build: update all non-major dependencies

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@google/gemini-cli	^0.11.0 -> ^0.13.0
@google/genai	1.28.0 -> 1.29.0
@openai/codex (source)	^0.53.0 -> ^0.56.0
@shikijs/langs (source)	3.14.0 -> 3.15.0
@shikijs/themes (source)	3.14.0 -> 3.15.0

---

Release Notes

google-gemini/gemini-cli (@​google/gemini-cli)

v0.13.0

Compare Source

What's Changed

• fix: enhance path handling in handleAtCommand to support relative paths by @​lifefloating in #​9065
• Remove Todo Icon by @​scidomino in #​12190
• chore(release): bump version to 0.13.0-nightly.20251029.cca41edc by @​gemini-cli-robot in #​12191
• fix(security) - Use emitFeedback instead of console error by @​shishu314 in #​11954
• fix(infra) - Unskip read many file test by @​shishu314 in #​12181
• feat: Add auth_type to StartSessionEvent OTel logging by @​kiranani in #​12034
• refactor: Replace console.error with structured logging and feedback by @​galz10 in #​12175
• refactor(core): Move getPackageJson utility to core package by @​skeshive in #​12224
• Hide collapsed Todo tray when they're all done. by @​scidomino in #​12242
• Fix atprocessor test on windows by @​scidomino in #​12252
• refactor(todo): improve performance and readability of todo component by @​miguelsolorio in #​12238
• Fix alt key mappings for mac by @​scidomino in #​12231
• Fix(noninteractive) - Add message when user uses deprecated flag by @​shishu314 in #​11682
• feat(telemetry): Add extensions to StartSessionEvent telemetry by @​kiranani in #​12261
• Standardize error logging with coreEvents.emitFeedback by @​sehoon38 in #​12199
• feat(ui): Fix Todo item text color not propagating for custom themes by @​miguelsolorio in #​12265
• feat(auth): improve API key authentication flow by @​galz10 in #​11760
• docs: update keyboard shortcuts with missing shortcuts by @​jackwotherspoon in #​12024
• chore: migrate console.error to debugLogger in useSlashCompletion by @​hritan in #​12218
• feat(core): Implement granular memory loaders for JIT architecture by @​abhipatel12 in #​12195
• fix(core): Add rootDir to tsconfig.json to resolve TS5055 error by @​mattKorwel in #​12274
• Refactoring unit tests in packages/cli/src/ui by @​IamRiddhi in #​12251
• Docs: add v.0.11.0 to changelog by @​jkcinouye in #​12256
• Log extension ID with tool call/slash command invocation by @​chrstnb in #​12254
• Fix misreported number of lines being removed by model by @​Adib234 in #​12076
• Revert "fix(core): Add rootDir to tsconfig.json to resolve TS5055 error" by @​mattKorwel in #​12293
• fix output messages for install and link by @​jakemac53 in #​12168
• Add validate command by @​kevinjwang1 in #​12186
• fix(docs): remove incorrect extension install method by @​swissspidy in #​11194
• fix(test) - Make JSON output error test use canned response by @​shishu314 in #​12250
• Initial support for reloading extensions in the CLI - mcp servers only by @​jakemac53 in #​12239
• Fix tests to wrap all calls changing the UI with act. by @​jacob314 in #​12268
• Create line change metrics by @​jerop in #​12299
• feat: Prevent self-imports and fix build loop by @​mattKorwel in #​12309
• Change default compression threshold by @​scidomino in #​12306
• refactor(core): decouple GeminiChat from uiTelemetryService via Usage events by @​SandyTao520 in #​12196
• fixing minor formatting issues in quota-and-pricing.md by @​hyangah in #​11340
• Enable model routing for all users by @​mrcabbage972 in #​12300
• Make compression threshold editable in the UI. by @​scidomino in #​12317
• Remove context percentage in footer by default by @​abhipatel12 in #​12326
• Code review script to catch common package/cli regressions by @​jacob314 in #​12316
• chore/release: bump version to 0.13.0-nightly.20251031.c89bc30d by @​gemini-cli-robot in #​12330
• feat: add dynamic run-names to patch release workflows by @​mattKorwel in #​12336
• fix: Address silent failure in release-patch-1-create-pr workflow by @​mattKorwel in #​12339
• refactor(core): Refactored and removed redundant test lines in teleme… by @​MJjainam in #​12284
• feat(telemetry): Add extension name to ToolCallEvent telemetry by @​kiranani in #​12343
• chore: make clear that --model is for choosing model on startup by @​jackwotherspoon in #​12367
• Fixes for Ink 6.4.0 by @​jacob314 in #​12352
• fix(core): remove duplicate session_id in GCP log exporter by @​jerop in #​12370
• Update mcp-server.md by @​richardkmichael in #​12310
• Remove testing-library/react dep now that it is unused. by @​jacob314 in #​12355
• docs(cli): user.email attribute is only available for Google auth by @​jerop in #​12372
• chore: migrate console.error to debugLogger in usePromptCompletion by @​hritan in #​12208
• fix(core): ensure loop detection respects session disable flag by @​SandyTao520 in #​12347
• Mark model.compressionThreshold as requiring a restart by @​scidomino in #​12378
• Switch to ink@​. version 6.4.0 by @​jacob314 in #​12381
• refactor: simplify daily quota error messages by @​gsquared94 in #​12386
• docs: Add policy engine documentation and update sidebar by @​allenhutchison in #​12240
• migrating console.error to debugger for installationManager, oauth-provider, modifiable-tool by @​sehoon38 in #​12279
• migrate console.error to coreEvents for mcp-client-manager and google-auth-provider by @​sehoon38 in #​12342
• feat(telemetry) - Add metric for slow rendering by @​shishu314 in #​12391
• Handle untrusted folders on extension install and link by @​kevinjwang1 in #​12322
• feat(infra) - Add logging for slow rendering by @​shishu314 in #​11147
• Remove unused jsdom dep by @​jacob314 in #​12394
• Update telemetry.md to remove references to flags. by @​jkcinouye in #​12397
• Adding the Policy Engine docs to indexes. by @​jkcinouye in #​12404
• I think the package lock was added in error to .gitignore. by @​jacob314 in #​12405
• fix(core): prevent model router from overriding explicit model choice by @​abhipatel12 in #​12399
• feat(core): Introduce release channel detection by @​skeshive in #​12257
• feat(triage): overhaul automated issue triage workflow by @​skeshive in #​12365
• further incremental steps. Update the string width version to align with upstream ink by @​jacob314 in #​12411
• Jacob314/jrichman ink by @​jacob314 in #​12414
• Add kitty support for function keys. by @​scidomino in #​12415
• fix(core): combine .gitignore and .geminiignore logic for correct precedence by @​EricRahm in #​11587
• Add DarkGray to the ColorTheme. by @​jacob314 in #​12420
• docs: update command-line flag documentation by @​allenhutchison in #​12452
• feat(hooks): Hook Configuration Schema and Types by @​Edilmo in #​9074
• fix: preserve path components in OAuth issuer URLs by @​cbcoutinho in #​12448
• feat(ui): add response semantic color by @​cornmander in #​12450
• chore: autogenerate settings documentation by @​cornmander in #​12451
• chore: bump tar to 7.5.2 by @​cornmander in #​12466
• refactor: split core system prompt into multiple parts by @​anj-s in #​12461
• Refactoring packages/cli/src/ui tests by @​IamRiddhi in #​12482
• refactor(core): improve error handling for setGlobalProxy by @​allenhutchison in #​12437
• Cap Thinking Budget to prevent runaway thought loops by @​abhipatel12 in #​12416
• fix(ui): ensure model changes update the UI immediately by @​abhipatel12 in #​12412
• fix(settings): persist restart-required changes when exiting with ESC by @​ashmod in #​12443
• Enforce timeout for subagents by @​silviojr in #​12232
• Grants subagent a recovery turn for when it hits TIMEOUT, MAX_TURNS or NO_TOOL_CALL failures. by @​silviojr in #​12344
• alternate buffer support by @​jacob314 in #​12471
• (fix): Respect ctrl+c signal for aborting execution in NonInteractive mode by @​anj-s in #​11478
• feat(core): Add support for listing experiments by @​skeshive in #​12495
• Log recovery events (nudges) that happens inside the subagent by @​silviojr in #​12408
• fix(auth): Return empty map if token file does not exits, and refacto… by @​galz10 in #​12332
• Refactor PolicyEngine to Core Package by @​allenhutchison in #​12325
• Enable WriteTodos tool by default by @​anj-s in #​12500
• Alt buffer default by @​jacob314 in #​12507
• feat(hooks): Hook Type Decoupling and Translation by @​Edilmo in #​9078
• feat(core): add timeout to llm edit fix by @​agmsb in #​12393
• Modify navigation and completion keyboard shortcuts to not use scroll. by @​jacob314 in #​12502
• chore: bump vite to 7.1.12 by @​cornmander in #​12512
• Only show screen reader notice once by @​chrstnb in #​12247
• fix(core): Improve loop detection for longer repeating patterns by @​SandyTao520 in #​12505
• feat(hooks): Hook Input/Output Contracts by @​Edilmo in #​9080
• Fix alt+left on ghostty by @​scidomino in #​12503
• feat(hooks): Hook Execution Planning and Matching by @​Edilmo in #​9090
• fix(mcp): replace hardcoded port 7777 with dynamic port allocation for OAuth by @​cbcoutinho in #​12520
• refactor(core): Refactored and removed redundant test lines in telemetry by @​MJjainam in #​12356
• SI prompt nudge for the todo tool by @​anj-s in #​12159
• Extensions MCP refactor by @​jakemac53 in #​12413
• fix(infra) - Use canned response for flicker test by @​shishu314 in #​12377
• Tighten bash shell option handling by @​cornmander in #​12532
• Fix flicker in screen reader nudge by @​chrstnb in #​12541
• Fix shift+tab keybinding when not in kitty mode by @​scidomino in #​12552
• Ss/fix ext by @​shishu314 in #​12540
• migrate console.error to coreEvents/debugger for sandbox, logger, chatRecordingService by @​sehoon38 in #​12253
• enable codebase investigator by default for preview by @​silviojr in #​12555
• feat(core): Integrate remote experiments configuration by @​skeshive in #​12539
• fix(patch): cherry-pick f51d745 to release/v0.13.0-preview.0-pr-12586 to patch version v0.13.0-preview.0 and create version 0.13.0-preview.1 by @​gemini-cli-robot in #​12595
• fix(patch): cherry-pick 1611364 to release/v0.13.0-preview.1-pr-12587 to patch version v0.13.0-preview.1 and create version 0.13.0-preview.2 by @​gemini-cli-robot in #​12601
• fix(patch): cherry-pick 36feb73 to release/v0.13.0-preview.2-pr-12658 to patch version v0.13.0-preview.2 and create version 0.13.0-preview.3 by @​gemini-cli-robot in #​12663

