chore(deps): update external dev fixes by renovate[bot] · Pull Request #317 · adobe/da-admin

renovate · 2026-08-31T20:29:48Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@redocly/cli	`2.44.1` → `2.54.2`
lint-staged	`17.3.0` → `17.5.1`
wrangler (source)	`4.119.0` → `4.140.0`

Release Notes

Redocly/redocly-cli (@redocly/cli)

Patch Changes

Fixed respect so a same-workflow goto no longer cleared $steps outputs from steps that already ran.
Previously, this broke $steps expressions in the target step.
Updated @redocly/respect-core to v2.53.3.

`v2.53.2`

Compare Source

Patch Changes

Added start and end line and column positions to each problem location in the --format=json lint output.
Updated @redocly/openapi-core to v2.53.2.

`v2.53.1`

Compare Source

Patch Changes

Added a deprecation warning to the build-docs command about the upcoming switch to Redoc 3.

`v2.53.0`

Compare Source

Minor Changes

Added a disallowDefault option to the operation-2xx-response rule, which requires an explicit 2xx response when enabled.
There is no change in current behavior.

Patch Changes

Updated @redocly/openapi-core to v2.53.0.

`v2.52.1`

Compare Source

Patch Changes

Updated redoc to the 2.5.4 version to fix accessibility problems in the HTML produced by build-docs.
Added the lang attribute to the default build-docs template.

`v2.52.0`

Compare Source

Minor Changes

Added agent skills for AI coding assistants: redocly-cli for everyday CLI usage, redocly-lint-rules for writing configurable rules and custom plugins.
Install them with npx skills add https://redocly.com.
Added an experimental inspect-node-types command to navigate the Redocly's node type tree of an API description.
inspect-node-types helps pick the correct subject types for a configurable rule or the correct visitor for a custom plugin.
Added a strategy option to the component-name-unique rule, matching the --component-names-strategy option of the bundle command.
Added an experimental introspect-mcp command that analyzes a running MCP server and records its tools, prompts, resources, and capabilities.
introspect-mcp records its findings in the x-mcp extension of an OpenAPI description.

Patch Changes

Updated @redocly/openapi-core to v2.52.0.

`v2.51.2`

Compare Source

Patch Changes

Updated fast-uri to the 3.1.7 version to resolve CVE-2026-75931, CVE-2026-75975, CVE-2026-75899, and CVE-2026-76172.
Fixed drift and coverage failing to match a path template whose segment mixes literal text with parameters, such as /instances/{worldId}:{instanceId}.
Fixed an issue where Redocly config resolution failed when plugins used ESM syntax.
Updated @redocly/openapi-core to v2.51.2.

`v2.51.1`

Compare Source

Patch Changes

Fixed an issue where generate-arazzo produced a malformed remote description URL in sourceDescriptions (https:// collapsed to https:/) when --output-file was provided.
Fixed an issue where $faker.string.email() used without options generated addresses at the undefined.com domain.
Updated @redocly/respect-core to v2.51.1.
Updated @faker-js/faker to the 10.6.0 version to resolve the high severity advisory GHSA-qxc2-j82w-r537.

`v2.51.0`

Compare Source

Minor Changes

Enhanced the generate-arazzo command to print a ready-to-run respect command after generation, including an --input placeholder for every workflow input.
Added --with-ai, --ai-provider, --ai-model, --ai-concurrency, and --max-workflows options to the generate-arazzo command.
--with-ai uses a local AI CLI (claude, codex, or cursor) and OpenAPI descriptions to redesign the generated one-workflow-per-operation skeleton into multi-step workflows.
The AI designs at most --max-workflows workflows (default 10), and the generated file is marked as AI-inferred.
For descriptions that don't fit a single prompt, the AI first selects scenarios from a compact operation index, then it designs each workflow separately.

Patch Changes

Fixed an issue where respect and the x-security-scheme-required-values rule incorrectly rejected x-security HTTP schemes written with non-lowercase casing (such as Basic, Bearer, or Digest).
RFC 7235 scheme names are case-insensitive.
Updated @redocly/openapi-core to v2.51.0.
Updated @redocly/respect-core to v2.51.0.

`v2.50.0`

Compare Source

Minor Changes

Added a new schema assertion for configurable rules.
The assertion validates a property value against a JSON Schema.

