- bun-types: 1.3.8 → 1.3.11
- @types/node: 22.19.9 → 25.5.0
- simple-git: 3.30.0 → 3.33.0
- @tabstack/sdk: 2.1.0 → 2.3.0
- @sinclair/typebox: 0.32.35 → 0.34.48
- @mariozechner/pi-agent-core: 0.52.8 → 0.60.0
- @mariozechner/pi-ai: 0.52.8 → 0.60.0

- Add Biome formatter/linter with config, format entire codebase
  (tabs→2-space, sorted imports, line wrapping)
- Validate dash-prefixed git tool inputs (log, blame, checkout,
  diff, show) to prevent option injection
- Add URL protocol validation and safe basename sanitization
  in web command pre-fetch
- Move rg/fd detection from tool creation to execution time -
  return error message instead of throwing
- Add fdfind fallback for Debian-based systems
- Fix nullish coalescing bugs (|| → ??) in env.ts
- Add try/catch around workspace.cleanup() in both commands
- Add --absolute-path flag to fd invocation
- Change git_refs default from -a to no flag
- Update AGENTS.md with new scripts and grep gotcha