7882 by @​muyiyr).
• Fixed inherited DeepSeek compatibility detection for base URLs whose hostname contains uppercase letters (#7933 by @​yearth).

... (truncated)

Commits

• 914cf14 Release v0.84.2
• 9b4adc8 docs: audit changelogs since v0.84.1
• d10c974 docs: audit changelogs since v0.84.1
• 4caa3c4 fix(tui): route selection copy through the host clipboard (#8110)
• ab0dc51 fix(coding-agent): use APP_NAME in user-facing messages (#8067)
• e14afc6 fix(coding-agent): collapse fallback tool output closes #7979
• 6633618 fix(coding-agent): update vulnerable nanoid dependency
• d268454 fix(examples): accept array-form tools in the subagent example (#7598)
• 5f7195c fix(coding-agent): update Cloudflare compat test model
• 9d2ec7f fix(ai): use pi user agent for Kimi Coding requests
• Additional commits viewable in compare view