build(deps): bump @mariozechner/pi-coding-agent from 0.70.6 to 0.71.0

[dependabot]

Bumps @mariozechner/pi-coding-agent from 0.70.6 to 0.71.0.

Release notes

Sourced from @​mariozechner/pi-coding-agent's releases.

v0.71.0

Breaking Changes

• Removed built-in Google Gemini CLI and Google Antigravity support. Existing configurations using those providers must switch to another supported provider.

New Features

• Cloudflare AI Gateway provider support with CLOUDFLARE_API_KEY/CLOUDFLARE_ACCOUNT_ID/CLOUDFLARE_GATEWAY_ID, default model resolution, and /login display. See https://github.com/badlogic/pi-mono/tree/HEAD/packages/coding-agent/blob/HEAD/docs/providers.md#cloudflare-ai-gateway. (#3856 by @​mchenco).
• Moonshot AI provider support with MOONSHOT_API_KEY, default model resolution, and /login display.
• Mistral Medium 3.5 built-in model support. See https://github.com/badlogic/pi-mono/tree/HEAD/packages/coding-agent/blob/HEAD/docs/providers.md#api-keys. (#4009 by @​technocidal).
• Extension APIs can replace finalized message_end messages, wrap custom editor factories via ctx.ui.getEditorComponent(), and observe thinking level changes. See https://github.com/badlogic/pi-mono/tree/HEAD/packages/coding-agent/blob/HEAD/docs/extensions.md#message_start--message_update--message_end, https://github.com/badlogic/pi-mono/tree/HEAD/packages/coding-agent/blob/HEAD/docs/extensions.md#widgets-status-and-footer, and https://github.com/badlogic/pi-mono/tree/HEAD/packages/coding-agent/blob/HEAD/docs/extensions.md#thinking_level_select.
• PI_CODING_AGENT_SESSION_DIR configures session storage from the environment. See https://github.com/badlogic/pi-mono/tree/HEAD/packages/coding-agent/blob/HEAD/docs/usage.md#environment-variables.

Added

• Added Cloudflare AI Gateway as a built-in provider with CLOUDFLARE_API_KEY/CLOUDFLARE_ACCOUNT_ID/CLOUDFLARE_GATEWAY_ID setup, default model resolution, /login display support, and provider documentation (#3856 by @​mchenco).
• Added Moonshot AI as a built-in provider with MOONSHOT_API_KEY setup, default model resolution, and /login display support.
• Added Mistral Medium 3.5 built-in model support via @mariozechner/pi-ai (#4009 by @​technocidal).
• Added routed OpenAI-compatible response model metadata in assistant messages, so providers such as OpenRouter can expose the concrete model used (#3968 by @​purrgrammer).
• Added PI_CODING_AGENT_SESSION_DIR as an environment equivalent to --session-dir (#4027).
• Added message_end extension result support for replacing finalized messages, enabling extensions to override assistant usage cost (#3982).
• Added top-level name support to pi.registerProvider() so extension-registered providers can show a friendly name in /login (#3956).
• Added ctx.ui.getEditorComponent() so extensions can wrap the currently configured custom editor factory (#3935).
• Added a thinking_level_select extension event for observing thinking level changes (#3888).

Fixed

• Fixed WSL clipboard image paste by passing the PowerShell save path directly instead of through a custom environment variable (#2469).
• Fixed Google Vertex Gemini 3 tool call replay for unsigned tool calls (#4032).
• Fixed blocked edit tool results rendering the rejection reason twice after interactive extension confirmation (#3830).
• Fixed extension-triggered thinking level changes refreshing the interactive editor border immediately (#3888).
• Fixed the coding-agent README See Also link to point at @mariozechner/pi-agent-core (#4023).
• Fixed grep and find tool argument injection for flag-like search patterns (#4018).
• Fixed PowerShell shell command output on Windows by only spawning detached processes on Unix (#4013 by @​picasso250).
• Fixed Bun package manager node_modules discovery when npmCommand is configured to use Bun (#3998 by @​thirtythreeforty).
• Fixed edit and edit-preview access failures to report filesystem errors correctly (#3955 by @​rwachtler).
• Fixed ProcessTerminal sizing to use COLUMNS and LINES before falling back to 80x24 (#4004).
• Updated @anthropic-ai/sdk to clear GHSA-p7fg-763f-g4gf audit findings (#3992).
• Updated @mariozechner/clipboard to an attested release so package managers with trust policies do not reject installs (#3946).
• Fixed project context discovery to load AGENTS.MD files in addition to AGENTS.md (#3949).
• Fixed /handoff to use compacted session context instead of pre-compaction raw messages (#3945).
• Fixed DeepSeek V4 Flash xhigh thinking support so requests map to DeepSeek's max reasoning effort (#3944).
• Fixed Anthropic streams that end before message_stop to be treated as errors instead of successful partial responses (#3936).
• Fixed generated OpenAI-compatible DeepSeek V4 reasoning compatibility outside the direct DeepSeek provider (#3940).
• Fixed idle follow-up submission to clear the editor like normal message submission (#3926).
• Fixed editor rendering artifacts for Thai Sara Am and Lao AM vowel characters (#3904).
• Fixed DeepSeek V4 Flash and V4 Pro pricing metadata to match current official rates (#3910).
• Updated the sandbox extension example lockfile to resolve the vulnerable lodash-es transitive dependency (#3901).
• Fixed DeepSeek prompt cache hits to be tracked from OpenAI-compatible usage responses (#3880).

