chore(deps): update dependency deno to v2 #1451

renovate · 2026-01-12T21:16:35Z

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
deno (source)	`v1.x` → `2.x`

Release Notes

denoland/deno (deno)

`v2.6.5`

Compare Source

feat(ext/canvas): support gif, webp for createImageBitmap (#31402)
feat(ext/web): add performance.clearResourceTimings() and
setResourceTimingBufferSize() (#31603)
feat(node/fs): implement FileHandle.readableWebStream() (#31745)
fix(audit): respect --level flag for exit code (#31721)
fix(ci): rename trusted-signing-action to artifact-signing-action (#31849)
fix(cli/test): close Node HTTP connections before sanitizer check (#31782)
fix(ext/fetch): read file urls via vfs (#31814)
fix(ext/fetch): support ipv6 destination host with http and socks proxy
(#31683)
fix(ext/node): DatabaseSync garbage collection invalidating associated
resources (#31737)
fix(ext/node): add tls.setDefaultCACertificates support (#31522)
fix(ext/node): emit deprecation warning for SlowBuffer (#31772)
fix(ext/node): fix use-after-free in StatementSync JS iterator (#31770)
fix(ext/node): use correct block sizes for HMAC algorithms (#31775)
fix(ext/web): handle empty TextDecoder input when stream is true (#31691)
fix(io): ignore BrokenPipe error in op_print (#31844)
fix(node/child_process): ChildProcess constructor without args (#31838)
fix(node/child_process): improve arg type validation for execFile and fork
(#31829)
fix(node/child_process): reject null bytes in arguments (#31828)
fix(node/child_process): use correct syscall name in spawn error (#31836)
fix(npm): deduplication pass for initially partially resolved graphs (#31787)
fix(runtime): handle options parameter in Deno.errors.* constructors
(#31510)
fix(task): preserve signal-based exit codes for child processes (#31789)
fix(tsgo): nil deref for exported symbols (#31786)
fix(webgpu): correctly expose GPUCompilationInfo & GPUCompilationMessage
(#31780)
fix: add more details when panicking getting dir path from deno.json (#31805)
fix: allow multiple --allow-all args (#31833)
fix: queue dynamic imports for modules with pending TLA (#31670)
fix: update config schema for read permission to include ignore property
(#31785)

`v2.6.4`

Compare Source

fix(compile): make compile work with --unstable-npm-lazy-caching (#31704)
fix(ext/node): enable keepAlive connection reuse for HTTP Agent (#31709)
fix(ext/node): handle errors in sqlite session filter callback (#31756)
fix(ext/node): support TypedArray and DataView targets in Buffer.copy()
(#31734)
fix(ext/node): support for inspector.url() (#31705)
fix(ext/node): support numbered positional parameters in node:sqlite (#31722)
fix(ext/websocket): prevent sending multiple close frames (#31747)
fix(install): wait for package installations before applying patches (#31711)
fix(node/crypto): integrate async_hooks for domain error handling (#31751)
fix(serve): net permissions in config file (#31718)
fix(task): prioritize member package.json when deno.json only in root
(#31736)
fix(webgpu): update wgpu to 28.0.0 (#31163)
fix: deno cross compile for intel mac target (#31714)
fix: update urlpattern to 0.4.2 (#31193)

`v2.6.3`

Compare Source

fix(check): improve node types handling
Revert "fix(ext/node): stub out Module.register and Module.registerHooks"
(#31684)

`v2.6.2`

Compare Source

feat(unstable): add sandbox subcommand (#31568)
fix(audit): fix deserde for transitive npm audit actions (#31671)
fix(check): handle workspace members having different jsx import sources and
importing each other (#31654)
fix(check): regression with tsgo and node globals (#31621)
fix(cli): deno tunnel when token storage isn't working or without deno.json
(#31584)
fix(compile): ensure temp dir exists during x64 codesign (#31672)
fix(ext/node): sqlite:backup compatibility (#31610)
fix(ext/node): add error handling functions and tests for UV bindings (#31639)
fix(ext/node): avoid env permission for TERM in console and readline (#31638)
fix(ext/node): fix hot loop in setImmediate with a pending timer (#31643)
fix(ext/node): stub out Module.register and Module.registerHooks (#31666)
fix(ext/node): support named pipe listen, connect and open (#31624)
fix(ext/telemetry): otel baggage propagation (#31620)
fix(fetch): fix SOCKS5 proxy URL validation logic (#31604)
fix(flags): implement a better sandbox subcommand (#31657)
fix(inspector): worker debugging support via CDP (#31527)
fix(x): cache on demand when running, resolve packages with only one binary,
don't fail on node-gyp if not present (#31619)
fix(x): fix shim script when use custom alias name, re-enable alias tests
(#31653)
fix: panic on dropped inspector session (#31658)
fix: update glob implementation to match with latest node (#31627)

`v2.6.1`

Compare Source

feat(unstable): deploy config allow app to be optional (#31567)
fix(add): include type-only imports when building graph (#31552)
fix(cli): add streams as transferable types (#31586)
fix(compile): intel mac compile fix (#31575)
fix(compile): sentinal conflict with strtab on intel mac (#31587)
fix(ext/node): DatabaseSync compatibility (#31515)
fix(x): correct alias deno command location for Windows (#31573)
fix(x): fix executing native binary on windows + some cleanup (#31551)
fix: --preload and --require flags only available in runtime subcommands
(#31614)
fix: adjust deno_cache version (#31553)
fix: source map file names to non-existent paths (#31564)

`v2.6.0`

Compare Source

`v2.5.6`

Compare Source

Revert "chore: update urlpattern (#31054)" (#31117)
fix(ext/node): implement StatementSync#columns() method (#31119)
fix(windows): re-allow spawning bat and cmd files (#31118)
fix(windows): strip periods and trailing slashes when normalizing paths
(#31131)

`v2.5.5`

Compare Source

feat(unstable): ability to exclude packages from minimum dependency age
constraint (#31031)
feat(unstable): ability to only install dependencies older than a certain date
(#30752)
feat(unstable): ability to specify minimum dependency age in deno.json file
(#31007)
feat(unstable): add deno audit subcommand (#30966)
feat(unstable): add process id to permission broker messages (#31050)
feat(unstable): dynamic command-line completions for deno task (#30670)
feat(unstable): typescript-go integration for deno check (#30920)
fix(audit): handle 'review' actions (#31100)
fix(check): error when type checking after deduping packages (#31049)
fix(check): fall back to copying tsgo binary if rename fails (#31074)
fix(check): respect "compilerOptions.skipLibCheck" for graph errors (#30989)
fix(check): support isolatedDeclarations (#31061)
fix(check): support text and bytes imports with --unstable-tsgo (#31084)
fix(cli/args): empty permissions in config should not require -P (#31063)
fix(coverage): don't process coverage for blob: urls (#31035)
fix(docs): Deno.args example doesn't work (#30969)
fix(docs): documented allowed subdomain should be gist and not user for
githubusercontent.com (#30913)
fix(ext/http): display localhost url once on windows (#31088)
fix(ext/http): make websocket response headers mutable (#31000)
fix(ext/node): dns.resolve6 compatibility (#30974)
fix(ext/node): fs.read/fs.readSync and fs.write/fs.writeSync compatibility
(#31013)
fix(ext/node): path.matchesGlob compatibility (#30976)
fix(ext/node): checking Symbol in env should not ask for permission
(#30965)
fix(ext/node): cpus() should not error when there's no cpu info (#31097)
fix(ext/node): false deprecation warning on crypto.createHmac (#31025)
fix(ext/node): handle empty writes in chunked HTTP requests (#31066)
fix(ext/node): handle multiple calls in inspector.Session.post() (#31067)
fix(ext/node): impl sqlite 'backup' capability (#29842)
fix(ext/node): implement FileHandle.readLines() (#31107)
fix(ext/node): inconsistent error message thrown by AssertionError (#31089)
fix(ext/node): make kReinitializeHandle work for TLS wrap (#31079)
fix(ext/node): process.moduleLoadList as undefined (#31022)
fix(ext/node): support option object parameter on fs.write and
fs.writeSync (#30999)
fix(ext/web): fix promise chain leak of ReadableStream (#30871)
fix(fmt/json): support hexadecimal numbers, plus sign on numbers, and words
with underscores (#31057)
fix(kv): do not error when creating kv db with relative path and -A (#31021)
fix(lockfile): purged package reqs should be removed from the jsr deps when
changing workspace config (#30998)
fix(lsp): add support for source.organizeImports (#31016)
fix(lsp): refresh configuration when tsconfig.json is changed (#30993)
fix(napi): Fix misused napi_callback_info in CallbackInfo (#30983)
fix(npm): add a deduplication pass and reduce lockfile diffs (#30973)
fix(npm): handle deno run/install of npm package with only directories.bin
(#30919)
fix(npm): occasional panic when upgrading npm package constraints (#31006)
fix(npm): regression resolving npm bin for default when only one entry
(#31055)
fix(process): case insenstive check for disallowing .bat and .cmd (#30967)
fix(rt): prevent Event to be overwritten on bootstrap (#30971)
fix(unstable): read npm lazy caching from unstable config in deno.json as well
(#31026)
fix: Deno.serve correctly passes tcpBacklog option (#30748)
fix: debug log for package.json being found was incorrect (#31062)
fix: regex pattern syntax in config-file.v1.json (#31038)
fix: show referrer range in deno_core loader errors (#30981)

`v2.5.4`

Compare Source

fix(cache): don't try to set up node_modules with node_modules_dir manual in
deno cache (#30957)
fix(cli): jsx pragma-related swc panics (#30935)
fix(ext/node): fs.cp and fs.cpSync compatibility (#30502)
fix(ext/node): fs.stat and fs.statSync compatibility (#30866)
fix(ext/node): avoid stack overflow in node:zlib's gunzip (#30865)
fix(ext/node): fs.realpath buffer encoding (#30885)
fix(ext/node): inspect X509Certificate class (#30882)
fix(ext/node): map BadResource error to the corresponding node error (#30926)
fix(ext/node): omit smi from zlib.crc32 op function (#30907)
fix(tunnel): prevent auth subprocess loop with tasks (#30896)
fix(tunnel): unhide --tunnel flag (#30940)
fix(update): preserve tilde in version range (#30946)
fix(webgpu): crash after isolate disposal (#30909)
fix: use ArrayIsArray primordial (#30927)

`v2.5.3`

Compare Source

feat(unstable): add permission broker (#30826)
feat(unstable): permission broker - support custom error messages (#30902)
feat(unstable): support named pipes on Windows for the permission broker
(#30894)
fix(check): do not error for unsupported URL schemes (#30904)
fix(clean): do not panic on failure to get local cache path in clean --except
(#30895)
fix(cli/util): terminate watch file with sigint (#30635)
fix(dts): update some GPU types to not cause errors in upcoming DOM type
declarations (#30893)
fix(ext/node): allow ATTACH DATABASE with --allow-all (#30763)
fix(ext/node): setTimeout promisified to handle abort signal (#30855)
fix(fs): improve file stat checks (#30876)
fix(fs): improve file utime checks (#30872)
fix(npm): do not error when packument version contains both bundleDependencies
and bundledDependencies (#30875)
fix(unstable/tunnel): rename --connected to --tunnel and better handle
DENO_DEPLOY_TOKEN env variable (#30786)
fix: add support for passing v8 flags on deno check (#30868)
fix: do not purge lockfile when linking and the linked package's reqs have not
changed (#30877)
fix: show --permission-set help only once (#30844)

`v2.5.2`

Compare Source

feat(lsp): describe/it test editor support (#30802)
fix(bundle): reload html entrypoints with --watch (#30790)
fix(check): support "compilerOptions.paths" (#30766)
fix(cli/bundle): respect --frozen flag deno bundle command (#30825)
fix(coverage): collect coverage data for workers (#30807)
fix(dts): add Uint8Array base64/hex methods (#30686)
fix(dts): update stream type declarations to use Promise<void> (#30820)
fix(ext/node): fs.readFile, fs.readFileSync assert encoding (#30830)
fix(ext/node): fs.statfsSync and fs.statfs compatibility (#30662)
fix(ext/node): accept ArrayBuffer on crypto.timingSafeEqual (#30773)
fix(ext/node): crypto Cipheriv and Decipheriv base64 encoding (#30806)
fix(ext/ws): send User-Agent header in WS handshake (#30758)
fix(fetch): handle proxied urls correctly and add test (#30794)
fix(lint): skip module graph validation (#30815)
fix(tunnel): make auth more robust (#30731)
fix: add top level permissions key to config file schema (#30765)
fix: reject running .bat and .cmd directly on windows (#30818)
fix: restore Windows debug info (#30778)
perf(lsp): don't watch node_modules files (#30768)
perf: stack allocated v8 scopes (#30827)
perf: support negative caching of package.json (#30792)

`v2.5.1`

Compare Source

feat(unstable): support Deno.HttpClient in WebSocket (#30692)
feat(unstable): tcp proxy for Deno.HttpClient (#30700)
fix(bundle): set the type of the outputFile in the deno bundle to
Uint8Array<ArrayBuffer> (#30716)
fix(check): filter resolution errors for bare ambient modules (#30690)
fix(ext/fetch): mark unix and vsock proxy conns as proxy (#30699)
fix(ext/node): handle falsy values enumerability in process.env (#30708)
fix(ext/node): implement fchmod on windows (#30704)
fix(ext/node): make fs.glob accepts URL cwd (#30705)
fix(ext/node): set default callback for fs.close (#30720)
fix(ext/node): validate fs.close callback function (#30679)
fix(ext/node): validate fs.read on empty buffer (#30706)
fix(ext/node): validate readlink arguments (#30691)
fix(ffi): check that fast calls are taken (#30658)
fix(http): duplicate listener should inherit onError and signal (#30680)
fix(init): regression where deno init --npm stopped working on mac (#30730)
fix(lsp): don't write lockfile during cache-on-save (#30733)
fix(node): reduce chance of module not found error due to missing copy package
(#30744)
fix(permissions): point to correct config file in error message in workspace
containing permissions at root (#30742)
fix: Add info/hint for unstable Deno.bundle API (#30682)

`v2.5.0`

Compare Source

`v2.4.4`

Compare Source

feat(unstable): add json repl (#30307)
feat(unstable): allow setting headers on EventSource (#30278)
feat(unstable): allow specifying default path and path prefix ([#30320](https://redirect.github

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

greptile-apps · 2026-01-12T21:20:28Z

Greptile Overview

Greptile Summary

This PR updates the Deno runtime dependency from v1.x to v2.x in the runtime compatibility testing workflow. The change is part of a dependency update managed by Renovate.

What Changed

Updated deno-version from v1.x to 2.x in .github/workflows/runtime-tests.yml
This affects the runtime compatibility test suite that validates the WorkOS SDK works across multiple JavaScript runtimes (Node, Deno, Bun, Cloudflare Workers)

Impact Analysis

The WorkOS SDK uses minimal Deno APIs that are stable across versions:

Deno.env.get() for environment variable access
Deno.version.deno for runtime version detection
Standard ES module imports

All of these APIs remain unchanged in Deno v2, making this upgrade low-risk. The compatibility test simply imports the SDK and verifies the WorkOS class is accessible, which doesn't rely on any deprecated or changed Deno functionality.

Deno v2 Breaking Changes Review

According to the release notes, Deno v2.0.0 includes:

V8 14.0.0 upgrade
TypeScript 5.9.2
Node.js timer defaults
Various CLI flag changes

None of these breaking changes affect the simple import test performed in this workflow. The SDK doesn't use Deno-specific CLI flags, experimental APIs, or features that were removed in v2.

Minor Issue

There's a formatting inconsistency: the version changed from v1.x (with 'v' prefix) to 2.x (without 'v' prefix). While the setup-deno action likely handles both, using v2.x would be more consistent.

Confidence Score: 4/5

This PR is safe to merge with minimal risk - it's a straightforward runtime version upgrade with no breaking API changes affecting the codebase.
Score of 4 reflects that this is a low-risk dependency update. The WorkOS SDK uses only stable Deno APIs (Deno.env.get, Deno.version.deno, and standard imports) that are unchanged in Deno v2. The compatibility test is simple and doesn't rely on any deprecated features. The only minor concern is the version format inconsistency (v1.x → 2.x instead of v2.x), which is a style issue rather than a functional problem. The setup-deno action is well-maintained and handles version specifications robustly. Not a 5 due to the version format inconsistency that could theoretically cause issues with strict version parsing.
No files require special attention - this is a single-line version update in a workflow configuration file.

Important Files Changed

File Analysis

Filename	Score	Overview
.github/workflows/runtime-tests.yml	4/5	Updates Deno version from v1.x to 2.x for runtime compatibility testing. Minor inconsistency in version prefix format (v1.x → 2.x instead of v2.x).

Sequence Diagram

sequenceDiagram
    participant GHA as GitHub Actions
    participant Setup as setup-deno@v2
    participant Deno as Deno Runtime
    participant Test as ecosystem-check.ts
    participant SDK as WorkOS SDK
    
    GHA->>Setup: Install Deno with version "2.x"
    Setup->>Deno: Download and install Deno 2.x
    Deno-->>Setup: Installation complete
    Setup-->>GHA: Deno ready
    
    GHA->>GHA: npm install
    GHA->>GHA: npm run build
    
    GHA->>Test: npm run check:runtimes
    Test->>Deno: deno eval 'import SDK'
    Deno->>SDK: Import lib/index.js
    SDK->>Deno: Load module with Web Crypto APIs
    Deno-->>SDK: APIs available
    SDK-->>Test: Return WorkOS class
    Test->>Test: Verify WorkOS.name exists
    Test-->>GHA: Test passed ✅

greptile-apps

_{1 file reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

greptile-apps · 2026-01-12T21:20:32Z

.github/workflows/runtime-tests.yml

      - uses: denoland/setup-deno@v2
        with:
-          deno-version: v1.x
+          deno-version: 2.x


The version specification format is inconsistent with the previous version. The old version used v1.x (with 'v' prefix), but this changes to 2.x (without 'v' prefix).

While the denoland/setup-deno action likely handles both formats, it would be more consistent to use v2.x to match the previous format. This ensures compatibility if the action's version parsing logic is strict about format consistency.

Suggested change

deno-version: 2.x

deno-version: v2.x

_{Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!}

Prompt To Fix With AI

This is a comment left during a code review. Path: .github/workflows/runtime-tests.yml Line: 15:15 Comment: The version specification format is inconsistent with the previous version. The old version used `v1.x` (with 'v' prefix), but this changes to `2.x` (without 'v' prefix). While the `denoland/setup-deno` action likely handles both formats, it would be more consistent to use `v2.x` to match the previous format. This ensures compatibility if the action's version parsing logic is strict about format consistency. ```suggestion deno-version: v2.x ``` <sub>Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!</sub> How can I resolve this? If you propose a fix, please make it concise.

chore(deps): update dependency deno to v2

9782df0

renovate bot requested a review from a team as a code owner January 12, 2026 21:16

renovate bot requested a review from gcarvelli January 12, 2026 21:16

greptile-apps bot reviewed Jan 12, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency deno to v2 #1451

chore(deps): update dependency deno to v2 #1451

renovate bot commented Jan 12, 2026 •

edited

Loading

Uh oh!

greptile-apps bot commented Jan 12, 2026

Uh oh!

greptile-apps bot left a comment

Uh oh!

greptile-apps bot Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

chore(deps): update dependency deno to v2 #1451

Are you sure you want to change the base?

chore(deps): update dependency deno to v2 #1451

Conversation

renovate bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

greptile-apps bot commented Jan 12, 2026

Greptile Overview

Greptile Summary

What Changed

Impact Analysis

Deno v2 Breaking Changes Review

Minor Issue

Confidence Score: 4/5

Important Files Changed

Sequence Diagram

Uh oh!

greptile-apps bot left a comment

Choose a reason for hiding this comment

Uh oh!

greptile-apps bot Jan 12, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

1 participant

renovate bot commented Jan 12, 2026 •

edited

Loading