release(v1.12.2): pi 1.4.0, pi-studio v0.11.1, Node 24.22.1 + git-lfs 3.8.1 security

Patch release. pi 1.3.0 -> 1.4.0 (audited, notes next to ARG PI_VERSION in
Dockerfile.variant). pi-studio v0.10.2 -> v0.11.1 (-studio tags; pane echo
now defaults to Summary, see Upgrade notes). The base rebuilds because
rootfs/ changed (8ae1659), so Node v24.22.1 (8 CVEs), git-lfs v3.8.1
(4 CVEs), uv 0.13.5 and agent-browser 0.39.2 come in from latest.
BASE_REBUILD_DATE marker refreshed while the base rebuilds anyway.
check-doc-drift.sh: OK (pi-version and pi-studio named above v1.12.1).

CHANGELOG.md

@@ -11,24 +11,115 @@ Pre-v1.0.0 tags followed the pi npm version (`v{pi_version}[letter]`).
 
 ---
 
-## Unreleased
+## v1.12.2 — 2026-10-22
+
+Patch release. Headline: **pi `1.4.0`** (audited, see *Changed* below), plus
+two upstream **security releases** baked into the base image: **Node
+`v24.22.1`** (8 CVEs) and **git-lfs `v3.8.1`** (4 CVEs). Also **pi-studio
+`v0.11.1`** (`-studio` tags only), uv `0.13.5`, agent-browser `0.39.2`, and
+`~/.ssh/config` is Included even if it appears after start (*Fixed*, below).
+Surveyed 2026-10-22. Unchanged since v1.12.1: mempalace `3.11.0` (PyPI
+`latest`), pi-atelier `v0.16.0` (`3b42825`, newest tag),
+pi-observational-memory `022da5e` (= `master`), pi-toolkit `7c05901`,
+pi-extensions `4c1d28d`, pi-fork `e69725c`, mempalace-toolkit `d5a03f4`. The
+skillset snapshot needs no refresh (`vendor-mempalace-skill.sh --check`: OK,
+still `96b840e`). The base image is rebuilt because `rootfs/` changed, so apt
+and the base tools pinned to `latest` re-resolve. Of those, Node, git-lfs, uv
+and agent-browser moved upstream (*Changed*, below). gitea-mcp `v1.10.0`, nvim
+`0.12.6`, fzf `0.74.5`, gitleaks `8.30.1`, bat `0.26.1`, eza `0.23.5`, zoxide
+`0.10.0`, gosu `1.19`, micro `2.0.15`, tealdeer `1.9.0`, typst `0.15.1`, yq
+`4.54.1` and playwright `1.64.1` match their newest releases. Each was compared
+against the v1.12.1 image on tor-ms22.
+
+### Components that move with this release
+
+| Component | Baked in v1.12.1 | v1.12.2 | Why |
+|---|---|---|---|
+| **pi** | `1.3.0` | **`1.4.0`** | audited, see *Changed* below |
+| **pi-studio** (`-studio` tags) | `v0.10.2` (`4b4abd1`) | **`v0.11.1`** (`8a410b4`) | newest tag, see *Changed* below |
+| **Node** (base) | `v24.22.0` | **`v24.22.1`** (or later: NodeSource `node_24.x` at build time) | security release, see *Changed* below |
+| **git-lfs** (base) | `v3.8.0` | **`v3.8.1`** (or later: `latest` at build time) | security release, see *Changed* below |
+| uv (base) | `0.13.1` | **`0.13.5`** (or later: `latest` at build time) | see *Changed* below |
+| agent-browser (base) | `0.39.1` | **`0.39.2`** (or later: `latest` at build time) | see *Changed* below |
+
+### Upgrade notes
+
+- **pi-studio's REPL pane now echoes each send by default** (`-studio` tags
+  only). From 0.11.0, *Pane echo* defaults to **Summary**, as in pi-repl: the
+  tmux pane shows each submitted block (up to 20 lines or 2,000 characters)
+  above its output. Before, the default was **Off**. The same default applies
+  to the agent's `studio_repl_send` tool when it passes no `echoMode`. A choice
+  of **Full** made in Studio is kept. To get the old quiet pane back, choose
+  **Off** under the REPL pane's **More**, or set
+  `PI_STUDIO_REPL_ECHO_MODE=off` for the agent tool. What Studio *records* is
+  unchanged: only the code and its output.
 
