Skip to content

Update development dependencies - #16

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dev-dependencies
Open

Update development dependencies#16
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dev-dependencies

Conversation

@renovate

@renovate renovate Bot commented May 8, 2026 •
edited
Loading

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Confidence
@headsdown/sdk ^0.2.13 → ^0.11.0 age confidence
@types/node (source) 22.19.17 → 22.20.2 age confidence
@types/vscode (source) 1.110.0 → 1.137.0 age confidence
@vscode/vsce (source) 3.7.1 → 3.9.2 age confidence
prettier (source) 3.8.1 → 3.9.6 age confidence

Release Notes

headsdownapp/headsdown-sdk (@​headsdown/sdk)

v0.11.0

Compare Source

Added
  • Added HeadsDownClient.requestSessionTimeboxExtension() for requesting more time on an active session timebox using only an opaque session id and requested minute count.
  • Added SessionTimeboxExtensionRequestInput, SessionTimeboxExtensionRequest, and SessionTimeboxExtensionRequestResult types for session timebox extension requests.
  • Added optional session_ended.reason and session_ended.ended_at metadata to the IntegrationEvent vocabulary.
Changed
  • Tightened TurnFailedReason and ToolFailedReason to closed manifest enums so TypeScript callers match hosted validation.

v0.10.0

Compare Source

Added
  • Added the IntegrationEvent vocabulary: a vendor-neutral discriminated union covering session lifecycle (session_started, session_ended), turn lifecycle (turn_started, turn_ended, turn_failed), tool lifecycle (tool_invoked, tool_succeeded, tool_failed), authorization (permission_denied), and context (context_compacted).
  • Added per-variant constructor helpers (sessionStartedEvent, turnFailedEvent, etc.) and a generic integrationEvent(context, event) that route through assertIntegrationEvent for eager shape, enum, opaque-id, and privacy validation.
  • Added INTEGRATION_EVENT_TYPE namespace constants mapping each variant to its wire-level event type (integration.session_started, etc.). Wire events ride on the existing reportAgentRunEvent GraphQL mutation; no new transport is needed.
  • Added INTEGRATION_EVENT_MANIFEST as the single source of truth for variant names, wire types, required and optional payload fields, and per-field enum value sets. Type aliases (SessionOutcome, TurnFailedReason, etc.) and runtime validation Sets are now derived from the manifest, so adding a variant or enum value is a single-edit change.
  • Added schemas/integration-event-manifest.json, emitted from INTEGRATION_EVENT_MANIFEST by the new emit:integration-event-manifest npm script. Hosted backends (and any other language target) can read this JSON to assert their own validators stay in parity with the SDK.
  • Added BucketLabel nominal alias documenting fields whose values are privacy-safe categorical labels (the runtime regex enforces the constraint).
  • Added open-string-union escape hatches ((string & {})) on TurnFailedReason and ToolFailedReason, matching the existing AgentRunEventType pattern so future integrations can report new categories without an SDK upgrade.
Changed
  • Extended the SDK privacy filter PROHIBITED_KEYS set with model_responses, transcript, transcripts, repo_name, git_repo, git_repository, git_branch, and source, aligning with the hosted prohibited-key list.
  • Added an envelope-level top-level exemption to privacySafeClone so SDK-controlled envelope fields like source: "sdk" continue to flow through while the same key nested inside a payload is still rejected.
  • Split the privacy walker into a validate-only path (validatePrivacySafe, no allocation) and the existing clone path (privacySafeClone, with allocation). assertPrivacySafe now uses the validate-only path, so eager validation in helpers no longer allocates a clone that gets discarded.

v0.9.0

Compare Source

Added
  • Added the @headsdown/sdk/referee subpath with shared local Referee contract parsing, evidence normalization, evaluation, structured and markdown receipt rendering, outcome payload shaping, preview text, share-decision helpers, and recursive privacy filtering.
  • Added submitLocalRefereeOutcomeSummary for privacy-filtered hosted outcome submission with a typed endpoint-unavailable result when the endpoint is unavailable.
  • Added parameterized Local Referee client metadata so integrations can report privacy-safe client kind and version metadata without changing the outcome schema.
  • Added an additive classifier telemetry manifest with SDK-owned vocabularies, a conversion helper for existing classifier results, and documentation for consumers that can keep using the SDK 0.6.0 minimal classifier subset until they adopt the richer manifest.
  • Added shared deferred-decision re-attempt outcome helpers: DeferredDecisionReAttemptOutcome, DeferredDecisionReAttemptedPayload, deferredDecisionReAttemptedEvent, and client.reportDeferredDecisionReAttempted().
Fixed
  • Updated the ask-user classifier fixture to use the canonical recovery_decision category.

