[dependabot]

Bumps the minor-and-patch group with 13 updates:

Package	From	To
@cloudflare/vitest-pool-workers	0.22.0	0.23.0
@types/node	26.6.4	26.6.5
drizzle-orm	0.45.3	0.45.4
prettier	3.9.9	3.9.10
wrangler	4.147.0	4.149.0
@vitejs/plugin-vue	6.0.9	6.0.10
vite	8.3.3	8.3.4
@typespec/compiler	1.16.0	1.17.0
@typespec/http	1.16.0	1.17.0
@typespec/openapi	1.16.0	1.17.0
@typespec/openapi3	1.16.0	1.17.0
@cloudflare/workers-types	5.20261006.1	5.20261013.1
tsdown	0.23.0	0.23.1

Updates @cloudflare/vitest-pool-workers from 0.22.0 to 0.23.0

Release notes

Sourced from @​cloudflare/vitest-pool-workers's releases.

@​cloudflare/config@​0.23.0

Minor Changes

• #15928 7f57b1c Thanks @​ichernetsky-cf! - Allow "us" as a jurisdiction for Container applications

  Container placement constraints now accept constraints.jurisdiction: "us" in Wrangler and typed Cloudflare configuration. This makes the US jurisdiction available alongside "eu" and "fedramp".

Commits

• bfcc442 [vitest-plugin] Rename package for v1 (#15074)
• 99a1f49 Miniflare config followups (#15130)
• d81fae7 [codemod] Add migration CLI (#14690)
• See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

• See full diff in compare view

Updates drizzle-orm from 0.45.3 to 0.45.4

Release notes

Sourced from drizzle-orm's releases.

0.45.4

• Fixed postgres-js not using prepared queries on explicit .prepare(name)

Commits

• eab8bed Fixed postgres-js not using prepared queries on explicit .prepare(name) (...
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates wrangler from 4.147.0 to 4.149.0

Release notes

Sourced from wrangler's releases.

wrangler@4.149.0

Minor Changes

• #16036 9a58244 Thanks @​edevil! - Support temporary event accounts in R2 and Containers commands

  wrangler r2 and wrangler containers commands now accept the hidden --temporary flag, so accounts created for an event can manage buckets, objects and containers directly. Every command that supports --temporary now also accepts a hidden --event-code flag, so the first command a participant runs can create the event account:

  wrangler r2 bucket create my-bucket --temporary --event-code <code>

  R2 and Containers are only available on event accounts. R2 custom domains, Sippy, external container registries and wrangler cloudchamber commands still require a logged-in account.

Patch Changes

• #16139 2d1d563 Thanks @​cpojer! - Update esbuild to 0.28.2

  Align esbuild dependency with tooling using the latest 0.28 patch so package managers can share one installation instead of downloading a second native binary.

• #15632 85b14e7 Thanks @​petebacondarwin! - Honor Retry-After directives during static asset uploads

  Static asset uploads now pause retries and pending uploads until the latest outstanding deadline requested by the API. A per-request limiter also keeps gateway retries at the reduced concurrency after the pause ends, preventing a deployment from immediately overloading a constrained asset service again.

• #16098 fe607f9 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  sharp	0.35.4	0.35.5

• #16093 ad7ff45 Thanks @​DiogoSantoss! - Document that addresses catch-all entries must use the zone apex

  A *@domain entry in addresses must use the zone apex, such as *@example.com. The zone catch-all also receives mail for every subdomain in the zone that has no literal rule.

• #16102 757faa6 Thanks @​tlq5l! - Keep Preview secrets when deploying to an existing Preview

  Secrets added to a Preview with wrangler preview secret put or wrangler preview secret bulk were lost the next time wrangler preview ran, because each new deployment was created from the Wrangler config, --var and --secrets-file values only.

  wrangler preview now carries over the secrets of the Preview's latest deployment. A value passed in this deployment (--secrets-file, --var or a previews binding with the same name) still replaces the existing secret, and wrangler preview secret delete removes one.

• #15617 93c1069 Thanks @​jpatel3! - Stop the update check from recommending deprecated versions

  Previously, the "update available" notice shown by wrangler and @cloudflare/vite-plugin always pointed at whichever version was tagged latest on npm, even after that version had been deprecated for shipping a bug. Deprecated versions are now never recommended: if the latest release has been deprecated, the newest non-deprecated stable release below it is suggested instead, or nothing at all if you are already on it.

  The check now reads the npm registry directly instead of going through the update-check package, which discarded the deprecation information. The on-disk cache location and one-hour refresh interval are unchanged.

• #16003 6947df3 Thanks @​oddharsh! - Ship using and await using declarations to the runtime as written, for smaller Worker bundles

  Workers and Pages Functions that use explicit resource management no longer carry about 1 KB of bundled helper code to emulate it. workerd supports using and await using natively at every compatibility date, so wrangler deploy, wrangler versions upload and Pages Functions builds now leave these declarations untouched.

• #15958 82acf3c Thanks @​breken-ai! - Apply each action's own condition in wrangler r2 bucket lifecycle add

... (truncated)

Commits

• 84c4e95 Version Packages (#16099)
• 82acf3c [wrangler] Apply each action's own condition in r2 bucket lifecycle add (#1...
• 757faa6 [wrangler] Keep Preview secrets when deploying to an existing Preview (#16102)
• 85b14e7 [deploy-helpers] respect Retry-After during asset uploads (#15632)
• 6947df3 [wrangler][vite-plugin] Preserve using declarations when bundling (#16003)
• 9a58244 [wrangler] Support temporary event accounts in R2 and Containers commands (#1...
• 540f084 Version Packages (#16034)
• 42c7219 [wrangler] Fix r2 object put and r2 bulk put storing a different key in local...
• 2dde890 [wrangler] Clarify secret version errors and support versions bulk deletions ...
• b4e1299 [wrangler] Add --source-namespace and --source-repo-name for artifacts.repo q...
• Additional commits viewable in compare view

Updates @vitejs/plugin-vue from 6.0.9 to 6.0.10

Release notes

Sourced from @​vitejs/plugin-vue's releases.

plugin-vue@6.0.10

Please refer to CHANGELOG.md for details.

Changelog

Sourced from @​vitejs/plugin-vue's changelog.

6.0.10 (2026-10-10)

Bug Fixes

• plugin-vue: compile transformed normal scripts outside vapor mode (#857) (7b63e3c)
• plugin-vue: correct AST reuse checks and allow Vue 3.6 RC (ccc06dd)

Documentation

• plugin-vue: clarify compiler initialization hooks (55d0cab)

Commits

• a03675e release: plugin-vue@6.0.10
• 7b63e3c fix(plugin-vue): compile transformed normal scripts outside vapor mode (#857)
• ccc06dd fix(plugin-vue): correct AST reuse checks and allow Vue 3.6 RC
• 55d0cab docs(plugin-vue): clarify compiler initialization hooks
• See full diff in compare view

Updates vite from 8.3.3 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

Commits

• b6c20f6 release: v8.3.4 (#23702)
• b28db28 fix(server): match static aliases on path boundaries (#23643)
• bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
• fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
• 2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
• 3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
• facc2fb fix: remove input option unescaping for now (#23694)
• 70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
• cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
• fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
• Additional commits viewable in compare view

Updates @typespec/compiler from 1.16.0 to 1.17.0

Release notes

Sourced from @​typespec/compiler's releases.

typespec-stable@1.17.0

@​typespec/compiler

Features

• #11019 Allow model, enum, union, and scalar declarations to be used as expressions. A declaration used in expression position has its corresponding type marked with expression: true and is not registered in the enclosing namespace. It may be named or anonymous (in which case it has no name).

  This is an experimental feature that must be opted into by adding declaration-expressions to the features list in tspconfig.yaml; using a declaration expression without it reports a declaration-expression-disabled error.

  They can be used anywhere an expression is expected, including aliases, model properties, decorator arguments, template arguments, function/call arguments, and tuples.

  model, scalar, and union declaration expressions support the same extends clause as their statement form (union extends additionally requires the union-extends feature).

  alias Foo = enum {
    a,
    b,
  };
  model Bar {
  status: enum { active, inactive };
  unit: scalar extends string;
  inner: model Inner { x: string };
  }
  @​Versioning.versioned(enum Versions { v1, v2 })
  namespace MyService;

• #11019 Allow decorators to be applied to model, enum, union, and scalar declarations used in expression position. Inline decorators can be applied directly, and augment decorators (@@) can target them through a navigation reference (such as ::type).

  model Foo {
    status: @doc("the current status") enum { active, inactive };
    inner: @doc("nested model") model Inner { x: string };
  }
  @@​doc(Foo.status::type, "the current status");

• #11019 Allow a doc comment to be applied inline to a model, enum, union, or scalar declaration expression, just like an inline @doc decorator.

  model Foo {
    status: /** the current status */ enum { active, inactive };
  }

• #11019 Improve formatting of declaration expressions (model, enum, union, and scalar used in expression position) that carry doc comments and/or decorators. When the inline form would exceed the print width, the doc comments and decorators are now each placed on their own line and the whole block is indented one level instead of overflowing.

  model Foo {

... (truncated)

Commits

• b08e0a7 Prepare typespec publish (#12134)
• 25ae634 fix(http-client-csharp): preserve explicit null for optional nullable propert...
• d18855b fix[http-specs] Add named-model query expansion scenarios (#12038)
• b92953b build(deps): bump sharp from 0.35.4 to 0.35.5 (#12124)
• 4783beb build: support TypeScript 7 with native declaration emit (#12101)
• 4366bfa feat(spec-dashboard): support explicit emitter coverage groups (#11962)
• 0e5ea47 Skip coverage collection on Windows CI (#11976)
• 93e27bf Unassign issue authors and clear stale PR labels after activity (#12120)
• 3d27b49 build(deps): bump the actions group with 7 updates (#12123)
• a74ca10 fix(http): keep @statusCode range bounds inherited from the scalar (#12118)
• Additional commits viewable in compare view

Updates @typespec/http from 1.16.0 to 1.17.0

Commits

• b08e0a7 Prepare typespec publish (#12134)
• 25ae634 fix(http-client-csharp): preserve explicit null for optional nullable propert...
• d18855b fix[http-specs] Add named-model query expansion scenarios (#12038)
• b92953b build(deps): bump sharp from 0.35.4 to 0.35.5 (#12124)
• 4783beb build: support TypeScript 7 with native declaration emit (#12101)
• 4366bfa feat(spec-dashboard): support explicit emitter coverage groups (#11962)
• 0e5ea47 Skip coverage collection on Windows CI (#11976)
• 93e27bf Unassign issue authors and clear stale PR labels after activity (#12120)
• 3d27b49 build(deps): bump the actions group with 7 updates (#12123)
• a74ca10 fix(http): keep @statusCode range bounds inherited from the scalar (#12118)
• Additional commits viewable in compare view

Updates @typespec/openapi from 1.16.0 to 1.17.0

Release notes

Sourced from @​typespec/openapi's releases.

typespec-stable@1.17.0

@​typespec/compiler

Features

• #11019 Allow model, enum, union, and scalar declarations to be used as expressions. A declaration used in expression position has its corresponding type marked with expression: true and is not registered in the enclosing namespace. It may be named or anonymous (in which case it has no name).

  This is an experimental feature that must be opted into by adding declaration-expressions to the features list in tspconfig.yaml; using a declaration expression without it reports a declaration-expression-disabled error.

  They can be used anywhere an expression is expected, including aliases, model properties, decorator arguments, template arguments, function/call arguments, and tuples.

  model, scalar, and union declaration expressions support the same extends clause as their statement form (union extends additionally requires the union-extends feature).

  alias Foo = enum {
    a,
    b,
  };
  model Bar {
  status: enum { active, inactive };
  unit: scalar extends string;
  inner: model Inner { x: string };
  }
  @​Versioning.versioned(enum Versions { v1, v2 })
  namespace MyService;

• #11019 Allow decorators to be applied to model, enum, union, and scalar declarations used in expression position. Inline decorators can be applied directly, and augment decorators (@@) can target them through a navigation reference (such as ::type).

  model Foo {
    status: @doc("the current status") enum { active, inactive };
    inner: @doc("nested model") model Inner { x: string };
  }
  @@​doc(Foo.status::type, "the current status");

• #11019 Allow a doc comment to be applied inline to a model, enum, union, or scalar declaration expression, just like an inline @doc decorator.

  model Foo {
    status: /** the current status */ enum { active, inactive };
  }

• #11019 Improve formatting of declaration expressions (model, enum, union, and scalar used in expression position) that carry doc comments and/or decorators. When the inline form would exceed the print width, the doc comments and decorators are now each placed on their own line and the whole block is indented one level instead of overflowing.

  model Foo {

... (truncated)

Commits

• b08e0a7 Prepare typespec publish (#12134)
• 25ae634 fix(http-client-csharp): preserve explicit null for optional nullable propert...
• d18855b fix[http-specs] Add named-model query expansion scenarios (#12038)
• b92953b build(deps): bump sharp from 0.35.4 to 0.35.5 (#12124)
• 4783beb build: support TypeScript 7 with native declaration emit (#12101)
• 4366bfa feat(spec-dashboard): support explicit emitter coverage groups (#11962)
• 0e5ea47 Skip coverage collection on Windows CI (#11976)
• 93e27bf Unassign issue authors and clear stale PR labels after activity (#12120)
• 3d27b49 build(deps): bump the actions group with 7 updates (#12123)
• a74ca10 fix(http): keep @statusCode range bounds inherited from the scalar (#12118)
• Additional commits viewable in compare view

Updates @typespec/openapi3 from 1.16.0 to 1.17.0

Release notes

Sourced from @​typespec/openapi3's releases.

typespec-stable@1.17.0

@​typespec/compiler

Features

• #11019 Allow model, enum, union, and scalar declarations to be used as expressions. A declaration used in expression position has its corresponding type marked with expression: true and is not registered in the enclosing namespace. It may be named or anonymous (in which case it has no name).

  This is an experimental feature that must be opted into by adding declaration-expressions to the features list in tspconfig.yaml; using a declaration expression without it reports a declaration-expression-disabled error.

  They can be used anywhere an expression is expected, including aliases, model properties, decorator arguments, template arguments, function/call arguments, and tuples.

  model, scalar, and union declaration expressions support the same extends clause as their statement form (union extends additionally requires the union-extends feature).

  alias Foo = enum {
    a,
    b,
  };
  model Bar {
  status: enum { active, inactive };
  unit: scalar extends string;
  inner: model Inner { x: string };
  }
  @​Versioning.versioned(enum Versions { v1, v2 })
  namespace MyService;

• #11019 Allow decorators to be applied to model, enum, union, and scalar declarations used in expression position. Inline decorators can be applied directly, and augment decorators (@@) can target them through a navigation reference (such as ::type).

  model Foo {
    status: @doc("the current status") enum { active, inactive };
    inner: @doc("nested model") model Inner { x: string };
  }
  @@​doc(Foo.status::type, "the current status");

• #11019 Allow a doc comment to be applied inline to a model, enum, union, or scalar declaration expression, just like an inline @doc decorator.

  model Foo {
    status: /** the current status */ enum { active, inactive };
  }

• #11019 Improve formatting of declaration expressions (model, enum, union, and scalar used in expression position) that carry doc comments and/or decorators. When the inline form would exceed the print width, the doc comments and decorators are now each placed on their own line and the whole block is indented one level instead of overflowing.

  model Foo {

... (truncated)

Commits

• b08e0a7 Prepare typespec publish (#12134)
• 25ae634 fix(http-client-csharp): preserve explicit null for optional nullable propert...
• d18855b fix[http-specs] Add named-model query expansion scenarios (#12038)
• b92953b build(deps): bump sharp from 0.35.4 to 0.35.5 (#12124)
• 4783beb build: support TypeScript 7 with native declaration emit (#12101)
• 4366bfa feat(spec-dashboard): support explicit emitter coverage groups (#11962)
• 0e5ea47 Skip coverage collection on Windows CI (#11976)
• 93e27bf Unassign issue authors and clear stale PR labels after activity (#12120)
• 3d27b49 build(deps): bump the actions group with 7 updates (#12123)
• a74ca10 fix(http): keep @statusCode range bounds inherited from the scalar (#12118)
• Additional commits viewable in compare view

Updates @cloudflare/workers-types from 5.20261006.1 to 5.20261013.1

Commits

• See full diff in compare view

Updates tsdown from 0.23.0 to 0.23.1

Release notes

Sourced from tsdown's releases.

v0.23.1

   🐞 Bug Fixes

• Preserve false tsconfig option  -  by @​Masutayunikon in rolldown/tsdown#1065 (407f8)
• entry: Honor custom root for object entry  -  by @​giaBaoJS in rolldown/tsdown#1072 (17452)
• pkg: Pack tarball inside npm publish --dry-run  -  by @​giaBaoJS in rolldown/tsdown#1076 (83f0c)

    View changes on GitHub

Commits

• 6493257 chore: release v0.23.1
• ba6acb9 chore: upgrade deps
• 6cbfec7 chore(deps): update dependency unplugin-vue to v8 (#1090)
• eb40c95 chore: declare package side effects
• f9c95d0 chore: align pnpm workspace settings
• e64bde4 chore: configure pnpm via devEngines
• 83f0c57 fix(pkg): pack tarball inside npm publish --dry-run (#1076)
• 1745223 fix(entry): honor custom root for object entry (#1072)
• 9655dcb chore: upgrade deps
• 30da631 docs: correct default value of minify
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 34f1f391-0f56-4bd7-90f4-a5e51ddf2679

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	tsumugi-docs	78e14a6	Oct 16 2026, 02:48 AM