chore(deps): bump promptfoo from 0.121.11 to 0.121.12 in /tests/evals

[dependabot]

Bumps promptfoo from 0.121.11 to 0.121.12.

Release notes

Sourced from promptfoo's releases.

0.121.12

0.121.12 (2026-05-21)

Features

• cache: support repeat-aware fetch cache options (#6844) (c119832)
• cli: add searchable team selector (#9243) (247eef5)
• cli: import OpenAI Evals dashboard exports (#9305) (70cebab)
• code-scan: add SARIF output support (#9161) (4da26e9)
• code-scan: refine SARIF output ergonomics (#9159) (ea3a655)
• eval: add metrics pills display toggle (#9253) (eb7ecad)
• eval: support runtime tags (#9322) (5a09980)
• examples: expand google adk integration (#9047) (f190033)
• mcp: add response transforms (#8943) (5d90bb7)
• providers: normalize OpenCode skill usage (#9250) (8930dad)
• providers: support Agents SDK 0.9 workflows (#9128) (0505ea1)
• redteam: support context purpose overrides (#9260) (ca62ec9)
• telemetry: capture node runtime metadata (#9206) (ec9d308)

Bug Fixes

• app: align table settings info buttons (#9249) (a3252e9)
• app: improve custom metrics dialog readability (#9248) (a3eafa4)
• app: sort custom metrics before truncation (#9246) (74d2f9d)
• cache: include status in JSON parse errors (#9317) (bb64b2e)
• cli: clearer errors for malformed eval imports (#9333) (869fd54)
• code-scan: isolate action OIDC token env (#9309) (30c99e9)
• code-scan: route logs to stderr for structured output (#9329) (06cce72)
• code-scan: scope OIDC token to scan subprocess (#9308) (178b57a)
• code-scan: skip unrelated default config startup (#9230) (335d809)
• deps: avoid incompatible npm release-age config (#9244) (b8bfb73)
• deps: bump nested ws to a non-vulnerable version (#9330) (1fe31a4)
• deps: clear protobuf and langsmith alerts (#9219) (d0995b8)
• deps: remove stray smithy lockfile root dependency (#9271) (8f34641)
• deps: resolve active advisories (#9153) (47cd609)
• deps: update anthropic packages (#9187) (a68ed8b)
• deps: update dependency @​anthropic-ai/sdk to ^0.97.1 (#9316) (88bc094)
• deps: update dependency @​inquirer/search to v4.1.9 (#9277) (7a7ae06)
• deps: update dependency @​opentelemetry/exporter-trace-otlp-http to ^0.217.0 (#9193) (082cb22)
• deps: update dependency ws to v8.20.1 [security] (#9275) (bac18de)
• deps: update openai packages (#9189) (f2ceff3)
• dev: use tsx watch for server (#9301) (f0280e6)
• eval: allow header horizontal scrolling (#9245) (4e3fb27)
• eval: preserve eval export import parity (#9310) (ef7f98e)
• fetch: decompress fallback for compressed responses on Node 26 (#9218) (93f5f1e)
• fetch: decompress pooled undici responses (#9234) (e193d61)
• guard against empty choices and message=None in swe_runner example (#9263) (b6ce944)
• isolate loadFunction cache entries (#9255) (1e3533e)

... (truncated)

Changelog

Sourced from promptfoo's changelog.

0.121.12 (2026-05-21)

Features

• cache: support repeat-aware fetch cache options (#6844) (c119832)
• cli: add searchable team selector (#9243) (247eef5)
• cli: import OpenAI Evals dashboard exports (#9305) (70cebab)
• code-scan: add SARIF output support (#9161) (4da26e9)
• code-scan: refine SARIF output ergonomics (#9159) (ea3a655)
• eval: add metrics pills display toggle (#9253) (eb7ecad)
• eval: support runtime tags (#9322) (5a09980)
• examples: expand google adk integration (#9047) (f190033)
• mcp: add response transforms (#8943) (5d90bb7)
• providers: normalize OpenCode skill usage (#9250) (8930dad)
• providers: support Agents SDK 0.9 workflows (#9128) (0505ea1)
• redteam: support context purpose overrides (#9260) (ca62ec9)
• telemetry: capture node runtime metadata (#9206) (ec9d308)

Bug Fixes

• app: align table settings info buttons (#9249) (a3252e9)
• app: improve custom metrics dialog readability (#9248) (a3eafa4)
• app: sort custom metrics before truncation (#9246) (74d2f9d)
• cache: include status in JSON parse errors (#9317) (bb64b2e)
• cli: clearer errors for malformed eval imports (#9333) (869fd54)
• code-scan: isolate action OIDC token env (#9309) (30c99e9)
• code-scan: route logs to stderr for structured output (#9329) (06cce72)
• code-scan: scope OIDC token to scan subprocess (#9308) (178b57a)
• code-scan: skip unrelated default config startup (#9230) (335d809)
• deps: avoid incompatible npm release-age config (#9244) (b8bfb73)
• deps: bump nested ws to a non-vulnerable version (#9330) (1fe31a4)
• deps: clear protobuf and langsmith alerts (#9219) (d0995b8)
• deps: remove stray smithy lockfile root dependency (#9271) (8f34641)
• deps: resolve active advisories (#9153) (47cd609)
• deps: update anthropic packages (#9187) (a68ed8b)
• deps: update dependency @​anthropic-ai/sdk to ^0.97.1 (#9316) (88bc094)
• deps: update dependency @​inquirer/search to v4.1.9 (#9277) (7a7ae06)
• deps: update dependency @​opentelemetry/exporter-trace-otlp-http to ^0.217.0 (#9193) (082cb22)
• deps: update dependency ws to v8.20.1 [security] (#9275) (bac18de)
• deps: update openai packages (#9189) (f2ceff3)
• dev: use tsx watch for server (#9301) (f0280e6)
• eval: allow header horizontal scrolling (#9245) (4e3fb27)
• eval: preserve eval export import parity (#9310) (ef7f98e)
• fetch: decompress fallback for compressed responses on Node 26 (#9218) (93f5f1e)
• fetch: decompress pooled undici responses (#9234) (e193d61)
• guard against empty choices and message=None in swe_runner example (#9263) (b6ce944)
• isolate loadFunction cache entries (#9255) (1e3533e)
• mcp: surface tool error results (#9320) (b600a27)
• openclaw: support protocol negotiation for versions 3 and 4 (#9254) (4220562)
• providers: aggregate command output deltas (#9204) (5f89b7c)

... (truncated)

Commits

• 7b18902 chore(main): release 0.121.12 (#9150)
• 869fd54 fix(cli): clearer errors for malformed eval imports (#9333)
• 06cce72 fix(code-scan): route logs to stderr for structured output (#9329)
• 5b804e0 fix(providers): honor max_tool_calls: 0 for Anthropic MCP (#9327)
• 4ff8315 fix(providers): decompress mTLS HTTP responses on Node 26 (#9325)
• d3bb58c fix(providers): tear down Realtime socket on response timeout (#9324)
• bbd683c fix(providers): map Python worker stderr log levels (#9306)
• 1fe31a4 fix(deps): bump nested ws to a non-vulnerable version (#9330)
• f415d63 test(eval): harden runtime tag coverage (#9283)
• 5a09980 feat(eval): support runtime tags (#9322)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #674.