chore(deps): update dependency promptfoo to v0.120.25

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
promptfoo	0.120.24 → 0.120.25

---

Release Notes

promptfoo/promptfoo (promptfoo)

v0.120.25

Compare Source

Features

• add regenerate button for suggested policies (#​7652) (2b09693)
• app: add renderOption prop to Combobox component (#​7723) (a609016)
• eval setup command to open eval setup web view (#​7663) (58c634f)
• eval: support cloud UUID configs for eval -c (#​7661) (5175eba)
• fetch: add PROMPTFOO_FETCH_CONNECTIONS env var to override HTTP pool size (#​7758) (535d30b)
• providers: add Claude Sonnet 4.6 support (#​7734) (2679911)
• providers: add GPT-5.3 model support to OpenAI Codex provider (#​7674) (2c0f588)
• providers: add OpenClaw multi-provider support (#​7562) (ee1a607)
• redteam: store and display correct scan time (#​7591) (ca76e58)
• targetLink: shared types and CLI helper for TargetLink probe communication (#​7638) (d82e4b1)

Bug Fixes

• ci: correct calibreapp/image-actions tag reference (#​7677) (9a6ca07)
• cli: clarify missing config search hint (#​7721) (2942908)
• deps: update anthropic packages (#​7659) (4f2b2e9)
• deps: update dependency @​anthropic-ai/sdk to ^0.73.0 (#​7604) (2b7abc7)
• deps: update dependency @​openai/agents to ^0.4.6 (#​7635) (d476c6a)
• deps: update dependency @​openai/agents to ^0.4.7 (#​7724) (a0ae842)
• deps: update dependency @​openai/agents to ^0.4.8 (#​7748) (15a353f)
• deps: update dependency @​opencode-ai/sdk to ^1.1.52 (#​7601) (b6aa8e4)
• deps: update dependency @​opencode-ai/sdk to ^1.1.53 (#​7614) (9aec3d2)
• deps: update dependency @​opencode-ai/sdk to ^1.1.55 (#​7706) (6fb680b)
• deps: update dependency @​opencode-ai/sdk to ^1.1.56 (#​7708) (99f8551)
• deps: update dependency @​opencode-ai/sdk to ^1.1.59 (#​7714) (951f6a1)
• deps: update dependency dotenv to ^17.2.4 (#​7607) (a44d36d)
• deps: update dependency dotenv to ^17.3.1 (#​7749) (59dd96e)
• deps: update dependency fast-xml-parser to ^5.3.5 (#​7665) (c78b882)
• deps: update dependency glob to ^13.0.2 (#​7703) (834fe37)
• deps: update dependency glob to ^13.0.3 (#​7739) (11ff0df)
• deps: update dependency ink to ^6.7.0 (#​7701) (51b5da8)
• deps: update dependency lru-cache to ^11.2.6 (#​7704) (ed7a2de)
• deps: update dependency mathjs to ^15.1.1 (#​7698) (3bc5d85)
• deps: update dependency minimatch to ^10.2.0 (#​7740) (aa2a7fa)
• deps: update dependency openai to ^6.18.0 (#​7598) (7a83c00)
• deps: update dependency ora to ^9.3.0 (#​7594) (9125e12)
• deps: update dependency proxy-from-env to v2 (#​7679) (06978cb)
• deps: update dependency undici to ^7.21.0 (#​7625) (1703a20)
• deps: update mui packages to ^7.3.8 (#​7729) (a2c57b7)
• deps: update openai packages (#​7712) (0db7371)
• deps: update opentelemetry (#​7743) (69b9a38)
• eval: preserve provider config when using --providers flag (#​7720) (7192f20)
• providers: avoid codex sdk cached token double-counting (#​7617) (c4059b8)
• providers: update Azure Mistral example and add Mistral-Large-3 pricing (#​7610) (8e2a28e)
• redteam: count probes as target requests (#​7671) (bf2e305)
• redteam: fix severity card counts for custom policy vulnerabilities (#​7615) (4747f2a)
• switch git hook install to husky prepare flow (#​7726) (0ed1634)
• table: display sessionIds array from multi-turn strategies (#​7608) (0442aee)
• util: handle path-only URLs in sanitizeUrl (#​7752) (4d26d85)

---

Configuration

📅 Schedule: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Open in Overmind ↗

---

model|risks_v6
✨Encryption Key State Risk ✨KMS Key Creation

🔴 Change Signals

Policies 🔴 ▃▂▁ S3 bucket 'aws_s3_bucket.terraform-example-state-bucket' lacks server-side encryption and multiple required tags, while the security group 'module.shared_security_group.aws_security_group.internet_access[0]' allows SSH access from anywhere, which is a security risk, showing unusual patterns that may need review.

View signals ↗

---

🔥 Risks

Tip

✔ No observations recorded

We weren't able to record any observations for this change. This may indicate limited connectivity between affected items - check that your mapped resources include the expected dependencies.

---

---

💥 Blast Radius

Items 0

Edges 0

[github-actions]

✅ Auto-Approved

---

🟢 Decision

Auto-approved: All safety checks passed

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

View full analysis in Overmind ↗

[github-actions]

⛔ Auto-Blocked

---

🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2)

---

📊 Signals Summary

Policies 🔴 -3

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

View full analysis in Overmind ↗

[github-actions]

⛔ Auto-Blocked

---

🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2)

---

📊 Signals Summary

Policies 🔴 -3

Routine 🟢 +5

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

View full analysis in Overmind ↗

[github-actions]

⛔ Auto-Blocked

---

🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)

---

📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

💥 Blast Radius

Items 28 · Edges 67

---

View full analysis in Overmind ↗

[github-actions]

⛔ Auto-Blocked

---

🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2)

---

📊 Signals Summary

Policies 🔴 -3

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

View full analysis in Overmind ↗

[github-actions]

⛔ Auto-Blocked

---

🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2); Routine score (-5) is below minimum (-1)

---

📊 Signals Summary

Routine 🔴 -5

Policies 🔴 -3

---

🔥 Risks Summary

High 0 · Medium 1 · Low 0

---

💥 Blast Radius

Items 1 · Edges 0

---

View full analysis in Overmind ↗

[github-actions]

⛔ Auto-Blocked

---

🔴 Decision

Auto-blocked: Policy signal (-3) is below threshold (-2)

---

📊 Signals Summary

Policies 🔴 -3

---

🔥 Risks Summary

High 0 · Medium 0 · Low 0

---

View full analysis in Overmind ↗