chore(deps): update wrangler and @cloudflare/vite-plugin - #123
renovate[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
base-elements | e4a8ec0 | Commit Preview URL Branch Preview URL |
Sep 26 2026, 07:30 AM |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
history | e4a8ec0 | Commit Preview URL Branch Preview URL |
Sep 26 2026, 07:30 AM |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
colorproven-userscript | e4a8ec0 | Commit Preview URL Branch Preview URL |
Sep 26 2026, 07:30 AM |
91f9361 to
ec38587
Compare
6c7c4fd to
c9119f2
Compare
c9119f2 to
e4a8ec0
Compare
This PR contains the following updates:
1.54.8→1.60.04.131.1→4.139.0Release Notes
cloudflare/workers-sdk (@cloudflare/vite-plugin)
v1.60.0Compare Source
Minor Changes
#15648
52c0e9fThanks @tpmmorris! - Advertise Local Explorer scheduled invocations to headless agentsThe Vite plugin's Local Explorer hint now documents how to invoke a Worker's scheduled handler and points agents to the OpenAPI schema for the complete request contract.
Patch Changes
52c0e9f,44f5295,be72815,479e1e8,940c692,52c0e9f,cd60c9c,15799d4,bdda4c3,fc3cbaa]:v1.59.0Compare Source
Minor Changes
#15817
6e77c53Thanks @jamesopstad! - Allow framework commands to produce Preview Build Output with the experimental configWhen
cf previews deployinvokes a framework build command, Preview intent is now preserved. Function-basedcloudflare.config.tsfiles receiveisPreview: true, and generated Build Output is marked as a Preview build.Patch Changes
#15806
8fade73Thanks @NuroDev! - Standardize Zod validation error outputFormat validation errors with Zod's built-in
prettifyError()helper so Miniflare, Wrangler, the Vite plugin, and the Vitest plugin show consistent messages and property paths.Updated dependencies [
a71237a,b03f960,8fade73,6e77c53]:v1.58.0Compare Source
Minor Changes
#15778
cd7508cThanks @jamesopstad! - Generate types during development and supported builds with Vite'sexperimental.newConfigoption or Wrangler's--experimental-new-configflag (and--experimental-cf-build-outputfor builds)When Wrangler's
--experimental-new-configflag or Vite'sexperimental.newConfigoption is enabled, inferred configuration and runtime declarations are now kept in.cloudflare/types/index.d.ts. Vite refreshes them during development and production builds. Wrangler refreshes them during development and when building with both--experimental-new-configand--experimental-cf-build-output. In the experimentalwrangler.config.tsformat, thetypesoption is now top-level because it applies to both commands.Patch Changes
#15765
1bdb96dThanks @th0m! - Prepare the required egress sidecar for local Containers without configured imagesWrangler dev and Vite dev/preview now pull the required sidecar for Durable Object-managed Containers that select their application image at start time. Previously, these Containers failed to start unless the sidecar image was already cached in Docker.
Updated dependencies [
1bdb96d,cd7508c,f5605f5]:v1.57.3Compare Source
Patch Changes
59267fc,6906bf0,354ebdb]:v1.57.2Compare Source
Patch Changes
ad20547,02c1d83,275184d,bd59eca]:v1.57.1Compare Source
Patch Changes
0ed4c54,703922d,14d946d]:v1.57.0Compare Source
Minor Changes
#15713
3c75cadThanks @jamesopstad! - Identify experimental Build Output resource configs by filename and locationThe root remains
config.json, Worker configs are nowworker.config.json, and Container configs are nowcontainer.config.json. Resource configs no longer contain top-leveltypediscriminators, while settings and build context are stored together in the root config.#15713
3c75cadThanks @jamesopstad! - Define experimental Cloudflare configuration with a single default exportExperimental
cloudflare.config.tsfiles now define settings and resources together in a default-exporteddefineConfig()call. Add a Worker underworker, add Containers to thecontainersarray, or omit both to provide settings only.Patch Changes
#15711
91e2f86Thanks @ghostwriternr! - Allow local Container images without exposed portsWrangler and the Cloudflare Vite plugin no longer reject images that omit Docker
EXPOSEmetadata. Local Containers can run command-only workloads or serve traffic through workerd without declaring an unused image port.Updated dependencies [
3c75cad,3c75cad,91e2f86,c5913a6,35668d7,3c75cad,45b3b81,8235e6a,0751490,43b1f85,731a2ee]:v1.56.0Compare Source
Minor Changes
#15609
1f070c8Thanks @emily-shen! - Build Containers when emitting experimental Build OutputWrangler and the Cloudflare Vite plugin now build Dockerfile-backed Container images when experimental Build Output is enabled. Container configs are emitted under
.cloudflare/output/v0/containerswith local image references, while existing registry references pass through unchanged.#15329
c4c9b75Thanks @akshitsinha! - Evaluate Flagship flags locally during developmentFlagship bindings now use the local Miniflare store by default in Wrangler and the Vite plugin, keeping development offline and isolated from production flags. Set
remote: trueon a binding to continue using its remote app.Use
wrangler flagship flags pull <APP_ID>to seed the store from a remote app. Flag management commands also accept--localto read and update the local store directly.#15701
643e5ccThanks @WillTaylorDev! - Pass Preview intent todefineWorkerand upload its resolved configurationPreview builds now evaluate programmatic Worker configuration with
ctx.isPreviewset totrueand record that intent in Build Output. The shared Preview uploader deploys the resolved bindings and settings while preserving configured Preview base values when it creates a Preview.Patch Changes
1f070c8,a0485d5,629ddef,c4c9b75,643e5cc]:v1.55.0Compare Source
Minor Changes
#15674
a939a6cThanks @ghostwriternr! - Support explicit named Container image selection in local developmentThe Vite plugin builds or pulls named images from Wrangler configuration and exposes their local tags through
ctx.container.images. Pass one of those references toctx.container.start({ image })to select the image.This extends the experimental Durable Object-managed Containers interface.
Patch Changes
6874aa9,2298cf1,d96b319,876eea1,2b39fc2]:v1.54.11Compare Source
Patch Changes
71b6f10,ad23e6e,bac0c6a,be2437a,bac0c6a,6f3d7b5]:v1.54.10Compare Source
Patch Changes
#14775
1be7b97Thanks @dario-piotrowicz! - Sync Local Explorer endpoint lists across agent hintsThe Local Explorer endpoint list is now consistent across the three places it appears: the AGENTS.md template in
create-cloudflare, the runtime agent hint inwrangler dev, and the Vite plugin agent hint. All three now include theobservability/clearendpoint, use the canonical/cdn-cgi/local/explorerpath, and have cross-reference comments pointing to each other.#15399
982b806Thanks @tpmmorris! - Improve over-limitrun_worker_firsterrors when duplicate rules are presentThe error now reports distinct and duplicate-entry counts and lists duplicated rules, making it clear when removing redundant entries can bring the configuration within the limit.
Updated dependencies [
1be7b97,b149147,7db596c,76c0ce6,a83d7ac,a0856da,e35c4a1,d3565a5,a83d7ac,cb0955f,fa79b26,16d1310,ca71205,1015cfb,982b806,ffabe74,7db596c,e03822a,a83d7ac,641df47,c4a6279]:v1.54.9Compare Source
Patch Changes
#15574
164e4fbThanks @RealBhupesh! - Ignore.wranglerpersistence writes in Vite's file watcherMiniflare stores local D1, KV, R2, and observability state under
.wrangler/state. Those writes were watched as source changes on Linux and Windows, which fired every pluginhotUpdatehook and could make page loads take seconds. The plugin now ignores**/.wrangler/**while preserving anyserver.watch.ignoredpatterns already set by the user.Updated dependencies [
8997652]:cloudflare/workers-sdk (wrangler)
v4.139.0Compare Source
Minor Changes
#15792
479e1e8Thanks @flakey5! - Configure SSH for experimental Durable Object-managed ContainersSet
containers[].sshandcontainers[].authorized_keyswhen usingscheduling_policy: "durable_object". These are application-wide settings that follow the same rules as the existing Durable Object-managed Container settings: normal deployments create missing applications and update explicitly configured values, while omitted settings preserve the existing application configuration.#15648
52c0e9fThanks @tpmmorris! - Expose configured Cron Triggers to local development consumersWrangler now passes the active environment's exact Cron Trigger expressions to Miniflare so Local Explorer can display them. Headless agent sessions also advertise the Local Explorer scheduled invocation API.
#15786
bdda4c3Thanks @ThomasRubini! - Support UDP connect handlers in local developmentThe experimental
connectconfiguration now acceptsprotocol: "udp", with optionalidle_timeout_msandmax_pending_bytessettings. UDP datagrams are delivered to the Worker'sconnect()handler using workerd's value-mode socket streams, and can be tested withMiniflare#dispatchConnect({ protocol: "udp" }).#15779
fc3cbaaThanks @Naapperas! - Supportworkflowentries in theexportsconfiguration mapA Worker can now declare the Workflows it defines in
exports, keyed by theWorkflowEntrypointclass name:{ "exports": { "MyWorkflow": { "type": "workflow", "name": "my-workflow", "limits": { "steps": 100 }, "schedules": "0 * * * *" } } }A
workflowexport accepts the same settings as aworkflowsbinding:limits,concurrency,schedules, anddefault_retention.wrangler deployandwrangler versions uploadsend these entries to the upload API by name, andwrangler deployandwrangler triggers deployprovision the Workflow with its settings, just as they do forworkflowsbindings owned by the Worker. A Workflow may be declared both as a binding and as an export, as long as both declarations use the same class and do not set the same setting to different values. A binding to another Worker's Workflow cannot share a name with an export.@cloudflare/configadds the matchingexports.workflow()helper. Local development does not yet act on these entries.Patch Changes
#15796
be72815Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#14847
940c692Thanks @TheSaiEaranti! - Emulate the deterministic-ID uniqueness contract in the local Workflows bindingThe local Workflows binding now matches the documented production behavior for deterministic instance IDs:
create({ id })with an ID that already exists throws(instance.already_exists)and retains the existing instance, andcreateBatch()skips IDs that already exist or repeat within the batch, excluding them from the result instead of creating duplicate executions. Previously both paths silently created duplicates, so code relying on deterministic IDs for idempotency (for example a Queue consumer creating one workflow per message) appeared to work locally while double-executing workflow bodies.#15803
cd60c9cThanks @pmiguel! - Show--jurisdictionin help forwrangler kv namespace createThe option was supported but omitted from the command's help output. Users can now discover how to create KV namespaces in a specific jurisdiction.
#15838
15799d4Thanks @oddharsh! - Updatesmol-tomlto 1.9.0 to fix slow parsing of very large TOML filesParse time for TOML config files now grows linearly with their size, instead of with its square: a 40,000-line file that took 259 ms to parse now takes 17 ms, while typical
wrangler.tomlfiles parse in the same time as before. This addresses theGHSA-r4xh-jqrq-34v2advisory against earlier versions of the parser.Some TOML syntax errors now point at the character that caused them. For example, a
wrangler.tomlcontainingINVALID "FILEis now reported asillegal character in keyat the", rather thanincomplete key-valueat the start of the line.Updated dependencies [
52c0e9f,44f5295,be72815,940c692,bdda4c3,fc3cbaa]:v4.138.0Compare Source
Minor Changes
#15776
b03f960Thanks @edevil! - Add event-code support to temporary Worker deploymentsUse
wrangler deploy --temporary --event-code <code>to provision an account for an event. Wrangler requires explicit server acknowledgement before caching the account and keeps the event code out of its cache and telemetry.#15817
6e77c53Thanks @jamesopstad! - Allow framework commands to produce Preview Build Output with the experimental configWhen
cf previews deployinvokes a framework build command, Preview intent is now preserved. Function-basedcloudflare.config.tsfiles receiveisPreview: true, and generated Build Output is marked as a Preview build.Patch Changes
#15806
8fade73Thanks @NuroDev! - Standardize Zod validation error outputFormat validation errors with Zod's built-in
prettifyError()helper so Miniflare, Wrangler, the Vite plugin, and the Vitest plugin show consistent messages and property paths.Updated dependencies [
a71237a,8fade73]:v4.137.0Compare Source
Minor Changes
#15778
cd7508cThanks @jamesopstad! - Generate types during development and supported builds with Vite'sexperimental.newConfigoption or Wrangler's--experimental-new-configflag (and--experimental-cf-build-outputfor builds)When Wrangler's
--experimental-new-configflag or Vite'sexperimental.newConfigoption is enabled, inferred configuration and runtime declarations are now kept in.cloudflare/types/index.d.ts. Vite refreshes them during development and production builds. Wrangler refreshes them during development and when building with both--experimental-new-configand--experimental-cf-build-output. In the experimentalwrangler.config.tsformat, thetypesoption is now top-level because it applies to both commands.Patch Changes
#15765
1bdb96dThanks @th0m! - Prepare the required egress sidecar for local Containers without configured imagesWrangler dev and Vite dev/preview now pull the required sidecar for Durable Object-managed Containers that select their application image at start time. Previously, these Containers failed to start unless the sidecar image was already cached in Docker.
#15712
f5605f5Thanks @alsuren! - Match D1 SQL statement splitting to the local SQLite runtimeWrangler now uses SQLite's statement-completion state machine when splitting D1 SQL files. This keeps trigger, quoted identifier, comment, and keyword handling consistent with local execution.
v4.136.3Compare Source
Patch Changes
#15662
59267fcThanks @oddharsh! - Updatesmol-tomlto 1.8.0This updates the bundled TOML parser that reads
wrangler.tomlto a version that addresses two advisories against 1.5.2:GHSA-7w5x-hrqm-74c2(a value followed by a comment with no trailing newline, such asa=[1 #, put the parser in an infinite loop) andGHSA-v3rj-xjv7-4jmq(thousands of consecutive comment lines overflowed the stack). On the old version,wrangler deployagainst awrangler.tomlending ina=[1 #never returned; it now fails withInvalid TOML document: cannot find end of structure.#15760
6906bf0Thanks @yomna-shousha! - Warn whenwrangler previewreturns only non-custom-domain URLs even though custom-domain Preview URLs are configured.#15761
354ebdbThanks @podonnell-dev! - Fix Preview output artifacts to always include the resolved parent Worker namePreview artifacts now use Wrangler's resolved Worker name instead of relying on the Preview API response to include it.
Updated dependencies []:
v4.136.2Compare Source
Patch Changes
#15762
ad20547Thanks @podonnell-dev! - Fixwrangler typesgenerating runtime headers with trailing whitespaceRuntime type headers without compatibility flags now end at the compatibility date, keeping generated types reproducible when tools remove trailing whitespace.
#15703
02c1d83Thanks @KianNH! - Improve Container image listing and deletionList all image pages using read-only credentials, validate tags before deletion, and report successful deletion when the garbage-collection request fails.
#15700
275184dThanks @KianNH! - Fix Container SSH connection setup and shutdownPrevent SSH connections from stalling during setup and ensure proxy processes exit when sessions close.
#15759
bd59ecaThanks @petebacondarwin! - Show validsha256-prefixed tags in Container image listingsContainer image listings now distinguish valid OCI tags such as
sha256-releasefrom synthetic digest entries such assha256:<digest>.Updated dependencies []:
v4.136.1Compare Source
Patch Changes
#15744
0ed4c54Thanks @podonnell-dev! - Improvewrangler previewonboarding guidanceWrangler now displays placeholder replacement guidance directly beneath the suggested Preview configuration instead of as a separate warning. JSON output continues to include the guidance in its structured onboarding messages.
#15678
703922dThanks @christhorwarth! - Read workers.dev URLs from the Worker resource during deploymentWrangler no longer requires account-level subdomain permission to display Worker and version-preview URLs. It now uses the Worker-scoped URL fields while preserving account-level registration for accounts without a workers.dev subdomain.
Updated dependencies [
14d946d]:v4.136.0Compare Source
Minor Changes
#15713
3c75cadThanks @jamesopstad! - Identify experimental Build Output resource configs by filename and locationThe root remains
config.json, Worker configs are nowworker.config.json, and Container configs are nowcontainer.config.json. Resource configs no longer contain top-leveltypediscriminators, while settings and build context are stored together in the root config.#15713
3c75cadThanks @jamesopstad! - Define experimental Cloudflare configuration with a single default exportExperimental
cloudflare.config.tsfiles now define settings and resources together in a default-exporteddefineConfig()call. Add a Worker underworker, add Containers to thecontainersarray, or omit both to provide settings only.#15720
35668d7Thanks @alexkli! - Add experimental--zoneand--zone-idflags towrangler deployandwrangler triggers deployto attach a zone to routes passed via--routeRoutes passed on the command line were always sent to the Cloudflare API as bare patterns. Zones with an SSL for SaaS entitlement reject such routes with error 10082 ("When using wildcard host ssl for saas entitlement you must specify the zone per route using zone_id or zone_name"), and until now the only way to set a zone was in the config file, which
--routeoverrides.The new flags are experimental and must be enabled with
--experimental-route-zones(alias--x-route-zones). Pass a single zone to apply it to all routes, or one zone per route in the same order as the--routeflags:wrangler deploy --x-route-zones --route "app.example.com/*" --route "api.example.com/*" --zone example.comwrangler deploy --x-route-zones --route "a.example.com/*" --zone example.com --route "b.example.net/*" --zone example.net--zonesetszone_nameand--zone-idsetszone_idon each route. The two flags cannot be combined, and passing more than one zone requires exactly one per--route. Routes without zone flags behave exactly as before.#15699
45b3b81Thanks @skepticfx! - Remove the experimental Container image environment bindingDurable Object-managed Containers now use
ctx.container.imageswithout Wrangler generatingenv.EXPERIMENTAL_CLOUDFLARE_CONTAINER_IMAGES. Update code using the experimental environment binding to readctx.container.imagesand regenerate your Worker types.Version deployments identify managed applications from native named images, and
--containers-rollout=nonepreserves native Container metadata. Containers without named images must first be provisioned withwrangler deploy;versions uploadverifies that their applications already exist. The old binding is no longer read or reserved, including on previously uploaded versions.keep_varsretains existing variables as usual; redeploy without it to remove an existing experimental binding.#15702
8235e6aThanks @podonnell-dev! - Return structured configuration errors fromwrangler preview --jsonWhen a Worker is missing its Preview configuration, JSON mode now returns an
error, asuggested_configpatch, and any associated onboardingmessageswithout interactive output or terminal formatting. This changes the private-beta Preview command to make automated onboarding reliable.#15577
731a2eeThanks @sdnts! - Add support for jurisdictions to Queues subcommandsPatch Changes
#15711
91e2f86Thanks @ghostwriternr! - Allow local Container images without exposed portsWrangler and the Cloudflare Vite plugin no longer reject images that omit Docker
EXPOSEmetadata. Local Containers can run command-only workloads or serve traffic through workerd without declaring an unused image port.#15740
c5913a6Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#15471
0751490Thanks @edmundhung! - Fix cf builds for static projects that serve assets from the project rootThe experimental Build Output path now omits the reserved
.cloudflaredirectory when the project root is used for static assets. This prevents recursive output copying in Wrangler while preserving the existing behaviour for other asset directories.#15440
43b1f85Thanks @HuzaifaAbdulRehman! - Rebase absolute non-JavaScript module specifiers whenpreserve_file_namesis enabledWith
preserve_file_namesset, a non-JS module imported by an absolute path kept that path as its module name. The build machine's filesystem layout ended up inside the deployed Worker, and the module was never written to--outdir. A local dry run reported success while the upload failed server-side with error code10021. Tooling that rewrites externals to absolute paths hits this, which is how it was found in@opennextjs/cloudflarewith WASM imports.Absolute specifiers are now rebased to
./<basename>, which is what the hashed branch of the same code already does minus the hash prefix. Relative specifiers keep the behaviour they had.Updated dependencies [
c5913a6,3c75cad]:v4.135.0Compare Source
Minor Changes
#15609
1f070c8Thanks @emily-shen! - Build Containers when emitting experimental Build OutputWrangler and the Cloudflare Vite plugin now build Dockerfile-backed Container images when experimental Build Output is enabled. Container configs are emitted under
.cloudflare/output/v0/containerswith local image references, while existing registry references pass through unchanged.#15329
c4c9b75Thanks @akshitsinha! - Evaluate Flagship flags locally during developmentFlagship bindings now use the local Miniflare store by default in Wrangler and the Vite plugin, keeping development offline and isolated from production flags. Set
remote: trueon a binding to continue using its remote app.Use
wrangler flagship flags pull <APP_ID>to seed the store from a remote app. Flag management commands also accept--localto read and update the local store directly.#15701
643e5ccThanks @WillTaylorDev! - Pass Preview intent todefineWorkerand upload its resolved configurationPreview builds now evaluate programmatic Worker configuration with
ctx.isPreviewset totrueand record that intent in Build Output. The shared Preview uploader deploys the resolved bindings and settings while preserving configured Preview base values when it creates a Preview.Patch Changes
#15705
a0485d5Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#15587
629ddefThanks @Kuldeeep18! - Fix duration calculation for running workflow instances, steps, and attempts inwrangler workflows instances describewrangler workflows instances describepreviously distorted the elapsed duration of in-progress instances, steps, and attempts across non-UTC timezones by stripping" GMT"fromtoUTCString(), causingnew Date(...)to parse the timestamp in the local client timezone. The duration is now correctly computed against the current time.Updated dependencies [
a0485d5]:v4.134.0Compare Source
Minor Changes
#15684
6874aa9Thanks @Ankcorn! - Add support for configuring real-time Issues withobservability.issues.enabledWrangler now validates and uploads the Issues setting alongside the existing logs and traces observability options. The experimental configuration format supports the equivalent
observability.issues.enabledoption.#15681
d96b319Thanks @podonnell-dev! - Markwrangler previewcommands as open betaWrangler now labels Preview commands as open beta in help output and command warnings, matching the feature's public availability.
#15673
2b39fc2Thanks @ghostwriternr! - Support explicit named Container image selection in Wrangler local developmentWrangler builds or pulls named images configured through Wrangler JSON or TOML and exposes their local tags through `ctx.container.ima
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.