Patch Changes

Updated @redocly/openapi-core to v2.50.0.

`v2.49.1`

Compare Source

Patch Changes

Fixed an issue where rule incorrectly reported a duplicate parameter when two or more $refs pointed to the same path item.
Updated @redocly/openapi-core to v2.49.1.

`v2.49.0`

Compare Source

Minor Changes

Added the no-illogical-composition-keywords rule.

Note: the rule is set to warn in the recommended ruleset and to error in recommended-strict. Existing API descriptions may report new problems.

Patch Changes

Fixed an issue where telemetry silently failed to send when npm was not available.
Updated @redocly/openapi-core to v2.49.0.

`v2.48.0`

Compare Source

Minor Changes

Added agent-friendly client generation: python, go, php, and cli generators beside the TypeScript client, each self-documenting with --docs, configurable per generator, and available as source in your own repository through eject-generator.

Patch Changes

Fixed an issue where the bundle command didn't resolve $refs inside an AsyncAPI 3 Multi Format Schema Object.
Fixed an issue where respect --har-output recorded an empty postData for every request.
Request bodies are written to the HAR.
Captures replayed through drift can have their request bodies validated instead of silently passing.
Updated @redocly/client-generator to v0.4.0.
Updated @redocly/openapi-core to v2.48.0.

`v2.47.0`

Compare Source

Minor Changes

Added a Vendor Extensions metric to the stats command that reports how many distinct x- extensions a description file uses and how often each one occurs.

Patch Changes

Fixed the stats command reporting wrong parameter count for AsyncAPI descriptions.
Updated @redocly/openapi-core to v2.47.0.

`v2.46.2`

Compare Source

Patch Changes

Updated @redocly/openapi-core to v2.46.2.

`v2.46.1`

Compare Source

Patch Changes

Updated @redocly/ajv to ^8.18.3.
Updated @redocly/openapi-core to v2.46.1.
Updated @redocly/respect-core to v2.46.1.

`v2.46.0`

Compare Source

Minor Changes

Added the spec-ref-siblings rule that reports properties placed next to a $ref which the specification does not allow.

Patch Changes

Updated @redocly/openapi-core to v2.46.0.

`v2.45.0`

Compare Source

Minor Changes

Fixed the bundle command losing schema keywords (such as title, properties, or required) written next to a $ref when the referenced schemas started with their own $ref.

Patch Changes

Updated @redocly/openapi-core to v2.45.0.

`v2.44.2`

Compare Source

Patch Changes

Changed the severity of the security-defined rule for AsyncAPI 2.x and 3.x in the recommended ruleset from error to warn.
AsyncAPI descriptions with undefined or unresolved security no longer fail linting by default.
Updated @redocly/openapi-core to v2.44.2.

lint-staged/lint-staged (lint-staged)

`v17.5.1`

Compare Source

Patch Changes

#1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

`v17.5.0`

Compare Source

Minor Changes

#1847 f9063b7 - Lint-staged now refuses to run when files were staged with --intent-to-add, because Git stash doesn't support them. Previously this was an unhandled error.

Patch Changes

#1848 d718ccc - Lint-staged now handles color support better in non-TTY streams, and honors the FORCE_COLOR environment variable.
#1845 7e5ece8 - Update tinyexec@1.3.1 so that local binaries from node_modules/.bin are resolved starting from the directory of each lint-staged configuration file (in monorepo setups). This behavior was broken in lint-staged@16.3.0 where they were only resolved from the current working directory and up.
#1845 eb8a4e3 - Do not try to restore untracked files when using --hide-all and there is no initial commit yet.

`v17.4.1`

Compare Source

Patch Changes

#1840 efe5b63 - This is a version-bump-only release because the previous version 17.4.0 was not published to npmjs.com due to problems with GitHub Actions and Changesets.

cloudflare/workers-sdk (wrangler)

`v4.140.0`

Compare Source

Minor Changes

#15822 8f7916c Thanks @GregBrimble! - Support Containers in Worker Preview deployments with the Build Output.