 ### Changed
 
-- **pi-studio `v0.10.2` → `v0.10.4`** (`c83940d`, `-studio` tags only). Two
-  upstream patch releases on 2026-10-19. 0.10.3: IPython prints a value once
-  (`Out[5]: …`), not twice, and after a Quick send the cursor returns to the
-  input box. 0.10.4: Stop works again on a Mac that has a process running as
-  `nobody`. That was a 0.10.2 regression: macOS lists that uid as `-2`, and the
-  0.10.2 parser refused to stop anything. **It does not affect the image**:
-  inside the container, `ps` shows only the container's own processes, and none
-  has a negative uid. Measured 2026-10-19 on tor-ms22. 0.10.2's own
-  `readStopProcessTable` parsed the live process table (9 rows, min uid 1000).
-  Control: a macOS-style `-2` row made it throw "Could not parse process
-  ownership data". Dependencies unchanged: `package-lock.json` packages are
-  identical to 0.10.1's, and `ws` is still the only runtime dependency. Loaded
-  into pi `1.3.0` with `pi --no-extensions -e <clone>/index.ts -p`, it registers
-  the same four `studio_*` tools, rc 0.
+- **pi `1.3.0` → `1.4.0`** (npm `latest`, published 2026-10-21). No breaking
+  changes listed. Fixes that land on how this fleet uses pi: compaction and
+  branch summaries no longer fail with "generation hit the token cap" when
+  reasoning uses most of the old fixed summary limit (#9512, #9075); resumed
+  sessions and `/tree` no longer leave extension tools inactive (#11062); a
+  session no longer breaks after recovering from a reply cut off at the output
+  limit (#11227); codemode scripts wait up to 60 s for a free worker instead
+  of failing (#11184); the terminal is restored when pi exits without its
+  normal teardown (#11170); concurrent extension dialogs no longer lose a
+  promise (#11166); the `grep` tool runs `rg --no-config` (#11203); and
+  extensions can import `@earendil-works/pi-ai/models` (#11156). Audited
+  2026-10-22 on tor-ms22. The only API changes that could reach us are the
+  attribution headers that `before_provider_headers` handlers no longer see,
+  `generateSummary()` ignoring `reserveTokens`, and two removed exports
+  (`mergeProviderAttributionHeaders`, `getPiUserAgent`). None is used by any
+  companion, fleet extension or mempalace-toolkit. pi-agent-core changes only
+  by the new optional `identity` field, so obsmem's `finishTurn` turn cap is
+  untouched. All 58 names our extensions import from pi resolve in 1.4.0.
+  With a copy of tor-ms22's real `~/.pi/agent`, `pi -p` exits 0 with nothing
+  on stderr. The TUI loads the same extensions as on 1.3.0, with no
+  extension issues. Atelier paints in both renderers, and the bridge registers
+  its 45 tools. Full audit next to `ARG PI_VERSION` in `Dockerfile.variant`.
+- **pi-studio `v0.10.2` → `v0.11.1`** (`8a410b4`, `-studio` tags only). Five
+  upstream releases, 2026-10-19 to 2026-10-22. 0.10.3: IPython prints a value
+  once (`Out[5]: …`), not twice, and after a Quick send the cursor returns to
+  the input box. 0.10.4: Stop works again on a Mac that has a process running
+  as `nobody`. That was a 0.10.2 regression: macOS lists that uid as `-2`, and
+  the 0.10.2 parser refused to stop anything. **It does not affect the
+  image**: inside the container, `ps` shows only the container's own
+  processes, and none has a negative uid. Measured 2026-10-19 on tor-ms22.
+  0.10.2's own `readStopProcessTable` parsed the live process table (9 rows,
+  min uid 1000). Control: a macOS-style `-2` row made it throw "Could not parse
+  process ownership data". 0.10.5: the Quick-send result shows while the
+  cursor stays in the box, and the Prompt toolbar fits on one row on a
+  13-inch screen. 0.11.0: the REPL pane runs Ruby (irb), Java (JShell), Octave,
+  MATLAB, gnuplot and C++ (Cling) when they are on `PATH` (none is baked into
+  this image), a send ends within seconds when its runtime crashes instead of
+  waiting out the 20 s timeout, and the pane-echo default changes (see
+  *Upgrade notes*). 0.11.1: a shorter run status beside **Stop**, and the line
+  above a response shows which one you are on ("9/9"). Dependencies are
+  unchanged: `package-lock.json` differs from 0.10.2's only in the package's
+  own version, and `ws` is still the only runtime dependency. Loaded into pi
+  `1.4.0` with `pi --no-extensions -e <clone>/index.ts -p`, it registers the
+  same four tools (`studio_repl_status`, `studio_repl_send`,
+  `studio_export_pdf`, `studio_export_html`), rc 0, nothing on stderr.
+  Control: without `-e`, none.
+- **Node `v24.22.0` → `v24.22.1`** (base, NodeSource `node_24.x`). An LTS
+  security release with 8 CVEs in http, dns, tls, permission, crypto and
+  brotli. On 2026-10-21 NodeSource still served only `24.22.0`, so a rebuild
+  then would not have picked it up. On 2026-10-22 it serves
+  `24.22.1-1nodesource1` for both arm64 and amd64.
+- **git-lfs `v3.8.0` → `v3.8.1`** (base). A security release (2026-10-22)
+  with 4 CVEs. Among them: remote commands sent over SSH are now fully quoted
+  (CVE-2026-69260), and Cookie headers are no longer forwarded to another host
+  after a redirect (CVE-2026-69261).
+- **uv `0.13.1` → `0.13.5`** (base). Bundled root certificates updated,
+  dropped GET and HEAD requests retried, `uv export` faster with extras, lower
+  peak memory when resolving, and new CPython builds (3.15.1, 3.14.9, 3.13.17).
+  No breaking changes.
+- **agent-browser `0.39.1` → `0.39.2`** (base). Bug fixes only. The ones an
+  agent notices: a click or double-click on a hidden, disabled or off-viewport
+  element now returns an error instead of reporting success, an ambiguous
+  stale element reference fails instead of picking another element, and an
+  unreadable or invalid policy file denies actions instead of being ignored.
 
 ### Fixed