chore(deps): Bump the npm-minor-and-patch group with 5 updates

[dependabot]

Bumps the npm-minor-and-patch group with 5 updates:

Package	From	To
@tightknitai/slack-block-kit-validator	0.1.0-alpha.0	0.1.7
hono	4.12.21	4.12.23
@cloudflare/vite-plugin	1.37.3	1.39.0
@cloudflare/workers-types	4.20260521.1	4.20260528.1
wrangler	4.93.1	4.95.0

Updates @tightknitai/slack-block-kit-validator from 0.1.0-alpha.0 to 0.1.7

Release notes

Sourced from @​tightknitai/slack-block-kit-validator's releases.

slack-block-kit-validator: v0.1.7

Note: This release is being backfilled. `v0.1.7` was published to npm by the release workflow on 2026-05-27 (in the run for #42) before the matching GitHub release/tag had been created — see #43 for the workflow fix.

Features

• add optional `header.level` (1-4) for variable-sized headers (#41)

Chore

• graduate out of alpha (`0.1.7`) (#42)
• bump dev dependencies (#37, #38, #39, #40)

CI

• publish via `npx npm@latest` and tag prereleases explicitly (#36)
• publish via npm CLI for Trusted Publisher OIDC (#34)

Full Changelog: TightknitAI/slack-block-kit-validator@slack-block-kit-validator-v0.1.7-alpha.1...slack-block-kit-validator-v0.1.7

slack-block-kit-validator: v0.1.7-alpha.1

0.1.7-alpha.1 (2026-05-20)

Bug Fixes

• ci: configure npm registry-url so publish can authenticate (#32) (58087de)

slack-block-kit-validator: v0.1.6-alpha.1

0.1.6-alpha.1 (2026-05-20)

Bug Fixes

• readme: point Try-it-live links at the working demo URL (#29) (22ed35b)

slack-block-kit-validator: v0.1.5-alpha.1

0.1.5-alpha.1 (2026-05-20)

Bug Fixes

• ci: inline publish into release-please workflow (#27) (321ed63)

slack-block-kit-validator: v0.1.4-alpha.1

0.1.4-alpha.1 (2026-05-19)

Features

• add Cloudflare Worker hosting validator as public API + MCP server (#24) (8cdad20)

... (truncated)

Changelog

Sourced from @​tightknitai/slack-block-kit-validator's changelog.

Changelog

0.1.7-alpha.1 (2026-05-20)

Bug Fixes

• ci: configure npm registry-url so publish can authenticate (#32) (58087de)

0.1.6-alpha.1 (2026-05-20)

Bug Fixes

• readme: point Try-it-live links at the working demo URL (#29) (22ed35b)

0.1.5-alpha.1 (2026-05-20)

Bug Fixes

• ci: inline publish into release-please workflow (#27) (321ed63)

0.1.4-alpha.1 (2026-05-19)

Features

• add Cloudflare Worker hosting validator as public API + MCP server (#24) (8cdad20)

0.1.3-alpha.1 (2026-05-19)

Features

• demo: surface tabs, richer examples, light/dark mode (#21) (7f721e7)

Bug Fixes

• demo: swap hand-rolled SVG icons for Lucide paths (#23) (3c70081)

0.1.2-alpha.1 (2026-05-18)

Features

• demo: live playground at slack-block-kit-validator.tightknit.dev (#16) (e07cea6)

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tightknitai/slack-block-kit-validator since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates hono from 4.12.21 to 4.12.23

Release notes

Sourced from hono's releases.

v4.12.23

What's Changed

• fix(serve-static): normalize all backslashes in file paths, not just the first in honojs/hono#4962
• feat(context): export the Context class publicly by @​BlankParticle in honojs/hono#4543
• docs(contribution): add AI Usage Policy by @​yusukebe in honojs/hono#4970
• feat(compress): add contentTypeFilter option and COMPRESSIBLE_CONTENT_TYPE_REGEX re-export by @​na-trium-144 in honojs/hono#4961
• fix(utils/ipaddr): do not compress a single 0 group to :: by @​yusukebe in honojs/hono#4971

Full Changelog: honojs/hono@v4.12.22...v4.12.23

v4.12.22

What's Changed

• chore: update vitest to v4 and cleanups by @​BlankParticle in honojs/hono#4952
• fix(mime): specify charset parameter per MIME type instead of mechanical detection by @​renatograsso10 in honojs/hono#4912
• fix(compress): respect Accept-Encoding when encoding option is set by @​LeSingh1 in honojs/hono#4951
• fix(deno): echo negotiated WebSocket subprotocol in upgrade response by @​ATOM00blue in honojs/hono#4955
• feat: add msgpack as a compressible content type by @​na-trium-144 in honojs/hono#4957

New Contributors

• @​renatograsso10 made their first contribution in honojs/hono#4912
• @​LeSingh1 made their first contribution in honojs/hono#4951
• @​ATOM00blue made their first contribution in honojs/hono#4955
• @​na-trium-144 made their first contribution in honojs/hono#4957

