chore(deps): update dependencies except carbon

CHANGELOG.md

@@ -6,6 +6,7 @@ Docs: https://docs.openclaw.ai
 
 ### Changes
 
+- Dependencies: refresh key runtime and tooling packages across the workspace (Bedrock SDK, pi runtime stack, OpenAI, Google auth, and oxlint/oxfmt), while intentionally keeping `@buape/carbon` pinned.
 - Auto-reply/Abort shortcuts: expand standalone stop phrases (`stop openclaw`, `stop action`, `stop run`, `stop agent`, `please stop`, and related variants), accept trailing punctuation (for example `STOP OPENCLAW!!!`), add multilingual stop keywords (including ES/FR/ZH/HI/AR/JP/DE/PT/RU forms), and treat exact `do not do that` as a stop trigger while preserving strict standalone matching. (#25103) Thanks @steipete and @vincentkoc.
 - Security/Audit: add `security.trust_model.multi_user_heuristic` to flag likely shared-user ingress and clarify the personal-assistant trust model, with hardening guidance for intentional multi-user setups (`sandbox.mode="all"`, workspace-scoped FS, reduced tool surface, no personal/private identities on shared runtimes).
 

extensions/googlechat/package.json

@@ -5,7 +5,7 @@
   "description": "OpenClaw Google Chat channel plugin",
   "type": "module",
   "dependencies": {
-    "google-auth-library": "^10.5.0"
+    "google-auth-library": "^10.6.1"
   },
   "peerDependencies": {
     "openclaw": ">=2026.1.26"

extensions/memory-lancedb/package.json

@@ -7,7 +7,7 @@
   "dependencies": {
     "@lancedb/lancedb": "^0.26.2",
     "@sinclair/typebox": "0.34.48",
-    "openai": "^6.22.0"
+    "openai": "^6.25.0"
   },
   "openclaw": {
     "extensions": [

package.json

@@ -141,7 +141,7 @@
   },
   "dependencies": {
     "@agentclientprotocol/sdk": "0.14.1",
-    "@aws-sdk/client-bedrock": "^3.995.0",
+    "@aws-sdk/client-bedrock": "^3.997.0",
     "@buape/carbon": "0.0.0-beta-20260216184201",
     "@clack/prompts": "^1.0.1",
     "@discordjs/voice": "^0.19.0",
@@ -151,10 +151,10 @@
     "@larksuiteoapi/node-sdk": "^1.59.0",
     "@line/bot-sdk": "^10.6.0",
     "@lydell/node-pty": "1.2.0-beta.3",
-    "@mariozechner/pi-agent-core": "0.54.1",
-    "@mariozechner/pi-ai": "0.54.1",
-    "@mariozechner/pi-coding-agent": "0.54.1",
-    "@mariozechner/pi-tui": "0.54.1",
+    "@mariozechner/pi-agent-core": "0.55.0",
+    "@mariozechner/pi-ai": "0.55.0",
+    "@mariozechner/pi-coding-agent": "0.55.0",
+    "@mariozechner/pi-tui": "0.55.0",
     "@mozilla/readability": "^0.6.0",
     "@sinclair/typebox": "0.34.48",
     "@slack/bolt": "^4.6.0",
@@ -181,7 +181,7 @@
     "long": "^5.3.2",
     "markdown-it": "^14.1.1",
     "node-edge-tts": "^1.2.10",
-    "opusscript": "^0.0.8",
+    "opusscript": "^0.1.1",
     "osc-progress": "^0.3.0",
     "pdfjs-dist": "^5.4.624",
     "playwright-core": "1.58.2",
@@ -204,12 +204,12 @@
     "@types/node": "^25.3.0",
     "@types/qrcode-terminal": "^0.12.2",
     "@types/ws": "^8.18.1",
-    "@typescript/native-preview": "7.0.0-dev.20260222.1",
+    "@typescript/native-preview": "7.0.0-dev.20260224.1",
     "@vitest/coverage-v8": "^4.0.18",
     "lit": "^3.3.2",
-    "oxfmt": "0.34.0",
-    "oxlint": "^1.49.0",
-    "oxlint-tsgolint": "^0.14.2",
+    "oxfmt": "0.35.0",
+    "oxlint": "^1.50.0",
+    "oxlint-tsgolint": "^0.15.0",
     "signal-utils": "0.21.1",
     "tsdown": "^0.20.3",
     "tsx": "^4.21.0",