build(deps): bump the root-npm group across 1 directory with 6 updates

[dependabot]

Bumps the root-npm group with 6 updates in the / directory:

Package	From	To
@oh-my-pi/pi-agent-core	16.1.20	17.0.8
@oh-my-pi/pi-ai	16.1.20	17.0.8
@oh-my-pi/pi-coding-agent	16.1.20	17.0.8
@oh-my-pi/pi-utils	16.1.20	17.0.8
katex	0.17.0	0.18.1
typescript	6.0.3	7.0.2

Updates @oh-my-pi/pi-agent-core from 16.1.20 to 17.0.8

Release notes

Sourced from @​oh-my-pi/pi-agent-core's releases.

v17.0.8

@​oh-my-pi/pi-agent-core

Fixed

• Improved resilience against transient stream JSON parse failures by recovering completed tool calls while safely preventing incomplete, unknown, refused, or sensitive calls from executing.

@​oh-my-pi/pi-ai

Fixed

• Fixed Gemini Flash Cloud Code Assist empty-response retries when responses contain only intercepted planning-leak JSON.
• Fixed Antigravity auto-routing to correctly fail over to the sandbox endpoint when the daily endpoint exhausts its retries.
• Fixed OpenAI-compatible providers configured with auth: none incorrectly sending an Authorization: Bearer N/A header, which broke custom endpoints using alternative authentication headers.
• Fixed auth-gateway model listings exposing duplicate or ambiguous model IDs by ensuring only provider-qualified routing IDs are advertised.
• Improved connection error handling by classifying generic connection failures as transient, allowing them to be retried, while keeping explicit authentication rejections non-retryable.
• Fixed custom Anthropic base URLs losing native thinking signatures during continuation requests.
• Fixed Alibaba Coding Plan Custom login rejecting valid API keys on endpoints that do not serve the default validation model by validating against the model catalog instead.

@​oh-my-pi/pi-catalog

Added

• Added support for several new models across multiple providers, including MiniMax M3, Gemini 3.5 Flash Lite, Gemini 3.6 Flash (with thinking support), Hy3, Doubao-Seed-Character, LongCat 2.0, Laguna S 2.1 (free and paid tiers), Qwen 3.6 35B A3B, SWE-1.6 Slow (devin agent catalog), and XiaomiMiMo/MiMo-V2.5.

Changed

• Updated Grok 4.5 API type to "openai-responses" and updated "o3-mini" to support thinking capabilities with the "kimi" thinking format.
• Renamed OpenRouter-specific models and routers to include "OpenRouter" in their names (e.g., "OpenRouter Auto Router (Beta)", "OpenRouter Body Builder (beta)", and "OpenRouter Pareto Code Router").
• Updated context window sizes, costs, and token limits for numerous models.

Fixed

• Fixed an issue where GPT-5.6 Codex SKUs lost usable context window capacity due to dynamic discovery values overwriting bundled limits.
• Fixed OpenAI Codex discovery dropping account-listed ChatGPT-only models (such as GPT-5.3 Codex Spark) when they are unavailable through the public API.
• Fixed Codex catalog discovery hiding models when multiple OAuth accounts are configured by independently fetching and merging catalogs from all accounts.
• Fixed cached models reusing a bundled request model (such as GitHub Copilot long-context variants) being incorrectly flagged as unrestorable and dropped after a restart.
• Fixed LM Studio discovery reporting a model's theoretical maximum context length instead of the actual loaded context window size of the running instance.

Removed

• Removed several deprecated model families from the devin catalog, including Claude Fable 5, Claude Opus 4.6/4.7, Claude Sonnet 4.6/5, DeepSeek V4 Pro, Gemini 3.1 Pro, Gemini 3.5 Flash, GLM-5.2, SWE-1.6, and Nemotron 3 Ultra.
• Removed GPT-5 through GPT-5.3 Codex variants and GPT-5.4 nano from the openai-codex catalog.

@​oh-my-pi/pi-coding-agent

Added

• Added a /tree re-answer option for past ask tool results, allowing users to re-open the picker with original questions and branch the new answer as a sibling while keeping the original branch reachable.
• Added configurable Hindsight client request deadlines via hindsight.requestTimeoutMs, reflectTimeoutMs, recallTimeoutMs, and retainTimeoutMs settings (and matching HINDSIGHT_*_TIMEOUT_MS environment variables).

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-agent-core's changelog.

[17.0.8] - 2026-07-22

Fixed

• Improved resilience against transient stream JSON parse failures by recovering completed tool calls while safely preventing incomplete, unknown, refused, or sensitive calls from executing.

