Bump @tinacms/cli from 2.1.9 to 2.4.0

[dependabot]

Bumps @tinacms/cli from 2.1.9 to 2.4.0.

Release notes

Sourced from @​tinacms/cli's releases.

@​tinacms/cli@​2.4.0

Minor Changes

• #6790 542c781 Thanks @​Ben0189! - Fix native SQLite (and other native CJS adapters) crashing the ESM database build, plus surrounding cleanup work.

  The bug. Since Tina v3's December 2025 ESM migration, bundling tina/database.ts with esbuild — and writing the output to os.tmpdir() — left users wedged between two failure modes: bundling native modules like better-sqlite3 crashed with __filename is not defined, and externalizing them couldn't resolve node_modules from /tmp/. See #6675.

  What changed:

  • loadDatabaseFile and loadConfigFile now write esbuild output to <project>/tina/__generated__/.cache/<timestamp>/ instead of os.tmpdir(), so Node's resolver can walk up to the project's node_modules at runtime.

  • better-sqlite3 is externalized so Node loads it as CJS where __filename exists.

  • The build cache is swept on startup (clears residue from crashed prior runs), and each per-build subdir + its now-empty timestamp parent are removed after the dynamic-import resolves.

  • Read-only project mounts (Docker :ro volumes, AWS Lambda's /var/task, sandboxed CI runners) now fail with an actionable error explaining the cause and resolution, instead of a cryptic mid-build EACCES.

  • New defineConfig field: build.externalDependencies?: string[]. Users with custom native adapters outside the baseline can extend the externalize list from their config:

    // tina/config.ts
    export default defineConfig({
      build: {
        publicFolder: "public",
        outputFolder: "admin",
        externalDependencies: ["my-custom-native-adapter"],
      },
      // ...
    });

    Externalized packages must be installed in the project's node_modules so Node can resolve them at runtime.

  • tina init now adds tina/__generated__ to .gitignore for new projects (and existing projects without it).

Patch Changes

• #6841 c8b4ecb Thanks @​joshbermanssw! - Track tinacms build invocations + outcomes in PostHog. Replaces the metrics.tina.io event for this command. Opt-out via --noTelemetry is unchanged.

• #6950 8ac0776 Thanks @​RonGamzu! - Fix typos: rename misspelled notifiySubscribers to notifySubscribers and correct "Error occured" to "Error occurred" in CLI error messages

• #6864 638b47a Thanks @​kulesy! - Extract the database-bundle esbuild options out of loadDatabaseFile() into a pure buildDatabaseEsbuildConfig() helper, and add unit tests covering the externalize / output-path contracts.

  The helper guarantees:

  • external includes better-sqlite3 (and whatever else the caller passes)
  • packages: 'external' is never set (broad-externalize would break user-side named imports of CJS UMD packages like sqlite-level v1 and mongodb-level)
  • outfile is forwarded unchanged from the caller (caller is responsible for putting it inside the project tree via prepareCacheLocation())
  • The fixed esbuild options (bundle, platform: 'node', format: 'esm', createRequire banner, loader map) are stable

... (truncated)

Changelog

Sourced from @​tinacms/cli's changelog.

2.4.0

Minor Changes

• #6790 542c781 Thanks @​Ben0189! - Fix native SQLite (and other native CJS adapters) crashing the ESM database build, plus surrounding cleanup work.

  The bug. Since Tina v3's December 2025 ESM migration, bundling tina/database.ts with esbuild — and writing the output to os.tmpdir() — left users wedged between two failure modes: bundling native modules like better-sqlite3 crashed with __filename is not defined, and externalizing them couldn't resolve node_modules from /tmp/. See #6675.

  What changed:

  • loadDatabaseFile and loadConfigFile now write esbuild output to <project>/tina/__generated__/.cache/<timestamp>/ instead of os.tmpdir(), so Node's resolver can walk up to the project's node_modules at runtime.

  • better-sqlite3 is externalized so Node loads it as CJS where __filename exists.

  • The build cache is swept on startup (clears residue from crashed prior runs), and each per-build subdir + its now-empty timestamp parent are removed after the dynamic-import resolves.

  • Read-only project mounts (Docker :ro volumes, AWS Lambda's /var/task, sandboxed CI runners) now fail with an actionable error explaining the cause and resolution, instead of a cryptic mid-build EACCES.

  • New defineConfig field: build.externalDependencies?: string[]. Users with custom native adapters outside the baseline can extend the externalize list from their config:

    // tina/config.ts
    export default defineConfig({
      build: {
        publicFolder: "public",
        outputFolder: "admin",
        externalDependencies: ["my-custom-native-adapter"],
      },
      // ...
    });

    Externalized packages must be installed in the project's node_modules so Node can resolve them at runtime.

  • tina init now adds tina/__generated__ to .gitignore for new projects (and existing projects without it).

Patch Changes

• #6841 c8b4ecb Thanks @​joshbermanssw! - Track tinacms build invocations + outcomes in PostHog. Replaces the metrics.tina.io event for this command. Opt-out via --noTelemetry is unchanged.

• #6950 8ac0776 Thanks @​RonGamzu! - Fix typos: rename misspelled notifiySubscribers to notifySubscribers and correct "Error occured" to "Error occurred" in CLI error messages

• #6864 638b47a Thanks @​kulesy! - Extract the database-bundle esbuild options out of loadDatabaseFile() into a pure buildDatabaseEsbuildConfig() helper, and add unit tests covering the externalize / output-path contracts.

  The helper guarantees:

  • external includes better-sqlite3 (and whatever else the caller passes)
  • packages: 'external' is never set (broad-externalize would break user-side named imports of CJS UMD packages like sqlite-level v1 and mongodb-level)
  • outfile is forwarded unchanged from the caller (caller is responsible for putting it inside the project tree via prepareCacheLocation())
  • The fixed esbuild options (bundle, platform: 'node', format: 'esm', createRequire banner, loader map) are stable

  Closes the regression-test gap left by the architectural fix in #6790.

• Updated dependencies [0509095, 542c781, 33feeac, 8ac0776, d622ac5, a8c8f08, b9eaf61, cf73a11, 4757225]:

... (truncated)

Commits

• c3eb837 Version Packages (#6858)
• 8ac0776 Fix typos: notifiySubscribers → notifySubscribers, Error occured → occurred (...
• 638b47a test(@​tinacms/cli): lock down loadDatabaseFile esbuild contract (#6864)
• c8b4ecb 📊 Add PostHog telemetry to tinacms build (#6841)
• 542c781 Fix native SQLite crash in ESM database build (#6790)
• a405781 Version Packages (#6852)
• 629af08 Fixing up imports (#6850)
• 8cbed24 Version Packages (#6791)
• 4d0c37a feat(cli): tinacms dev & build support for localContentPath (no duplicate con...
• e537950 Version Packages (#6748)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ssw-fire-boot-camp-website	Ready	Preview, Comment	May 26, 2026 4:07pm

[dependabot]

Superseded by #117.