fix(deps): update patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@earendil-works/pi-agent-core (source)	0.84.0 → 0.84.1
@earendil-works/pi-ai (source)	0.84.0 → 0.84.1
@earendil-works/pi-coding-agent (source)	0.84.0 → 0.84.1
@earendil-works/pi-telemetry (source)	0.84.0 → 0.84.1
@whiskeysockets/baileys	7.0.0-rc13 → 7.0.0-rc14
hono (source)	4.13.0 → 4.13.1
jose	6.2.4 → 6.2.8
mailparser	3.9.14 → 3.9.15
nodemailer (source)	9.0.1 → 9.0.5
nodemailer (source)	9.0.3 → 9.0.5
typebox	1.3.7 → 1.3.11
ws	8.21.1 → 8.21.3

---

Release Notes

earendil-works/pi (@​earendil-works/pi-agent-core)

v0.84.1

Compare Source

Added

• Added BeforeToolCallResult.terminate so blocked tool calls can participate in the existing batch early-termination rule (#​7715 by @​muyiyr).

Fixed

• Fixed Agent.reset() clearing transcript and runtime state during active runs; it now rejects until the agent is idle (#​7717 by @​wesleyzhangwq).

earendil-works/pi (@​earendil-works/pi-ai)

v0.84.1

Compare Source

Added

• Added Qwen Token Plan Individual as a built-in provider with its documented subscription model catalog and the shared international QWEN_TOKEN_PLAN_API_KEY (#​7659 by @​arasovic).

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.84.1

Compare Source

New Features

• Qwen Token Plan Individual — Use the built-in provider for models documented for Individual subscriptions. See API Keys.
• Authentication readiness checks — Use pi auth check to verify provider or model credentials, optionally emitting the resolved credential.
• Improved fullscreen interaction — Select words and paragraphs with multiple clicks and configure half-page transcript scrolling. See TUI Fullscreen Viewport.
• Terminating blocked tool calls — Extension tool_call handlers can stop all-terminating batches without another model call. See Tool Events.

Added

• Added Qwen Token Plan Individual as a built-in provider with its documented subscription model catalog and the shared international QWEN_TOKEN_PLAN_API_KEY. See API Keys (#​7659 by @​arasovic).
• Added pi auth check provider/model auth preflight with optional credential output (#​7152).
• Added terminate support to blocked extension tool_call events so all-terminating batches can skip the automatic follow-up model call. See Tool Events (#​7715 by @​muyiyr).
• Added inherited double-click word and whitespace selection, granularity-aware drag selection, and triple-click paragraph selection in fullscreen mode (#​7725, #​7733 by @​volsa).
• Added inherited unbound half-page transcript scrolling actions for fullscreen mode. See TUI Fullscreen Viewport (#​7735).

Changed

• Softened the bash tool's PI_* environment guideline in an attempt to reduce unnecessary inspection commands (#​7128).
• Reduced worst-case automatic terminal theme detection delay from 200 ms to 100 ms by probing color-scheme and background support concurrently.

Fixed

• Fixed Bun standalone binaries crashing on startup when the cwd contains a bunfig.toml with preload by compiling with --no-compile-autoload-bunfig (#​7685 by @​geril07).
• Fixed extension TUI method wrappers recursing indefinitely when delegating to the original method (#​7731).
• Fixed right-click not pasting clipboard text in fullscreen mode on Windows.
• Fixed inherited Agent.reset() clearing transcript and runtime state during active runs; it now rejects until the agent is idle (#​7717 by @​wesleyzhangwq).
• Fixed inherited LaTeX relation, multiplication, and named-operator spacing, and matrix composition with stacked fractions, operator limits, and adjacent matrices.
• Reduced inherited fullscreen mouse event volume under tmux, Zellij, and GNU Screen by using button-motion tracking instead of all-motion tracking.

earendil-works/pi (@​earendil-works/pi-telemetry)

v0.84.1

Compare Source

WhiskeySockets/Baileys (@​whiskeysockets/baileys)

v7.0.0-rc14

Compare Source

honojs/hono (hono)

v4.13.1

Compare Source

panva/jose (jose)

v6.2.8

Compare Source

Fixes

• enforce a single recipient when decrypting dir and ECDH-ES (505c383)
• reject a non-string "alg" in EmbeddedJWK (714f870)

Refactor

• index the JWS and JWE registries without a wrapper (925f3bb)
• name the "alg" source in unsupported algorithm failures (1500459)

v6.2.7

Compare Source

Fixes

• require own JOSE properties for presence checks (90ab09c)

Refactor

• reduce bundle size (767d7f1)

v6.2.6

Compare Source

Fixes

• types: accept host CryptoKey declarations (b48a15b)

v6.2.5

Compare Source

Fixes

• compare claim values for falsy validation options (eb86956)
• forward key management parameters for a single JWE recipient (2d4f801)
• handle a zero-length JWE additional authenticated data (16ca398)
• reject a generateKeyPair crv option the algorithm does not imply (76364e9)
• reject an unencoded payload in the JWS Compact Serialization (01d053f)
• reject characters outside the Base64URL alphabet (0ebb971), references #​879
• reject duplicate "crit" values when producing (31d60e1)
• reject invalid UTF-8 in JOSE Headers and JWT Claims Sets (5df3fed)
• reject truncated ASN.1 key data (7a16c66)
• surface non-ASCII token segments as JOSE errors (194fe11)
• types: correct JWK and CryptoKey types (62a196d)
• types: correct key resolver and JWT header types (e95f8c4)
• validate the clockTolerance and currentDate options are finite (ab2f18d)

Documentation

• correct subpaths and API documentation (2daec38)
• document consumer-supplied type parameters (9e9f66c)
• stop claiming the JWK "use" parameter is used during import (47a07b2)
• update CHANGELOG.md (fc51bf5)

Refactor

• assert key shape and type from the entry (971057e)
• avoid 32-bit truncation of the AES-CBC-HMAC AAD bit length (1c8c6e9)
• correct swapped JWE unprotected header type error messages (894c498)
• describe each JWS algorithm once (7375028)
• discriminate a key once (0b59a69)
• fold single-consumer modules into their consumers (c2f0ca3)
• generate and import keys from the entry (da69b68)
• keep JWE out of the JWKS and embedded-JWK paths (241dd48)
• keep JWS and JWE out of each other's bundles (2a98564)
• parse a Protected Header in one place (30f72af)
• resolve the content encryption algorithm once (98b50ab)
• tighten key property checks (fe0dc3b)
• types: add discriminated JOSE error types (f7f764e)
• types: add JOSE identifier unions and JWK narrowing (2a20f49)
• types: improve key and result inference (cb25e77)
• types: trim published declaration comments (544f179)
• unify base64 decode errors (3a91833)
• validate each token once rather than once per layer (bbdae09)
• write each algorithm identifier once (73d83b5)

nodemailer/mailparser (mailparser)

v3.9.15

Compare Source

Bug Fixes

• update dependencies (@​zone-eu/mailsplit 5.4.15, libmime 5.4.2, nodemailer 9.0.5) (047379d)

nodemailer/nodemailer (nodemailer)

v9.0.5

Compare Source

Bug Fixes

• ci: retrigger the workflows dropped during the Actions outage (85d16c1)
• mailer: escape specials in List-* header comments (#​1842) (75913bb)
• mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
• mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
• mime: encode DEL in header parameters and List-* comments (cf69430)
• mime: keep control chars out of the remaining header positions (5ed9d26)
• mime: normalize an address parsed out of a string as well (63685f7)
• mime: normalize an address so header and envelope agree (a9343b4)
• mime: stop a header key callback and the dkim tags from injecting (b7d772e)

v9.0.4

Compare Source

Bug Fixes

• mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
• mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#​1838) (5bd3a65)
• mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
• mime-node: escape backslash and quote in the Content-Type name parameter (#​1837) (adcfc4f)
• mime: encode HT/CR/LF in header parameter values instead of quoting them (#​1840) (5bc9cab)

sinclairzx81/typebox (typebox)

v1.3.11

Compare Source

v1.3.10

Compare Source

v1.3.9

Compare Source

v1.3.8

Compare Source

websockets/ws (ws)

v8.21.3

Compare Source

Bug fixes

• The server now correctly rejects permessage-deflate offers if the incoming
  client_max_window_bits parameter value is smaller than its configured
  clientMaxWindowBits (e97a20e).

v8.21.2

Compare Source

Bug fixes

• Fixed a test for CITGM (2eb3be0).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 17 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 38, reused 0, downloaded 0, added 0
Progress: resolved 73, reused 0, downloaded 0, added 0
Progress: resolved 137, reused 0, downloaded 0, added 0
Progress: resolved 298, reused 0, downloaded 0, added 0
Progress: resolved 451, reused 0, downloaded 0, added 0
Progress: resolved 525, reused 0, downloaded 0, added 0
Progress: resolved 756, reused 0, downloaded 0, added 0
Progress: resolved 837, reused 0, downloaded 0, added 0
Progress: resolved 877, reused 0, downloaded 0, added 0
Progress: resolved 984, reused 0, downloaded 0, added 0
Progress: resolved 1065, reused 0, downloaded 0, added 0
Progress: resolved 1152, reused 0, downloaded 0, added 0
 ERR_PNPM_UNUSED_PATCH  The following patches were not used: @earendil-works/pi-ai@0.84.0, @earendil-works/pi-coding-agent@0.84.0

Either remove them from "patchedDependencies" or update them to match packages in your dependencies.