New Contributors

• @​hyangah made their first contribution in #​11340
• @​richardkmichael made their first contribution in #​12310
• @​Edilmo made their first contribution in #​9074
• @​cbcoutinho made their first contribution in #​12448

Full Changelog: google-gemini/gemini-cli@v0.12.0...v0.13.0

v0.12.0

Compare Source

What's Changed

• chore(release): bump version to 0.12.0-nightly.20251022.0542de95 by @​gemini-cli-robot in #​11672
• fix(test): unskip and fix useToolScheduler tests by @​SandyTao520 in #​11671
• Add extension alias for extensions command by @​kevinjwang1 in #​11622
• feat(infra) - Create a workflow for deflake by @​shishu314 in #​11535
• Add setting to disable YOLO mode by @​Adib234 in #​11609
• feat(infra) - Update status for chained e2e by @​shishu314 in #​11651
• extract console error to util func by @​abhipatel12 in #​11675
• Document todo tool by @​scidomino in #​11695
• feat(infra) - Add logging for when user tries to exit multiple times by @​shishu314 in #​11218
• fix(ui): Fix and unskip InputPrompt tests by @​SandyTao520 in #​11700
• Docs: adds 2025-10-13 changelog. by @​jkcinouye in #​11751
• feat(preflight): Use venv for yamllint installation by @​JayadityaGit in #​11694
• fix(a2a-server): Fix and unskip GCS persistence test by @​SandyTao520 in #​11755
• fix(cli): fix race condition and unskip tests in useGitBranchName by @​SandyTao520 in #​11759
• refactor: simplify FilterReport and remove unused code by @​EricRahm in #​11681
• refactor(core): Clean up exclude description by @​EricRahm in #​11678
• Refactor KeypressContext by @​scidomino in #​11677
• fix(ui): resolve race condition in double-escape handler by @​Lyonk71 in #​8913
• refactor(cli): Parameterize tests in InputPrompt by @​MJjainam in #​11776
• Docs: Fix broken link in docs/cli/configuration.md by @​Smetalo in #​11655
• Adds executeCommand endpoint with support for /extensions list by @​jdgarrido1105 in #​11515
• Fix broken links in documentation by @​Smetalo in #​11789
• Re-enable test. by @​cornmander in #​11628
• Add extension settings to be requested on install by @​chrstnb in #​9802
• feat: Add lychee-action to check for broken links by @​Smetalo in #​11781
• fix(infra) - Remove context input for setting status by @​shishu314 in #​11734
• Fix bug where tool scheduler was repeatedly created. by @​jacob314 in #​11767
• feat(infra) - Make merge group and pushes run chained e2e by @​shishu314 in #​11796
• feat(ux): Surface internal errors via unified event system by @​abhipatel12 in #​11803
• Create ExtensionManager class which manages all high level extension tasks by @​jakemac53 in #​11667
• fix(infra) - Fix merge queue skipper issues for chain e2e by @​shishu314 in #​11810
• fix: align shell allowlist handling (#​11510) by @​cornmander in #​11813
• Use raw writes to stdin where possible in tests by @​scidomino in #​11837
• Added parameterization to base-storage-token.test and prompts.test.ts by @​IamRiddhi in #​11821
• feat(core) Bump get-ripgrep version. by @​joshualitt in #​11698
• First take at mocking out gemini cli responses in integration tests by @​jakemac53 in #​11156
• Use raw writes to stdin in test by @​scidomino in #​11871
• fix(cli): re-throw errors in non-interactive mode by @​SandyTao520 in #​11849
• Adding Parameterised tests by @​IamRiddhi in #​11930
• chore(core): add token caching in google auth provider by @​adamfweidman in #​11946
• docs(cli): update telemetry documentation by @​jerop in #​11806
• run bom test on windows by @​sehoon38 in #​11828
• Stop logging session ids on extension events by @​owenofbrien in #​11941
• Fix(cli): Use the correct extensionPath by @​EricRahm in #​11896
• fix(security) - Use emitFeedback by @​shishu314 in #​11961
