chore(deps): bump in-range npm deps, force tokscale 4.8.1

[shunkakinoki]

Summary

• Bumped 19 in-range npm deps to their newest versions satisfying the repo's 7-day release-age gate
• Forced tokscale to 4.8.1 (bypasses the release-age gate per request)

Updated

@0xsequence/codegenie 0.4.2, @github/copilot 1.0.75, @oh-my-pi/pi-coding-agent 17.1.3, @oh-my-pi/pi-natives 17.1.3, @pulumi/pulumi 3.254.0, @railway/cli 5.28.1, @schpet/linear-cli 2.3.0, @sentry/cli 3.6.2, @traces-sh/traces 0.6.13, @upstash/context7-mcp 3.2.5, acpx 0.12.1, agent-browser 0.32.4, deepsec 2.2.8, gh-axi 0.1.28, hunkdiff 0.17.6, openclaw 2026.7.1, playwright-chromium 1.62.0, turbo 2.10.7, xcodebuildmcp 2.7.0, tokscale 4.8.1 (forced)

---

Summary by cubic

Updated 19 in-range npm dependencies to the latest versions that meet the 7-day release-age gate to keep builds stable. Forced tokscale to 4.8.1 per request, bypassing the gate.

• Dependencies
  • Core tooling updated: @pulumi/pulumi 3.254.0, turbo 2.10.7, playwright-chromium 1.62.0, @sentry/cli 3.6.2.
  • Integrations and utilities updated: @github/copilot 1.0.75, @traces-sh/traces 0.6.13, openclaw 2026.7.1, xcodebuildmcp 2.7.0, @oh-my-pi/* 17.1.3, gh-axi 0.1.28, hunkdiff 0.17.6, acpx 0.12.1.

^{Written for commit 7fce514. Summary will update on new commits.}

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[indent-zero]

PR Summary

Routine dependency-refresh: bumps 20 npm dep declarations in package.json to their newest in-range versions and regenerates bun.lock accordingly. All changes are within existing caret ranges; no top-level packages added or removed, and no first-party code is affected since these deps are installed as CLI binaries rather than consumed as libraries.

• Bumped 19 dependencies to latest satisfying versions (patch/minor), including @github/copilot, @pulumi/pulumi, @railway/cli, @sentry/cli, playwright-chromium, turbo, xcodebuildmcp, etc.
• Force-bumped tokscale to ^4.8.1 (bypasses the 7-day release-age gate; still within the existing ^4.7.0 caret range).
• Narrowed openclaw range from ^2026.7.1-2 to ^2026.7.1 (drops prerelease qualifier; both resolve to openclaw@2026.7.1 today, so no runtime change).
• Notable transitive bumps: @earendil-works/pi-ai 0.80.3 → 0.81.1, scoped execa 9.6.1 → 10.0.0 under @0xsequence/codegenie, scoped undici 6.x → 7.27.2 under @upstash/context7-mcp; adds @tokscale/cli-android-arm64 optional binary.

Issues

1 potential issue found:

• openclaw range narrowed from ^2026.7.1-2 to ^2026.7.1, dropping prerelease tags — no runtime change today (both resolve to openclaw@2026.7.1), but any future prerelease like 2026.7.2-1 will no longer be installable under this range. Confirm this is intentional. → Autofix

CI Checks

Waiting for CI checks...

---

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 189c0583-538a-408e-8870-b7901983aeb0

📥 Commits

Reviewing files that changed from the base of the PR and between 26d36f0 and 7fce514.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• package.json

Disabled knowledge base sources:

• Linear integration is disabled

You can enable these sources in your CodeRabbit configuration.

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated versions for various CLI, development, monitoring, and automation tools.
  • Included updates for Codegenie, Copilot, Pulumi, Railway, Sentry, OpenClaw, Playwright Chromium, Turbo, and related packages.

Walkthrough

The pull request updates version constraints for multiple CLI, development, monitoring, and tooling dependencies in package.json. No dependencies are added or removed.

Changes

Dependency Updates

Layer / File(s)	Summary
Update dependency version constraints package.json	Updates versions for Codegenie, Copilot, Oh My Pi, Pulumi, Railway, Sentry, OpenClaw, Playwright Chromium, Turbo, and other tooling packages.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• shunkakinoki/dotfiles#2125: Updates overlapping CLI and tooling dependency versions.
• shunkakinoki/dotfiles#2151: Updates overlapping CLI and tooling dependency versions.
• shunkakinoki/dotfiles#2034: Updates overlapping Codegenie and Turbo dependency versions.

Poem

A rabbit checks the version trail,
Fresh tools arrive without a fail.
Copilot hops, and Turbo runs,
New package numbers greet the buns.
No additions, removals—just updates done!

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bump-npm-deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[indent-zero]

openclaw range no longer accepts prereleases: Changing from ^2026.7.1-2 to ^2026.7.1 narrows the range so npm prerelease tags (e.g. 2026.7.2-1) will not be considered installable. Both constraints currently resolve to openclaw@2026.7.1 in bun.lock, so there is no behavioral change today — just worth confirming this is intentional cleanup off the earlier prerelease pin and not accidental.