chore(deps): bump the minor-and-patch group with 4 updates (#3499)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/dependabot.yml

@@ -54,6 +54,15 @@ updates:
       # Revisit when the OpenCode pin moves; imageOpenCodeHarness.test.ts
       # checks the decoder against both packages' declared dependency.
       - dependency-name: "effect"
+      # The pi runtime and CLI must match the versions in all three images.
+      # Move these pins together after the provider conformance suite passes.
+      - dependency-name: "@earendil-works/pi-ai"
+      - dependency-name: "@earendil-works/pi-coding-agent"
+      # OpenCode's CLI, protocol, and schema must match the client and images.
+      # Move these pins with Effect after the harness suite passes.
+      - dependency-name: "@opencode/cli"
+      - dependency-name: "@opencode/protocol"
+      - dependency-name: "@opencode/schema"
       # The @cloudflare/sandbox SDK and the container image it drives are one
       # protocol in two artifacts; `check:sandbox-pair` fails verify when a
       # package pin and its Dockerfile tag differ. They move together, by hand,

deploy/cloudflare-memory/package.json

@@ -16,7 +16,7 @@
     "secrets": "npm --prefix ../.. run --silent cli -- deploy secrets memory"
   },
   "devDependencies": {
-    "@cloudflare/vitest-plugin": "1.4.3",
+    "@cloudflare/vitest-plugin": "1.4.5",
     "@cloudflare/workers-types": "^5.20261015.1",
     "typescript": "^5.9.3",
     "vitest": "^4.1.12",

docs/package.json

@@ -18,7 +18,7 @@
     "@fontsource/jetbrains-mono": "5.3.0",
     "@resvg/resvg-js": "2.6.2",
     "mermaid": "^12.2.0",
-    "satori": "0.60.0",
+    "satori": "0.63.0",
     "vitepress": "^1.6.4",
     "vitepress-plugin-mermaid": "^2.0.17"
   }