Patch Changes

Updated dependencies []:
- miniflare@5.20260923.0-alpha

`v4.139.0`

Compare Source

Minor Changes

#15792 479e1e8 Thanks @flakey5! - Configure SSH for experimental Durable Object-managed Containers

Set containers[].ssh and containers[].authorized_keys when using scheduling_policy: "durable_object". These are application-wide settings that follow the same rules as the existing Durable Object-managed Container settings: normal deployments create missing applications and update explicitly configured values, while omitted settings preserve the existing application configuration.
```
// wrangler.jsonc
{
  "containers": [
    {
      "name": "sandbox",
      "class_name": "Sandbox",
      "scheduling_policy": "durable_object",
      "ssh": { "enabled": true },
      "authorized_keys": [
        { "name": "laptop", "public_key": "ssh-ed25519 AAAA..." }
      ]
    }
  ]
}
```
#15648 52c0e9f Thanks @tpmmorris! - Expose configured Cron Triggers to local development consumers

Wrangler now passes the active environment's exact Cron Trigger expressions to Miniflare so Local Explorer can display them. Headless agent sessions also advertise the Local Explorer scheduled invocation API.
#15786 bdda4c3 Thanks @ThomasRubini! - Support UDP connect handlers in local development

The experimental connect configuration now accepts protocol: "udp", with optional idle_timeout_ms and max_pending_bytes settings. UDP datagrams are delivered to the Worker's connect() handler using workerd's value-mode socket streams, and can be tested with Miniflare#dispatchConnect({ protocol: "udp" }).
#15779 fc3cbaa Thanks @Naapperas! - Support workflow entries in the exports configuration map

A Worker can now declare the Workflows it defines in exports, keyed by the WorkflowEntrypoint class name:
```
{
  "exports": {
    "MyWorkflow": {
      "type": "workflow",
      "name": "my-workflow",
      "limits": { "steps": 100 },
      "schedules": "0 * * * *"
    }
  }
}
```
A workflow export accepts the same settings as a workflows binding: limits, concurrency, schedules, and default_retention. wrangler deploy and wrangler versions upload send these entries to the upload API by name, and wrangler deploy and wrangler triggers deploy provision the Workflow with its settings, just as they do for workflows bindings owned by the Worker. A Workflow may be declared both as a binding and as an export, as long as both declarations use the same class and do not set the same setting to different values. A binding to another Worker's Workflow cannot share a name with an export. @cloudflare/config adds the matching exports.workflow() helper. Local development does not yet act on these entries.

Patch Changes

#15796 be72815 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260921.1 ^5.20260923.1

workerd 1.20260921.1 1.20260923.1
#14847 940c692 Thanks @TheSaiEaranti! - Emulate the deterministic-ID uniqueness contract in the local Workflows binding

The local Workflows binding now matches the documented production behavior for deterministic instance IDs: create({ id }) with an ID that already exists throws (instance.already_exists) and retains the existing instance, and createBatch() skips IDs that already exist or repeat within the batch, excluding them from the result instead of creating duplicate executions. Previously both paths silently created duplicates, so code relying on deterministic IDs for idempotency (for example a Queue consumer creating one workflow per message) appeared to work locally while double-executing workflow bodies.
#15803 cd60c9c Thanks @pmiguel! - Show --jurisdiction in help for wrangler kv namespace create

The option was supported but omitted from the command's help output. Users can now discover how to create KV namespaces in a specific jurisdiction.
#15838 15799d4 Thanks @oddharsh! - Update smol-toml to 1.9.0 to fix slow parsing of very large TOML files

Parse time for TOML config files now grows linearly with their size, instead of with its square: a 40,000-line file that took 259 ms to parse now takes 17 ms, while typical wrangler.toml files parse in the same time as before. This addresses the GHSA-r4xh-jqrq-34v2 advisory against earlier versions of the parser.

Some TOML syntax errors now point at the character that caused them. For example, a wrangler.toml containing INVALID "FILE is now reported as illegal character in key at the ", rather than incomplete key-value at the start of the line.
Updated dependencies [52c0e9f, 44f5295, be72815, 940c692, bdda4c3, fc3cbaa]:
- miniflare@5.20260923.0-alpha

`v4.138.0`

Compare Source

Minor Changes

#15776 b03f960 Thanks @edevil! - Add event-code support to temporary Worker deployments

Use wrangler deploy --temporary --event-code <code> to provision an account for an event. Wrangler requires explicit server acknowledgement before caching the account and keeps the event code out of its cache and telemetry.
#15817 6e77c53 Thanks @jamesopstad! - Allow framework commands to produce Preview Build Output with the experimental config

When cf previews deploy invokes a framework build command, Preview intent is now preserved. Function-based cloudflare.config.ts files receive isPreview: true, and generated Build Output is marked as a Preview build.

Patch Changes

#15806 8fade73 Thanks @NuroDev! - Standardize Zod validation error output

Format validation errors with Zod's built-in prettifyError() helper so Miniflare, Wrangler, the Vite plugin, and the Vitest plugin show consistent messages and property paths.
Updated dependencies [a71237a, 8fade73]:
- miniflare@5.20260921.1-alpha

`v4.137.0`

Compare Source

Minor Changes

#15778 cd7508c Thanks @jamesopstad! - Generate types during development and supported builds with Vite's experimental.newConfig option or Wrangler's --experimental-new-config flag (and --experimental-cf-build-output for builds)

When Wrangler's --experimental-new-config flag or Vite's experimental.newConfig option is enabled, inferred configuration and runtime declarations are now kept in .cloudflare/types/index.d.ts. Vite refreshes them during development and production builds. Wrangler refreshes them during development and when building with both --experimental-new-config and --experimental-cf-build-output. In the experimental wrangler.config.ts format, the types option is now top-level because it applies to both commands.

Patch Changes

#15765 1bdb96d Thanks @th0m! - Prepare the required egress sidecar for local Containers without configured images

Wrangler dev and Vite dev/preview now pull the required sidecar for Durable Object-managed Containers that select their application image at start time. Previously, these Containers failed to start unless the sidecar image was already cached in Docker.
#15712 f5605f5 Thanks @alsuren! - Match D1 SQL statement splitting to the local SQLite runtime

Wrangler now uses SQLite's statement-completion state machine when splitting D1 SQL files. This keeps trigger, quoted identifier, comment, and keyword handling consistent with local execution.

`v4.136.3`

Compare Source

Patch Changes

#15662 59267fc Thanks @oddharsh! - Update smol-toml to 1.8.0

This updates the bundled TOML parser that reads wrangler.toml to a version that addresses two advisories against 1.5.2: GHSA-7w5x-hrqm-74c2 (a value followed by a comment with no trailing newline, such as a=[1 #, put the parser in an infinite loop) and GHSA-v3rj-xjv7-4jmq (thousands of consecutive comment lines overflowed the stack). On the old version, wrangler deploy against a wrangler.toml ending in a=[1 # never returned; it now fails with Invalid TOML document: cannot find end of structure.
#15760 6906bf0 Thanks @yomna-shousha! - Warn when wrangler preview returns only non-custom-domain URLs even though custom-domain Preview URLs are configured.
#15761 354ebdb Thanks @podonnell-dev! - Fix Preview output artifacts to always include the resolved parent Worker name

Preview artifacts now use Wrangler's resolved Worker name instead of relying on the Preview API response to include it.
Updated dependencies []:
- miniflare@5.20260921.0-alpha

`v4.136.2`

Compare Source

Patch Changes

#15762 ad20547 Thanks @podonnell-dev! - Fix wrangler types generating runtime headers with trailing whitespace

Runtime type headers without compatibility flags now end at the compatibility date, keeping generated types reproducible when tools remove trailing whitespace.
#15703 02c1d83 Thanks @KianNH! - Improve Container image listing and deletion

List all image pages using read-only credentials, validate tags before deletion, and report successful deletion when the garbage-collection request fails.
#15700 275184d Thanks @KianNH! - Fix Container SSH connection setup and shutdown

Prevent SSH connections from stalling during setup and ensure proxy processes exit when sessions close.
#15759 bd59eca Thanks @petebacondarwin! - Show valid sha256-prefixed tags in Container image listings

Container image listings now distinguish valid OCI tags such as sha256-release from synthetic digest entries such as sha256:<digest>.
Updated dependencies []:
- miniflare@5.20260921.0-alpha

`v4.136.1`

Compare Source

Patch Changes

#15744 0ed4c54 Thanks @podonnell-dev! - Improve wrangler preview onboarding guidance

Wrangler now displays placeholder replacement guidance directly beneath the suggested Preview configuration instead of as a separate warning. JSON output continues to include the guidance in its structured onboarding messages.
#15678 703922d Thanks @christhorwarth! - Read workers.dev URLs from the Worker resource during deployment

Wrangler no longer requires account-level subdomain permission to display Worker and version-preview URLs. It now uses the Worker-scoped URL fields while preserving account-level registration for accounts without a workers.dev subdomain.
Updated dependencies [14d946d]:
- @cloudflare/unenv-preset@2.16.2

`v4.136.0`

Compare Source

Minor Changes

#15713 3c75cad Thanks @jamesopstad! - Identify experimental Build Output resource configs by filename and location

The root remains config.json, Worker configs are now worker.config.json, and Container configs are now container.config.json. Resource configs no longer contain top-level type discriminators, while settings and build context are stored together in the root config.
#15713 3c75cad Thanks @jamesopstad! - Define experimental Cloudflare configuration with a single default export

Experimental cloudflare.config.ts files now define settings and resources together in a default-exported defineConfig() call. Add a Worker under worker, add Containers to the containers array, or omit both to provide settings only.
```
import * as entrypoint from "./src/index.ts" with { type: "cf-worker" };

export default defineConfig({
	accountId: "...",
	complianceRegion: "public",
	worker: {
		name: "my-worker",
		compatibilityDate: "2026-09-18",
		entrypoint,
	},
});
```
#15720 35668d7 Thanks @alexkli! - Add experimental --zone and --zone-id flags to wrangler deploy and wrangler triggers deploy to attach a zone to routes passed via --route

Routes passed on the command line were always sent to the Cloudflare API as bare patterns. Zones with an SSL for SaaS entitlement reject such routes with error 10082 ("When using wildcard host ssl for saas entitlement you must specify the zone per route using zone_id or zone_name"), and until now the only way to set a zone was in the config file, which --route overrides.

The new flags are experimental and must be enabled with --experimental-route-zones (alias --x-route-zones). Pass a single zone to apply it to all routes, or one zone per route in the same order as the --route flags:

wrangler deploy --x-route-zones --route "app.example.com/*" --route "api.example.com/*" --zone example.com

wrangler deploy --x-route-zones --route "a.example.com/*" --zone example.com --route "b.example.net/*" --zone example.net

--zone sets zone_name and --zone-id sets zone_id on each route. The two flags cannot be combined, and passing more than one zone requires exactly one per --route. Routes without zone flags behave exactly as before.
#15699 45b3b81 Thanks @skepticfx! - Remove the experimental Container image environment binding

Durable Object-managed Containers now use ctx.container.images without Wrangler generating env.EXPERIMENTAL_CLOUDFLARE_CONTAINER_IMAGES. Update code using the experimental environment binding to read ctx.container.images and regenerate your Worker types.

Version deployments identify managed applications from native named images, and --containers-rollout=none preserves native Container metadata. Containers without named images must first be provisioned with wrangler deploy; versions upload verifies that their applications already exist. The old binding is no longer read or reserved, including on previously uploaded versions. keep_vars retains existing variables as usual; redeploy without it to remove an existing experimental binding.
#15702 8235e6a Thanks @podonnell-dev! - Return structured configuration errors from wrangler preview --json

When a Worker is missing its Preview configuration, JSON mode now returns an error, a suggested_config patch, and any associated onboarding messages without interactive output or terminal formatting. This changes the private-beta Preview command to make automated onboarding reliable.
#15577 731a2ee Thanks @sdnts! - Add support for jurisdictions to Queues subcommands

Patch Changes

#15711 91e2f86 Thanks @ghostwriternr! - Allow local Container images without exposed ports

Wrangler and the Cloudflare Vite plugin no longer reject images that omit Docker EXPOSE metadata. Local Containers can run command-only workloads or serve traffic through workerd without declaring an unused image port.
#15740 c5913a6 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260918.1 ^5.20260921.1

workerd 1.20260918.1 1.20260921.1
#15471 0751490 Thanks @edmundhung! - Fix cf builds for static projects that serve assets from the project root

The experimental Build Output path now omits the reserved .cloudflare directory when the project root is used for static assets. This prevents recursive output copying in Wrangler while preserving the existing behaviour for other asset directories.
#15440 43b1f85 Thanks @HuzaifaAbdulRehman! - Rebase absolute non-JavaScript module specifiers when preserve_file_names is enabled

With preserve_file_names set, a non-JS module imported by an absolute path kept that path as its module name. The build machine's filesystem layout ended up inside the deployed Worker, and the module was never written to --outdir. A local dry run reported success while the upload failed server-side with error code 10021. Tooling that rewrites externals to absolute paths hits this, which is how it was found in @opennextjs/cloudflare with WASM imports.

Absolute specifiers are now rebased to ./<basename>, which is what the hashed branch of the same code already does minus the hash prefix. Relative specifiers keep the behaviour they had.
Updated dependencies [c5913a6, 3c75cad]:
- miniflare@5.20260921.0-alpha

`v4.135.0`

Compare Source

Minor Changes

#15609 1f070c8 Thanks @emily-shen! - Build Containers when emitting experimental Build Output

Wrangler and the Cloudflare Vite plugin now build Dockerfile-backed Container images when experimental Build Output is enabled. Container configs are emitted under .cloudflare/output/v0/containers with local image references, while existing registry references pass through unchanged.
#15329 c4c9b75 Thanks @akshitsinha! - Evaluate Flagship flags locally during development

Flagship bindings now use the local Miniflare store by default in Wrangler and the Vite plugin, keeping development offline and isolated from production flags. Set remote: true on a binding to continue using its remote app.

Use wrangler flagship flags pull <APP_ID> to seed the store from a remote app. Flag management commands also accept --local to read and update the local store directly.
#15701 643e5cc Thanks @WillTaylorDev! - Pass Preview intent to defineWorker and upload its resolved configuration

Preview builds now evaluate programmatic Worker configuration with ctx.isPreview set to true and record that intent in Build Output. The shared Preview uploader deploys the resolved bindings and settings while preserving configured Preview base values when it creates a Preview.

Patch Changes

#15705 a0485d5 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260917.1 ^5.20260918.1

workerd 1.20260917.1 1.20260918.1
#15587 629ddef Thanks @Kuldeeep18! - Fix duration calculation for running workflow instances, steps, and attempts in wrangler workflows instances describe

wrangler workflows instances describe previously distorted the elapsed duration of in-progress instances, steps, and attempts across non-UTC timezones by stripping " GMT" from toUTCString(), causing new Date(...) to parse the timestamp in the local client timezone. The duration is now correctly computed against the current time.
Updated dependencies [a0485d5]:
- miniflare@5.20260918.0-alpha

`v4.134.0`

Compare Source

Minor Changes

#15684 6874aa9 Thanks @Ankcorn! - Add support for configuring real-time Issues with observability.issues.enabled

Wrangler now validates and uploads the Issues setting alongside the existing logs and traces observability options. The experimental configuration format supports the equivalent observability.issues.enabled option.
#15681 d96b319 Thanks @podonnell-dev! - Mark wrangler preview commands as open beta

Wrangler now labels Preview commands as open beta in help output and command warnings, matching the feature's public availability.
#15673 2b39fc2 Thanks @ghostwriternr! - Support explicit named Container image selection in Wrangler local development

Wrangler builds or pulls named images configured through Wrangler JSON or TOML and exposes their local tags through ctx.container.images. Pass one of those references to ctx.container.start({ image }) to select the image.

This extends the experimental Durable Object-managed Containers interface. Named images are opt-in and do not become the Container's default image. A Container without a default image must supply an image or full Container snapshot when starting.

Patch Changes

#15689 876eea1 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260916.1 ^5.20260917.1

workerd 1.20260916.1 1.20260917.1
Updated dependencies [2298cf1, 876eea1]:
- miniflare@5.20260917.0-alpha

`v4.133.0`

Compare Source

Minor Changes

#15600 bac0c6a Thanks @podonnell-dev! - Add placement configuration for Previews

You can now configure placement in the previews block. Preview-specific placement overrides the top-level placement configuration for Preview Defaults and deployments.
#15600 bac0c6a Thanks @podonnell-dev! - Improve onboarding guidance for Previews (when previews block is missing from configuration file)

When a local previews block is absent, Wrangler writes the Preview Base configuration to the local config file. When no Preview Base configuration exists, Wrangler prints a placeholder configuration derived from production bindings and warns against reusing production binding configuration.