Full Changelog: honojs/hono@v4.12.21...v4.12.22

Commits

• 83bfb3b 4.12.23
• bcd290a fix(utils/ipaddr): do not compress a single 0 group to :: (#4971)
• c968177 feat(compress): add contentTypeFilter option and `COMPRESSIBLE_CONTENT_TYPE_R...
• 0265a54 docs(contribution): add AI Usage Policy (#4970)
• c84c5d2 feat(context): export the Context class publicly (#4543)
• 82dad62 fix(serve-static): normalize all backslashes in file paths, not just the firs...
• 2f01b77 4.12.22
• 6bc0dff feat: add msgpack as a compressible content type (#4957)
• 7e0555d fix(deno): echo negotiated WebSocket subprotocol in upgrade response (#4955)
• f0ed246 fix(compress): respect Accept-Encoding when encoding option is set (#4951)
• Additional commits viewable in compare view

Updates @cloudflare/vite-plugin from 1.37.3 to 1.39.0

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.38.0

Minor Changes

• #13989 f598eac Thanks @​MattieTK! - Print a QR code alongside the tunnel URL when sharing via Cloudflare Tunnel

  When a tunnel is started (via wrangler dev --tunnel or the Vite plugin with tunnel: true), a scannable QR code is now printed to the terminal beneath the tunnel URL. This makes it easy to open the tunnel on a mobile device without manually copying the URL.

  The QR code uses Unicode block characters for a compact representation and is generated best-effort -- if generation fails for any reason, the tunnel URL is still displayed as before.

Patch Changes

• Updated dependencies [52e9082, 0733688, fc1f7b9, 30657e1, 8c569c6, f598eac, 3a1fbed]:
  • wrangler@4.94.0
  • miniflare@4.20260521.0

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.39.0

Minor Changes

• #13985 c809d30 Thanks @​jamesopstad! - Add assetsOnly (entry Worker) and devOnly (auxiliary Workers) options to the plugin config

  Both options accept a boolean or a function that returns a boolean. The function is evaluated lazily at build time, allowing frameworks to provide the value after initialization.

  Use assetsOnly on the entry Worker to skip building the Worker and instead emit an assets-only Wrangler config to the client output directory. This enables frameworks such as Astro to use the ssr environment during development but produce a fully static app for deployment.

  export default defineConfig({
    plugins: [
      cloudflare({
        assetsOnly: () => isStaticBuild,
      }),
    ],
  });

  Use devOnly on an auxiliary Worker to include it during vite dev but skip it at build time.

  export default defineConfig({
    plugins: [
      cloudflare({
        auxiliaryWorkers: [
          { configPath: "./dev-only-worker/wrangler.jsonc", devOnly: true },
        ],
      }),
    ],
  });

Patch Changes

• Updated dependencies [ca5b604, c1fd2fd, 49c1a59, fee1ce4, b3962ff, d042705, 420e457, 8b1467e]:
  • wrangler@4.95.0
  • miniflare@4.20260526.0

1.38.0

Minor Changes

• #13989 f598eac Thanks @​MattieTK! - Print a QR code alongside the tunnel URL when sharing via Cloudflare Tunnel

  When a tunnel is started (via wrangler dev --tunnel or the Vite plugin with tunnel: true), a scannable QR code is now printed to the terminal beneath the tunnel URL. This makes it easy to open the tunnel on a mobile device without manually copying the URL.

  The QR code uses Unicode block characters for a compact representation and is generated best-effort -- if generation fails for any reason, the tunnel URL is still displayed as before.

... (truncated)

Commits

• See full diff in compare view

Updates @cloudflare/workers-types from 4.20260521.1 to 4.20260528.1

Commits

• See full diff in compare view

Updates wrangler from 4.93.1 to 4.95.0

Release notes

Sourced from wrangler's releases.

wrangler@4.94.0

Minor Changes

• #13897 52e9082 Thanks @​dario-piotrowicz! - Add automatic Cloudflare skills installation for AI coding agents

  Wrangler now detects AI coding agents and offers to install Cloudflare skill files from the cloudflare/skills GitHub repository. Users are prompted once interactively; subsequent runs skip the prompt. Use --install-skills to install without prompting.

• #13989 f598eac Thanks @​MattieTK! - Print a QR code alongside the tunnel URL when sharing via Cloudflare Tunnel

  When a tunnel is started (via wrangler dev --tunnel or the Vite plugin with tunnel: true), a scannable QR code is now printed to the terminal beneath the tunnel URL. This makes it easy to open the tunnel on a mobile device without manually copying the URL.

  The QR code uses Unicode block characters for a compact representation and is generated best-effort -- if generation fails for any reason, the tunnel URL is still displayed as before.

• #13467 3a1fbed Thanks @​deloreyj! - Add schedule property to Workflow bindings for cron-based triggering

  Note: This is a configuration-only change. Scheduled triggering of Workflow instances is not yet available — adding schedule to a Workflow binding will not result in scheduled invocations at this time. This change lays the groundwork for an upcoming feature.

  Workflow bindings in wrangler.json now accept an optional schedule field that configures one or more cron expressions to automatically trigger new workflow instances on a schedule.

  // wrangler.json
  {
    "workflows": [
      {
        "binding": "MY_WORKFLOW",
        "name": "my-workflow",
        "class_name": "MyWorkflow",
        "schedule": "0 9 * * 1"
      }
    ]
  }

  Multiple schedules can be provided as an array:

  {
    "workflows": [
      {
        "binding": "MY_WORKFLOW",
        "name": "my-workflow",
        "class_name": "MyWorkflow",
        "schedule": ["0 9 * * 1", "0 17 * * 5"]
      }
    ]
  }

  The schedule is sent to the Workflows control plane on wrangler deploy. Configuring schedule on a workflow binding that references an external script_name is an error — the schedule must be configured on the worker that defines the workflow.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions