fix(deps): update dependency promptfoo to ^0.121.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
promptfoo	^0.120.0 → ^0.121.0

---

Release Notes

promptfoo/promptfoo (promptfoo)

v0.121.2

Compare Source

Bug Fixes

• add node-addon-api to devDependencies for sharp build (#​8102) (1d4e959)
• deps: update dependency @​tanstack/react-virtual to ^3.13.20 (#​8083) (5e5f774)
• deps: update dependency @​tanstack/react-virtual to ^3.13.21 (#​8104) (b17998b)
• deps: update mui packages to ^7.3.9 (#​8077) (4db1d67)
• deps: update openai packages (#​7956) (5b70a50)
• eval: preserve chart default state per eval (#​8087) (cd26f4a)
• examples: use matching gpt-4o model in temperature comparison (#​8074) (516df96)
• not-contains-json with schema respects inverse flag (#​8069) (baf5e1b)
• prevent caching error responses in fetchWithCache (#​8070) (033e1bb)
• providers: align openclaw with upstream gateway (#​8058) (f130803)
• providers: omit default temperature for LiteLLM proxy provider (#​8064) (f831d39)
• redteam: avoid router dependency in risk category drawer (#​8085) (1e1d9ac)
• redteam: improve EU AI Act preset bias/discrimination coverage (#​8115) (30ce06b)
• remove unnecessary string length limit for env var rendering (#​8110) (40a6b09)

v0.121.1

Compare Source

Bug Fixes

• providers: support newer opencode sdk api (#​8060) (7ec80b2)

v0.120.27

Compare Source

Features

• add promptfoo-evals agent skill for Claude Code and Codex (#​7985) (71160fe)
• app: add media library page (#​6901) (4eba85a)
• code-scan: add retry with exponential backoff for capacity errors (#​8016) (8d263e4)
• dod ethical ai mappings (#​7948) (4e2c897)
• eval-creator: add yaml download and cli callout (#​7932) (c73c002)
• eval: detect missing API keys before running evaluation (#​7937) (d2b7d61)
• eval: disable auto-share by default unless paid cloud customer (#​7982) (9df2250)
• handle email_verification_required in redteam prechecks (ENG-1531) (#​7979) (2c66d1b)
• providers/google: add Nano Banana 2 image model support (#​7884) (0dba833)
• providers: add gpt-5.3 and gpt-5.2 aliases (#​7965) (2001eda)
• providers: add gpt-5.4 and gpt-5.4-pro aliases (#​8008) (3d9826e)
• providers: add gpt-5.4 model support (#​8009) (968ca35)
• providers: add ModelsLab image generation provider (#​7925) (df5f07a)
• providers: add Vertex AI cost calculation for Gemini models (#​7490) (f2b7de4)
• providers: expose all choices in metadata when n > 1 (#​8007) (d8f4239)
• providers: rewrite QuiverAI for native SVG API (#​7951) (f76ffb5)
• redteam: add monthly probe limit for non-cloud users (#​7966) (ef8ff9c)
• redteam: rate-limit expensive strategies for unauthenticated users (#​8005) (662a8bc)
• targetLink: add HTTP probe, filesystem ops, and error classification types (#​7981) (e988d56)

Bug Fixes

• app: deduplicate image outputs in eval cell (#​8012) (71a1cd4)
• app: improve data table expanded rows (#​8015) (ead520b)
• app: restore default border color for Tailwind v4 (#​7920) (e17430e)
• ci: use npm ci for docs and site-tests jobs to fix serialize-javascript override (#​7952) (013f90d)
• cloud: strip heavy fields from permission check payload (#​7839) (aba832d)
• deps: override dompurify to >=3.3.2 to resolve XSS CVE in monaco-editor (#​8026) (fc7a3a8)
• deps: resolve all npm audit vulnerabilities via overrides (#​7947) (0b94778)
• deps: update dependency @​actions/github to v9 (#​7432) (efa1625)
• deps: update dependency @​apidevtools/json-schema-ref-parser to ^15.3.0 (#​8010) (aa25f9b)
• deps: update dependency @​apidevtools/json-schema-ref-parser to ^15.3.1 (#​8011) (82eaaa3)
• deps: update dependency @​opentelemetry/semantic-conventions to ^1.40.0 (#​7957) (ece8f61)
• deps: update dependency minimatch to ^10.2.4 (#​7939) (639301f)
• deps: update dependency simple-git to ^3.32.3 (#​7954) (1d62387)
• deps: update github actions to v3 (major) (#​7946) (2a6600d)
• deps: update openai packages (#​7928) (9facd14)
• eval: improve eval setup web UI (#​8000) (d2c166d)
• eval: pass dynamic prompt config to providers (#​7970) (8a75163)
• matchers: handle missing context-faithfulness verdicts (#​7991) (242486c)
• output: redact exported config secrets and clarify docs (#​7974) (1e0a48b)
• providers: avoid bedrock http2 runtime failures (#​7993) (76e256c)
• providers: guard top_p for reasoning models, remove dead code, update UI defaults (#​7963) (cec3ac0)
• providers: handle system messages in Vertex Claude API calls (#​7902) (b2116a5)
• providers: improve Vertex Claude system message handling (#​7977) (45c2de2)
• providers: reduce google ADC metadata lookup warnings (#​7992) (f31e779)
• providers: resolve env var placeholders in file:// provider references (#​7997) (5397dd6)
• redteam: add anti-hallucination guardrails to policy grader rubric (#​7829) (cf04414)
• redteam: clarify hydra/meta error when OPENAI_API_KEY blocks remote generation (#​8020) (21eae98)
• redteam: exclude default strategies from OSS setup sidebar count (#​7989) (8bf49cf)
• redteam: honor config.model for openai:chat (#​7971) (a5cc127)
• redteam: propagate sessionId to context.vars in hydra stateful mode (#​7960) (554c305)
• redteam: show pointer cursor on setup tabs and filters (#​7929) (bf43419)
• skill: correct plugin structure, transform syntax, and provider format (#​7986) (592fca9)
• ui: wrap long log lines in log viewer (#​8001) (98c35be)

v0.120.26

Compare Source

Features

• Add financial:sox-compliance plugin (#​7780) (b7cfc8e)
• add model-identification plugin (#​7883) (a2ac7c6)
• app: add href support to Chip component (#​7783) (983970a)
• providers: add Gemini 3.1 Pro support (#​7779) (e41c203)
• providers: expose tool calls in Claude Agent SDK response metadata (#​7790) (d1a2d28)
• providers: support LITELLM_API_BASE env var for base URL override (#​7862) (9aa543e)
• redteam: add Zod validation for redteam routes (#​7811) (85e4c48)
• redteam: improve eval header, print styles, and report navigation (#​7613) (3beaca4)
• report: add toggle for untested framework plugins (#​7770) (63d803c)
• server: add CSRF protection middleware (#​7840) (a574489)
• server: add Zod validation for eval, user, and redteam routes (#​7817) (21948ec)
• server: add Zod validation for model audit routes (#​7799) (b441654)
• server: add Zod validation for provider routes (#​7814) (27e0fc3)
• server: add Zod validation for traces, blobs, media, version routes (#​7805) (4c55f56)
• server: add Zod validation schemas for config routes (#​7794) (c2847ff)
• server: add Zod validation schemas for eval routes (#​7360) (9d7dcb1)
• webui: Adds server-side pagination, column-level filtering, and expandable rows to DataTable (#​7838) (55ad28b)

Bug Fixes

• app: add border style lint and explicit border colors (#​7885) (956b160)
• app: remove global border-color (#​7784) (6540828)
• app: wrap DataTable body cells in overflow-hidden container (#​7833) (5f59f23)
• deps: update @​inquirer packages (#​7777) (385f899)
• deps: update @​inquirer packages (#​7806) (fb39ca6)
• deps: update @​inquirer packages (#​7908) (94c2259)
• deps: update anthropic packages (#​7816) (ec860e8)
• deps: update dependency @​anthropic-ai/sdk to ^0.77.0 (#​7830) (933b355)
• deps: update dependency @​anthropic-ai/sdk to ^0.78.0 (#​7852) (372b05a)
• deps: update dependency @​modelcontextprotocol/sdk to ^1.27.0 (#​7836) (279180f)
• deps: update dependency @​modelcontextprotocol/sdk to ^1.27.1 (#​7927) (2309593)
• deps: update dependency @​openai/agents to ^0.4.10 (#​7768) (9fe7b4c)
• deps: update dependency @​openai/agents to ^0.4.11 (#​7818) (bfa837b)
• deps: update dependency @​openai/agents to ^0.4.12 (#​7822) (7f2c208)
• deps: update dependency @​openai/agents to ^0.4.13 (#​7843) (fb82b8b)
• deps: update dependency @​openai/agents to ^0.4.14 (#​7855) (c1012b4)
• deps: update dependency @​openai/agents to ^0.4.15 (#​7874) (846c6dd)
• deps: update dependency @​openai/agents to ^0.4.9 (#​7763) (52dd162)
• deps: update dependency @​opencode-ai/sdk to ^1.2.9 (#​7819) (9a9cc51)
• deps: update dependency @​tanstack/react-virtual to ^3.13.19 (#​7916) (cbc103a)
• deps: update dependency ajv to ^8.18.0 (#​7773) (7e5cac8)
• deps: update dependency fast-xml-parser to ^5.3.6 (#​7769) (559d477)
• deps: update dependency fast-xml-parser to ^5.3.7 (#​7857) (901945f)
• deps: update dependency fast-xml-parser to ^5.4.1 (#​7934) (3b22b1d)
• deps: update dependency glob to ^13.0.4 (#​7807) (b0cc1d8)
• deps: update dependency glob to ^13.0.5 (#​7809) (6467da1)
• deps: update dependency glob to ^13.0.6 (#​7851) (4f1ec0f)
• deps: update dependency ink to ^6.8.0 (#​7844) (3e169d1)
• deps: update dependency minimatch to ^10.2.1 (#​7808) (05d4226)
• deps: update dependency minimatch to ^10.2.2 (#​7849) (052df9b)
• deps: update dependency minimatch to ^10.2.3 (#​7930) (7cddccc)
• deps: update dependency openai to ^6.22.0 (#​7766) (4e6d010)
• deps: update dependency simple-git to ^3.31.1 (#​7772) (40e7dbc)
• deps: update dependency simple-git to ^3.32.0 (#​7882) (92dc76e)
• deps: update dependency simple-git to ^3.32.1 (#​7887) (027a321)
• deps: update dependency simple-git to ^3.32.2 (#​7907) (c9f4713)
• deps: update dependency swiper to ^12.1.1 (#​7767) (225eaa0)
• deps: update dependency swiper to ^12.1.2 (#​7828) (9dec8e7)
• Dispatcher not getting set properly (#​7903) (d6ec797)
• eval: harden eval resume with serial loop abort and duplicate index detection (#​7606) (db05c6a)
• Preserve delimiting colons in Ruby-namespaced method names in file:// references (#​7791) (1e97f3b)
• providers: improve Claude Agent SDK tool call tracking (#​7821) (2a2749b)
• redteam: abort scan on non-transient HTTP errors (#​7870) (05f4da4)
• redteam: align OWASP LLM04/05 labels (#​7846) (8f6bd03)
• redteam: use X icon for run cancel button (#​7865) (99d35ce)
• ui: use replace for URL search param updates to fix back button (#​7782) (1866835)
• webui: render inline base64 images from markdown syntax (#​7678) (bab239f)

v0.120.25

Compare Source

Features

• add regenerate button for suggested policies (#​7652) (2b09693)
• app: add renderOption prop to Combobox component (#​7723) (a609016)
• eval setup command to open eval setup web view (#​7663) (58c634f)
• eval: support cloud UUID configs for eval -c (#​7661) (5175eba)
• fetch: add PROMPTFOO_FETCH_CONNECTIONS env var to override HTTP pool size (#​7758) (535d30b)
• providers: add Claude Sonnet 4.6 support (#​7734) (2679911)
• providers: add GPT-5.3 model support to OpenAI Codex provider (#​7674) (2c0f588)
• providers: add OpenClaw multi-provider support (#​7562) (ee1a607)
• redteam: store and display correct scan time (#​7591) (ca76e58)
• targetLink: shared types and CLI helper for TargetLink probe communication (#​7638) (d82e4b1)

