chore(deps-dev): bump @copilotkit/aimock from 1.27.3 to 1.28.0

[dependabot]

Bumps @copilotkit/aimock from 1.27.3 to 1.28.0.

Release notes

Sourced from @​copilotkit/aimock's releases.

v1.28.0

What's Changed

• Update competitive matrix and migration pages by @​github-actions[bot] in CopilotKit/aimock#237
• ci(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 in the minor-and-patch group by @​dependabot[bot] in CopilotKit/aimock#243
• Record gpt-oss harmony tool calls + stream/recorder hardening by @​jpr5 in CopilotKit/aimock#245

Full Changelog: CopilotKit/aimock@v1.27.3...v1.28.0

Changelog

Sourced from @​copilotkit/aimock's changelog.

[1.28.0] - 2026-06-02

Added

• Harmony channel format — parse OpenAI "harmony" channel tokens (<|channel|>… <|message|>… <|call|>) emitted by local gpt-oss models (Ollama / vLLM / OpenRouter) so their tool calls, reasoning, and content are captured when recording (hosted OpenAI pre-parses harmony, so only local runtimes pass it through raw). Implemented as a lexer + state-machine parser with a uniform all-or-nothing verbatim fail-safe, wired as fallback-only so it never produces phantom tool calls.

Fixed

• Recorder — decode streamed response chunks incrementally to prevent multibyte UTF-8 corruption; CRLF-tolerant frame-timing splitter; propagate webSearches and audio-companion fields (tool calls / content / reasoning) into recorded fixtures; log firstDroppedSample alongside dropped-chunk warnings.
• Stream collapsers — multi-line and CRLF SSE handling; missing/uncorrelated tool-call index guards with symmetric dropped-chunk accounting across OpenAI / Anthropic / Bedrock / Cohere; bound Bedrock EventStream header parsing against malformed frames.
• Gemini — replay audio-companion tool calls / content / reasoning on audio turns instead of dropping them.

Commits

• b43fafe chore: release v1.28.0
• 20587af fix: replay Gemini audio companion tool calls, content, and reasoning
• 819afef fix: decode multibyte UTF-8 incrementally, harden recorder frame timing, and ...
• edad270 fix: harden stream collapsers and wire harmony fallback for recording
• 3771f70 feat: parse OpenAI harmony channel tokens to record gpt-oss tool calls
• ca578ca ci(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0 in the minor-and-...
• 687667e ci(deps): bump docker/setup-qemu-action in the minor-and-patch group
• 0aa0d18 Update competitive matrix and migration pages (#237)
• 8fe0879 docs: update competitive matrix and migration pages from latest competitor data
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
pnpm-lock.yaml	51% smaller
package.json	0% smaller

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​copilotkit/​aimock@​1.28.0

View full report

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}