v0.8.0

Compare Source

Added
  • Added first-class SDK helpers for temporary availability overrides: getActiveAvailabilityOverride, createAvailabilityOverride, and cancelAvailabilityOverride.

v0.7.0

Compare Source

Added
  • Added the @headsdown/sdk/agent subpath for pure agent adapter helpers, including shared HeadsDown call/action rendering and privacy-safe event builder exports.
  • Added fetchAutopilotPolicy, AUTOPILOT_POLICY_QUERY, assertAutopilotPolicy, and AutopilotPolicyResponse for typed per-mode autopilot policy reads.
Fixed
  • Tightened metadata-only agent event validation and context-aware enum handling for agent run event helpers.

v0.6.0

Compare Source

Added
  • Added interaction.ask_user variant to ActionShape discriminated union with required question_category and recent_tool_context fields.
  • Added exported types QuestionCategory and RecentToolContext for the new variant.
  • Added isInteractionAskUserActionShape type guard.
  • Extended classifyActionShapeFallback with deterministic classification for interaction.ask_user: baseline notable, reclassified to permanent on recovery_decision + failed, reclassified to routine on tooling_choice + succeeded.
  • Extended buildClassifierPromptFragments with ask_user fixture references in taxonomyFragment and ask_user guidance in instructionsFragment.
  • Added four representative CLASSIFIER_FIXTURES entries for the new variant.
  • Bumped AUTOPILOT_CLASSIFIER_VERSION from 1.0.0 to 1.1.0. Old SDKs pinned to 1.0.0 degrade safely via the existing unknown-variant fallback.
  • Added tests: type-level discrimination, all four fixture cases, malformed-shape fail-closed coverage, valid-combination property coverage (no valid combination produces trivial/critical/classification_failed), and 1.0.0 ↔ 1.1.0 version-compatibility regression.
  • Updated README with interaction.ask_user usage, deterministic rules table, and action-schema extension guide.

v0.5.1

Compare Source

Added
  • Added deferred_decision.resolved agent-run SDK support:
    • DeferredDecisionResolutionKind, DeferredDecisionNotesBucket, and DeferredDecisionResolvedPayload types.
    • deferredDecisionResolvedEvent(context, payload) builder with deterministic idempotency key format {run_id}:deferred_decision.resolved:{decision_id}.
    • client.reportDeferredDecisionResolved(context, payload) helper.
  • Added client.listAgentRunEvents(args) and LIST_AGENT_RUN_EVENTS_QUERY for reading event streams with optional resolutionKind filtering.
  • Added tests for resolved-event builder/client round-trip and listAgentRunEvents query variable wiring.

v0.5.0

Compare Source

Added
  • Added a shared autopilot classifier substrate export surface:
    • severity taxonomy definitions and fixtures
    • policy-aware classifier prompt fragments
    • typed action-shape schema with conservative unknown-variant fallback
    • pure escalation decision logic with capability-aware sandbox handling
  • Added classifier version compatibility helpers for major/minor mismatch handling semantics.
  • Added classifier substrate tests for fixtures, escalation path properties, unknown variant fallback, capability-aware behavior, and version mismatch handling.
  • Added a shared LocalSessionSummary SDK contract with strict TypeScript typing, schema export constants, and assertLocalSessionSummary() validation.
  • Added a published JSON schema artifact at schemas/local-session-summary.schema.json for non-TypeScript consumers and validator pipelines.
Changed
  • Expanded README with classifier substrate usage, extension expectations, read-fresh policy contract, and version-mismatch behavior.
LocalSessionSummary guidance

Include only derived session facts:

  • Version and generated timestamp metadata.
  • Opaque session/proposal references.
  • Boolean state flags (stale, continuation artifact availability, local validation outcome).
  • Numeric counters (tool calls, file changes, deferred decisions).
  • Outcome category (in_progress, completed, tabled, deferred_for_review).

Do not include raw context:

  • Prompts, model outputs, or transcripts.
  • File paths, repo names, branch names, or diffs.
  • Logs, stack traces, URLs, or secrets.

Example:

const summary: LocalSessionSummary = {
  version: 1,
  sessionId: "session_123",
  generatedAt: new Date().toISOString(),
  stale: false,
  toolCallCount: 8,
  fileChangeCount: 3,
  deferredDecisionCount: 1,
  continuationArtifactAvailable: true,
  validationLocallyPassed: true,
  approvedProposalRef: "proposal_456",
  outcomeCategory: "completed",
};

v0.4.0

Compare Source

Added
  • Added SDK type support for the attention_window_closing HeadsDown call key, covering the attended-mode window-closing rescue flow.
Changed
  • Refreshed generated schema types for finish_line_friction. The server now recommends narrow_scope for this call via the recommended_action_key field, replacing the previous pause_and_summarize recommendation. SDK consumers should read the server-provided value and avoid hardcoding the old default.
Note
  • rabbit_hole_detected remains in the type union and is still valid for compatibility. Do not introduce new uses of it. Clients implementing the new contract must not render it as a hard-stop; treat it like keep_it_tight if encountered.

v0.3.1

Compare Source

  • Added SDK type support for the finish_line_friction HeadsDown call key.

v0.3.0

Compare Source

  • Added privacy-safe agent run event reporting helpers for canonical HeadsDown event taxonomy.
  • Added reportAgentRunEvent() and named helpers for run lifecycle, progress, scope drift, continuation, queue, resume, terminal, and steering outcome events.
  • Added structured progressPayload GraphQL serialization, metadata-only privacy validation, bucket helpers, and generated schema/types for the #​906 backend event ingestion API.

v0.2.15

Compare Source

  • Added SDK helpers for applying canonical HeadsDown actions, including queueing, pausing, resuming, narrowing, stopping, and temporary exception flows.
  • Added typed action errors for invalid state, expired action, feature disabled, and auth failure.
  • Added idempotency key derivation for HeadsDown action helpers and typed GraphQL operation coverage for applyHeadsdownAction.

v0.2.14

Compare Source

What's Changed

Full Changelog: headsdownapp/headsdown-sdk@v0.2.13...v0.2.14

Microsoft/vsce (@​vscode/vsce)

v3.9.2

Compare Source

Changes:

This list of changes was auto generated.

v3.9.1

Compare Source

Changes:

This list of changes was auto generated.

v3.9.0

Compare Source

Changes:

  • #​1263: fix: build regressions in 3.8.1
  • #​1261: Add override for serialize-javascript

This list of changes was auto generated.

v3.8.1

Compare Source

Changes:

This list of changes was auto generated.

v3.8.0

Compare Source

Changes:

See More

This list of changes was auto generated.

prettier/prettier (prettier)

v3.9.6

Compare Source

v3.9.5

Compare Source

diff

Markdown: Cap ordered list mark at 999,999,999 (#​19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text

1234567890123456789012) text

<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text

1234567890123456789012) text

<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text

1234567890123456789012) text
Markdown: Avoid corrupting empty link with title (#​19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](<> "title")

<!-- Prettier 3.9.4 -->
[link]( "title")

<!-- Prettier 3.9.5 -->
[link](<> "title")
Less: Remove extra spaces after [ in map lookups (#​19503 by @​kovsu)
// Input
.foo {
  color: #theme[ primary];
  color: #theme[@name];
  color: #theme[@@name];
}

// Prettier 3.9.4
.foo {
  color: #theme[ primary];
  color: #theme[ @name];
  color: #theme[ @@name];
}

// Prettier 3.9.5
.foo {
  color: #theme[primary];
  color: #theme[@name];
  color: #theme[@@name];
}
CSS: Prevent addition space in type() with + (#​19516 by @​bigandy)

This fixes the addition space before + in CSS type() declaration. For example type(<number>+) was being converted into type(<number> +) which is invalid CSS and does not work.

/* Input */
div {
  border-radius: attr(br type(<length>+));
}

/* Prettier 3.9.4 */
div {
  border-radius: attr(br type(<length> +));
}

/* Prettier 3.9.5 */
div {
  border-radius: attr(br type(<length>+));
}
Less: Remove spaces between merge markers and colons (#​19517 by @​kovsu)
// Input
a {
  box-shadow  +  : 0 0 1px #&#8203;000;
}

// Prettier 3.9.4
a {
  box-shadow+  : 0 0 1px #&#8203;000;
}

// Prettier 3.9.5
a {
  box-shadow+: 0 0 1px #&#8203;000;
}
Markdown: Preserve wiki links with aliases (#​19527 by @​kovsu)
<!-- Input -->
[[Foo:Bar]]

<!-- Prettier 3.9.4 -->
[[Foo]]

<!-- Prettier 3.9.5 -->
[[Foo:Bar]]
TypeScript: Fix comments being dropped on shorthand type import/export specifiers (#​19565 by @​kirkwaiblinger)
// Input
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";

// Prettier 3.9.4
Error: Comment "comment" was not printed. Please report this error!

// Prettier 3.9.5
export { type /* comment */ T } from "foo";
import { type /* comment */ T } from "foo";
Miscellaneous: Preserving comments' placement property (#​19567 by @​Janther)

Prettier@​3.9.0 deleted an undocumented property on comments, which was already used by plugins, comment.placement is now available again after comment attach.

