chore(deps): update devdependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dprint	^0.57.0 → ^0.59.0
turbo (source)	2.11.3 → 2.11.7

---

Release Notes

dprint/dprint (dprint)

v0.59.0

Compare Source

Changes

• fix: canonicalize paths that don't exist in the editor service and lsp (#​1260)
• feat: ensure a stable format for stdin formatting and optionally in editors (#​1261)
• feat(lsp): format jupyter notebook cells (#​1262)
• feat(lsp): format untitled documents (#​1265)
• feat(lsp): support not using the global config by default (#​1264)
• fix(lsp): do not panic on positions that are out of range (#​1267)
• fix(lsp): format files outside the cwd with the global config (#​1268)
• fix(lsp): apply "inherit": true in nested config files (#​1269)
• fix(lsp): keep formatting with other configs after a config changes (#​1270)
• fix(lsp): exit the process after the exit notification (#​1272)
• fix(lsp): log formatting failures to the client (#​1273)
• fix(lsp): rebuild the line index when a change ends in changed lines (#​1275)
• fix(lsp): store the document version when a change is applied (#​1276)
• fix(lsp): pick up gitignore changes without a config change (#​1278)
• fix(lsp): correct config completion edits on incomplete input (#​1279)
• fix(lsp): retry failed plugin schema downloads and limit the wait on them (#​1280)
• fix(lsp): only register completion and hover for config files (#​1281)

Install

Run dprint upgrade or see https://dprint.dev/install/

Verification

These artifacts have build provenance attestations.
Verify a download with the GitHub CLI:

gh attestation verify dprint-x86_64-unknown-linux-gnu.zip --repo dprint/dprint

Checksums

Artifact	SHA-256 Checksum
dprint-x86_64-apple-darwin.zip	cf3efa1f000125feac934f1afcf76daa35dad4c79dc22ae4c58f92de114e0845
dprint-aarch64-apple-darwin.zip	1888b152b3541c3690ec5291dd58bde7116e6c8beb4aa1f242187f22071df22f
dprint-x86_64-pc-windows-msvc.zip	f75040d7288d3cf0a271b025dedcab589edec6b363c481790ff53850dadae6f5
dprint-x86_64-pc-windows-msvc-installer.exe	e7c0380f8d5ed6da422b20d24bb084f381c261e55f08aa89cbdbd545e18efde5
dprint-aarch64-pc-windows-msvc.zip	5bce8673fe5ff8c5162d8a51fef54cd98c1213e9d4b37be03bca6cd21b196b09
dprint-x86_64-unknown-linux-gnu.zip	1705b1be1773955e882a69c29aebd3862d5b466c951f47495ad6cb423c224f86
dprint-x86_64-unknown-linux-musl.zip	c1e709d629caf8c1f8ef8328f2b5136c68dd5e878b36b04403bf9dfd133c559f
dprint-aarch64-unknown-linux-gnu.zip	4c767249bd35be5d3a0fab98a2eb94bcc439330a45d40c2681032d27ed1032b1
dprint-aarch64-unknown-linux-musl.zip	b90a0e7ede5fbae3e9f4e0e50455902a7e436f575c8db3b9b7fea9b7a0303210
dprint-riscv64gc-unknown-linux-gnu.zip	b88f8c1d6affa3743f60404feed51703b8d77306d0fe3b451e4fb7a4e4f84054
dprint-loongarch64-unknown-linux-gnu.zip	fbf544f4149e5a6ed7d5feefbb85ee7570cf58fc4dc79e7e6245293669f4f34f
dprint-loongarch64-unknown-linux-musl.zip	b100406bc5d3098cd3756b1e7cc7e7c78e05a13e88c4d1593ebb1d3e2a95b26a
dprint-powerpc64le-unknown-linux-gnu.zip	06a99164542e750085eacbf8a1f984a93defb2d1755ff1a7f12b0d4ab4c1b75c
dprint-powerpc64le-unknown-linux-musl.zip	718fdb164317347fcec31141926992f083167eb9f54a8df5d4dc77b5c5b46478
dprint-aarch64-linux-android.zip	3e7d976c0e8cfd088b2ccda2f95e07046341ecf67660ebc5c30835e4c51b4158
dprint-x86_64-linux-android.zip	811bd855000846c8eca8976863d4ffd831577dbf8e35071f56300c3efdb48caf

v0.58.0

Compare Source

Changes

• fix(BREAKING): make --config file patterns relative to the config file's directory (#​1257)
• feat(BREAKING): evaluate associations and override files in order where the last match wins (#​1258)
• feat: add plugins with dprint init when a config file already exists (#​1241)
• feat: additive plugins (#​1249)
• feat: always pre-select a json plugin with dprint init (#​1252)
• feat: support neverPreselect in the plugin info file (#​1253)
• fix(development): harden range markers in specs (#​1256)

