Add allowed protocols for URL values

[pullfrog]

Summary

• add allowedProtocols array support to @type=url
• validate protocol lists consistently in Varlock and VS Code diagnostics
• recognize non-HTTP schemes and avoid prepending HTTPS when a protocol already exists
• document database URL usage and expose the option in editor completions

Omitting allowedProtocols continues to accept any protocol supported by the URL parser, preserving existing runtime behavior.

Closes #1040

  ^{｜ View workflow run ｜ via Pullfrog ｜ Using azure/gpt-5.6-sol ｜ 𝕏}

[github-actions]

The changes in this PR will be included in the next version bump.

Minor releases

• @varlock/native-helper-darwin 1.17.1 → 1.18.0
• @varlock/native-helper-linux-arm64 1.17.1 → 1.18.0
• @varlock/native-helper-linux-x64 1.17.1 → 1.18.0
• @varlock/native-helper-win32-x64 1.17.1 → 1.18.0
• env-spec-language 0.3.3 → 0.4.0
• varlock 1.17.1 → 1.18.0

Bump files in this PR

• url-allowed-protocols.md (view diff) (edit)

Click here if you want to add another bump file to this PR

---

This comment is maintained by bumpy.

[github-actions]

📦 Bundle size

⚠️ grows the bundle by 1.8 KB (+0.0%)

Metric	main	This PR	Δ
Total dist	4094.0 KB	4095.8 KB	+1.8 KB (+0.0%)
JS	1586.1 KB	1586.7 KB	+0.6 KB (+0.0%)
Sourcemaps	2422.8 KB	2424.0 KB	+1.2 KB (+0.1%)
Type defs	85.1 KB	85.1 KB	—
Other	0.0 KB	0.0 KB	—

dist/ only; native binaries are versioned separately and not counted here.

[pkg-pr-new]

Open in StackBlitz

varlock

npm i https://pkg.pr.new/varlock@1043

@varlock/native-helper-darwin

npm i https://pkg.pr.new/@varlock/native-helper-darwin@1043

@varlock/native-helper-linux-arm64

npm i https://pkg.pr.new/@varlock/native-helper-linux-arm64@1043

@varlock/native-helper-linux-x64

npm i https://pkg.pr.new/@varlock/native-helper-linux-x64@1043

@varlock/native-helper-win32-x64

npm i https://pkg.pr.new/@varlock/native-helper-win32-x64@1043

commit: f4b63fd

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	varlock-website	f4b63fd	Commit Preview URL Branch Preview URL	Aug 27 2026, 07:17 PM