• fix(security) - Use emitFeedback instead of console error by @​shishu314 in #​11948
• fix: handle request retries and model fallback correctly by @​gsquared94 in #​11624
• fix(infra) - Simplify cancel in progress and add permission to set status step by @​shishu314 in #​11835
• Add regression tests for shell command parsing by @​cornmander in #​11962
• Fix(cli): Use cross-platform path separators in extension tests by @​EricRahm in #​11970
• fix linked extension test on windows by @​jakemac53 in #​11973
• feat(core): Introduce message bus for tool execution confirmation by @​allenhutchison in #​11544
• fix(cli): Use correct defaults for file filtering by @​EricRahm in #​11426
• fix(core): use debugLogger.warn for loop detection errors by @​SandyTao520 in #​11986
• fix(update): replace update-notifier with latest-version by @​galz10 in #​11989
• use coreEvents.emitFeedback in extension enablement by @​jakemac53 in #​11985
• Fix tests by @​abhipatel12 in #​11998
• Support redirects in fetchJson, add tests for it by @​jakemac53 in #​11993
• fix(tools): ReadFile no longer shows confirmation when message bus is off by @​allenhutchison in #​12003
• use debugLogger instead of console.error by @​jakemac53 in #​11990
• Support paste markers split across writes. by @​scidomino in #​11977
• refactor: Switch over to unified shouldIgnoreFile by @​EricRahm in #​11815
• Fix typo in: packages/cli/src/utils/handleAutoUpdate.ts by @​Qiyu-Wei in #​11809
• docs(contributing): update project structure section with missing packages by @​0xlakshan in #​11599
• Make PASTE_WORKAROUND the default. by @​scidomino in #​12008
• refactor(cli): replace custom wait with vi.waitFor in InputPrompt tests by @​SandyTao520 in #​12005
• Fix the shortenPath function to correctly insert ellipsis. by @​ph-sp in #​12004
• fix(core): Prepend user message to loop detection history if it starts with a function call by @​SandyTao520 in #​11860
• Remove non-existent parallel flag. by @​scidomino in #​12018
• First batch of fixing tests to use best practices. by @​jacob314 in #​11964
• add absolute file path description for windows by @​gsehgal in #​12007
• fix(cli): Add delimiter before printing tool response in non-interactive mode by @​krishna-kb in #​11351
• fix: user configured oauth scopes should take precedence over discovered scopes by @​jackwotherspoon in #​12088
• feat(core, cli): Implement sequential approval. by @​joshualitt in #​11593
• Refactor vim.test.ts: Use Parameterized Tests by @​IamRiddhi in #​11969
• docs(github): revamp pull request template by @​jerop in #​11949
• use debugLogger instead of console by @​scidomino in #​12095
• Implementing support for recitations events in responses from A2A Server by @​alisa-alisa in #​12067
• fix(core): update loop detection LLM schema fields by @​SandyTao520 in #​12091
• Docs: Contributing guide by @​jkcinouye in #​12012
• Create BYOID auth client when detecting BYOID credentials by @​cocosheng-g in #​11592
• feat(ID token support): Add ID token support for authenticating to MC… by @​RuchikaGoel in #​12031
• fix(telemetry): Prevent duplicate StartSessionEvent logging by @​SandyTao520 in #​12090
• refactor(core): extract ChatCompressionService from GeminiClient by @​SandyTao520 in #​12001
• fix(ci): tsc build for package/core is idempodent by @​mattKorwel in #​12112
• (fix): appcontainer should not poll and footer should use currentModel from ui state by @​psinha40898 in #​11923
• feat: added basic dev otel trace instrumentation by @​pavelgj in #​11690
• Fix config test so it passes even if the user running the test happens to have set GEMINI_MODEL to flash by @​jacob314 in #​12114
• Migrate to coreEvents/debugLogger by @​scidomino in #​12107
• Added a a script to setup and run genkit telemetry and dev ui by @​pavelgj in #​12120