This release features a breaking change for glob patterns in config files specified with --config <file-path>. Previously in this case, the patterns would be relative to the cwd, but this was bad because it would cause things to work in unexpected ways based on what the cwd is (fragile). See #​1257 for workarounds and please open an issue if this really breaks you and I'll try to come up with a solution. Remote configs will continue to work like before where the patterns are relative to the cwd.

Install

Run dprint upgrade or see https://dprint.dev/install/

Verification

These artifacts have build provenance attestations.
Verify a download with the GitHub CLI:

gh attestation verify dprint-x86_64-unknown-linux-gnu.zip --repo dprint/dprint

Checksums

Artifact	SHA-256 Checksum
dprint-x86_64-apple-darwin.zip	47e0c48127c9ac306bc66c4af0c3146ef41bd008c5eccc956691c09e2661f077
dprint-aarch64-apple-darwin.zip	06a7ea017e4d7da296f8a44fabb2f3d6ffafa91bbd5fddd4830bdc418bacb46d
dprint-x86_64-pc-windows-msvc.zip	6ab827fba525918670ff666edb5fc50917157c803c9abdc463131f75b5df0840
dprint-x86_64-pc-windows-msvc-installer.exe	9ce61595a0c55dfe56dfa6fa9f9dfb7e1bf4fa1953734c2dcda95805a5558157
dprint-aarch64-pc-windows-msvc.zip	de86d320f0753f8803ef957baec766be18858e4021ddcf2d0584142a8ace1bae
dprint-x86_64-unknown-linux-gnu.zip	3047dcabe684fe32868d1959f7fad4ccbc2996a393d639bbb6634668fa08dc49
dprint-x86_64-unknown-linux-musl.zip	06c2a239a1214d5f9e76c364cadbd0ffaee710fdb516ca6448b08860364db6e2
dprint-aarch64-unknown-linux-gnu.zip	f161161399b5ef62b3b68570ea1df24d16687adfbb88c125c8c4355e5780c407
dprint-aarch64-unknown-linux-musl.zip	c74dd4f48dd9b8d6d595acfb238dd32ede67bdf792e8c6e2b8760cdaff9d80fb
dprint-riscv64gc-unknown-linux-gnu.zip	81b2e4138324b1bb78bafc13e72d8073e001c7164a579ede11128534ec41bfe4
dprint-loongarch64-unknown-linux-gnu.zip	3c7771c4026c2769c0d77675caa4a426d025e7403e6c911d51a3f36385c8f1a4
dprint-loongarch64-unknown-linux-musl.zip	76aa022f9722f94222240cb84b44df9e8e64d9b4a4a6acde01f8aa9b7cc4e776
dprint-powerpc64le-unknown-linux-gnu.zip	1cf739e5b89d6a82ea16c42131aca07e767ff086437262680310b905f41bb271
dprint-powerpc64le-unknown-linux-musl.zip	b9616bd309b562ab2a263b2c8555e65237c8c9db4ad6936cff1c04b1173b6bef
dprint-aarch64-linux-android.zip	b44b7620087d9e9ddeecac0929aa5be19f1ff4a971df15747294f03345647979
dprint-x86_64-linux-android.zip	f85b1998119f0d369397828a8c1262160b27d9b9b92ca75ab7952e444c344e8b

vercel/turborepo (turbo)

v2.11.7: Turborepo v2.11.7

Compare Source

What's Changed

Changelog

• chore: Release Turborepo 2.11.6 by @​github-actions[bot] in #​14352
• fix: Pass SDKROOT through to repository tasks by @​anthonyshew in #​14353
• chore: Update with-vite-module-federation example by @​vercel-gh-bot-5[bot] in #​14349
• fix: Ignore Vercel OIDC token rotation in .env.local cache inputs by @​anthonyshew in #​14356