Patch Changes

#15483 71b6f10 Thanks @tpmmorris! - Align Local Explorer Workflow instance status requests with production

Local Explorer and Wrangler local mode now use the production-compatible status request field for pausing, resuming, restarting, and terminating Workflow instances. Direct Local Explorer API consumers must replace the previous action field with status.

Successful Local Explorer status updates now return the production-compatible instance status and response timestamp instead of the local-only result.success acknowledgement.
#15665 ad23e6e Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260915.1 ^5.20260916.1

workerd 1.20260915.1 1.20260916.1
#15655 be2437a Thanks @WillTaylorDev! - Send exports with Worker Preview deployments

wrangler preview dropped the exports block from deployment requests. Durable Objects reached through ctx.exports had no Preview namespace, and cache settings for each entrypoint were lost too.
Updated dependencies [71b6f10, ad23e6e, 6f3d7b5]:
- miniflare@5.20260916.0-alpha

`v4.132.0`

Compare Source

Minor Changes

#14587 76c0ce6 Thanks @MattieTK! - Categorise the positional path argument to wrangler deploy and wrangler versions upload in command telemetry

Command telemetry now records a coarse category for the

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Zurich)

Branch creation
- "after 2pm on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-31T20:29:51Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: wrangler@4.140.0
npm error Found: @cloudflare/workers-types@5.20260804.1
npm error node_modules/@cloudflare/workers-types
npm error   @cloudflare/workers-types@"5.20260804.1" from the root project
npm error
npm error Could not resolve dependency:
npm error peerOptional @cloudflare/workers-types@"^5.20260923.1" from wrangler@4.140.0
npm error node_modules/wrangler
npm error   dev wrangler@"4.140.0" from the root project
npm error
npm error Conflicting peer dependency: @cloudflare/workers-types@5.20260925.1
npm error node_modules/@cloudflare/workers-types
npm error   peerOptional @cloudflare/workers-types@"^5.20260923.1" from wrangler@4.140.0
npm error   node_modules/wrangler
npm error     dev wrangler@"4.140.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-10-09T07_04_38_316Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-09T07_04_38_316Z-debug-0.log

renovate Bot force-pushed the renovate-external-dev-fixes branch 5 times, most recently from 682c314 to 7b78bc6 Compare September 8, 2026 09:29

renovate Bot force-pushed the renovate-external-dev-fixes branch 7 times, most recently from fda43e6 to 030c7ef Compare September 15, 2026 21:35

renovate Bot force-pushed the renovate-external-dev-fixes branch 7 times, most recently from 3288084 to ec1edf3 Compare September 23, 2026 02:29

renovate Bot force-pushed the renovate-external-dev-fixes branch 9 times, most recently from 6f8371e to 04ec941 Compare October 1, 2026 17:11

renovate Bot force-pushed the renovate-external-dev-fixes branch from 04ec941 to 306f4a8 Compare October 2, 2026 15:33

renovate Bot force-pushed the renovate-external-dev-fixes branch 6 times, most recently from 09e4033 to 649f60e Compare October 8, 2026 21:00

chore(deps): update external dev fixes

da7ff92

renovate Bot force-pushed the renovate-external-dev-fixes branch from 649f60e to da7ff92 Compare October 9, 2026 07:04

Navigation Menu

Repository navigation

chore(deps): update external dev fixes - #317

chore(deps): update external dev fixes#317
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-external-dev-fixes

renovate Bot commented Aug 31, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 31, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Dependency	From	To
@cloudflare/workers-types	^5.20260921.1	^5.20260923.1
workerd	1.20260921.1	1.20260923.1

Dependency	From	To
@cloudflare/workers-types	^5.20260918.1	^5.20260921.1
workerd	1.20260918.1	1.20260921.1

Dependency	From	To
@cloudflare/workers-types	^5.20260917.1	^5.20260918.1
workerd	1.20260917.1	1.20260918.1

Dependency	From	To
@cloudflare/workers-types	^5.20260916.1	^5.20260917.1
workerd	1.20260916.1	1.20260917.1

Dependency	From	To
@cloudflare/workers-types	^5.20260915.1	^5.20260916.1
workerd	1.20260915.1	1.20260916.1

Conversation

renovate Bot commented Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Configuration

Uh oh!

renovate Bot commented Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: package-lock.json

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 31, 2026 •

edited

Loading

renovate Bot commented Aug 31, 2026 •

edited

Loading