Skip to content

chore(deps-dev): bump portless from 0.13.0 to 0.15.8 - #280

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/portless-0.15.8
Open

chore(deps-dev): bump portless from 0.13.0 to 0.15.8#280
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/portless-0.15.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited by cubic-dev-ai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps portless from 0.13.0 to 0.15.8.

Release notes

Sourced from portless's releases.

v0.15.8

Bug Fixes

  • Terminal close cleanup: Closing the terminal now stops dev servers launched directly, through Turbo, or in multi-app mode instead of leaving them running on their ports. (#450)
  • Crashed session cleanup: portless run and portless prune now stop orphaned command process groups from crashed sessions, including descendants outside the route port, while checking process identity before signaling. (#451)
  • Windows command cleanup: Normal exits and force-kills now terminate the command tree, including Turbo and its dev servers, so orphaned processes no longer keep consuming shell input. (#438)

Contributors

v0.15.7

New Features

  • Turbo JSONC workspaces: Workspaces that only have turbo.jsonc now use Turbo orchestration, the same as turbo.json. (#422)
  • Unresolved hostname warning: After registering a route, portless asks the proxy to sync the hosts file and warns when the hostname still does not resolve. (#374)
  • WebMCP documentation site: The docs moved to Geistdocs and expose their pages to agents through WebMCP. (#427)

Bug Fixes

  • Hosts sync data loss: Manual hosts sync refuses to write when the hosts file cannot be read, verifies what it wrote, and removes stale managed entries when no routes remain. (#424)
  • Local CA certificate: The generated CA no longer carries a duplicate Basic Constraints extension on OpenSSL 1.1.1 and LibreSSL, which macOS and OpenSSL 3 rejected and left *.localhost untrusted. (#443)
  • Proxy crash on backend restart: The proxy no longer forwards client hop-by-hop headers, which left backend sockets open and crashed the proxy with ECONNRESET when a backend restarted. (#445)
  • Wildcard fallback order: With --wildcard, an unregistered subdomain now routes to the most specific registered parent instead of the first one stored. (#446)
  • Occupied app ports: Free app ports are checked on 127.0.0.1, ::1, 0.0.0.0 and ::, so portless no longer assigns a port another server already holds. (#447)
  • Version manager node: Child commands now use the node a version manager put first on PATH; portless's own node directory is only a fallback. (#448)

Contributors

v0.15.6

New Features

  • Agent-readable documentation: The documentation site now exposes clean Markdown pages and an llms.txt index so agents can discover and consume the docs directly. (#387)

Bug Fixes

... (truncated)

Changelog

Sourced from portless's changelog.

0.15.8

Bug Fixes

  • Terminal close cleanup: Closing the terminal now stops dev servers launched directly, through Turbo, or in multi-app mode instead of leaving them running on their ports. (#450)
  • Crashed session cleanup: portless run and portless prune now stop orphaned command process groups from crashed sessions, including descendants outside the route port, while checking process identity before signaling. (#451)
  • Windows command cleanup: Normal exits and force-kills now terminate the command tree, including Turbo and its dev servers, so orphaned processes no longer keep consuming shell input. (#438)

Contributors

0.15.7

New Features

  • Turbo JSONC workspaces: Workspaces that only have turbo.jsonc now use Turbo orchestration, the same as turbo.json. (#422)
  • Unresolved hostname warning: After registering a route, portless asks the proxy to sync the hosts file and warns when the hostname still does not resolve. (#374)
  • WebMCP documentation site: The docs moved to Geistdocs and expose their pages to agents through WebMCP. (#427)

Bug Fixes

  • Hosts sync data loss: Manual hosts sync refuses to write when the hosts file cannot be read, verifies what it wrote, and removes stale managed entries when no routes remain. (#424)
  • Local CA certificate: The generated CA no longer carries a duplicate Basic Constraints extension on OpenSSL 1.1.1 and LibreSSL, which macOS and OpenSSL 3 rejected and left *.localhost untrusted. (#443)
  • Proxy crash on backend restart: The proxy no longer forwards client hop-by-hop headers, which left backend sockets open and crashed the proxy with ECONNRESET when a backend restarted. (#445)
  • Wildcard fallback order: With --wildcard, an unregistered subdomain now routes to the most specific registered parent instead of the first one stored. (#446)
  • Occupied app ports: Free app ports are checked on 127.0.0.1, ::1, 0.0.0.0 and ::, so portless no longer assigns a port another server already holds. (#447)
  • Version manager node: Child commands now use the node a version manager put first on PATH; portless's own node directory is only a fallback. (#448)

Contributors

0.15.6

New Features

  • Agent-readable documentation: The documentation site now exposes clean Markdown pages and an llms.txt index so agents can discover and consume the docs directly. (#387)

... (truncated)

Commits
  • 2759854 Prepare v0.15.8 release (#471)
  • 674c2de fix(windows): kill the command tree when portless exits or is force-killed (#...
  • 7abf4df fix: stop orphaned dev servers from crashed sessions (#451)
  • fc67483 fix: stop the dev server when the terminal closes (#450)
  • e06a357 Prepare v0.15.7 release (#449)
  • 4cb73e8 fix(cli): only assign app ports that are free on every local address (#447)
  • 6767f99 fix(cli): put the user's PATH ahead of portless's own node directory (#448)
  • 71fd45f fix(proxy): pick the most specific parent route in wildcard fallback (#446)
  • 3761a7b fix(proxy): stop forwarding client hop-by-hop headers to backends (#445)
  • 208dceb fix(certs): stop generating a CA with duplicate Basic Constraints (#443)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Bumps portless from 0.13.0 to 0.15.8. This brings several stability fixes: dev servers are now cleaned up when the terminal closes or a session crashes, the proxy no longer crashes on backend restart, and wildcard routing picks the most specific parent route. Adds support for turbo.jsonc workspaces and a warning when the hosts file sync doesn't resolve the hostname.

Written for commit a3347ed. Summary will update on new commits.

View guided diff Turn on auto-fix

@dependabot
chore(deps-dev): bump portless from 0.13.0 to 0.15.8
a3347ed 
Bumps [portless](https://github.com/vercel-labs/portless) from 0.13.0 to 0.15.8.
- [Release notes](https://github.com/vercel-labs/portless/releases)
- [Changelog](https://github.com/vercel-labs/portless/blob/main/CHANGELOG.md)
- [Commits](vercel-labs/portless@v0.13.0...v0.15.8)

---
updated-dependencies:
- dependency-name: portless
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Hazzng as a code owner October 20, 2026 13:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@coderabbitai

coderabbitai Bot commented Oct 20, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 6f78a338-0225-4e53-a850-a49bfa5948fa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Hazzng Hazzng Awaiting requested review from Hazzng Hazzng is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants