Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 24, 2025

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/workers-oauth-provider ^0.0.6 -> ^0.0.10 age confidence
@hono/mcp (source) 0.1.1 -> 0.1.4 age confidence
@hono/standard-validator (source) 0.1.4 -> 0.1.5 age confidence
@tailwindcss/cli (source) 4.1.11 -> 4.1.13 age confidence
@tsconfig/strictest (source) 2.0.5 -> 2.0.6 age confidence
dprint 0.50.0 -> 0.50.2 age confidence
drizzle-kit (source) 0.31.1 -> 0.31.4 age confidence
tailwindcss (source) 4.1.11 -> 4.1.13 age confidence
turbo (source) 2.5.3 -> 2.5.6 age confidence

Release Notes

cloudflare/workers-oauth-provider (@​cloudflare/workers-oauth-provider)

v0.0.10

Compare Source

Patch Changes
  • #​87 1804446 Thanks @​threepointone! - explicitly block javascript: (and other suspicious protocols) in redirect uris

    In #​80, we blocked redirects that didn't start with http:// or https:// to prevent xss attacks with javascript: URIs. However this blocked redirects to custom apps like cursor:// et al. This patch now explicitly blocks javascript: (and other suspicious protocols) in redirect uris.

v0.0.9

Compare Source

Patch Changes
  • #​81 d18b865 Thanks @​deathbyknowledge! - Add resolveExternalToken to support external token auth flows

    Adds resolveExternalToken to support auth for external tokens. The callback only runs IF internal auth check fails. E.g. a canonical OAuth server is used by multiple services, allowing server-server communication with the same token.

v0.0.8

Compare Source

Patch Changes
  • #​74 9d4b595 Thanks @​ghostwriternr! - Add configurable refresh token expiration
    • New refreshTokenTTL option to set global expiration for refresh tokens
    • Support for per-token TTL override via tokenExchangeCallback
    • Expired tokens return invalid_grant error, forcing reauthentication
    • Backward compatible: tokens without TTL never expire

v0.0.7

Compare Source

Patch Changes
honojs/middleware (@​hono/mcp)

v0.1.4

Compare Source

Patch Changes

v0.1.3

Compare Source

Patch Changes

v0.1.2

Compare Source

Patch Changes
honojs/middleware (@​hono/standard-validator)

v0.1.5

Compare Source

Patch Changes
tailwindlabs/tailwindcss (@​tailwindcss/cli)

v4.1.13

Compare Source

Changed
  • Drop warning from browser build (#​18731)
  • Drop exact duplicate declarations when emitting CSS (#​18809)
Fixed
  • Don't transition visibility when using transition (#​18795)
  • Discard matched variants with unknown named values (#​18799)
  • Discard matched variants with non-string values (#​18799)
  • Show suggestions for known matchVariant values (#​18798)
  • Replace deprecated clip with clip-path in sr-only (#​18769)
  • Hide internal fields from completions in matchUtilities (#​18820)
  • Ignore .vercel folders by default (can be overridden by @source … rules) (#​18855)
  • Consider variants starting with @- to be invalid (e.g. @-2xl:flex) (#​18869)
  • Do not allow custom variants to start or end with a - or _ (#​18867, #​18872)
  • Upgrade: Migrate aria theme keys to @custom-variant (#​18815)
  • Upgrade: Migrate data theme keys to @custom-variant (#​18816)
  • Upgrade: Migrate supports theme keys to @custom-variant (#​18817)

v4.1.12

Compare Source

Fixed
  • Don't consider the global important state in @apply (#​18404)
  • Add missing suggestions for flex-<number> utilities (#​18642)
  • Fix trailing ) from interfering with extraction in Clojure keywords (#​18345)
  • Detect classes inside Elixir charlist, word list, and string sigils (#​18432)
  • Track source locations through @plugin and @config (#​18345)
  • Allow boolean values of process.env.DEBUG in @tailwindcss/node (#​18485)
  • Ignore consecutive semicolons in the CSS parser (#​18532)
  • Center the dropdown icon added to an input with a paired datalist by default (#​18511)
  • Extract candidates in Slang templates (#​18565)
  • Improve error messages when encountering invalid functional utility names (#​18568)
  • Discard CSS AST objects with false or undefined properties (#​18571)
  • Allow users to disable URL rebasing in @tailwindcss/postcss via transformAssetUrls: false (#​18321)
  • Fix false-positive migrations in addEventListener and JavaScript variable names (#​18718)
  • Fix Standalone CLI showing default Bun help when run via symlink on Windows (#​18723)
  • Read from --border-color-* theme keys in divide-* utilities for backwards compatibility (#​18704)
  • Don't scan .hdr and .exr files for classes by default (#​18734)
tsconfig/bases (@​tsconfig/strictest)

v2.0.6

Compare Source

dprint/dprint (dprint)

v0.50.2

Compare Source

Changes

  • fix: upgrade wasmer to 6.1.0-rc.3 to fix build failure with Rust ≥ 1.89.0 (#​1021)
  • fix: ignore empty proxy env (#​1014)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip 61becbf8d1b16540e364a4f00be704266ae322ee0ff3ba66a4a21033f66a8d55
dprint-aarch64-apple-darwin.zip f534bcc054947ab2a42c069b5f6027914d252729bd15c1109812313b35a662a5
dprint-x86_64-pc-windows-msvc.zip 2dbdb57106818acd930a00bc0c2c33370bd4c7265f78a6cda000e3621f2d3c1c
dprint-x86_64-pc-windows-msvc-installer.exe 0b2dab815dd68501b7418831157a907a4db89b84b623a71c1deb486a08244b83
dprint-x86_64-unknown-linux-gnu.zip 95c7e633a67531ffc4990c152d59ed0802e1c0caf7e27e424e9cea9ef3d499d4
dprint-x86_64-unknown-linux-musl.zip 4b0e7911262049ccb8e1ac5968bf7a66dc490968fe1552a123bb2d6dadf2ad95
dprint-aarch64-unknown-linux-gnu.zip 039d4dca4360cb6622a2b56c3fc29ea71c356cd954e0b9566bff1a70e75beda8
dprint-aarch64-unknown-linux-musl.zip a4982964a68aefc2720b4c79c51a57e49b32f8944c1641fd9e714503fcf01847
dprint-riscv64gc-unknown-linux-gnu.zip 6918c45b0070da1da137fa328c7ca82133c6ab0b49a651fa53513305611fe3a8

v0.50.1

Compare Source

Changes

  • fix: update to wasmer v6 (#​984)
  • perf: avoid traversing some non-matching directories when providing include globs on the command line (#​999)
  • perf: avoid traversing more directories (#​1000)

Install

Run dprint upgrade or see https://dprint.dev/install/

Checksums

Artifact SHA-256 Checksum
dprint-x86_64-apple-darwin.zip def8ae0eb100c91df7a3a05ff699c84cac3deb67b6e08ed186d70c669194e031
dprint-aarch64-apple-darwin.zip c92e1a8dddd9bc65391468265b2805cb2317e4490fd777bca2dfaf1ef716ac36
dprint-x86_64-pc-windows-msvc.zip 8102e7f79394cf71f2e9b63ca0cf791dddacc6e118f5a29c1c88777ecea37e3e
dprint-x86_64-pc-windows-msvc-installer.exe 0f66e0c39395985eb28f2a45bb2956298773e006de1eba2924123edaecb55297
dprint-x86_64-unknown-linux-gnu.zip 11d791a5da5178a6d1359f23ea00b2d47426672fe310c5f32da2c66e80e07675
dprint-x86_64-unknown-linux-musl.zip 82ddddc881bf8ec0b4c55e3f835a2dc3d81d8fff39aad79e6b5c017e4dff1d5e
dprint-aarch64-unknown-linux-gnu.zip 54e5d4bd3f186fb8acfcf6e40df15af7e53c12799ed21a1409d133868a66bb40
dprint-aarch64-unknown-linux-musl.zip a3e954bcd8e569812d4bb1f9c8001c9a6802ce38e33c0c0273ac51eb59cf5072
dprint-riscv64gc-unknown-linux-gnu.zip 841120bd28f9d3afdd89bab65a2cb676877c808a460507f1567d97604a111b61
drizzle-team/drizzle-orm (drizzle-kit)

v0.31.4

Compare Source

  • Fixed halfvec, bit and sparsevec type generation bug in drizzle-kit

v0.31.3

Compare Source

  • Internal changes to Studio context. Added databaseName and packageName properties for Studio

v0.31.2

Compare Source

  • 🎉 Added support for TiDB Cloud Serverless driver:

    import { connect } from '@&#8203;tidbcloud/serverless';
    import { drizzle } from 'drizzle-orm/tidb-serverless';
    
    const client = connect({ url: '...' });
    const db = drizzle(client);
    await db.select().from(...);
vercel/turborepo (turbo)

v2.5.6: Turborepo v2.5.6

Compare Source

What's Changed

Docs
@​turbo/repository
Examples
Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.5.5...v2.5.6

v2.5.5: Turborepo v2.5.5

Compare Source

What's Changed

Docs
Examples
Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.5.4...v2.5.5

v2.5.4: Turborepo v2.5.4

Compare Source

What's Changed

Docs
turbo-ignore
eslint
@​turbo/repository
Examples
  • fix(examples): with-svelte example TypeScript by @​anthonyshew in [#​10450](h

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@cloudflare-workers-and-pages
Copy link

cloudflare-workers-and-pages bot commented Aug 24, 2025

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
mcp f5ab29c Sep 23 2025, 01:34 PM

@renovate renovate bot force-pushed the renovate/patch-updates branch 4 times, most recently from f9d4717 to 70f75b5 Compare September 4, 2025 19:52
@renovate renovate bot force-pushed the renovate/patch-updates branch 3 times, most recently from 2068269 to de4c4cd Compare September 14, 2025 11:56
@renovate renovate bot force-pushed the renovate/patch-updates branch 7 times, most recently from c3cf810 to 3e04833 Compare September 23, 2025 12:38
@renovate renovate bot force-pushed the renovate/patch-updates branch from 3e04833 to f5ab29c Compare September 23, 2025 13:31
@totto2727 totto2727 merged commit b9e5268 into main Sep 23, 2025
2 of 3 checks passed
@totto2727 totto2727 deleted the renovate/patch-updates branch September 23, 2025 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants