chore(deps): update all non-major dependencies#16
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
earthapp-cloud | b39fae0 | May 23 2026, 02:39 AM |
7f3be30 to
a0a8805
Compare
58e00a1 to
310e44f
Compare
310e44f to
b39fae0
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.14.9→^0.16.04.1.2→4.1.7Release Notes
cloudflare/workers-sdk (@cloudflare/vitest-pool-workers)
v0.16.9Compare Source
Patch Changes
#13933
90092c0Thanks @petebacondarwin! - Derive bundler externals frompackage.jsonand shrink the published bundleThe bundler's
externallist was previously hand-maintained and out of sync withpackage.json—undiciandsemverwere both listed as external despite being onlydevDependencies. The publisheddist/pool/index.mjsconsequently contained a top-levelimport { fetch } from "undici"that was only resolvable because pnpm happened to hoistundicifrom other packages' devDependencies during local development.The bundler now derives its
externallist fromdependencies+peerDependenciesinpackage.json, making it impossible for adevDependencyto silently end up externalized.Combined with the new
"sideEffects": falsedeclaration in@cloudflare/workers-utils, the unusedcloudflared/tunnelexports (and their transitiveundiciimport) are now tree-shaken out of the pool entirely.dist/pool/index.mjsno longer referencesundiciat all, and shrinks from ~489 KB to ~125 KB.Updated dependencies [
52e9082,0733688,fc1f7b9,30657e1,8c569c6,f598eac,3a1fbed]:v0.16.8Compare Source
Patch Changes
#13919
c7eab7fThanks @petebacondarwin! - Fix the outboundCF-Workerheader reflecting the route pattern hostname instead of the parent zone, and falling back to<worker-name>.example.comundervite dev,vitest-pool-workers, andgetPlatformProxyTwo related issues affected the
CF-Workerheader on outbound subrequests in local development:@cloudflare/vite-plugin,@cloudflare/vitest-pool-workers, andgetPlatformProxy, the header fell back to<worker-name>.example.comeven whenrouteswere configured, becauseunstable_getMiniflareWorkerOptionsand the equivalentgetPlatformProxyworker-options path did not propagate azonevalue to Miniflare. This broke local development against services that reject unknownCF-Workerhosts (for example, Apple WeatherKit returns403 Forbidden).wrangler dev --local, when a route used thezone_namefield (for example{ pattern: "foo.example.com/*", zone_name: "example.com" }), the header was set to the pattern's hostname (foo.example.com) rather than the zone name (example.com). Production setsCF-Workerto the zone name that owns the Worker, so this was inconsistent with deployed behaviour.Both bugs are fixed: the new
unstable_getMiniflareWorkerOptions/getPlatformProxypath now propagates azonederived from the first configured route, and all four local-dev paths now prefer a route's explicitzone_nameover the pattern hostname when computing that zone. Whenzone_nameisn't set, the existing best-effort behaviour is preserved — forwrangler devthis meansdev.hostis still honoured as a local override and the pattern hostname is used as a final fallback. Resolving the parent zone forzone_id-only,custom_domain, or plain-string routes would require an API lookup, so locally we still approximate it with the pattern hostname.Note:
dev.hostis intentionally not consulted by theunstable_getMiniflareWorkerOptions/getPlatformProxypaths — thedevconfig block is specific towrangler dev.Updated dependencies [
fa1f61f,2679e05,7e40d98,adc9221,735852d,d803737,c7eab7f,e04e180,59cd880,62abf97,e8c2031,e349fe0,da0fa8c,a5c9365]:v0.16.7Compare Source
Patch Changes
#13961
2cb658cThanks @threepointone! - Preserve same-stub RPC call order for wrapped Worker and Durable Object entrypointsPreviously, dynamically wrapped RPC methods could resolve and invoke out of order when many calls were fired without awaiting each individual call. This now queues method resolution per wrapper instance so calls begin in the order they were received.
Updated dependencies [
aac7ca0,b25dc0d,ae047ee,a4f22bc,f78d435,aac7ca0,c5c9e20,ebf4b24,b27eb18,895baf5,7bcdf45]:v0.16.6Compare Source
Patch Changes
#13833
0e4a830Thanks @thegeekasteroid! - Filter benigndisconnected: WebSocket peer disconnectedworkerd stderr noise during test runs.The
ignoreMessagesarray in the pool already filters several benign workerd disconnect messages (e.g.disconnected: WebSocket was aborted). On recent workerd versions, tests that exercise the WebSocket API also surfacedisconnected: WebSocket peer disconnectedwarnings during normal teardown. These are not user-actionable and obscure real test failures. Add the message to the existing filter alongside the otherdisconnected:entries.Updated dependencies [
19ed49a,3ff0a50,bf688f7,2e72c83,802eaf4,506aa02,8f5cdb1,be8a98c]:v0.16.5Compare Source
Patch Changes
d4794a8,58b4403,4352f87,a9e6741,da664d5,bdc398c,f781a2b,1420f10,c8be316]:v0.16.4Compare Source
Patch Changes
4e44ce6,b0cee1d,d878e13,971dfe3,971dfe3,5d936c5]:v0.16.3Compare Source
Patch Changes
8852b0c,248bc08,e414e56]:v0.16.2Compare Source
Patch Changes
#11094
9367435Thanks @bbridges! - Allow.wasmfiles to be imported as.wasm?module.Updated dependencies [
dd3baf3,5cf6f81]:v0.16.1Compare Source
Patch Changes
2284f20,332f527,039bada,18e833d,b6cea17,1a54ac5,53e846a,f3fed88,beff19c,af42fed,1a54ac5]:v0.16.0Compare Source
Minor Changes
#13810
2b8c0ccThanks @jamesopstad! - Stabilize thesecretsconfiguration propertyThe
secretsproperty in the Wrangler config file is no longer experimental and will no longer emit an experimental warning when used. Required secrets are validated during local development and deploy, and used as the source of truth for type generation.{ "secrets": { "required": ["API_KEY", "DB_PASSWORD"] } }Patch Changes
#12974
1127114Thanks @ask-bonk! - Rewrite self-referencing service bindings tokCurrentWorkerbefore renaming the runner workerWhen a wrangler config has a service binding to itself (e.g.
services: [{ binding: "SELF", service: "my-worker" }]where the worker is named"my-worker"), the binding's literal name pointed to a worker that no longer existed once vitest-pool-workers renamed the runner tovitest-pool-workers-runner-<project>. The self-reference is now rewritten to the miniflarekCurrentWorkersymbol, which resolves at request time relative to the referer worker and so survives the rename. Previously this rewrite lived in wrangler'sunstable_getMiniflareWorkerOptions, but it's only needed for vitest-pool-workers' rename — other consumers (getPlatformProxy,@cloudflare/vite-plugin) preserve the original worker name and so don't need it.Updated dependencies [
e07825a,58899d8,3020214,0099265,25f5ef2,bb27219,194d75e,12fb5db,18b9d5b,9f532f7,1127114,3ceadef,2b8c0cc,1a5cc86]:v0.15.2Compare Source
Patch Changes
22e1a61,00523c8,b5ac54b,e653edf,e1eff94,1c4d850,6d28037,9a1f014,e539008,0bf64a7,0827815,b04eedf,6457fb3,c07d0cb,e539008]:v0.15.1Compare Source
Patch Changes
ea943ff,21b87b2,62e9f2a,9eb9e69,2dc6175,0a5db08,033d6ec,ae8eae3,f2e2241,4f6ed93,ed2f4ec,ef24ff2,92bb8a5,6d27479,f2e2241,118027d,fcc491a,e6c437a,e867ac2]:v0.15.0Compare Source
Minor Changes
#13623
b156b2eThanks @penalosa! - Addreset()andabortAllDurableObjects()helpers tocloudflare:testThe
reset()helper deletes all data from attached bindings, and resets all Durable Object instances. This is useful for resetting state between test blocks.The
abortAllDurableObjects()helper resets all Durable Object instances without deleting persisted data.Patch Changes
5a2968a,5680287,3494842,7d728fb,df9319d,d5e3c57,3ceeec3,7567ef7,2831b54,7fc50c1,377715d]:vitest-dev/vitest (@vitest/coverage-istanbul)
v4.1.7Compare Source
🐞 Bug Fixes
View changes on GitHub
v4.1.6Compare Source
🐞 Bug Fixes
ToMatchScreenshotResolvePath- by @macarie and @sheremet-va in #10138 (31882)sequence.concurrent: truewith top-leveltest(..., { concurrent: false })+ depreactesequentialtest API and options - by @hi-ogawa, Codex and @sheremet-va in #10196 (2847d)🏎 Performance
View changes on GitHub
v4.1.5Compare Source
🚀 Experimental Features
instrumenteroption - by @BartWaardenburg and @AriPerkkio in #10119 (0e0ff)🐞 Bug Fixes
vi.defineHelpercalled as object method - by @hi-ogawa in #10163 (122c2)agentreporter tominimal- by @sheremet-va in #10157 (663b9)View changes on GitHub
v4.1.4Compare Source
🚀 Experimental Features
skipFullif agent detected - by @hi-ogawa in #10018 (53757)assertionas a public field - by @sheremet-va in #10095 (a120e)🐞 Bug Fixes
expect(..., message)consistent as error message prefix - by @hi-ogawa and Codex in #10068 (a1b5f)View changes on GitHub
v4.1.3Compare Source
🚀 Experimental Features
experimental.preParseflag - by @sheremet-va in #10070 (78273)browser.locators.exactoption - by @sheremet-va in #10013 (48799)TestAttachment.bodyEncoding- by @hi-ogawa in #9969 (89ca0)🐞 Bug Fixes
expect.pollinterval - by @hi-ogawa and Claude Sonnet 4.6 in #10022 (3f5bf)@vitest/coverage-v8and@vitest/coverage-istanbulas optional dependency - by @alan-agius4 in #10025 (146d4)defineHelperfor webkit async stack trace + update playwright 1.59.0 - by @hi-ogawa in #10036 (5a5fa)JestExtendError.contextfrom verbose error reporting - by @hi-ogawa in #9983 (66751)vitest- by @hi-ogawa and Codex in #10042 (691d3)View changes on GitHub
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.