chore(deps): migrate apps/pi-extension to @earendil-works + refresh deps#726
Open
av1155 wants to merge 1 commit into
Open
chore(deps): migrate apps/pi-extension to @earendil-works + refresh deps#726av1155 wants to merge 1 commit into
av1155 wants to merge 1 commit into
Conversation
av1155
force-pushed
the
chore/audit-deps-refresh
branch
from
4d46d4c to
0d0b710
Compare
The @mariozechner/pi-* packages used by apps/pi-extension are deprecated upstream; @earendil-works/pi-* at v0.74.0 is the canonical replacement. This commit completes the migration end to end for the Pi extension and refreshes the root dependency graph. apps/pi-extension changes: - assistant-message.ts, plannotator-events.ts, current-pi-session.ts, plannotator-browser.ts, index.ts, and config.ts updated to import from @earendil-works/pi-coding-agent and @earendil-works/pi-agent-core (was @mariozechner/*). - peerDependencies repinned to @earendil-works/pi-coding-agent (>= 0.74.0). Root devDependencies and direct deps: - @anthropic-ai/claude-agent-sdk ^0.2.92 -> ^0.2.141 - @openai/codex-sdk ^0.118.0 -> ^0.130.0 - @opencode-ai/sdk ^1.3.0 -> ^1.14.50 - @pierre/diffs ^1.1.20 -> ^1.1.22 - diff ^8.0.4 -> ^9.0.0 - dompurify ^3.3.3 -> ^3.4.3 - @types/node ^25.5.2 -> ^25.7.0 - bun-types ^1.3.11 -> ^1.3.14 - Drop @types/dompurify (now a stub; dompurify ships its own types). bun.lock regenerated against the new tree. The repo's bun install policy (bunfig.toml minimumReleaseAge=604800) is preserved unchanged; the new lockfile is consumed via bun install --frozen-lockfile, which bypasses the age check. After this change all 1120 existing tests pass and the typecheck pipeline (shared, ai, server, ui, pi-extension) is clean. dockview-react ^5.2.0 (^6.2.2 available) and marked ^17.0.6 (^18.0.3 available) are held at their current major lines for now; the major bumps are separate work.
av1155
force-pushed
the
chore/audit-deps-refresh
branch
from
0d0b710 to
cea1a39
Compare
Owner
|
Thank you! I will conduct some supply chain analysis and then merge this in |
Author
|
Thanks! If you want me to change anything in the PR please let me know |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
bun installat v0.19.16 surfaces the@mariozechnerdeprecation chain and several outdated root direct deps.apps/pi-extension namespace migration
The Pi extension's source imports moved from
@mariozechner/pi-coding-agentand@mariozechner/pi-agent-coreto the@earendil-works/*canonical replacements at v0.74.0. Files touched:assistant-message.ts,plannotator-events.ts,current-pi-session.ts,plannotator-browser.ts,index.ts,config.ts.peerDependenciesrepinned to@earendil-works/pi-coding-agent(>= 0.74.0).Root direct deps
@anthropic-ai/claude-agent-sdk:^0.2.92to^0.2.141.@openai/codex-sdk:^0.118.0to^0.130.0.@opencode-ai/sdk:^1.3.0to^1.14.50.@pierre/diffs:^1.1.20to^1.1.22.diff:^8.0.4to^9.0.0.dompurify:^3.3.3to^3.4.3.@types/node:^25.5.2to^25.7.0.bun-types:^1.3.11to^1.3.14.@types/dompurify(now a stub;dompurifyships its own types).bun.lockregenerated against the new tree.Held back (separate PRs)
dockview-react^5.2.0(v6.2.2 available). Major-version bump that needs UI review.marked^17.0.6(v18.0.3 available). Same reasoning.Note on bunfig minimumReleaseAge
This repo's
bunfig.tomlenforcesminimumReleaseAge = 604800(7 days). The new lockfile is reproducible viabun install --frozen-lockfile, which bypasses the age check. A freshbun installwithout the lockfile would re-resolve any newer versions of these packages against the same 7-day window once they age past it.Verification
bun install --frozen-lockfile: clean.bun test: 1120 of 1120 tests pass.bun run typecheck(shared, ai, server, ui, pi-extension): clean.