Skip to content

fix(deps): update workers-sdk derived dependencies - #370

Merged
jamesopstad merged 1 commit into
mainfrom
renovate/workers-sdk
Oct 20, 2026
Merged

jamesopstad merged 1 commit into
mainfrom
renovate/workers-sdk

Conversation

@ant-release-bot

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/autoconfig (source) 0.7.10 → 0.7.11 age confidence
@cloudflare/cli-shared-helpers (source) 0.2.6 → 0.2.7 age confidence
@cloudflare/containers-shared (source) 0.23.0 → 0.23.1 age confidence
@cloudflare/deploy-helpers (source) 0.22.0 → 0.22.1 age confidence
@cloudflare/runtime-types (source) 0.1.13 → 0.1.14 age confidence
@cloudflare/workers-auth (source) 0.14.0 → 0.14.1 age confidence
@cloudflare/workers-utils (source) 0.47.2 → 0.47.3 age confidence
miniflare (source) 5.20261019.0-beta → 5.20261019.1-beta age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

cloudflare/workers-sdk (@​cloudflare/autoconfig)

v0.7.11

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/cli-shared-helpers)

v0.2.7

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/containers-shared)

v0.23.1

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/deploy-helpers)

v0.22.1

Compare Source

Patch Changes
  • #​16370 61fc739 Thanks @​WalshyDev! - Fetch the remote config diff from the configured compliance region

    When a Worker was last deployed from the dashboard, wrangler deploy and wrangler versions upload download its remote configuration to compare with the local one. These requests ignored the compliance_region field in the Wrangler configuration file and only honoured the CLOUDFLARE_COMPLIANCE_REGION environment variable. A FedRAMP High Worker configured through the config file would send them to api.cloudflare.com instead of api.fed.cloudflare.com, and the deploy would fail with authentication errors. They now use the same compliance region as the rest of the deploy.

  • #​16359 262021d Thanks @​tw4! - Stop --strict deploys and version uploads from aborting when the API omits optional binding fields

    Previously, wrangler deploy --strict and wrangler versions upload --strict could report a destructive change for an unchanged configuration, for example an R2 bucket in the default jurisdiction, because a field the API left out was compared as removed. Missing and unset optional fields are now treated as equal, so these commands proceed when the local configuration matches the deployed Worker.

  • Updated dependencies [3464abc, 017bf9b]:

cloudflare/workers-sdk (@​cloudflare/runtime-types)

v0.1.14

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/workers-auth)

v0.14.1

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/workers-utils)

v0.47.3

Compare Source

Patch Changes
  • #​16259 017bf9b Thanks @​NuroDev! - Support Vitest 5 in shared test helpers

    The optional Vitest peer ranges now accept both Vitest 4 and 5, allowing consumers to upgrade without dropping compatibility with Vitest 4.

cloudflare/workers-sdk (miniflare)

v5.20261019.1-beta

Compare Source

Patch Changes
  • #​15708 3464abc Thanks @​samstarling! - Dispose Workflow step results and introspection modifiers after use

    Release RPC resources deterministically during local Workflow execution and introspection. This prevents undisposed RPC warnings and requests being cancelled after their execution context has ended. Live step results retain their original data shape, including typed-array offsets and backing buffers. Callbacks that finish after a step times out also release their results, cancelling unused streams without delaying retries.

    Disposing an introspector still aborts the instance if modifier acquisition failed, without introducing a teardown error. Non-stream results containing function-valued array properties are rejected according to the serialisable-output contract, instead of silently discarding those properties during storage normalisation.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@ant-release-bot ant-release-bot added the dependencies Pull requests that update a dependency file label Oct 20, 2026
@pkg-pr-new

pkg-pr-new Bot commented Oct 20, 2026

Copy link
Copy Markdown
npm i https://pkg.pr.new/cf@370

commit: a8b6c27

@github-actions

Copy link
Copy Markdown
Contributor

cf --help startup

mean stddev min max
PR 273.3 ms 9.2 ms 266.4 ms 309.3 ms
base 272.8 ms 5.1 ms 266.8 ms 285.6 ms

Δ (PR vs base): — +0.6 ms (+0.2%)

Measured with hyperfine on ubuntu-latest (3 warmup runs, 20 timed runs). CI numbers carry ±a few ms of runner jitter; treat small deltas as noise.

@clanky-the-clanker

Copy link
Copy Markdown

✅ Approved — Every workers-sdk package in this pull request moves by one patch version, and the exact pins stay consistent across both workspace packages. The changeset is present, and the workspace's wildcard patch entries still cover the bumped containers-shared and deploy-helpers versions. No issues were found.

The decision is advisory: this comment never approves, blocks or requests changes on the pull request.


✅ All checks passed

🚀 Release: ✅ LGTM

Risk: Low. .changeset/renovate-workers-sdk-b4f2bb49937e.md adds a "cf": patch entry, which is the right bump type for patch-level dependency updates.


🔒 Security: ✅ LGTM

Every version change is a patch bump of a first-party workers-sdk package, pinned to an exact version. The deploy-helpers bump also fixes remote config diff requests ignoring the configured compliance_region.


📖 AGENTS.md: ✅ LGTM

This dependency-only update needs no change to the repository's agent guidance.


📋 Code Quality: ✅ LGTM

This pull request is a patch-level bump of the workers-sdk packages in packages/cli/package.json and packages/wrangler-tests/package.json.

  • Version alignment: miniflare (5.20261019.1-beta) and @cloudflare/workers-utils (0.47.3) move to the same versions in both packages, so the two packages stay in step.
  • Exact pins: the repository's convention of pinning these packages to exact versions is kept.
  • Patched dependencies: pnpm-workspace.yaml registers its patches for @cloudflare/containers-shared@* and @cloudflare/deploy-helpers@* with wildcard ranges, so the patches still apply to 0.23.1 and 0.22.1. The lockfile records a patch_hash for both new versions.
  • Older miniflare in the lockfile: miniflare@5.20261019.0-beta is still in the lockfile because @cloudflare/vite-plugin and wrangler pull it in, and this pull request doesn't touch either. It is not a direct-dependency mismatch.

The upstream changelogs list patch-level changes only: dependency bumps, Vitest 5 peer ranges, a compliance-region fix for the remote config diff in deploy-helpers, and a fix in miniflare for disposing Workflow step resources. The build and tests were not run for this review.


⚡ Performance: ✅ LGTM

Patch-level dependency bumps only, with no expected effect on performance.


📝 Documentation: ✅ LGTM

The changeset lists every bumped package. No documentation update is needed for a dependency-only change.


Reviewed commit: a8b6c275

@ask-bonk

ask-bonk Bot commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

LGTM

github run

@jamesopstad
jamesopstad added this pull request to the merge queue Oct 20, 2026
Merged via the queue into main with commit 02663da Oct 20, 2026
12 checks passed
@jamesopstad
jamesopstad deleted the renovate/workers-sdk branch October 20, 2026 14:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants