[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@next/env (source)	16.4.2 → 16.4.3
@secretlint/secretlint-rule-preset-recommend (source)	13.0.7 → 13.1.0
@types/chroma-js (source)	3.1.2 → 3.1.3
autoprefixer	10.6.1 → 10.6.2
dotenv-cli	11.0.0 → 11.1.0
eslint-config-next (source)	16.4.2 → 16.4.3
eslint-config-turbo (source)	2.11.9 → 2.11.10
postcss (source)	8.5.31 → 8.5.32
secretlint (source)	13.0.7 → 13.1.0
turbo (source)	2.11.9 → 2.11.10
typescript-eslint (source)	8.71.2 → 8.72.1

---

Release Notes

vercel/next.js (@​next/env)

v16.4.3

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [lts-active] Fix extensionless Google font URLs in both bundlers (#​100277)
• [lts-active] Don't load the app-page runtime in proxy.ts (#​100423)
• [lts-active] Revert "Turbopack: loader change invalidation (#​95732)" (#​100438)
• [lts-active][cd] Gate release bot credentials behind GitHub environments (#​100123)
• [lts-active] test: Pin react-virtualized (#​100545)
• [lts-active][cd] Move release un-draft to a follow-up job in bot-autonomous (#​100572)
• [lts-active] Keep OpenTelemetry request traces together (#​100349, #​100294, #​100324, #​100350, #​100552, #​100583) (#​100542)
• [lts-active] Avoid loading standalone React in server bootstrap (#​100610)

Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

secretlint/secretlint (@​secretlint/secretlint-rule-preset-recommend)

v13.1.0

Compare Source

What's Changed

Security Fixes

• fix(formatter): strip terminal control characters from file paths and messages by @​azu in #​1735
• fix(gcp): lower PKCS#12 MAC iteration cap and hash with node:crypto by @​azu in #​1728

Features

• feat(config-loader): report config problems as warning messages by @​azu in #​1764

Bug Fixes

• fix(rules): respect allows option in openai, anthropic, linear, secp256k1-privatekey, and gcp by @​azu in #​1734
• fix(node): mask secrets by default in createEngine by @​azu in #​1727
• fix(core): do not throw when rule data contains null by @​azu in #​1729
• fix(secp256k1-privatekey): detect private keys with a leading zero byte by @​azu in #​1730
• fix(filter-comments): make bare secretlint-enable close all open disables by @​azu in #​1731
• fix(formatter): respect --no-terminalLink option by @​azu in #​1732
• fix(node): exit with 0 when only warning or info messages are found by @​azu in #​1765

CI

• Update Patch updates by @​renovate[bot] in #​1723
• Update github/codeql-action action to v3.38.3 by @​renovate[bot] in #​1726
• Update github/codeql-action action to v3.39.0 by @​renovate[bot] in #​1749

Dependency Updates

• Update dependency ignore to ^7.0.11 by @​renovate[bot] in #​1712
• Update dependency rollup to ^4.63.6 by @​renovate[bot] in #​1713
• Update dependency turbo to ^2.11.6 by @​renovate[bot] in #​1714
• Update dependency @​types/node to ^25.9.9 by @​renovate[bot] in #​1715
• Update dependency turbo to ^2.11.7 by @​renovate[bot] in #​1716
• Update Patch updates (patch) by @​renovate[bot] in #​1717
• Update dependency rollup to ^4.64.1 by @​renovate[bot] in #​1718
• Update dependency rollup to ^4.64.3 by @​renovate[bot] in #​1719
• Update dependency p-map to ^7.1.0 by @​renovate[bot] in #​1720
• Update dependency rollup to ^4.64.5 by @​renovate[bot] in #​1722
• Update dependency p-map to ^7.1.1 by @​renovate[bot] in #​1724
• Update Patch updates (patch) by @​renovate[bot] in #​1725
• Update dependency rollup to ^4.64.6 by @​renovate[bot] in #​1736
• Update dependency turbo to ^2.11.8 by @​renovate[bot] in #​1737
• Update dependency rollup to ^4.64.7 by @​renovate[bot] in #​1738
• Update dependency vitest to ^4.1.12 by @​renovate[bot] in #​1739
• Update dependency turbo to ^2.11.9 by @​renovate[bot] in #​1743
• Update dependency rollup to ^4.64.9 by @​renovate[bot] in #​1744
• Update dependency rollup to ^4.64.10 by @​renovate[bot] in #​1747
• Update dependency ignore to ^7.0.13 by @​renovate[bot] in #​1750
• Update dependency rollup to ^4.64.12 by @​renovate[bot] in #​1752
• Update dependency turbo to ^2.11.10 by @​renovate[bot] in #​1753
• Update dependency @​rollup/plugin-typescript to ^12.3.1 by @​renovate[bot] in #​1756
• Update dependency rollup to ^4.65.0 by @​renovate[bot] in #​1759

Full Changelog: secretlint/secretlint@v13.0.7...v13.1.0

postcss/autoprefixer (autoprefixer)

v10.6.2

Compare Source

• Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
• Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
• Fixed selector duplicates on multiple Autoprefixer runs.
• Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
• Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
• Fixed source maps for Grid prefixes (by @​dualfroz).

entropitor/dotenv-cli (dotenv-cli)

v11.1.0

Compare Source

What's Changed

• print version and url in printHelp by @​lengyijun in #​135
• docs: add PowerShell usage example by @​mrcheval91 in #​138
• Add npm package metadata by @​mawxcodehub in #​139
• Add bin alias dotenv-cli by @​mdmower-csnw in #​141

New Contributors

• @​lengyijun made their first contribution in #​135
• @​mrcheval91 made their first contribution in #​138
• @​mawxcodehub made their first contribution in #​139

Full Changelog: entropitor/dotenv-cli@v11.0.0...v11.1.0

vercel/turborepo (eslint-config-turbo)

v2.11.10: Turborepo v2.11.10

Compare Source

What's Changed

Changelog

• fix: Allow non-recursive Turbo commands in root tasks by @​sahyl in #​14814
• chore: Release Turborepo 2.11.9 by @​github-actions[bot] in #​14824
• chore(deps): Update dependency @​vercel/geistdocs to v2 by @​vercel-gh-bot-4[bot] in #​14417
• chore: Update with-gatsby example by @​vercel-gh-bot-3[bot] in #​14796
• fix: Avoid pnpm batch-shim shutdown hangs on Windows by @​sahyl in #​14819
• chore(deps): Update dependency @​vercel/geistdocs to v2.11.0 by @​vercel-gh-bot-3[bot] in #​14832
• fix: Exclude tool-managed directories from local dependency inputs by @​PedroRosalba in #​14696
• fix: Match git's text=auto binary detection in file hashing by @​PedroRosalba in #​14697
• fix: Drop @​react-router/dev from Remix match list by @​Pcmhacker-piro in #​14800
• fix: Match package configuration files and directory inputs in task-level affected detection by @​PedroRosalba in #​14804
• fix: Parse pnpm 8 single-project lockfiles by @​PedroRosalba in #​14806
• fix: Keep task env vars in the hash when globalEnv excludes inferred vars by @​PedroRosalba in #​14805
• docs: Generate the sitemap from Geistdocs sources by @​molebox in #​14865
• fix: Restore cached symlinks when outputs are already on disk by @​PedroRosalba in #​14807
• chore: Remove CODEOWNERS file by @​anthonyshew with @​Copilot in #​14810
• feat: Enable WebMCP for Turborepo docs by @​anthonyshew in #​14828
• fix: Exit quietly when turbo ls output is piped to a closed reader by @​drakeo338 in #​14868
• fix: Distrust compromised eMudhra intermediate certificates by @​anthonyshew in #​14876

Full Changelog: vercel/turborepo@v2.11.9...v2.11.10

postcss/postcss (postcss)

v8.5.32

Compare Source

• Fixed Input#origin() without opts.from (by @​wleeaf).
• Fixed final-word lookup without source offsets (by @​Don-Yin).
• Fixed explicit start in Warning#toString() (by @​Don-Yin).
• Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).

typescript-eslint/typescript-eslint (typescript-eslint)

v8.72.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.72.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.