Full Changelog: vercel/turborepo@v2.11.6...v2.11.7

v2.11.6

Compare Source

v2.11.5: Turborepo v2.11.5

Compare Source

What's Changed

Changelog

• chore: Release Turborepo 2.11.4 by @​github-actions[bot] in #​14231
• test: Move Python opt-in hint into filter contracts by @​anthonyshew in #​14228
• test: Move dependency-output summary assertion into contract by @​anthonyshew in #​14230
• test: Move dependency-output selection and validation cases to engine contracts by @​anthonyshew in #​14232
• test: Move Cargo exclude-only scope coverage by @​anthonyshew in #​14238
• test: Move Cargo cache-authority cases to contracts by @​anthonyshew in #​14240
• test: Move JIT dependency graph scenario into engine contract by @​anthonyshew in #​14235
• test: Move dependency-output hash cases into task-hash contracts by @​anthonyshew in #​14233
• test: Move Cargo task-filter cases into crate contracts by @​anthonyshew in #​14239
• test: Move JIT input hash timing cases into task-hash contracts by @​anthonyshew in #​14234
• test: Move package input normalization cases into engine contracts by @​anthonyshew in #​14236
• test: Move structured startup and JIT input cases into contracts by @​anthonyshew in #​14237
• fix: Back off remote artifact requests during outages by @​anthonyshew in #​14222
• chore: Release Turborepo 2.11.5-canary.1 by @​github-actions[bot] in #​14245
• test: Make new-package lockfile filter deterministic by @​anthonyshew in #​14241
• test: Trim redundant Go cache builds by @​anthonyshew in #​14242
• test: Reduce Go versioned-name test matrix by @​anthonyshew in #​14243
• test: Move Go binary checks into contracts by @​anthonyshew in #​14246
• test: Consolidate Go format smokes by @​anthonyshew in #​14244
• test: Reuse Cargo build artifacts safely by @​anthonyshew in #​14247
• test: Separate prune planning matrix from buildability smoke by @​anthonyshew in #​14248
• feat: Bundle docs in turbo npm package by @​anthonyshew in #​14108
• chore: Release Turborepo 2.11.5-canary.2 by @​github-actions[bot] in #​14249
• fix: Stabilize pnpm per-workspace lockfile hashes by @​anthonyshew in #​14253
• chore: Upgrade factory Next.js to 16.3.3 by @​anthonyshew in #​14254
• fix: Update js-yaml to address CVE-2026-84375 by @​anthonyshew in #​14255
• chore: Upgrade Next.js in docs and factory for CVE-2026-94545 by @​anthonyshew in #​14256
• fix: Remove unmaintained proc-macro-error2 by @​anthonyshew in #​14257
• refactor: Replace clap in production CLIs with usage-rs by @​anthonyshew in #​14259
• chore: Remove tiny-gradient dependency by @​anthonyshew in #​14260
• refactor: Replace human-panic with local crash reporting by @​anthonyshew in #​14261
• chore: Remove unused struct_iterable dependency by @​anthonyshew in #​14258
• fix: Sign complete on-disk artifacts after local cache writes by @​anthonyshew in #​14265
• chore: Remove derive_setters dependency by @​anthonyshew in #​14266
• chore: Remove port_scanner dependency by @​anthonyshew in #​14267
• chore: Remove unused Rust dependency declarations by @​anthonyshew in #​14268
• refactor: Remove unused public Rust APIs by @​anthonyshew in #​14269
• refactor: Use workspace Rust edition across crates by @​anthonyshew in #​14270
• chore: Clean up Rust Clippy exceptions by @​anthonyshew in #​14271
• refactor: Group task-hash and uv generation context by @​anthonyshew in #​14279
• refactor: Remove unused global hash wrapper by @​anthonyshew in #​14281
• refactor: Remove unused file-hash telemetry argument by @​anthonyshew in #​14282
• refactor: Remove dead CLI code and crate-wide allowance by @​anthonyshew in #​14283
• refactor: Remove dead Microfrontends config code by @​anthonyshew in #​14284
• refactor: Remove unused UI task types and dead-code allowance by @​anthonyshew in #​14286
• refactor: Remove unused Cache archive test helper and dead code allowance by @​anthonyshew in #​14287
• chore: Narrow Run dead-code allowances by @​anthonyshew in #​14285
• chore: Remove resolved TODO markers by @​anthonyshew in #​14288
• fix: Use map_while for invariant text prefixes by @​anthonyshew in #​14289
• test: Cover globwalk parent traversal by @​anthonyshew in #​14290
• fix: Wait for watcher setup with Tokio wait_for by @​anthonyshew in #​14292
• test: Exercise SCM package hashing for symlinks by @​anthonyshew in #​14291
• fix: Reject empty tokens when reading token files by @​anthonyshew in #​14293
• test: Verify Yarn transparent workspace handling by @​anthonyshew in #​14294
• fix: Format pnpm v5 package names by @​anthonyshew in #​14295
• fix: Report package manager error source paths by @​anthonyshew in #​14296
• fix: Resolve LSP task references with JSONC AST by @​anthonyshew in #​14298
• chore: Remove stale package watcher TODO by @​anthonyshew in #​14299
• fix: Validate scope selector glob bases by @​anthonyshew in #​14300
• fix: Add path context to globwatch errors by @​anthonyshew in #​14301
• docs: Document wax pattern and walk semantics by @​anthonyshew in #​14302
• chore: Remove resolved filewatch input-set TODO by @​anthonyshew in #​14303
• docs: Document FSEvents event translation by @​anthonyshew in #​14305
• refactor: Group run-cache task context by @​anthonyshew in #​14304
• chore: Document package watcher task-input filtering by @​anthonyshew in #​14306
• chore: Remove stale const_format lint workaround by @​anthonyshew in #​14307
• refactor: Route regex groups through Grouping by @​anthonyshew in #​14308
• perf: Parse character classes without compiling regex by @​anthonyshew in #​14310
• chore: Drop unused Biome dependencies from turbopath by @​anthonyshew in #​14311
• chore: Unify jsonc-parser versions by @​anthonyshew in #​14312
• chore: Remove error-only dependency edges by @​anthonyshew in #​14313
• perf: Emit casing flags only when they change by @​anthonyshew in #​14309
• perf: Avoid formatting Bun lockfiles during parsing by @​anthonyshew in #​14314
• test: Assert process manager stop postconditions by @​anthonyshew in #​14297
• perf: Serve a static GraphiQL page by @​anthonyshew in #​14315
• perf: Upgrade serde_json to reduce CLI size by @​anthonyshew in #​14316
• perf: Upgrade Ratatui to reduce TUI allocations by @​anthonyshew in #​14317
• fix: Restore TUI log streaming after Ratatui upgrade by @​anthonyshew in #​14318
• feat: Add version-matched agent guidance by @​anthonyshew in #​14250
• fix: Restore Rust builds after agent guidance changes by @​anthonyshew in #​14319
• chore: Release Turborepo 2.11.5-canary.3 by @​github-actions[bot] in #​14320
• docs: Update Turborepo schema URL example by @​yousefdawood7 in #​14321
• feat: Publish versioned standalone turbo archives by @​anthonyshew in #​14322
• fix: Run standalone archive job on manual releases by @​anthonyshew in #​14323
• chore: Release Turborepo 2.11.5-canary.4 by @​github-actions[bot] in #​14324
• feat: Add standalone installers URLs for curl | bash by @​anthonyshew in #​14325
• fix: Isolate installer test environment by @​anthonyshew in #​14326
• fix: Pass repository to release asset commands by @​anthonyshew in #​14327
• chore: Release Turborepo 2.11.5-canary.5 by @​anthonyshew in #​14328

New Contributors

• @​yousefdawood7 made their first contribution in #​14321

Full Changelog: vercel/turborepo@v2.11.4...v2.11.5

v2.11.4: Turborepo v2.11.4

Compare Source

What's Changed

Changelog

• fix: Respect negated global dependencies in affected detection by @​anthonyshew in #​14164
• chore: Release Turborepo 2.11.3 by @​github-actions[bot] in #​14165
• test: Share Go compilation caches across integration tests by @​anthonyshew in #​14166
• refactor: Add injectable manifest loading to repository graphs by @​anthonyshew in #​14167
• test: Move Go and Cargo scope planning into crate tests by @​anthonyshew in #​14168
• refactor: Extract subprocess-free Go observation assembly by @​anthonyshew in #​14169
• test: Move Cargo environment hash contracts into crates by @​anthonyshew in #​14170
• test: Move Cargo output layout matrices to repository contracts by @​anthonyshew in #​14171
• test: Cover Go discovery identities in memory by @​anthonyshew in #​14172
• test: Cover Go hash inputs in repository contracts by @​anthonyshew in #​14174
• test: Move uv hash input contracts into crates by @​anthonyshew in #​14175
• test: Cover Go task selection in the engine by @​anthonyshew in #​14173
• test: Inject uv discovery for native task contracts by @​anthonyshew in #​14176
• test: Inject query contracts over repository graphs by @​anthonyshew in #​14177
• test: Inject dry-run task summary contracts by @​anthonyshew in #​14178
• test: Expose prune workspace selection plan by @​anthonyshew in #​14179
• test: Inject change detection at scope entry point by @​anthonyshew in #​14180
• test: Move uv lock affectedness planning into repository contracts by @​anthonyshew in #​14184
• test: Use virtual clock for package watcher events by @​anthonyshew in #​14181
• test: Move Cargo task query and dry-run planning into contracts by @​anthonyshew in #​14185
• test: Move uv quality query and dry-run projections into contracts by @​anthonyshew in #​14186
• test: Move JavaScript hash and framework projections into contracts by @​anthonyshew in #​14188
• test: Cover prune closure and native layout plans in process by @​anthonyshew in #​14189
• test: Cover mixed-toolchain scope filters through injection by @​anthonyshew in #​14190
• test: Make package watcher suppression and rediscovery deterministic by @​anthonyshew in #​14191
• test: Inject watch run lifecycle and event collection by @​anthonyshew in #​14192
• test: Move recursive root-script guard into process-free contract by @​anthonyshew in #​14193
• test: Move Go query and summary parity into crate contracts by @​anthonyshew in #​14187
• test: Remove duplicate CLI filter matrix cases by @​anthonyshew in #​14194
• test: Trim duplicate prune materialization cases by @​anthonyshew in #​14195
• test: Match Go library summary path on Windows by @​anthonyshew in #​14197
• test: Cover mixed-toolchain watch task selection in process by @​anthonyshew in #​14196
• test: Preserve Windows SystemRoot in strict-env fixture by @​anthonyshew in #​14198
• test: Retain real watch smokes after selection migration by @​anthonyshew in #​14199
• fix: Only reject secondary go.work files Go reads for workspace members by @​voiys in #​14183
• test: Split Go north-star cache invalidation into hash contracts by @​anthonyshew in #​14201
• test: Avoid deleting built prune output in cross-toolchain prune test by @​anthonyshew in #​14202
• test: Move turbo.json validation cases into crate contracts by @​anthonyshew in #​14203
• chore: Update with-solid example by @​vercel-gh-bot-2[bot] in #​14200
• refactor: Split RunBuilder execution context construction into phases by @​anthonyshew in #​14204
• refactor: Inject remote cache status probe by @​anthonyshew in #​14205
• refactor: Inject inputs into config resolution by @​anthonyshew in #​14206
• feat: Add affected query APIs to turborepo-query by @​anthonyshew in #​14207
• refactor: Wire CLI through affected query APIs by @​anthonyshew in #​14208
• feat: Add pure microfrontend port resolver by @​anthonyshew in #​14209
• refactor: Inject change detection into affected run paths by @​anthonyshew in #​14210
• test: Move affectedTasks planning cases into query contracts by @​anthonyshew in #​14214
• refactor: Route get-mfe-port through the pure resolver by @​anthonyshew in #​14215
• test: Count native discovery for JavaScript-only selections by @​anthonyshew in #​14216
• fix: Disable remote cache after unrecoverable forbidden responses by @​anthonyshew in #​14218
• perf: Send cache analytics in larger batches by @​anthonyshew in #​14219
• perf: Batch dry-run remote cache existence checks by @​anthonyshew in #​14220
• test: Move config precedence cases into funnel contracts by @​anthonyshew in #​14217
• test: Move affected run planning into RunBuilder contracts by @​anthonyshew in #​14212
• fix: Coordinate artifact requests after rate limiting by @​anthonyshew in #​14221
• fix: Share concurrent remote-cache token recovery by @​anthonyshew in #​14223
• refactor: Make repository context inputs injectable by @​anthonyshew in #​14224
• refactor: Group Run state into execution and services contexts by @​anthonyshew in #​14225
• test: Move Cargo prune layout checks into in-process plan contracts by @​anthonyshew in #​14226
• test: Move Cargo and Go discovery cases into contracts by @​anthonyshew in #​14227
• fix: Put version in turbo query JSON output instead of a separate banner by @​anthonyshew in #​14229

New Contributors

• @​voiys made their first contribution in #​14183

Full Changelog: vercel/turborepo@v2.11.3...v2.11.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.