Added configurable baseUrl support for bedrock-converse-stream requests, enabling Amazon Bedrock providers and compatible custom providers to use VPC or PrivateLink endpoints, FIPS hosts, and internal gateways, including endpoints mounted under a path or authenticated with query parameters.

Fixed

Corrupt credential databases are now backed up privately and recreated instead of preventing startup; signing in again restores credentials.
Fixed malformed Anthropic thinking signatures that could freeze sessions at 100% CPU.
Fixed Anthropic-compatible gateway tool-call handling so client-declared tools are reported with stop_reason: "tool_use" and already-executed native provider tools are not exposed for clients to run again.
Fixed gateway session isolation when clients omit a session key, preventing one conversation's retained provider state from affecting another.
Fixed retained provider state across credential switches so account-specific capabilities are re-evaluated while reusable endpoint capabilities remain available.
Fixed session retention limits closing provider state while a request is still streaming.
ChatGPT accounts that have exhausted a plan's usage window but still have available Codex credit can now continue to be selected for Codex requests.
Cursor requests now honor explicit max-mode markers on wire-backed models instead of inferring the mode from the model suffix.
OpenAI-compatible chat responses containing only structured tool calls now report time to first token correctly.

@oh-my-pi/pi-catalog

Added

OpenAI-compatible model discovery now fills in reasoning-effort tiers for unrecognized models using the shared catalog’s published reasoning options, while preserving explicit discovery metadata and reviewed model rules.

Fixed

Fixed recovery of corrupted model caches so private backups are preserved and concurrent recovery cannot overwrite a cache that has already been restored.
Fixed pricing for Devin (SWE-2, SWE-1.7, and GLM-5.2 High) and Kimi Code models when upstream discovery omits cost information. SWE-2 now reflects its promotional pricing through December 31, 2026, then switches to list pricing on January 1, 2027.
Fixed pricing and chat routing for Devin Fusion models so composite models use their own headline rates and supported Fusion lanes connect directly instead of failing through an incompatible routing path.

@oh-my-pi/pi-coding-agent

Added

Expanded built-in secret obfuscation to detect credentials in connection URLs regardless of environment-variable name, including PostgreSQL, MongoDB, MySQL, Redis, AMQP, and other supported schemes.
Expanded built-in secret obfuscation to cover AWS access keys, Google API keys, Slack, npm, Stripe secret/restricted keys and webhook secrets, Hugging Face and SendGrid tokens, JWTs, Bearer tokens, and PEM private keys.
Added the tui.titleSpinner setting to choose the terminal-title working-state animation (braille, dots, line, or pulse), alongside the existing tui.titleState toggle.

Changed

Session-stop hooks that block with a reason now keep the session running until they allow it or the user interrupts; explicit aborts are no longer restarted by a stop hook.
Corrupt agent and prompt-history databases are now backed up before fresh stores are created, allowing startup to continue; credentials may need to be entered again.
Agent and history database startup errors now identify the affected database file.
Terminal-title spinner animations now work on native Windows; WSL retains the static separator to avoid unnecessary CPU usage.
Explicit model refreshes now re-evaluate command-backed API keys and headers, allowing rotated credentials to take effect without restarting.
Background job entries are removed shortly after their results are consumed or recovered, while unconsumed jobs remain available for inspection.

Fixed

Fixed the transcript collapsing into a compact no-spacing layout whenever the prompt, todo HUD, or other below-transcript chrome grew a few rows; the live tail now scrolls off the top instead.
Fixed transcript layout and rebuilding issues that could collapse blank rows, leave tool calls displayed on one line, or show stale fragments after navigation, display changes, or compaction.
Fixed the security-reviewer agent so valid findings with anchors and remediation details are accepted.
Stopping a subagent from Agent Hub now settles and reports its parent background job instead of leaving hub wait blocked indefinitely.
Fixed prewalk handoff detection after edits or writes dispatched through Code Mode eval cells.
Reduced main-thread stalls while streaming large edits by deferring AST-based matching until the edit is complete.
Corrected the /handoff description so it accurately reflects that the command creates a handoff document and compacts the current session.
Deferred misleading cold-cache retry.fallbackChains warnings until provider discovery completes.
Fixed --prewalk-into @default so an explicitly selected startup model does not replace the configured default role, including ordered fallbacks and discovery-backed candidates.
A corrupted or externally modified session file no longer leaves the session impossible to close; a subsequent Ctrl+C exits without rewriting the session log.
Fixed silent MCP requests being terminated by an undeclared idle timeout; closing a legacy SSE connection now also cancels pending requests and notifications.
Fixed browser reuse for Chromium installed behind Linux wrapper scripts and prevented duplicate launches when a profile is locked.

@oh-my-pi/pi-utils

Added

Added asynchronous and synchronous SQLite database opening APIs with path-attributed errors, optional corruption recovery that preserves private database and sidecar backups, and automatic retries for transient busy errors during asynchronous opens.

What's Changed

feat(coding-agent): animate terminal title on Windows, add pulse spinner style by @H4vC in #12250
usage(openai-codex): keep credit-funded accounts selectable past the plan limit by @pedropaulovc in #12171
fix(coding-agent): invalidate command-backed credentials on online refresh by @harshaygadekar in #12172
natives(test): compare walker mtime with sub-millisecond tolerance by @pedropaulovc in #12174
fix(coding-agent): fixed transcript retirement stalling after history replay by @shivamklr in #12177
fix(coding-agent): preserve prewalk @default with --model by @taibenvenuti in #12191
fix(agents): unnest security-reviewer finding optionalProperties by @dhofheinz in #12200
fix(catalog): price Devin and Kimi Code when discovery omits cost by @eggpeat in #12204
fix(ai): stamp TTFT on first structured tool-call delta in openai-completions by @STRML in #12213
fix(catalog): keep cursorMaxMode when collapsing reviewed Cursor families by @Xytronix in #12219
fix(coding-agent): track catalog descriptor discovery state by @Dante-dan in #12223
fix(auth-gateway): report tool_use when a client-executed tool call ends the turn on stop by @Xytronix in #12224
catalog: fill unreviewed effort ladders from the published catalog by @Xytronix in #12227
fix(mcp): honor configured deadlines for silent waits by @aramalipoor in #12232
feat(secrets): widen built-in credential shapes by @wtfsayo in #12234
fix(browser): discover wrapper-launched Chromium when reusing CDP endpoints by @shivamklr in #12236
fix(ai): stop the gateway state store from colliding, bleeding or closing live state by @camjac251 in #12241
fix(coding-agent): let a second Ctrl+C exit when session close fails by @xiechimon in #12245
feat(ai): support overriding the Amazon Bedrock host via baseUrl by @rmskkn in #12246
fix(coding-agent): corrected /handoff copy that still described a new session by @BrahmingWu in #12249
fix(coding-agent): evict consumed background-job rows early and trim the collapsed transcript's mid-turn head by @eggpeat in #12252
fix(coding-agent): defer TTSR AST matching to finalized tool calls by @H4vC in #12251

New Contributors

@taibenvenuti made their first contribution in #12191
@dhofheinz made their first contribution in #12200
@Xytronix made their first contribution in #12219
@aramalipoor made their first contribution in #12232
@wtfsayo made their first contribution in #12234
@xiechimon made their first contribution in #12245
@rmskkn made their first contribution in #12246
@BrahmingWu made their first contribution in #12249

Full Changelog: https://github.com/can1357/oh-my-pi/compare/v18.2.1...v18.2.2

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [can1357/oh-my-pi](https://github.com/can1357/oh-my-pi) | patch | `18.2.1` → `18.2.2` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>can1357/oh-my-pi (can1357/oh-my-pi)</summary> ### [`v18.2.2`](https://github.com/can1357/oh-my-pi/releases/tag/v18.2.2) [Compare Source](https://github.com/can1357/oh-my-pi/compare/v18.2.1...v18.2.2) #### [@oh-my-pi/pi-ai](https://github.com/oh-my-pi/pi-ai) ##### Added - Added configurable `baseUrl` support for `bedrock-converse-stream` requests, enabling Amazon Bedrock providers and compatible custom providers to use VPC or PrivateLink endpoints, FIPS hosts, and internal gateways, including endpoints mounted under a path or authenticated with query parameters. ##### Fixed - Corrupt credential databases are now backed up privately and recreated instead of preventing startup; signing in again restores credentials. - Fixed malformed Anthropic thinking signatures that could freeze sessions at 100% CPU. - Fixed Anthropic-compatible gateway tool-call handling so client-declared tools are reported with `stop_reason: "tool_use"` and already-executed native provider tools are not exposed for clients to run again. - Fixed gateway session isolation when clients omit a session key, preventing one conversation's retained provider state from affecting another. - Fixed retained provider state across credential switches so account-specific capabilities are re-evaluated while reusable endpoint capabilities remain available. - Fixed session retention limits closing provider state while a request is still streaming. - ChatGPT accounts that have exhausted a plan's usage window but still have available Codex credit can now continue to be selected for Codex requests. - Cursor requests now honor explicit max-mode markers on wire-backed models instead of inferring the mode from the model suffix. - OpenAI-compatible chat responses containing only structured tool calls now report time to first token correctly. #### [@oh-my-pi/pi-catalog](https://github.com/oh-my-pi/pi-catalog) ##### Added - OpenAI-compatible model discovery now fills in reasoning-effort tiers for unrecognized models using the shared catalog’s published reasoning options, while preserving explicit discovery metadata and reviewed model rules. ##### Fixed - Fixed recovery of corrupted model caches so private backups are preserved and concurrent recovery cannot overwrite a cache that has already been restored. - Fixed pricing for Devin (SWE-2, SWE-1.7, and GLM-5.2 High) and Kimi Code models when upstream discovery omits cost information. SWE-2 now reflects its promotional pricing through December 31, 2026, then switches to list pricing on January 1, 2027. - Fixed pricing and chat routing for Devin Fusion models so composite models use their own headline rates and supported Fusion lanes connect directly instead of failing through an incompatible routing path. #### [@oh-my-pi/pi-coding-agent](https://github.com/oh-my-pi/pi-coding-agent) ##### Added - Expanded built-in secret obfuscation to detect credentials in connection URLs regardless of environment-variable name, including PostgreSQL, MongoDB, MySQL, Redis, AMQP, and other supported schemes. - Expanded built-in secret obfuscation to cover AWS access keys, Google API keys, Slack, npm, Stripe secret/restricted keys and webhook secrets, Hugging Face and SendGrid tokens, JWTs, Bearer tokens, and PEM private keys. - Added the `tui.titleSpinner` setting to choose the terminal-title working-state animation (`braille`, `dots`, `line`, or `pulse`), alongside the existing `tui.titleState` toggle. ##### Changed - Session-stop hooks that block with a reason now keep the session running until they allow it or the user interrupts; explicit aborts are no longer restarted by a stop hook. - Corrupt agent and prompt-history databases are now backed up before fresh stores are created, allowing startup to continue; credentials may need to be entered again. - Agent and history database startup errors now identify the affected database file. - Terminal-title spinner animations now work on native Windows; WSL retains the static separator to avoid unnecessary CPU usage. - Explicit model refreshes now re-evaluate command-backed API keys and headers, allowing rotated credentials to take effect without restarting. - Background job entries are removed shortly after their results are consumed or recovered, while unconsumed jobs remain available for inspection. ##### Fixed - Fixed the transcript collapsing into a compact no-spacing layout whenever the prompt, todo HUD, or other below-transcript chrome grew a few rows; the live tail now scrolls off the top instead. - Fixed transcript layout and rebuilding issues that could collapse blank rows, leave tool calls displayed on one line, or show stale fragments after navigation, display changes, or compaction. - Fixed the `security-reviewer` agent so valid findings with anchors and remediation details are accepted. - Stopping a subagent from Agent Hub now settles and reports its parent background job instead of leaving `hub wait` blocked indefinitely. - Fixed prewalk handoff detection after edits or writes dispatched through Code Mode eval cells. - Reduced main-thread stalls while streaming large edits by deferring AST-based matching until the edit is complete. - Corrected the `/handoff` description so it accurately reflects that the command creates a handoff document and compacts the current session. - Deferred misleading cold-cache `retry.fallbackChains` warnings until provider discovery completes. - Fixed `--prewalk-into @default` so an explicitly selected startup model does not replace the configured default role, including ordered fallbacks and discovery-backed candidates. - A corrupted or externally modified session file no longer leaves the session impossible to close; a subsequent Ctrl+C exits without rewriting the session log. - Fixed silent MCP requests being terminated by an undeclared idle timeout; closing a legacy SSE connection now also cancels pending requests and notifications. - Fixed browser reuse for Chromium installed behind Linux wrapper scripts and prevented duplicate launches when a profile is locked. #### [@oh-my-pi/pi-utils](https://github.com/oh-my-pi/pi-utils) ##### Added - Added asynchronous and synchronous SQLite database opening APIs with path-attributed errors, optional corruption recovery that preserves private database and sidecar backups, and automatic retries for transient busy errors during asynchronous opens. #### What's Changed - feat(coding-agent): animate terminal title on Windows, add pulse spinner style by [@H4vC](https://github.com/H4vC) in [#12250](https://github.com/can1357/oh-my-pi/pull/12250) - usage(openai-codex): keep credit-funded accounts selectable past the plan limit by [@pedropaulovc](https://github.com/pedropaulovc) in [#12171](https://github.com/can1357/oh-my-pi/pull/12171) - fix(coding-agent): invalidate command-backed credentials on online refresh by [@harshaygadekar](https://github.com/harshaygadekar) in [#12172](https://github.com/can1357/oh-my-pi/pull/12172) - natives(test): compare walker mtime with sub-millisecond tolerance by [@pedropaulovc](https://github.com/pedropaulovc) in [#12174](https://github.com/can1357/oh-my-pi/pull/12174) - fix(coding-agent): fixed transcript retirement stalling after history replay by [@shivamklr](https://github.com/shivamklr) in [#12177](https://github.com/can1357/oh-my-pi/pull/12177) - fix(coding-agent): preserve prewalk [@default](https://github.com/default) with --model by [@taibenvenuti](https://github.com/taibenvenuti) in [#12191](https://github.com/can1357/oh-my-pi/pull/12191) - fix(agents): unnest security-reviewer finding optionalProperties by [@dhofheinz](https://github.com/dhofheinz) in [#12200](https://github.com/can1357/oh-my-pi/pull/12200) - fix(catalog): price Devin and Kimi Code when discovery omits cost by [@eggpeat](https://github.com/eggpeat) in [#12204](https://github.com/can1357/oh-my-pi/pull/12204) - fix(ai): stamp TTFT on first structured tool-call delta in openai-completions by [@STRML](https://github.com/STRML) in [#12213](https://github.com/can1357/oh-my-pi/pull/12213) - fix(catalog): keep cursorMaxMode when collapsing reviewed Cursor families by [@Xytronix](https://github.com/Xytronix) in [#12219](https://github.com/can1357/oh-my-pi/pull/12219) - fix(coding-agent): track catalog descriptor discovery state by [@Dante-dan](https://github.com/Dante-dan) in [#12223](https://github.com/can1357/oh-my-pi/pull/12223) - fix(auth-gateway): report tool\_use when a client-executed tool call ends the turn on stop by [@Xytronix](https://github.com/Xytronix) in [#12224](https://github.com/can1357/oh-my-pi/pull/12224) - catalog: fill unreviewed effort ladders from the published catalog by [@Xytronix](https://github.com/Xytronix) in [#12227](https://github.com/can1357/oh-my-pi/pull/12227) - fix(mcp): honor configured deadlines for silent waits by [@aramalipoor](https://github.com/aramalipoor) in [#12232](https://github.com/can1357/oh-my-pi/pull/12232) - feat(secrets): widen built-in credential shapes by [@wtfsayo](https://github.com/wtfsayo) in [#12234](https://github.com/can1357/oh-my-pi/pull/12234) - fix(browser): discover wrapper-launched Chromium when reusing CDP endpoints by [@shivamklr](https://github.com/shivamklr) in [#12236](https://github.com/can1357/oh-my-pi/pull/12236) - fix(ai): stop the gateway state store from colliding, bleeding or closing live state by [@camjac251](https://github.com/camjac251) in [#12241](https://github.com/can1357/oh-my-pi/pull/12241) - fix(coding-agent): let a second Ctrl+C exit when session close fails by [@xiechimon](https://github.com/xiechimon) in [#12245](https://github.com/can1357/oh-my-pi/pull/12245) - feat(ai): support overriding the Amazon Bedrock host via baseUrl by [@rmskkn](https://github.com/rmskkn) in [#12246](https://github.com/can1357/oh-my-pi/pull/12246) - fix(coding-agent): corrected /handoff copy that still described a new session by [@BrahmingWu](https://github.com/BrahmingWu) in [#12249](https://github.com/can1357/oh-my-pi/pull/12249) - fix(coding-agent): evict consumed background-job rows early and trim the collapsed transcript's mid-turn head by [@eggpeat](https://github.com/eggpeat) in [#12252](https://github.com/can1357/oh-my-pi/pull/12252) - fix(coding-agent): defer TTSR AST matching to finalized tool calls by [@H4vC](https://github.com/H4vC) in [#12251](https://github.com/can1357/oh-my-pi/pull/12251) #### New Contributors - [@taibenvenuti](https://github.com/taibenvenuti) made their first contribution in [#12191](https://github.com/can1357/oh-my-pi/pull/12191) - [@dhofheinz](https://github.com/dhofheinz) made their first contribution in [#12200](https://github.com/can1357/oh-my-pi/pull/12200) - [@Xytronix](https://github.com/Xytronix) made their first contribution in [#12219](https://github.com/can1357/oh-my-pi/pull/12219) - [@aramalipoor](https://github.com/aramalipoor) made their first contribution in [#12232](https://github.com/can1357/oh-my-pi/pull/12232) - [@wtfsayo](https://github.com/wtfsayo) made their first contribution in [#12234](https://github.com/can1357/oh-my-pi/pull/12234) - [@xiechimon](https://github.com/xiechimon) made their first contribution in [#12245](https://github.com/can1357/oh-my-pi/pull/12245) - [@rmskkn](https://github.com/rmskkn) made their first contribution in [#12246](https://github.com/can1357/oh-my-pi/pull/12246) - [@BrahmingWu](https://github.com/BrahmingWu) made their first contribution in [#12249](https://github.com/can1357/oh-my-pi/pull/12249) **Full Changelog**: <https://github.com/can1357/oh-my-pi/compare/v18.2.1...v18.2.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-09-16 17:03:20 +00:00

chore(deps): update dependency can1357/oh-my-pi to v18.2.2

Update hashes / update-hashes (pull_request) Successful in 4m41s

Details

ff44cf7a82

renovate-bot scheduled this pull request to auto merge when all checks succeed

2026-09-16 17:03:21 +00:00

forgejo-actions added 1 commit

2026-09-16 17:07:52 +00:00