Skip to content

build(deps-dev): bump the cloudflare-toolchain group across 1 directory with 4 updates - #23

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cloudflare-toolchain-18c92eedff
Closed

build(deps-dev): bump the cloudflare-toolchain group across 1 directory with 4 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cloudflare-toolchain-18c92eedff

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the cloudflare-toolchain group with 4 updates in the / directory: @cloudflare/vite-plugin, vinext, vite and wrangler.

Updates @cloudflare/vite-plugin from 1.46.0 to 1.49.1

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.49.1

Patch Changes

  • #14586 5a56dda Thanks @​emily-shen! - Rewrite local testing paths (/cdn-cgi/*)

    Miniflare v5 moved its internal local testing endpoints to /cdn-cgi/local/* (and /__cf_local/* for endpoints that must remain reachable over tunnels) to prevent any potential collision with production routes. wrangler dev and the Vite plugin now transparently rewrite the old paths to the new ones, meaning you can continue to use the old paths without issue.

    These are the new paths:

    • /cdn-cgi/handler/scheduled → /cdn-cgi/local/scheduled
    • /cdn-cgi/handler/email → /cdn-cgi/local/email
    • /cdn-cgi/explorer/* → /cdn-cgi/local/explorer/*
    • /cdn-cgi/mf/scheduled → /cdn-cgi/local/scheduled (Note /cdn-cgi/mf/scheduled is already deprecated)
    • /cdn-cgi/mf/stream/* → /__cf_local/stream/*
    • /cdn-cgi/mf/imagedelivery/* → /__cf_local/imagedelivery/*

  • Updated dependencies [5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda]:

@​cloudflare/vite-plugin@​1.49.0

Minor Changes

  • #14905 b21eac2 Thanks @​jamesopstad! - The experimental build output directory now includes the Worker's configuration at .cloudflare/output/v0/workers/default/config.json instead of .cloudflare/output/v0/workers/<worker-name>/worker.config.json

Patch Changes

@​cloudflare/vite-plugin@​1.48.0

Minor Changes

  • #14883 76e6014 Thanks @​jamesopstad! - Serve the bundled client HTML in dev when Vite's experimental.bundledDev is enabled

    Note that this feature is experimental and subject to change.

Patch Changes

  • #14862 c232d05 Thanks @​petebacondarwin! - Destroy the client socket instead of crashing when a WebSocket upgrade fails

    If dispatchFetch rejected while a WebSocket upgrade was still in flight (for example when Miniflare is disposed during a dev server shutdown or restart), the error escaped the async upgrade handler as an unhandled rejection. This could terminate the dev server process and leaked the client socket. The upgrade handler now catches such failures and tears the socket down cleanly.

  • #14837 de6a951 Thanks @​1rgs! - Fix compatibility with Vite's experimental.bundledDev option. Keep Miniflare, containers, and tunnels alive when a build runs in dev.

    The plugin used the buildEnd hook as its signal that the dev server was closing, and tore down its dev resources there. Vite's experimental.bundledDev runs a build pass during serve, which fires buildEnd while the dev server is still live — so Miniflare was disposed (the next request failed with Expected \miniflare` to be defined`), locally-built container images were removed, and any active tunnel was closed, all mid-serve.

    During serve, these resources are now torn down from a patched server.close. We will replace server patching with first-class APIs when they are added to Vite.

... (truncated)

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.49.1

Patch Changes

  • #14586 5a56dda Thanks @​emily-shen! - Rewrite local testing paths (/cdn-cgi/*)

    Miniflare v5 moved its internal local testing endpoints to /cdn-cgi/local/* (and /__cf_local/* for endpoints that must remain reachable over tunnels) to prevent any potential collision with production routes. wrangler dev and the Vite plugin now transparently rewrite the old paths to the new ones, meaning you can continue to use the old paths without issue.

    These are the new paths:

    • /cdn-cgi/handler/scheduled → /cdn-cgi/local/scheduled
    • /cdn-cgi/handler/email → /cdn-cgi/local/email
    • /cdn-cgi/explorer/* → /cdn-cgi/local/explorer/*
    • /cdn-cgi/mf/scheduled → /cdn-cgi/local/scheduled (Note /cdn-cgi/mf/scheduled is already deprecated)
    • /cdn-cgi/mf/stream/* → /__cf_local/stream/*
    • /cdn-cgi/mf/imagedelivery/* → /__cf_local/imagedelivery/*

  • Updated dependencies [5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda]:

1.49.0

Minor Changes

  • #14905 b21eac2 Thanks @​jamesopstad! - The experimental build output directory now includes the Worker's configuration at .cloudflare/output/v0/workers/default/config.json instead of .cloudflare/output/v0/workers/<worker-name>/worker.config.json

Patch Changes

1.48.0

Minor Changes

  • #14883 76e6014 Thanks @​jamesopstad! - Serve the bundled client HTML in dev when Vite's experimental.bundledDev is enabled

    Note that this feature is experimental and subject to change.

Patch Changes

  • #14862 c232d05 Thanks @​petebacondarwin! - Destroy the client socket instead of crashing when a WebSocket upgrade fails

    If dispatchFetch rejected while a WebSocket upgrade was still in flight (for example when Miniflare is disposed during a dev server shutdown or restart), the error escaped the async upgrade handler as an unhandled rejection. This could terminate the dev server process and leaked the client socket. The upgrade handler now catches such failures and tears the socket down cleanly.

  • #14837 de6a951 Thanks @​1rgs! - Fix compatibility with Vite's experimental.bundledDev option. Keep Miniflare, containers, and tunnels alive when a build runs in dev.