Flow: Stop enforcing empty module declaration to break (#​19568 by @​fisker)
// Input
declare module "foo" {}

// Prettier 3.9.4
declare module "foo" {
}

// Prettier 3.9.5
declare module "foo" {}
Angular: Support expression for exhaustive typechecking (#​19571 by @​fisker)
<!-- Input -->
@switch (state.mode) {
  @default never(state);
}

<!-- Prettier 3.9.4 -->
@switch (state.mode) {
  @default never;
}

<!-- Prettier 3.9.5 -->
@switch (state.mode) {
  @default never(state);
}
TypeScript: Ignore comments inside mapped type when checking type parameter comments (#​19572 by @​fisker)
// Input
foo<{
  // comment
  [key in keyof Foo]: number
}>();

// Prettier 3.9.4
foo<
  {
    // comment
    [key in keyof Foo]: number;
  }
>();

// Prettier 3.9.5
foo<{
  // comment
  [key in keyof Foo]: number;
}>();
Less: Fix adjacent block comments being corrupted (#​19574 by @​kovsu)
// Input
/* a *//* b */
/* a */* {
  color: red;
}

// Prettier 3.9.4
/* a */
/* b */
/* a * {
  color: red;
}

// Prettier 3.9.5
/* a */ /* b */
/* a */
* {
  color: red;
}
JavaScript: Handle dangling comments in SwitchStatement (#​19581 by @​fisker)
// Input
switch (foo) {
 // comment
}

// Prettier 3.9.4
switch (
  foo
  // comment
) {
}

// Prettier 3.9.5
switch (foo) {
  // comment
}
TypeScript: Remove space in comment-only object type (#​19583 by @​fisker)
// Input
var foo = {
  /* comment */
};
type Foo = {
  /* comment */
};

// Prettier 3.9.4
var foo = {/* comment */};
type Foo = { /* comment */ };

// Prettier 3.9.5
var foo = {/* comment */};
type Foo = {/* comment */};

v3.9.4

Compare Source

v3.9.3

Compare Source

v3.9.2

Compare Source

v3.9.1

Compare Source

v3.9.0

Compare Source

diff

🔗 Release Notes

v3.8.5

Compare Source

v3.8.4

Compare Source

diff

Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (#​17746 by @​byplayer)

Prettier was removing blank lines between list items and their nested sub-lists, converting loose lists into tight lists and changing their semantic meaning.

<!-- Input -->
- a

  - b

- c

  - d

<!-- Prettier 3.8.3 -->
- a
  - b
- c
  - d

<!-- Prettier 3.8.4 -->
- a

  - b

- c

  - d

v3.8.3

Compare Source

diff

SCSS: Prevent trailing comma in if() function (#​18471 by @​kovsu)
// Input
$value: if(sass(false): 1; else: -1);

// Prettier 3.8.2
$value: if(
  sass(false): 1; else: -1,
);

// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

v3.8.2

Compare Source

diff

Angular: Support Angular v21.2 (#​18722, #​19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}

<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#&#8203;64;" HTML entity instead. (3:3)

<!-- Prettier 3.8.2 -->
@switch (foo) {
  @case (1) {}
  @default never;
}

arrow function and instanceof expressions.

<!-- Input -->
@let fn = (a) =>        a?    1:2;

{{ fn ( a         instanceof b)}}

<!-- Prettier 3.8.1 -->
@let fn = (a) =>        a?    1:2;

{{ fn ( a         instanceof b)}}

<!-- Prettier 3.8.2 -->
@let fn = (a) => (a ? 1 : 2);

{{ fn(a instanceof b) }}

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • "before 5am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 8, 2026
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch 2 times, most recently from c0a0d7c to 2e8929a Compare May 14, 2026 11:08
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 2e8929a to e01fa9e Compare May 22, 2026 03:12
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch 2 times, most recently from 16609b1 to 3e29d0e Compare June 6, 2026 11:14
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 3e29d0e to e4b6894 Compare June 12, 2026 23:50
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch 3 times, most recently from c892a65 to 637d8f6 Compare June 27, 2026 03:10
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 637d8f6 to ce3c01a Compare July 1, 2026 19:34
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch 2 times, most recently from d1e799a to 9076db2 Compare July 21, 2026 06:00
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 9076db2 to 9f7d1e0 Compare July 25, 2026 05:50
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 9f7d1e0 to e137418 Compare August 1, 2026 06:33
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from e137418 to 32ad226 Compare August 21, 2026 04:07
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 32ad226 to 440b694 Compare September 5, 2026 03:45
@renovate
renovate Bot force-pushed the renovate/dev-dependencies branch from 440b694 to 70d07b8 Compare September 12, 2026 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants