chore(deps): update all non-major dependencies #727
Merged
+328
−347
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.20260103.0→^4.20260115.0^0.3.14→^0.3.15^25.0.3→^25.0.8^1.36.0→^1.36.1^3.3.5→^3.3.6^4.0.16→^4.0.17^2.0.1-rc.7→^2.0.1-rc.8^5.9.0→^5.9.110.27.0→10.28.0^3.7.4→^3.8.0^4.0.16→^4.0.17^4.54.0→^4.59.2Release Notes
cloudflare/workerd (@cloudflare/workers-types)
v4.20260115.0Compare Source
v4.20260114.0Compare Source
v4.20260113.0Compare Source
v4.20260111.0Compare Source
v4.20260109.0Compare Source
v4.20260108.0Compare Source
v4.20260107.1Compare Source
electric-sql/pglite (@electric-sql/pglite)
v0.3.15Patch Changes
45bff97: added pgcrypto extension5ec474f: Added pg_hashids extension.upstash/upstash-redis (@upstash/redis)
v1.36.1Compare Source
What's Changed
Full Changelog: upstash/redis-js@v1.36.0...v1.36.1
vercel/vercel (@vercel/functions)
v3.3.6Compare Source
Patch Changes
TimeoutNegativeWarningin Node.js v24 when process runs longer than 15 minutes by ensuring minimum wait time of 100ms (#14491)vitest-dev/vitest (@vitest/coverage-v8)
v4.0.17Compare Source
🚀 Features
🐞 Bug Fixes
addEventHandler#9371 - by @ThibautMarechal in #9372 and #9371 (40841)process.envandimport.meta.envdefines in inline project - by @hi-ogawa in #9239 (b70c9)ErrorEvent.messagewhen unhandledErrorEvent.erroris null - by @hi-ogawa in #9322 (5d84e)fileParallelismon an instance - by @sheremet-va in #9328 (15006)istanbul-lib-source-mapsusage - by @AriPerkkio in #9344 (b0940)View changes on GitHub
h3js/h3 (h3)
v2.0.1-rc.8Compare Source
compare changes
🩹 Fixes
💅 Refactors
Error.captureStackTrace(652e883)🏡 Chore
❤️ Contributors
luin/ioredis (ioredis)
v5.9.1Compare Source
Bug Fixes
pnpm/pnpm (pnpm)
v10.28.0Compare Source
prettier/prettier (prettier)
v3.8.0Compare Source
diff
🔗 Release note
cloudflare/workers-sdk (wrangler)
v4.59.2Patch Changes
#11908
e78186dThanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#11880
fe4faa3Thanks @penalosa! - Show helpful messages for errors outside of Wrangler's control. This prevents unnecessary Sentry reports.Errors now handled with user-friendly messages:
UND_ERR_CONNECT_TIMEOUT) - typically due to slow networks or connectivity issuesEPERM,EACCES) - caused by insufficient permissions, locked files, or antivirus softwareENOTFOUND) - caused by network connectivity issues or DNS configuration problems#11882
695b043Thanks @GregBrimble! - Improve the error message forwrangler secret putwhen using Worker versions or gradual deployments.wrangler versions secret putshould be used instead, or ensure to deploy the latest version before usingwrangler secret put.wrangler secret putalone will add the new secret to the latest version (possibly undeployed) and immediately deploy that which is usually not intended.Updated dependencies [
e78186d,fec8f5b,d39777f,4714ca1,c17e971]:v4.59.1Compare Source
Patch Changes
#11889
99b1f32Thanks @emily-shen! - Use argument array when executing git commands withwrangler pages deployPass user provided values from
--commit-hashsafely to underlying git command.v4.59.0Compare Source
Minor Changes
#11852
ad65efaThanks @NuroDev! - Add--checkflag towrangler typescommandThe new
--checkflag allows you to verify that your generated types file is up-to-date without regenerating it. This is useful for CI/CD pipelines, pre-commit hooks, or any scenario where you want to ensure types have been committed after configuration changes.When types are up-to-date, the command exits with code 0:
When types are out-of-date, the command exits with code 1:
$ wrangler types --check ✘ [ERROR] Types at worker-configuration.d.ts are out of date. Run `wrangler types` to regenerate.You can also use it with a custom output path:
#11529
43d5363Thanks @matthewdavidrodgers! - Add ability to enable higher asset count limits for Pages deploymentsWrangler can now read asset count limits from JWT claims during Pages deployments,
allowing users to be enabled for higher limits (up to 100,000 assets) on a per-account
basis. The default limit remains at 20,000 assets.
#11755
0f8d69dThanks @nikitassharma! - Users can now specifyconstraints.tiersfor their container applications.tieris deprecated in favor oftiers.If left unset, we will default to
tiers: [1, 2].Note that
constraintsis an experimental feature.Patch Changes
#11820
b0e54b2Thanks @MattieTK! - Add AI agent detection to analytics eventsWrangler now detects when commands are executed by AI coding agents (such as Claude Code, Cursor, GitHub Copilot, etc.) using the
am-i-vibinglibrary. This information is included as anagentproperty in all analytics events, helping Cloudflare understand how developers interact with Wrangler through AI assistants.The
agentproperty will contain the agent ID (e.g.,"claude-code","cursor-agent") when detected, ornullwhen running outside an agentic environment.#11494
ed60c4fThanks @jalmonter! - Fix scheduled trigger warning showingundefinedportWhen running
wrangler devwith a worker that has cron triggers, the warning message displayed an invalid URL likecurl "http://localhost:undefined/cdn-cgi/handler/scheduled"because the port wasn't yet determined when the warning was logged.Moved the warning to after the proxy server is fully ready, where the actual public URL and port are known.
#11831
faa5753Thanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#11844
e574ef3Thanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#11872
b6148edThanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#11843
ab3859cThanks @dario-piotrowicz! - Update the Wrangler autoconfig logic to work with the latest version of WakuThe latest version of Waku (
0.12.5-1.0.0-alpha.1-0) requires asrc/waku.server.tsxfile instead of asrc/server-entry.tsxone, so the Wrangler autoconfig logic (the logic being run as part ofwrangler setupandwrangler deploy --x-autoconfigthat configures a project to be deployable on Cloudflare) has been updated accordingly.Also the way the worker needs to handle static assets has been updated as recommended from the Waku team.
#11848
0eb973dThanks @petebacondarwin! - Fix incorrect warning about multiple environments when using redirected configPreviously, when using a redirected config (via
configPathin another config file) that originated from a config with multiple environments, wrangler would incorrectly warn about missing environment specification. This fix ensures the warning is only shown when the actual config being used has multiple environments defined, not when the original config did.Updated dependencies [
ed60c4f,5c59217,faa5753,e574ef3,b6148ed,beb96af,5c59217,fc96e5f]:v4.58.0Compare Source
Minor Changes
#11728
7d63fa5Thanks @NuroDev! - Add command categories towranglerhelp menuThe help output now groups commands by product category (Account, Compute & AI, Storage & Databases, Networking & Security) to match the Cloudflare dashboard organization:
This improves discoverability by organizing the 20+ wrangler commands into logical groups.
Patch Changes
#11822
97e67b9Thanks @dependabot! - chore: update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
Updated dependencies [
97e67b9]:v4.57.0Compare Source
Minor Changes
#11682
b993d95Thanks @ascorbic! - Addwrangler auth tokencommand to retrieve your current authentication credentials.You can now retrieve your authentication token for use with other tools and scripts:
The command returns whichever authentication method is currently configured:
wrangler login(automatically refreshed if expired)CLOUDFLARE_API_TOKENenvironment variableUse
--jsonto get structured output including the token type, which also supports API key/email authentication:This is similar to
gh auth tokenin the GitHub CLI.#11702
f612b46Thanks @gpanders! - Add support for trusted_user_ca_keys in WranglerYou can now configure SSH trusted user CA keys for containers. Add the following to your wrangler.toml:
This allows you to specify CA public keys that can be used to verify SSH user certificates.
#11437
9e360f6Thanks @ichernetsky-cf! - Drop deprecated containersobservability.loggingfield#11616
fc95831Thanks @NuroDev! - Add type generation support towrangler devYou can now have your worker configuration types be automatically generated when the local Wrangler development server starts.
To use it you can either:
--typesflag when runningwrangler dev.dev.generate_typesboolean property.{ "$schema": "node_modules/wrangler/config-schema.json", "name": "example", "main": "src/index.ts", "compatibility_date": "2025-12-12", "dev": { "generate_types": true } }#11524
b0dbf1aThanks @penalosa! - Add hidden CLI flags towrangler setupfor suppressing outputTwo new hidden flags have been added to
wrangler setup:--no-completion-message: Suppresses the deployment details message after setup completes--no-install-wrangler: Skips Wrangler installation during project setup#11777
69979a3Thanks @MattieTK! - Add analytics properties to secret commands for better usage insightsSecret commands (
wrangler secret put,wrangler secret bulk, and their Pages/versions equivalents) now include additional analytics properties to help understand how secrets are being managed:secretOperation: Whether this is a "single" or "bulk" secret operationsecretSource: How the secret was provided ("interactive", "stdin", or "file")secretFormat: For bulk operations, the format used ("json" or "dotenv")hasEnvironment: Whether an environment was specifiedThese properties help improve the developer experience by understanding common usage patterns. No sensitive information (secret names, values, or counts) is tracked.
#11738
c54f8daThanks @jamesopstad! - Add defaultTextmodule rule for.sqlfiles.This enables importing
.sqlfiles directly in Wrangler and the Cloudflare Vite plugin without extra configuration.#11692
df1f9c9Thanks @dario-piotrowicz! - Support Waku in autoconfig#11549
d059f69Thanks @dario-piotrowicz! - Support Vike in autoconfigPatch Changes
#11683
02fbd22Thanks @ascorbic! - Display a warning when authentication errors occur and theaccount_idin your Wrangler configuration does not match any of your authenticated accounts. This helps identify configuration issues where you may have the wrong account ID set in yourwrangler.tomlorwrangler.jsoncfile.#11704
77078efThanks @dario-piotrowicz! - Fix autoconfig handling of Next.js apps with CJS config files and incompatible Next.js versionsPreviously,
wrangler setupandwrangler deploy --x-autoconfigwould fail when working with Next.js applications that use CommonJS config files (next.config.cjs) or have versions of Next.js that don't match the required peer dependencies. The autoconfig process now uses dynamic imports and forced installation to handle these scenarios gracefully.#11796
2510723Thanks @dario-piotrowicz! -wrangler deploydelegates toopennextjs-cloudflare deployonly when the--x-autoconfigflag is usedThe
wrangler deploycommand has been updated to delegate to theopennextjs-cloudflare deploycommand when run in an open-next project. Once this behavior had been introduced it caused a few issues. So it's been decided to enable it for the time being only when the--x-autoconfigflag is set (since this behavior, although generally valid, is only strictly necessary for thewrangler deploy's autoconfig flow).#11764
9f6dd71Thanks @terakoya76! - Fix R2 Data Catalog snapshot-expiration API field namesThe
wrangler r2 bucket catalog snapshot-expiration enablecommand was sending incorrect field namesto the Cloudflare API, resulting in a 422 Unprocessable Entity error. This fix updates the API request
body to use the correct field names:
olderThanDays->max_snapshot_age(as duration string, e.g., "30d")retainLast->min_snapshots_to_keepThe CLI options (
--older-than-daysand--retain-last) remain unchanged.#11651
d123ad0Thanks @dario-piotrowicz! - Surface a more helpful error message for TOML Date, Date-Time, and Time values invarsTOML parses unquoted date/time values like
DATE = 2024-01-01as objects. Previously this would cause an unhelpful error message further down the stack. Now wrangler surfaces a more helpful error message earlier, telling you to quote the value as a string, e.g.DATE = "2024-01-01".#11711
5121b23Thanks @southpolesteve! - Show an error when D1 migration commands are run without a configuration filePreviously, running
wrangler d1 migrations apply,wrangler d1 migrations list, orwrangler d1 migrations createin a directory without a Wrangler configuration file would silently exit with no feedback. Now these commands display a clear error message:"No configuration file found. Create a wrangler.jsonc file to define your D1 database."
#11710
82e7e90Thanks @dario-piotrowicz! - Fix arguments passed towrangler deploynot being forwarded toopennextjs-cloudflare deploywrangler deployrun in an open-next project delegates toopennextjs-cloudflare deploy, as part of this all the arguments passed towrangler deployneed be forwarded toopennextjs-cloudflare deploy, before the arguments would be lost, now they will be successfully forwarded (for examplewrangler deploy --keep-varswill callopennextjs-cloudflare deploy --keep-vars)#10750
4688f59Thanks @jacoblearned! - Notify user on local dev server reload.When running
wrangler dev, the local server suppresses Miniflare's reload messages to prevent duplicate log entries from the proxy and user workers. This update adds a reload complete message so users know their changes were applied, instead of only seeing "Reloading local server...".#11673
b827893Thanks @MattieTK! - Breaks out version numbers into sortable number types for analytics loggingUpdated dependencies [
65d1850,1615fce,b2769bf,554a4df,8eede3f,6a05b1c,62fd118,a7e9f80,eac5cf7]:v4.56.0Compare Source
Minor Changes
#11196
171cfd9Thanks @emily-shen! - For containers being created in a FedRAMP high environment, registry credentials are encrypted by the container platform.Update wrangler to correctly send a request to configure a registry for FedRAMP containers.
#11646
472cf72Thanks @vovacf201! - feat: add R2 Data Catalog snapshot expiration commandsAdds new commands to manage automatic snapshot expiration for R2 Data Catalog tables:
wrangler r2 bucket catalog snapshot-expiration enable- Enable automatic snapshot expirationwrangler r2 bucket catalog snapshot-expiration disable- Disable automatic snapshot expirationSnapshot expiration helps manage storage costs by automatically removing old table snapshots while keeping a minimum number of recent snapshots for recovery purposes.
Example usage:
Patch Changes
#11649
428ae9eThanks @ascorbic! - fix: respect TypeScript path aliases when resolving non-JS modules with module rulesWhen importing non-JavaScript files (like
.graphql,.txt, etc.) using TypeScript path aliases defined intsconfig.json, Wrangler's module-collection plugin now correctly resolves these imports. Previously, path aliases were only respected for JavaScript/TypeScript files, causing imports likeimport schema from '~lib/schema.graphql'to fail when using module rules.#11647
c0e249eThanks @dario-piotrowicz! - The auto-configuration logic present inwrangler setupandwrangler deploy --x-autoconfigcannot reliably handle Hono projects, so in these cases make sure to properly error saying that automatically configuring such projects is not supported.#11694
3853200Thanks @dario-piotrowicz! - fix: improve the open-next detection thatwrangler deployperforms to eliminate false positives for non open-next projectsUpdated dependencies [
ae1ad22,737c0f4]:v4.55.0Compare Source
Minor Changes
#11301
6c590a0Thanks @dario-piotrowicz! - Makewrangler deployrunopennextjs-cloudflare deploywhen executed in an open-next project#11045
12a63efThanks @edmundhung! - Add an internalunstable_printBindingsAPI for vite plugin integration#11590
7d8d4a6Thanks @pombosilva! - Add Workflows send-event to wrangler commands.#11301
6c590a0Thanks @dario-piotrowicz! - Support Next.js (via OpenNext) projects in autoconfigPatch Changes
#11615
ed42010Thanks @elithrar! - Add helpful warning when SSL certificate errors occur due to corporate proxies or VPNs intercepting HTTPS traffic. When errors like "self-signed certificate in certificate chain" are detected, wrangler now displays guidance about installing missing system roots from your corporate proxy vendor.#11641
6b28de1Thanks @petebacondarwin! - update command status text and formatting#11578
4201472Thanks @gpanders! - Fixup UX papercuts in containers SSH#11550
95d81e1Thanks @hiendv! - Fix "TypeError: Body is unusable: Body has already been read" when failing to exchange oauth code because of doubleresponse.text().Updated dependencies [
5d085fb,b75b710,1e9be12]:Configuration
📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.