Bug Fixes

• ci: correct calibreapp/image-actions tag reference (#​7677) (9a6ca07)
• cli: clarify missing config search hint (#​7721) (2942908)
• deps: update anthropic packages (#​7659) (4f2b2e9)
• deps: update dependency @​anthropic-ai/sdk to ^0.73.0 (#​7604) (2b7abc7)
• deps: update dependency @​openai/agents to ^0.4.6 (#​7635) (d476c6a)
• deps: update dependency @​openai/agents to ^0.4.7 (#​7724) (a0ae842)
• deps: update dependency @​openai/agents to ^0.4.8 (#​7748) (15a353f)
• deps: update dependency @​opencode-ai/sdk to ^1.1.52 (#​7601) (b6aa8e4)
• deps: update dependency @​opencode-ai/sdk to ^1.1.53 (#​7614) (9aec3d2)
• deps: update dependency @​opencode-ai/sdk to ^1.1.55 (#​7706) (6fb680b)
• deps: update dependency @​opencode-ai/sdk to ^1.1.56 (#​7708) (99f8551)
• deps: update dependency @​opencode-ai/sdk to ^1.1.59 (#​7714) (951f6a1)
• deps: update dependency dotenv to ^17.2.4 (#​7607) (a44d36d)
• deps: update dependency dotenv to ^17.3.1 (#​7749) (59dd96e)
• deps: update dependency fast-xml-parser to ^5.3.5 (#​7665) (c78b882)
• deps: update dependency glob to ^13.0.2 (#​7703) (834fe37)
• deps: update dependency glob to ^13.0.3 (#​7739) (11ff0df)
• deps: update dependency ink to ^6.7.0 (#​7701) (51b5da8)
• deps: update dependency lru-cache to ^11.2.6 (#​7704) (ed7a2de)
• deps: update dependency mathjs to ^15.1.1 (#​7698) (3bc5d85)
• deps: update dependency minimatch to ^10.2.0 (#​7740) (aa2a7fa)
• deps: update dependency openai to ^6.18.0 (#​7598) (7a83c00)
• deps: update dependency ora to ^9.3.0 (#​7594) (9125e12)
• deps: update dependency proxy-from-env to v2 (#​7679) (06978cb)
• deps: update dependency undici to ^7.21.0 (#​7625) (1703a20)
• deps: update mui packages to ^7.3.8 (#​7729) (a2c57b7)
• deps: update openai packages (#​7712) (0db7371)
• deps: update opentelemetry (#​7743) (69b9a38)
• eval: preserve provider config when using --providers flag (#​7720) (7192f20)
• providers: avoid codex sdk cached token double-counting (#​7617) (c4059b8)
• providers: update Azure Mistral example and add Mistral-Large-3 pricing (#​7610) (8e2a28e)
• redteam: count probes as target requests (#​7671) (bf2e305)
• redteam: fix severity card counts for custom policy vulnerabilities (#​7615) (4747f2a)
• switch git hook install to husky prepare flow (#​7726) (0ed1634)
• table: display sessionIds array from multi-turn strategies (#​7608) (0442aee)
• util: handle path-only URLs in sanitizeUrl (#​7752) (4d26d85)

---

Configuration

📅 Schedule: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Open in Overmind ↗

---

model|risks_v6
✨Encryption Key State Risk ✨KMS Key Creation

🔥 Risks

Note

No changes in plan

Terraform reported no resources to create, update, or delete.

---

---

💥 Blast Radius

Items 0

Edges 0

[github-actions]

✅ Auto-Approved

---

🟢 Decision

Auto-approved: All safety checks passed

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

View full analysis in Overmind ↗