chore(deps): update dependency promptfoo to v0.121.15

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
promptfoo (source)	0.121.14 → 0.121.15

---

Release Notes

promptfoo/promptfoo (promptfoo)

v0.121.15

Compare Source

Features

• assertions: grade multimodal outputs (#​9617) (ec4d3b4)
• build: add DAG-aware architecture cycle checks (#​9557) (9d7d810)
• providers: add Azure MAI image provider and MAI model recognition (#​9595) (e091527)
• providers: upgrade MiniMax default model to M3 (#​9598) (43b30c5)

Bug Fixes

• auth: enable auto-share for on-prem Report Server after login (#​9612) (8ece593)
• auth: preserve cloud request headers (#​9610) (3a2c5e6)
• code-scan: process findings in mixed skip responses (#​9525) (aeae790)
• code-scan: reject fractional inline comment lines (#​9556) (0a2b329)
• eval: compose metadata and result filters (#​9604) (49539ee)
• eval: preserve --config ordering when expanding a directory entry (#​9606) (fc081a0)
• harden validation and target discovery (#​9614) (465d610)
• providers: require deployment name for no-default Azure provider types (#​9603) (da48abd)
• providers: suppress optional GCP metadata warning (#​9554) (8dcc44b)
• redteam: restrict remote auth to cloud host (#​9597) (1b2c6d9)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ecce6b8f7b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Restore the missing gcp-metadata lock entry

Removing the node_modules/mongoose/node_modules/gcp-metadata entry leaves node_modules/mongoose/node_modules/mongodb's optional peer gcp-metadata@^7.0.1 unresolved. In this checkout, npm ci --ignore-scripts --dry-run (npm ci --help: “Clean install a project”) now exits with Missing: gcp-metadata@ from lock file, while the parent lockfile passes; the repo workflows run npm ci in .github/workflows/test.yml and check-dist.yml, so clean CI installs will fail before build/tests.

Useful? React with 👍 / 👎.