... (truncated)

Changelog

Sourced from @​mariozechner/pi-coding-agent's changelog.

[0.71.0] - 2026-04-30

Breaking Changes

• Removed built-in Google Gemini CLI and Google Antigravity support. Existing configurations using those providers must switch to another supported provider.

New Features

• Cloudflare AI Gateway provider support with CLOUDFLARE_API_KEY/CLOUDFLARE_ACCOUNT_ID/CLOUDFLARE_GATEWAY_ID, default model resolution, and /login display. See https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/providers.md#cloudflare-ai-gateway. (#3856 by @​mchenco).
• Moonshot AI provider support with MOONSHOT_API_KEY, default model resolution, and /login display.
• Mistral Medium 3.5 built-in model support. See https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/providers.md#api-keys. (#4009 by @​technocidal).
• Extension APIs can replace finalized message_end messages, wrap custom editor factories via ctx.ui.getEditorComponent(), and observe thinking level changes. See https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/extensions.md#message_start--message_update--message_end, https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/extensions.md#widgets-status-and-footer, and https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/extensions.md#thinking_level_select.
• PI_CODING_AGENT_SESSION_DIR configures session storage from the environment. See https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/usage.md#environment-variables.

Added

• Added Cloudflare AI Gateway as a built-in provider with CLOUDFLARE_API_KEY/CLOUDFLARE_ACCOUNT_ID/CLOUDFLARE_GATEWAY_ID setup, default model resolution, /login display support, and provider documentation (#3856 by @​mchenco).
• Added Moonshot AI as a built-in provider with MOONSHOT_API_KEY setup, default model resolution, and /login display support.
• Added Mistral Medium 3.5 built-in model support via @mariozechner/pi-ai (#4009 by @​technocidal).
• Added routed OpenAI-compatible response model metadata in assistant messages, so providers such as OpenRouter can expose the concrete model used (#3968 by @​purrgrammer).
• Added PI_CODING_AGENT_SESSION_DIR as an environment equivalent to --session-dir (#4027).
• Added message_end extension result support for replacing finalized messages, enabling extensions to override assistant usage cost (#3982).
• Added top-level name support to pi.registerProvider() so extension-registered providers can show a friendly name in /login (#3956).
• Added ctx.ui.getEditorComponent() so extensions can wrap the currently configured custom editor factory (#3935).
• Added a thinking_level_select extension event for observing thinking level changes (#3888).

Fixed

• Fixed WSL clipboard image paste by passing the PowerShell save path directly instead of through a custom environment variable (#2469).
• Fixed Google Vertex Gemini 3 tool call replay for unsigned tool calls (#4032).
• Fixed blocked edit tool results rendering the rejection reason twice after interactive extension confirmation (#3830).
• Fixed extension-triggered thinking level changes refreshing the interactive editor border immediately (#3888).
• Fixed the coding-agent README See Also link to point at @mariozechner/pi-agent-core (#4023).
• Fixed grep and find tool argument injection for flag-like search patterns (#4018).
• Fixed PowerShell shell command output on Windows by only spawning detached processes on Unix (#4013 by @​picasso250).
• Fixed Bun package manager node_modules discovery when npmCommand is configured to use Bun (#3998 by @​thirtythreeforty).
• Fixed edit and edit-preview access failures to report filesystem errors correctly (#3955 by @​rwachtler).
• Fixed ProcessTerminal sizing to use COLUMNS and LINES before falling back to 80x24 (#4004).
• Updated @anthropic-ai/sdk to clear GHSA-p7fg-763f-g4gf audit findings (#3992).
• Updated @mariozechner/clipboard to an attested release so package managers with trust policies do not reject installs (#3946).
• Fixed project context discovery to load AGENTS.MD files in addition to AGENTS.md (#3949).
• Fixed /handoff to use compacted session context instead of pre-compaction raw messages (#3945).
• Fixed DeepSeek V4 Flash xhigh thinking support so requests map to DeepSeek's max reasoning effort (#3944).
• Fixed Anthropic streams that end before message_stop to be treated as errors instead of successful partial responses (#3936).
• Fixed generated OpenAI-compatible DeepSeek V4 reasoning compatibility outside the direct DeepSeek provider (#3940).
• Fixed idle follow-up submission to clear the editor like normal message submission (#3926).
• Fixed editor rendering artifacts for Thai Sara Am and Lao AM vowel characters (#3904).
• Fixed DeepSeek V4 Flash and V4 Pro pricing metadata to match current official rates (#3910).
• Updated the sandbox extension example lockfile to resolve the vulnerable lodash-es transitive dependency (#3901).
• Fixed DeepSeek prompt cache hits to be tracked from OpenAI-compatible usage responses (#3880).

... (truncated)

Commits

• f4efeb2 Release v0.71.0
• 8db0d28 chore(coding-agent): remove Qwen CLI extension example
• 879e46a docs(coding-agent): add Cloudflare gateway feature changelog
• a45577b fix(ai): finalize cloudflare gateway provider support
• 24fb6b8 feat(ai): add Cloudflare AI Gateway as a provider (#3856)
• c9ddca1 docs: note removed Google provider support as breaking
• bd429f7 test(coding-agent): update stale expectations
• 0b8452c fix(coding-agent): fix WSL clipboard image paste
• 0452735 docs: audit unreleased changelogs
• 3ffc2b4 fix(coding-agent): avoid duplicate blocked edit output
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #72.