[17.0.5] - 2026-07-18

Added

• Added a per-message token estimation cache to optimize performance by reusing token counts for settled message history, with automatic cache invalidation on message mutation.

Changed

• Improved tool execution control by making tool interruptibility resolvable per call, allowing side-effecting operations to complete while passive waits can yield to queued steering.

[17.0.2] - 2026-07-17

Fixed

• Improved error visibility in interactive clients by surfacing provider stream failures through the assistant message lifecycle, preventing silent loading spinners.
• Fixed an issue where Cursor provider contexts omitted host-supplied MCP tools from main and side-channel requests.

[17.0.0] - 2026-07-15

Breaking Changes

• Replaced the irc, job, and launch tools with a unified hub tool.
• Removed the tool discovery system (including the search-tool-bm25 tool) and its associated configuration settings (tools.discoveryMode, tools.essentialOverride, mcp.discoveryMode, and mcp.discoveryDefaultServers).
• Removed the resolve tool; plan approval and preview actions now use writes to the xd://propose virtual device path.

Added

• Introduced the xd:// virtual device protocol for mounting tools as URLs readable/writable via read/write tools, configurable via the new tools.xdev setting (defaults to true).
• Added the hub tool, consolidating agent peer messaging, background job control, and supervised long-running processes.
• Added the edit.enforceSeenLines configuration setting (defaults to false) to optionally reject edits on lines that have not been fully displayed.
• Added the ToolLoadMode type and an optional satisfies predicate to SoftToolRequirement to support compliance checks against specific invocation shapes (such as writing to a virtual device path).

[16.5.2] - 2026-07-14

Fixed

• Improved session deadline abort signals to carry structured cancellation reasons, enabling timeout-aware tools to correctly classify deadline cancellations.
• Fixed an issue where completed tool executions were incorrectly marked as skipped (clobbering their actual results) if a user message was queued while the tool was in flight.

[16.5.1] - 2026-07-14

Fixed

• Fixed compatibility with Copilot gpt-5.6 models by correcting token escaping in compaction summaries.

... (truncated)

Commits

• 9b54d9e chore: bump version to 17.0.8
• 7d40468 chore: updated changelogs + remove summarization marker
• 0002905 chore: untrack node_modules symlinks and harden ignore pattern
• b9072f1 fix(extensibility): validate Type.Unsafe against the draft-2020-12 upgraded s...
• 29a94ac Merge PR #6200: fix(session): retry past synthetic tool results after mid-too...
• f741936 test(agent): signal tool boundary from the gate itself
• 206d812 Merge PR #6185: test(agent): synchronize pause gate tool boundary (@​any-victor)
• 50937ec Merge PR #6136: fix(agent): recover tools after stream parse errors (@​usr-bin...
• 3179a52 test(agent): synchronize pause gate tool boundary
• eee940c test(agent): avoid global pause gate spy
• Additional commits viewable in compare view

Updates @oh-my-pi/pi-ai from 16.1.20 to 17.0.8

Release notes

Sourced from @​oh-my-pi/pi-ai's releases.

v17.0.8

@​oh-my-pi/pi-agent-core

Fixed

• Improved resilience against transient stream JSON parse failures by recovering completed tool calls while safely preventing incomplete, unknown, refused, or sensitive calls from executing.

@​oh-my-pi/pi-ai

Fixed

• Fixed Gemini Flash Cloud Code Assist empty-response retries when responses contain only intercepted planning-leak JSON.
• Fixed Antigravity auto-routing to correctly fail over to the sandbox endpoint when the daily endpoint exhausts its retries.
• Fixed OpenAI-compatible providers configured with auth: none incorrectly sending an Authorization: Bearer N/A header, which broke custom endpoints using alternative authentication headers.
• Fixed auth-gateway model listings exposing duplicate or ambiguous model IDs by ensuring only provider-qualified routing IDs are advertised.
• Improved connection error handling by classifying generic connection failures as transient, allowing them to be retried, while keeping explicit authentication rejections non-retryable.
• Fixed custom Anthropic base URLs losing native thinking signatures during continuation requests.
• Fixed Alibaba Coding Plan Custom login rejecting valid API keys on endpoints that do not serve the default validation model by validating against the model catalog instead.

@​oh-my-pi/pi-catalog

Added

• Added support for several new models across multiple providers, including MiniMax M3, Gemini 3.5 Flash Lite, Gemini 3.6 Flash (with thinking support), Hy3, Doubao-Seed-Character, LongCat 2.0, Laguna S 2.1 (free and paid tiers), Qwen 3.6 35B A3B, SWE-1.6 Slow (devin agent catalog), and XiaomiMiMo/MiMo-V2.5.

Changed

• Updated Grok 4.5 API type to "openai-responses" and updated "o3-mini" to support thinking capabilities with the "kimi" thinking format.
• Renamed OpenRouter-specific models and routers to include "OpenRouter" in their names (e.g., "OpenRouter Auto Router (Beta)", "OpenRouter Body Builder (beta)", and "OpenRouter Pareto Code Router").
• Updated context window sizes, costs, and token limits for numerous models.

Fixed

• Fixed an issue where GPT-5.6 Codex SKUs lost usable context window capacity due to dynamic discovery values overwriting bundled limits.
• Fixed OpenAI Codex discovery dropping account-listed ChatGPT-only models (such as GPT-5.3 Codex Spark) when they are unavailable through the public API.
• Fixed Codex catalog discovery hiding models when multiple OAuth accounts are configured by independently fetching and merging catalogs from all accounts.
• Fixed cached models reusing a bundled request model (such as GitHub Copilot long-context variants) being incorrectly flagged as unrestorable and dropped after a restart.
• Fixed LM Studio discovery reporting a model's theoretical maximum context length instead of the actual loaded context window size of the running instance.

Removed

• Removed several deprecated model families from the devin catalog, including Claude Fable 5, Claude Opus 4.6/4.7, Claude Sonnet 4.6/5, DeepSeek V4 Pro, Gemini 3.1 Pro, Gemini 3.5 Flash, GLM-5.2, SWE-1.6, and Nemotron 3 Ultra.
• Removed GPT-5 through GPT-5.3 Codex variants and GPT-5.4 nano from the openai-codex catalog.

@​oh-my-pi/pi-coding-agent

Added

• Added a /tree re-answer option for past ask tool results, allowing users to re-open the picker with original questions and branch the new answer as a sibling while keeping the original branch reachable.
• Added configurable Hindsight client request deadlines via hindsight.requestTimeoutMs, reflectTimeoutMs, recallTimeoutMs, and retainTimeoutMs settings (and matching HINDSIGHT_*_TIMEOUT_MS environment variables).

... (truncated)

Changelog

Sourced from @​oh-my-pi/pi-ai's changelog.

[17.0.8] - 2026-07-22

Fixed

• Fixed Gemini Flash Cloud Code Assist empty-response retries when responses contain only intercepted planning-leak JSON.
• Fixed Antigravity auto-routing to correctly fail over to the sandbox endpoint when the daily endpoint exhausts its retries.
• Fixed OpenAI-compatible providers configured with auth: none incorrectly sending an Authorization: Bearer N/A header, which broke custom endpoints using alternative authentication headers.
• Fixed auth-gateway model listings exposing duplicate or ambiguous model IDs by ensuring only provider-qualified routing IDs are advertised.
• Improved connection error handling by classifying generic connection failures as transient, allowing them to be retried, while keeping explicit authentication rejections non-retryable.
• Fixed custom Anthropic base URLs losing native thinking signatures during continuation requests.
• Fixed Alibaba Coding Plan Custom login rejecting valid API keys on endpoints that do not serve the default validation model by validating against the model catalog instead.

[17.0.6] - 2026-07-20

Fixed

• Fixed OpenAI Codex credentials limited to one ChatGPT workspace per email: a personal Plus/Pro plan and a Team/Enterprise seat under the same email now coexist in the auth store — with separate rotation and usage pools — instead of the second login silently replacing the first. The workspace (chatgpt_account_id) is captured as the credential's org at login with the plan type as its display label, and two members of one workspace keep separate rows (#2966).
• Fixed Devin total-token usage omitting cache reads and cache writes.
• Fixed model switches to Devin rejecting foreign provider response IDs, reasoning signatures, and empty interrupted turns as invalid Cascade history.
• Classified zero-output Devin invalid_argument trailers as context overflow when the serialized message history is already large, routing cumulative tool-output payload failures through context maintenance—including artifact-backed shake rescue—instead of retrying the same rejected history.

[17.0.5] - 2026-07-18

Changed

• Changed Anthropic API-key requests to default to a 1-hour prompt-cache retention (using the extended-cache-ttl-2025-04-11 beta) to prevent cold-misses during idle sessions, with support for PI_CACHE_RETENTION values "short" and "none" to override this behavior.

Fixed

• Fixed transient OpenAI stream truncations by retrying once before output becomes replay-unsafe, preventing recoverable transport errors from failing the turn.
• Fixed native Kimi Code K3 thinking being disabled during named function selection by utilizing generic required tool choice.
• Fixed /login moonshot validating China-platform API keys against the international host instead of honoring MOONSHOT_BASE_URL.
• Fixed Anthropic session stickiness suppressing usage-based re-ranking indefinitely by gating stickiness on a 1-hour cache warmth window (configurable via ANTHROPIC_SESSION_STICKY_CACHE_WARM_MS) to restore proactive multi-account load balancing after long idle periods.
• Fixed credential ranking where clockless Anthropic usage windows incorrectly outranked clocked sibling credentials.
• Fixed tool request failures (HTTP 400) on local grammar-constrained OpenAI-compatible backends (such as llama.cpp, LM Studio, and vLLM) by widening bare boolean subschemas into a value-accepting primitive union.
• Fixed custom OAuth Anthropic-compatible endpoints receiving generated Claude Code fingerprint headers even when explicit header overrides were provided.
• Fixed active sessions for plan-gated OpenAI Codex models (Sol/Luna) silently re-routing to sibling OAuth accounts when usage headroom changed, ensuring session stickiness is preserved as long as the preferred credential remains usable and eligible.

[17.0.4] - 2026-07-18

Fixed

• Fixed Kimi Code usage reports dropping the 5h window reset time (omp usage showed no "resets in …" for the 5h limit): the API returns resetTime on the limit detail, not on window, so the parsed row-level reset is now carried onto the window when the window itself has none.
• Made Kimi device-id persistence best-effort: a missing or unwritable ~/.omp/agent directory no longer throws during Kimi header construction, which silently nulled every kimi-code usage probe on fresh installs.
• Coerced boolean tool-schema subschemas to MFJS object forms for native Moonshot/Kimi endpoints, preventing the task tool's outputSchema field from causing HTTP 400 responses (#5952).

[17.0.3] - 2026-07-17

Fixed

... (truncated)

Commits

• 50e3880 Merge PR #5160: fix(ai): omit service tier for GitHub Copilot (@​audreyt)
• 9b54d9e chore: bump version to 17.0.8
• fc62563 test: fix local-midnight logger flake and stale kimi k3 thinking format pin
• 7d40468 chore: updated changelogs + remove summarization marker
• e4de950 test: adapt catalog-pinned tests to regenerated model catalog
• 0002905 chore: untrack node_modules symlinks and harden ignore pattern
• 1b7dc1c docs: normalize changelog entries under [Unreleased]
• b9072f1 fix(extensibility): validate Type.Unsafe against the draft-2020-12 upgraded s...
• fc311ad Merge PR #6231: fix(ai): qualify auth-gateway model IDs (@​roboomp)
• b81cbb0 docs(ai): note string-vs-Error pattern asymmetry in isTransientStreamParseError
• Additional commits viewable in compare view

Updates @oh-my-pi/pi-coding-agent from 16.1.20 to 17.0.8

Release notes

Sourced from @​oh-my-pi/pi-coding-agent's releases.

v17.0.8

@​oh-my-pi/pi-agent-core

Fixed

• Improved resilience against transient stream JSON parse failures by recovering completed tool calls while safely preventing incomplete, unknown, refused, or sensitive calls from executing.

@​oh-my-pi/pi-ai

Fixed

• Fixed Gemini Flash Cloud Code Assist empty-response retries when responses contain only intercepted planning-leak JSON.
• Fixed Antigravity auto-routing to correctly fail over to the sandbox endpoint when the daily endpoint exhausts its retries.
• Fixed OpenAI-compatible providers configured with auth: none incorrectly sending an Authorization: Bearer N/A header, which broke custom endpoints using alternative authentication headers.
• Fixed auth-gateway model listings exposing duplicate or ambiguous model IDs by ensuring only provider-qualified routing IDs are advertised.
• Improved connection error handling by classifying generic connection failures as transient, allowing them to be retried, while keeping explicit authentication rejections non-retryable.
• Fixed custom Anthropic base URLs losing native thinking signatures during continuation requests.
• Fixed Alibaba Coding Plan Custom login rejecting valid API keys on endpoints that do not serve the default validation model by validating against the model catalog instead.