• refactor(core): Parameterize tests in glob.test.ts by @​MJjainam in #​12061
• docs: update installation section in README by @​Tekrah123 in #​12035
• Revert "feat(ID token support): Add ID token support for authenticating to MC…" by @​adamfweidman in #​12162
• chore(console): change console errors in sa-impersontation by @​adamfweidman in #​12165
• revert nightly schedule by @​skeshive in #​11653
• Add ExtensionLoader interface, use that on Config object by @​jakemac53 in #​12116
• feat(policy): Introduce config-based policy engine with TOML configuration by @​allenhutchison in #​11992
• refactor: Migrate console.error to debugLogger.warn in atCommandProcessor.ts by @​allenhutchison in #​12134
• feat: Add message bus setting guard for tool confirmation by @​allenhutchison in #​12169
• Migrate tests to use avoid jsdom by @​jacob314 in #​12118
• feat: Add explore subcommand for extension by @​JayadityaGit in #​11846
• fix(infra) - Continue workflow when merge queue skipper fail by @​shishu314 in #​10509
• Add support for sensitive keychain-stored per-extension settings by @​chrstnb in #​11953
• chore: migrate console.error in useGeminiStream by @​hritan in #​12157
• chore: migrate console.error in workspaceContext by @​hritan in #​12167
• Change debug drawer keybinding to F12 by @​scidomino in #​12171
• Record model responses with --record-responses (for use in testing) by @​jakemac53 in #​11894
• feat: Add Open Telemetric semantic standard compliant log by @​bobcatfish in #​11975
• Remove obsolete snapshots by @​scidomino in #​12180
• Disable model routing for oauth users by @​mrcabbage972 in #​11889
• feat(docs): Symlink CONTRIBUTING.md in the docs folder so that the site can pick it up. by @​richieforeman in #​12178
• fix(patch): cherry-pick 82c1042 to release/v0.12.0-preview.2-pr-12231 to patch version v0.12.0-preview.2 and create version 0.12.0-preview.3 by @​gemini-cli-robot in #​12320
• fix(patch): cherry-pick 68afb72 to release/v0.12.0-preview.3-pr-12306 to patch version v0.12.0-preview.3 and create version 0.12.0-preview.4 by @​gemini-cli-robot in #​12327
• fix(patch): cherry-pick 643f2c0 to release/v0.12.0-preview.4-pr-12300 to patch version v0.12.0-preview.4 and create version 0.12.0-preview.5 by @​gemini-cli-robot in #​12329
• fix(patch): cherry-pick 3332703 to release/v0.12.0-preview.5-pr-12317 to patch version v0.12.0-preview.5 and create version 0.12.0-preview.6 by @​gemini-cli-robot in #​12334
• fix(patch): cherry-pick 135d981 to release/v0.12.0-preview.6-pr-12299 to patch version v0.12.0-preview.6 and create version 0.12.0-preview.7 by @​gemini-cli-robot in #​12368
• fix(patch): cherry-pick 11e1e98 to release/v0.12.0-preview.7-pr-12347 to patch version v0.12.0-preview.7 and create version 0.12.0-preview.8 by @​gemini-cli-robot in #​12383
• fix(patch): cherry-pick fd2cbac to release/v0.12.0-preview.9-pr-12399 [CONFLICTS] by @​gemini-cli-robot in #​12488
• fix: cherry-pick commits for release by @​abhipatel12 in #​12549
• Cherry pick screen reader nudge changes by @​chrstnb in #​12553

New Contributors

• @​jdgarrido1105 made their first contribution in #​11515
• @​Qiyu-Wei made their first contribution in #​11809
• @​0xlakshan made their first contribution in #​11599
• @​ph-sp made their first contribution in #​12004
• @​krishna-kb made their first contribution in #​11351
• @​alisa-alisa made their first contribution in #​12067
• @​cocosheng-g made their first contribution in #​11592
• @​RuchikaGoel made their first contribution in [#​12031](https://redirect.github.com/g

---

Configuration

📅 Schedule: Branch creation - "after 6am and before 10am on Monday, Wednesday, Friday" in timezone Europe/Rome, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.