chore(deps): update bump-dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/claude-code	2.1.38 → 2.1.40
@google/gemini-cli	0.28.0-preview.6 → 0.28.2
opencode-ai	1.1.53 → 1.1.59

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.40

Compare Source

v2.1.39

Compare Source

• Improved terminal rendering performance
• Fixed fatal errors being swallowed instead of displayed
• Fixed process hanging after session close
• Fixed character loss at terminal screen boundary
• Fixed blank lines in verbose transcript view

google-gemini/gemini-cli (@​google/gemini-cli)

v0.28.2

Compare Source

What's Changed

• fix(patch): cherry-pick e9a9474 to release/v0.28.1-pr-18840 [CONFLICTS] by @​gemini-cli-robot in #​18847

Full Changelog: google-gemini/gemini-cli@v0.28.1...v0.28.2

v0.28.1

Compare Source

What's Changed

• fix(patch): cherry-pick 37f128a to release/v0.28.0-pr-18478 by @​gemini-cli-robot in #​18821

Full Changelog: google-gemini/gemini-cli@v0.28.0...v0.28.1

v0.28.0

Compare Source

What's Changed

• feat(commands): add /prompt-suggest slash command by @​NTaylorMullen in #​17264
• feat(cli): align hooks enable/disable with skills and improve completion by @​sehoon38 in #​16822
• docs: add CLI reference documentation by @​leochiu-a in #​17504
• chore(release): bump version to 0.28.0-nightly.20260128.adc8e11bb by @​gemini-cli-robot in #​17725
• feat(skills): final stable promotion cleanup by @​abhipatel12 in #​17726
• test(core): mock fetch in OAuth transport fallback tests by @​jw409 in #​17059
• feat(cli): include auth method in /bug by @​erikus in #​17569
• Add a email privacy note to bug_report template by @​nemyung in #​17474
• Rewind documentation by @​Adib234 in #​17446
• fix: verify audio/video MIME types with content check by @​maru0804 in #​16907
• feat(core): add support for positron ide (#​15045) by @​kapsner in #​15047
• /oncall dedup - wrap texts to nextlines by @​sehoon38 in #​17782
• fix(admin): rename advanced features admin setting by @​skeshive in #​17786
• [extension config] Make breaking optional value non-optional by @​chrstnb in #​17785
• Fix docs-writer skill issues by @​g-samroberts in #​17734
• fix(core): suppress duplicate hook failure warnings during streaming by @​abhipatel12 in #​17727
• test: add more tests for AskUser by @​jackwotherspoon in #​17720
• feat(cli): enable activity logging for non-interactive mode and evals by @​SandyTao520 in #​17703
• feat(core): add support for custom deny messages in policy rules by @​allenhutchison in #​17427
• Fix unintended credential exposure to MCP Servers by @​Adib234 in #​17311
• feat(extensions): add support for custom themes in extensions by @​spencer426 in #​17327
• fix: persist and restore workspace directories on session resume by @​korade-krushna in #​17454
• Update release notes pages for 0.26.0 and 0.27.0-preview. by @​g-samroberts in #​17744
• feat(ux): update cell border color and created test file for table rendering by @​devr0306 in #​17798
• Change height for the ToolConfirmationQueue. by @​jacob314 in #​17799
• feat(cli): add user identity info to stats command by @​sehoon38 in #​17612
• fix(ux): fixed off-by-some wrapping caused by fixed-width characters by @​devr0306 in #​17816
• feat(cli): update undo/redo keybindings to Cmd+Z/Alt+Z and Shift+Cmd+Z/Shift+Alt+Z by @​scidomino in #​17800
• fix(evals): use absolute path for activity log directory by @​SandyTao520 in #​17830
• test: add integration test to verify stdout/stderr routing by @​ved015 in #​17280
• fix(cli): list installed extensions when update target missing by @​tt-a1i in #​17082
• fix(cli): handle PAT tokens and credentials in git remote URL parsing by @​afarber in #​14650
• fix(core): use returnDisplay for error result display by @​Nubebuster in #​14994
• Fix detection of bun as package manager by @​Randomblock1 in #​17462
• feat(cli): show hooksConfig.enabled in settings dialog by @​abhipatel12 in #​17810
• feat(cli): Display user identity (auth, email, tier) on startup by @​yunaseoul in #​17591
• fix: prevent ghost border for AskUserDialog by @​jackwotherspoon in #​17788
• docs: mark A2A subagents as experimental in subagents.md by @​adamfweidman in #​17863
• Resolve error thrown for sensitive values by @​chrstnb in #​17826
• fix(admin): Rename secureModeEnabled to strictModeDisabled by @​skeshive in #​17789
• feat(ux): update truncate dots to be shorter in tables by @​devr0306 in #​17825
• fix(core): resolve DEP0040 punycode deprecation via patch-package by @​ATHARVA262005 in #​17692
• feat(plan): create generic Checklist component and refactor Todo by @​Adib234 in #​17741
• Cleanup post delegate_to_agent removal by @​gundermanc in #​17875
• fix(core): use GIT_CONFIG_GLOBAL to isolate shadow git repo configuration - Fixes #​17877 by @​cocosheng-g in #​17803
• Disable mouse tracking e2e by @​alisa-alisa in #​17880
• fix(cli): use correct setting key for Cloud Shell auth by @​sehoon38 in #​17884
• chore: revert IDE specific ASCII logo by @​jackwotherspoon in #​17887
• Revert "fix(core): resolve DEP0040 punycode deprecation via patch-package" by @​sehoon38 in #​17898
• Refactoring of disabling of mouse tracking in e2e tests by @​alisa-alisa in #​17902
• feat(core): Add GOOGLE_GENAI_API_VERSION environment variable support by @​deyim in #​16177
• feat(core): Isolate and cleanup truncated tool outputs by @​SandyTao520 in #​17594
• Create skills page, update commands, refine docs by @​g-samroberts in #​17842
• feat: preserve EOL in files by @​Thomas-Shephard in #​16087
• Fix HalfLinePaddedBox in screenreader mode. by @​jacob314 in #​17914
• bug(ux) vim mode fixes. Start in insert mode. Fix bug blocking F12 and ctrl-X in vim mode. by @​jacob314 in #​17938
• feat(core): implement interactive and non-interactive consent for OAuth by @​ehedlund in #​17699
• perf(core): optimize token calculation and add support for multimodal tool responses by @​abhipatel12 in #​17835
• refactor(hooks): remove legacy tools.enableHooks setting by @​abhipatel12 in #​17867
• feat(ci): add npx smoke test to verify installability by @​bdmorgan in #​17927
• feat(core): implement dynamic policy registration for subagents by @​abhipatel12 in #​17838
• feat: Implement background shell commands by @​galz10 in #​14849
• feat(admin): provide actionable error messages for disabled features by @​skeshive in #​17815
• Fix bugs where Rewind and Resume showed Ugly and 100X too verbose content. by @​jacob314 in #​17940
• Fix broken link in docs by @​chrstnb in #​17959
• feat(plan): reuse standard tool confirmation for AskUser tool by @​jerop in #​17864
• feat(core): enable overriding CODE_ASSIST_API_VERSION with env var by @​lottielin in #​17942
• run npx pointing to the specific commit SHA by @​sehoon38 in #​17970
• Add allowedExtensions setting by @​kevinjwang1 in #​17695
• feat(plan): refactor ToolConfirmationPayload to union type by @​jerop in #​17980
• lower the default max retries to reduce contention by @​sehoon38 in #​17975
• fix(core): ensure YOLO mode auto-approves complex shell commands when parsing fails by @​abhipatel12 in #​17920
• Fix broken link. by @​g-samroberts in #​17972
• Support ctrl-C and Ctrl-D correctly Refactor so InputPrompt has priority over AppContainer for input handling. by @​jacob314 in #​17993
• Fix truncation for AskQuestion by @​jacob314 in #​18001
• fix(workflow): update maintainer check logic to be inclusive and case-insensitive by @​bdmorgan in #​18009
• Fix Esc cancel during streaming by @​LyalinDotCom in #​18039
• feat(acp): add session resume support by @​bdmorgan in #​18043
• fix(ci): prevent stale PR closer from incorrectly closing new PRs by @​bdmorgan in #​18069
• chore: delete autoAccept setting unused in production by @​victorvianna in #​17862
• feat(plan): use placeholder for choice question "Other" option by @​jerop in #​18101
• docs: update clearContext to hookSpecificOutput by @​jackwotherspoon in #​18024
• docs-writer skill: Update docs writer skill by @​jkcinouye in #​17928
• Sehoon/oncall filter by @​sehoon38 in #​18105
• feat(core): add setting to disable loop detection by @​SandyTao520 in #​18008
• Docs: Revise docs/index.md by @​jkcinouye in #​17879
• Fix up/down arrow regression and add test. by @​jacob314 in #​18108
• fix(ui): prevent content leak in MaxSizedBox bottom overflow by @​jerop in #​17991
• refactor: migrate checks.ts utility to core and deduplicate by @​jerop in #​18139
• feat(core): implement tool name aliasing for backward compatibility by @​SandyTao520 in #​17974
• docs: fix help-wanted label spelling by @​pavan-sh in #​18114
• feat(cli): implement automatic theme switching based on terminal background by @​Abhijit-2592 in #​17976
• fix(ide): no-op refactoring that moves the connection logic to helper functions by @​skeshive in #​18118
• feat: update review-frontend-and-fix slash command to review-and-fix by @​galz10 in #​18146
• fix: improve Ctrl+R reverse search by @​jackwotherspoon in #​18075
• feat(plan): handle inconsistency in schedulers by @​Adib234 in #​17813
• feat(plan): add core logic and exit_plan_mode tool definition by @​jerop in #​18110
• feat(core): rename search_file_content tool to grep_search and add legacy alias by @​SandyTao520 in #​18003
• fix(core): prioritize detailed error messages for code assist setup by @​gsquared94 in #​17852
• fix(cli): resolve environment loading and auth validation issues in ACP mode by @​bdmorgan in #​18025
• feat(core): add .agents/skills directory alias for skill discovery by @​NTaylorMullen in #​18151
• chore(core): reassign telemetry keys to avoid server conflict by @​mattKorwel in #​18161
• Add link to rewind doc in commands.md by @​Adib234 in #​17961
• feat(core): add draft-2020-12 JSON Schema support with lenient fallback by @​afarber in #​15060
• refactor(core): robust trimPreservingTrailingNewline and regression test by @​adamfweidman in #​18196
• Remove MCP servers on extension uninstall by @​chrstnb in #​18121
• refactor: localize ACP error parsing logic to cli package by @​bdmorgan in #​18193
• feat(core): Add A2A auth config types by @​adamfweidman in #​18205
• Set default max attempts to 3 and use the common variable by @​sehoon38 in #​18209
• feat(plan): add exit_plan_mode ui and prompt by @​jerop in #​18162
• fix(test): improve test isolation and enable subagent evaluations by @​cocosheng-g in #​18138
• feat(plan): use custom deny messages in plan mode policies by @​Adib234 in #​18195
• Match on extension ID when stopping extensions by @​chrstnb in #​18218
• fix(core): Respect user's .gitignore preference by @​xyrolle in #​15482
• docs: document GEMINI_CLI_HOME environment variable by @​adamfweidman in #​18219
• chore(core): explicitly state plan storage path in prompt by @​jerop in #​18222
• A2a admin setting by @​DavidAPierce in #​17868
• feat(a2a): Add pluggable auth provider infrastructure by @​adamfweidman in #​17934
• Fix handling of empty settings by @​chrstnb in #​18131
• Reload skills when extensions change by @​chrstnb in #​18225
• feat: Add markdown rendering to ask_user tool by @​jackwotherspoon in #​18211
• Add telemetry to rewind by @​Adib234 in #​18122
• feat(admin): add support for MCP configuration via admin controls (pt1) by @​skeshive in #​18223
• feat(core): require user consent before MCP server OAuth by @​ehedlund in #​18132
• fix(sandbox): propagate GOOGLE_GEMINI_BASE_URL&GOOGLE_VERTEX_BASE_URL env vars by @​skeshive in #​18231
• feat(ui): move user identity display to header by @​sehoon38 in #​18216
• fix: enforce folder trust for workspace settings, skills, and context by @​galz10 in #​17596
• fix(patch): cherry-pick aba8c5f to release/v0.28.0-preview.0-pr-17806 to patch version v0.28.0-preview.0 and create version 0.28.0-preview.1 by @​gemini-cli-robot in #​18307
• fix(patch): cherry-pick 9ca7300 to release/v0.28.0-preview.1-pr-18395 to patch version v0.28.0-preview.1 and create version 0.28.0-preview.2 by @​gemini-cli-robot in #​18400
• fix(patch): cherry-pick d86b1f7 to release/v0.28.0-preview.2-pr-18447 to patch version v0.28.0-preview.2 and create version 0.28.0-preview.3 by @​gemini-cli-robot in #​18450
• fix(patch): cherry-pick 1cae5ab to release/v0.28.0-preview.3-pr-18376 to patch version v0.28.0-preview.3 and create version 0.28.0-preview.4 by @​gemini-cli-robot in #​18463
• fix(patch): cherry-pick ec5836c to release/v0.28.0-preview.4-pr-18343 to patch version v0.28.0-preview.4 and create version 0.28.0-preview.5 by @​gemini-cli-robot in #​18472
• fix(patch): cherry-pick 81ccd80 to release/v0.28.0-preview.5-pr-18406 to patch version v0.28.0-preview.5 and create version 0.28.0-preview.6 by @​gemini-cli-robot in #​18651
• fix(patch): cherry-pick bce1cae to release/v0.28.0-preview.6-pr-18407 [CONFLICTS] by @​gemini-cli-robot in #​18739