@​oh-my-pi/pi-catalog

Added

• Added support for several new models across multiple providers, including MiniMax M3, Gemini 3.5 Flash Lite, Gemini 3.6 Flash (with thinking support), Hy3, Doubao-Seed-Character, LongCat 2.0, Laguna S 2.1 (free and paid tiers), Qwen 3.6 35B A3B, SWE-1.6 Slow (devin agent catalog), and XiaomiMiMo/MiMo-V2.5.

Changed

• Updated Grok 4.5 API type to "openai-responses" and updated "o3-mini" to support thinking capabilities with the "kimi" thinking format.
• Renamed OpenRouter-specific models and routers to include "OpenRouter" in their names (e.g., "OpenRouter Auto Router (Beta)", "OpenRouter Body Builder (beta)", and "OpenRouter Pareto Code Router").
• Updated context window sizes, costs, and token limits for numerous models.

Fixed

• Fixed an issue where GPT-5.6 Codex SKUs lost usable context window capacity due to dynamic discovery values overwriting bundled limits.
• Fixed OpenAI Codex discovery dropping account-listed ChatGPT-only models (such as GPT-5.3 Codex Spark) when they are unavailable through the public API.
• Fixed Codex catalog discovery hiding models when multiple OAuth accounts are configured by independently fetching and merging catalogs from all accounts.
• Fixed cached models reusing a bundled request model (such as GitHub Copilot long-context variants) being incorrectly flagged as unrestorable and dropped after a restart.
• Fixed LM Studio discovery reporting a model's theoretical maximum context length instead of the actual loaded context window size of the running instance.

Removed

• Removed several deprecated model families from the devin catalog, including Claude Fable 5, Claude Opus 4.6/4.7, Claude Sonnet 4.6/5, DeepSeek V4 Pro, Gemini 3.1 Pro, Gemini 3.5 Flash, GLM-5.2, SWE-1.6, and Nemotron 3 Ultra.
• Removed GPT-5 through GPT-5.3 Codex variants and GPT-5.4 nano from the openai-codex catalog.

@​oh-my-pi/pi-coding-agent

Added

• Added a /tree re-answer option for past ask tool results, allowing users to re-open the picker with original questions and branch the new answer as a sibling while keeping the original branch reachable.
• Added configurable Hindsight client request deadlines via hindsight.requestTimeoutMs, reflectTimeoutMs, recallTimeoutMs, and retainTimeoutMs settings (and matching HINDSIGHT_*_TIMEOUT_MS environment variables).

... (truncated)

Commits

• 3f38358 test(mcp): polled full post-condition for deferred xdev mount
• 52ad651 feat(diff): implemented native UTF-16 diff processing and removed jsdiff
• 2f5a676 test(dap): made tcp transport tests deterministic
• 9b54d9e chore: bump version to 17.0.8
• fc62563 test: fix local-midnight logger flake and stale kimi k3 thinking format pin
• b6e68fd fix(coding-agent): updated mentions of explore -> scout
• 7d40468 chore: updated changelogs + remove summarization marker
• 242bcbe revert #6130: doesn't really work well
• 59877a0 fix(update): fetch musl release asset on musl hosts and align musl release test
• 6a517cf Merge farm/b12a11bd: feat(release): add musl-linked linux builds
• Additional commits viewable in compare view

Updates @oh-my-pi/pi-utils from 16.1.20 to 17.0.8

Release notes

Sourced from @​oh-my-pi/pi-utils's releases.

v17.0.8

@​oh-my-pi/pi-agent-core

Fixed

• Improved resilience against transient stream JSON parse failures by recovering completed tool calls while safely preventing incomplete, unknown, refused, or sensitive calls from executing.

@​oh-my-pi/pi-ai

Fixed

• Fixed Gemini Flash Cloud Code Assist empty-response retries when responses contain only intercepted planning-leak JSON.
• Fixed Antigravity auto-routing to correctly fail over to the sandbox endpoint when the daily endpoint exhausts its retries.
• Fixed OpenAI-compatible providers configured with auth: none incorrectly sending an Authorization: Bearer N/A header, which broke custom endpoints using alternative authentication headers.
• Fixed auth-gateway model listings exposing duplicate or ambiguous model IDs by ensuring only provider-qualified routing IDs are advertised.
• Improved connection error handling by classifying generic connection failures as transient, allowing them to be retried, while keeping explicit authentication rejections non-retryable.
• Fixed custom Anthropic base URLs losing native thinking signatures during continuation requests.
• Fixed Alibaba Coding Plan Custom login rejecting valid API keys on endpoints that do not serve the default validation model by validating against the model catalog instead.

@​oh-my-pi/pi-catalog

Added

• Added support for several new models across multiple providers, including MiniMax M3, Gemini 3.5 Flash Lite, Gemini 3.6 Flash (with thinking support), Hy3, Doubao-Seed-Character, LongCat 2.0, Laguna S 2.1 (free and paid tiers), Qwen 3.6 35B A3B, SWE-1.6 Slow (devin agent catalog), and XiaomiMiMo/MiMo-V2.5.

Changed

• Updated Grok 4.5 API type to "openai-responses" and updated "o3-mini" to support thinking capabilities with the "kimi" thinking format.
• Renamed OpenRouter-specific models and routers to include "OpenRouter" in their names (e.g., "OpenRouter Auto Router (Beta)", "OpenRouter Body Builder (beta)", and "OpenRouter Pareto Code Router").
• Updated context window sizes, costs, and token limits for numerous models.

Fixed

• Fixed an issue where GPT-5.6 Codex SKUs lost usable context window capacity due to dynamic discovery values overwriting bundled limits.
• Fixed OpenAI Codex discovery dropping account-listed ChatGPT-only models (such as GPT-5.3 Codex Spark) when they are unavailable through the public API.
• Fixed Codex catalog discovery hiding models when multiple OAuth accounts are configured by independently fetching and merging catalogs from all accounts.
• Fixed cached models reusing a bundled request model (such as GitHub Copilot long-context variants) being incorrectly flagged as unrestorable and dropped after a restart.
• Fixed LM Studio discovery reporting a model's theoretical maximum context length instead of the actual loaded context window size of the running instance.

Removed

• Removed several deprecated model families from the devin catalog, including Claude Fable 5, Claude Opus 4.6/4.7, Claude Sonnet 4.6/5, DeepSeek V4 Pro, Gemini 3.1 Pro, Gemini 3.5 Flash, GLM-5.2, SWE-1.6, and Nemotron 3 Ultra.
• Removed GPT-5 through GPT-5.3 Codex variants and GPT-5.4 nano from the openai-codex catalog.

@​oh-my-pi/pi-coding-agent

Added

• Added a /tree re-answer option for past ask tool results, allowing users to re-open the picker with original questions and branch the new answer as a sibling while keeping the original branch reachable.
• Added configurable Hindsight client request deadlines via hindsight.requestTimeoutMs, reflectTimeoutMs, recallTimeoutMs, and retainTimeoutMs settings (and matching HINDSIGHT_*_TIMEOUT_MS environment variables).

... (truncated)

Commits

• 9b54d9e chore: bump version to 17.0.8
• fc62563 test: fix local-midnight logger flake and stale kimi k3 thinking format pin
• 0002905 chore: untrack node_modules symlinks and harden ignore pattern
• b9072f1 fix(extensibility): validate Type.Unsafe against the draft-2020-12 upgraded s...
• 7b14119 chore: bump version to 17.0.7
• aa1b89d chore: bump version to 17.0.6
• 9fd6e97 chore: bump version to 17.0.5
• 546dce7 chore: update changelogs
• ac8e9e0 fix(utils): made runtime module resolver uninstallable
• 3863a1f Merge PR #5911: fix(subagent): skip session title generation for headless sub...
• Additional commits viewable in compare view

Updates katex from 0.17.0 to 0.18.1

Release notes

Sourced from katex's releases.

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

• htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

v0.18.0

0.18.0 (2026-07-17)

Features

• prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

• users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

Changelog

Sourced from katex's changelog.

0.18.1 (2026-07-19)

Bug Fixes

• htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

0.18.0 (2026-07-17)

Features

• prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

• users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

Commits

• cdf479f chore(release): 0.18.1 [ci skip]
• 87a2b30 fix(htmlData): allow escaped commas in \htmlData (#4236)
• 2318066 chore(deps): bump codecov/codecov-action from 6 to 7 (#4227)
• 3b5b6a0 chore(deps): bump actions/checkout from 6 to 7 (#4232)
• 4e9d31a chore(deps): update dependency js-yaml to v4.2.0 [security] (#4244)
• b7ca8f0 chore(deps): update dependency webpack-dev-server to v5.2.5 [security] (#4242)
• bf1a59f chore: use pixel diff as fallback for byte-to-byte (#4245)
• 4d9d0ae chore(release): 0.18.0 [ci skip]
• 6f5c44f feat: prefix css classes (#4229)
• 2c6143a refactor: remove direct hasOwnProperty call (#4230)
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates typescript from 6.0.3 to 7.0.2

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.