lingo.dev@0.134.0

lingodotdev/lingo.devlingo.dev@0.134.0May 12, 2026by github-actions[bot]

AI Summary

Replaces the local Express server login flow with a polling-based device flow to fix compatibility with browsers that block mixed content.

Key Highlights

Fix for `lingo.dev login` on Safari
Removal of `express` and `cors` dependencies
Polling-based device flow implementation

Full Release Notes

### Minor Changes

-   [#2087](https://github.com/lingodotdev/lingo.dev/pull/2087) [`2787e33`](https://github.com/lingodotdev/lingo.dev/commit/2787e33702fdadbee739cfb8e97e1a518ed2dc6d) Thanks [@moygospadin](https://github.com/moygospadin)! - Fix `lingo.dev login` on Safari (and other browsers that block mixed-content requests to `localhost`).

    The login command now uses a polling-based device flow: the CLI registers a session with the API, opens the browser to confirm it, then polls until the user grants access. The previous flow opened a local Express server and asked the web page to `POST` the API key to `http://localhost:<port>`, which Safari blocks because the page is served over HTTPS. The web app continues to support the legacy `?port=` query parameter for one release cycle so CLI versions published before this change keep working in Chrome — Safari users need this upgrade either way. The `express` and `cors` dependencies are no longer needed and have been removed.