chore(deps): update dependency @earendil-works/pi-coding-agent to v0.80.3

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
@earendil-works/pi-coding-agent (source)	optionalDependencies	patch	0.80.2 → 0.80.3

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability
High	7.5	CVE-2026-13676
High	7.5	CVE-2026-16221
High	7.5	CVE-2026-18446
High	7.5	CVE-2026-75899
High	7.5	CVE-2026-75975
High	7.5	CVE-2026-76172
High	7.5	CVE-2026-84292
Medium	6.5	CVE-2026-84365
Medium	5.9	CVE-2026-84363
Medium	5.3	CVE-2026-71848
Medium	5.3	CVE-2026-84364
Medium	4.8	CVE-2026-71850
Low	3.7	CVE-2026-71849

---

Release Notes

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.80.3

Compare Source

New Features

• Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
• Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
• External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
• Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
• Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
• Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

• Added inherited Anthropic Claude Sonnet 5 model support.
• Added get_entries and get_tree RPC commands for reading session entries and tree snapshots over RPC (#​6078 by @​geraschenko).
• Added a package ./rpc-entry export for launching Pi directly in RPC mode.
• Added session-name change events for extensions (#​6175 by @​xl0).
• Added inherited Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#​6004 by @​gukoff).
• Added inherited Usage.reasoning token counts for providers that report reasoning/thinking token usage (#​6057).
• Added an externalEditor settings.json override for Ctrl+G external editor commands, with default fallbacks to Notepad on Windows and nano elsewhere (#​6122).
• Added an outputPad setting for user message, assistant message, and thinking horizontal padding (#​6168).

Changed

• Changed the default OpenAI model to gpt-5.5.
• Changed inherited OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#​4945).

Fixed

• Fixed inherited Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
• Fixed inherited generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#​6138).
• Fixed inherited provider HTTP errors to include response bodies instead of opaque SDK messages (#​5832 by @​stephanmck).
• Fixed inherited streamSimple() max-token caps so providers that count input and output against one context window do not reject long requests (#​5595).
• Fixed inherited OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#​6009).
• Fixed inherited Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#​6083).
• Fixed pre-prompt compaction to stop after compaction instead of continuing immediately (#​6074 by @​yzhg1983).
• Fixed resource notifications to stay before messages when resuming sessions (#​6048 by @​haoqixu).
• Fixed startup benchmark timing output to print after TUI shutdown, preserve extension timings, and drain terminal-query replies before stopping benchmark mode (#​6030 by @​xl0, #​6063 by @​xl0).
• Fixed extension tool changes to apply before the next provider request in the same agent run without dropping before_agent_start system-prompt overrides (#​6162).
• Fixed a crash when undici emits an internal client error while terminating a mid-stream HTTP response (#​6133).
• Fixed the compaction event regression test to cover status indicator cleanup and keep CI passing.
• Fixed interactive status indicators so ending work, retry, compaction, or branch-summary indicators no longer shrink the TUI when clear-on-shrink is enabled (#​6026).
• Fixed --session and SessionManager.open() to reject non-empty invalid session files without overwriting them (#​6002).
• Fixed user-message transcript rendering to keep visible backslashes in Markdown escape sequences such as \" (#​6105).
• Fixed assistant messages stopped by output length to show a visible incomplete-response error (#​4290).
• Fixed --no-session --session-id so ephemeral CLI runs can use deterministic session IDs for provider cache affinity (#​6070).
• Fixed disk BMP image files to be detected, converted to PNG, and attached through read and CLI @file inputs (#​6047).
• Fixed auto-retry for provider stream errors that explicitly tell callers to retry the request (#​6019).

---

• If you want to rebase/retry this PR, check this box

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.10%. Comparing base (ac025b0) to head (3da8081).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #482   +/-   ##
=======================================
  Coverage   70.09%   70.10%           
=======================================
  Files         413      413           
  Lines       34033    34033           
  Branches    10128    10128           
=======================================
+ Hits        23857    23860    +3     
  Misses       7915     7915           
+ Partials     2261     2258    -3     

Flag	Coverage Δ
e2e	48.12% <ø> (+0.02%)	⬆️
integration	45.48% <ø> (ø)
unit	77.29% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 11 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.