Skip to content

1.6.2

Choose a tag to compare

View all tags
@ilovepixelart ilovepixelart released this 02 Nov 16:38
v1.6.2
89e8420
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Requirements unchanged (Node >= 22.19). Nothing breaks: no API or configuration change.

Fixed

  • On pi 1.5.0, an output style applied after an earlier extension forced the system prompt was appended and pi's default instructions stayed in the prompt. The style now replaces them, on pi 1.5.0 and on older hosts. (#416)

Security

  • pi 1.1.0 to 1.4.0 pin undici 8.10.2 (GHSA-xjj6-f33q-929c): a server answering with more than five content codings and closing early ends the process, even when the fetch() rejection is caught. pi-code's MCP HTTP transports and HTTP hooks use that fetch. pi supplies this copy, so update pi to 1.5.0 or later to get the fix. (#416)
  • This repository's lockfile moves to patched body-parser, fast-uri, ip-address, zod, qs and minimatch. The lockfile is not published, so fresh installs already resolve patched versions. (#416)

Changed

  • Tool parameter types and git-checkpoint compile against pi 1.5.0. The emitted tool schemas are unchanged. (#416)
Assets 4
Loading