New Contributors

• @​leochiu-a made their first contribution in #​17504
• @​erikus made their first contribution in #​17569
• @​nemyung made their first contribution in #​17474
• @​Randomblock1 made their first contribution in #​17462
• @​ATHARVA262005 made their first contribution in #​17692
• @​deyim made their first contribution in #​16177
• @​lottielin made their first contribution in #​17942
• @​victorvianna made their first contribution in #​17862
• @​pavan-sh made their first contribution in #​18114

Full Changelog: google-gemini/gemini-cli@v0.27.4...v0.28.0

v0.28.0-preview.8

Compare Source

What's Changed

• fix(patch): cherry-pick bce1cae to release/v0.28.0-preview.6-pr-18407 [CONFLICTS] by @​gemini-cli-robot in #​18739

Full Changelog: google-gemini/gemini-cli@v0.28.0-preview.7...v0.28.0-preview.8

v0.28.0-preview.7

Compare Source

What's Changed

• fix(patch): cherry-pick 37f128a to release/v0.28.0-preview.6-pr-18478 [CONFLICTS] by @​gemini-cli-robot in #​18732

Full Changelog: google-gemini/gemini-cli@v0.28.0-preview.6...v0.28.0-preview.7

---

Configuration

📅 Schedule: Branch creation - Only on Wednesday ( * * * * 3 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.