    The plugin used the buildEnd hook as its signal that the dev server was closing, and tore down its dev resources there. Vite's experimental.bundledDev runs a build pass during serve, which fires buildEnd while the dev server is still live — so Miniflare was disposed (the next request failed with Expected \miniflare` to be defined`), locally-built container images were removed, and any active tunnel was closed, all mid-serve.

... (truncated)

Commits

Updates vinext from 0.0.50 to 0.2.1

Release notes

Sourced from vinext's releases.

vinext@0.2.1

Bug Fixes

App Router

  • limit mounted slot cache variants (#2497)
  • omit pending RSC cache state for query renders (#2488)
  • isolate global not-found css (#2444)
  • expose app rewrites to pages data clients (#2468)
  • publish committed no-prefetch navigations (#2469)
  • cache segment prefetches by rendered search params (#2477)
  • skip readiness waits for speculative prerenders (#2457)
  • align app static ISR lifecycle (#2472)
  • reuse metadata rewrite prefetches (#2455)
  • avoid runtime route-tree prefetch sizing (#2467)
  • start optimistic prefetches immediately (#2440)
  • normalize rsc reference validation ids (#2480)
  • send deployment id on RSC responses (#2452)
  • separate header-only full-route rsc requests (#2445)
  • preserve app rewrite filtering (#2441)
  • revalidate dynamic intercepted actions (#2443)
  • evict segment prefetches under memory pressure (#2466)
  • honor basePath false rewrites (#2370)
  • preserve rewritten route identity (#2358)
  • support styled-jsx from next (#2341)

Pages

  • align middleware data prefetch caching (#2451)
  • honor basePath false rewrites (#2442)
  • normalize data routes for trailing slash middleware (#2470)
  • align prerender functional parity (#2471)
  • enforce reactStrictMode by wrapping client root in (#2433)
  • preload initial dev stylesheets (#2423)
  • route dotted dynamic paths in dev (#2424)

Misc

  • fully elide inline type-only import specifiers (#2498)
  • Config: escape destination query params (#2494)
  • Link: avoid reusing dynamic app route prefetches (#2450)
  • Build: handle dynamic requests in JS files with JSX (#1736)
  • Dev: treat .js as JSX in the optimizeDeps scanner (#2434)
  • Config: resolve and bundle extensionless .cjs config imports (#2435)
  • CSS: preserve Sass partial asset URLs (#2338)
  • Link: reuse full prefetch loading shells (#2332)
  • Dev: seed Cloudflare Pages Router worker deps (#2430)
  • Cloudflare: support Sentry request errors on Workers (#2425)
  • use normalizePathSeparators in formatAppFilePath for Windows compatibility (#2426)
  • Routing: use normalizePathSeparators(path.relative) instead of path.posix.relative (#2308)

... (truncated)

Commits
  • 5471b41 chore: version packages (#2428)
  • b7455c3 fix: fully elide inline type-only import specifiers (#2498)
  • 5915c87 fix(app-router): limit mounted slot cache variants (#2497)
  • 336450a fix(config): escape destination query params (#2494)
  • e0db846 fix(cloudflare): respect TPR cache opt-outs (#2493)
  • 20e1076 chore(release): reclassify reactStrictMode entry (#2496)
  • a9a30a5 fix(app-router): omit pending RSC cache state for query renders (#2488)
  • 6c7b71e fix(app-router): isolate global not-found css (#2444)
  • 8b12274 fix(pages): align middleware data prefetch caching (#2451)
  • 6bd1ee0 fix(app-router): expose app rewrites to pages data clients (#2468)
  • Additional commits viewable in compare view

Updates vite from 8.1.5 to 8.2.0

Release notes

Sourced from vite's releases.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.0 (2026-07-30)

Features

  • add input to server.fs.allow (#23035) (95a3cda)
  • bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
  • bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
  • config: include column in config incompatibility location (#23064) (8a24572)
  • dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

  • bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
  • deps: update all non-major dependencies (#23069) (4c07b74)
  • hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
  • importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
  • module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
  • server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
  • support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

  • config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

8.2.0-beta.0 (2026-07-22)

Features

  • add input option (#22642) (9beae37)
  • config: warn features incompatible with native loader in bundle loader (#22850) (05302b0)
  • css: export PostCSS config type for type-safe configs (#22792) (302c755)
  • dev: label network URLs with their interface name (#22830) (78accc4)
  • optimizer: support aube lockfile (#22813) (6319827)
  • optimizer: support nub lockfile (#22891) (65d3604)
  • update rolldown-related dependencies and use client-side HMR in bundled-dev (#22961) (960e9ef)
  • wasm: expand test suite, unwrap WebAssembly.Global and enable js-string builtins (#22674) (9e79b51)

Bug Fixes

Performance Improvements

... (truncated)

Commits

Updates wrangler from 4.113.0 to 4.117.0

Release notes

Sourced from wrangler's releases.

wrangler@4.117.0

Minor Changes

  • #14586 5a56dda Thanks @​emily-shen! - Remove containerEngine from the worker options returned by unstable_getMiniflareWorkerOptions

    unstable_getMiniflareWorkerOptions no longer includes containerEngine in the returned workerOptions, since the container engine is a Miniflare instance-wide setting rather than a per-worker one. Callers that build a Miniflare instance from these options should set containerEngine at the top level instead.

Patch Changes

  • #14586 5a56dda Thanks @​emily-shen! - Rewrite local testing paths (/cdn-cgi/*)

    Miniflare v5 moved its internal local testing endpoints to /cdn-cgi/local/* (and /__cf_local/* for endpoints that must remain reachable over tunnels) to prevent any potential collision with production routes. wrangler dev and the Vite plugin now transparently rewrite the old paths to the new ones, meaning you can continue to use the old paths without issue.

    These are the new paths:

    • /cdn-cgi/handler/scheduled → /cdn-cgi/local/scheduled
    • /cdn-cgi/handler/email → /cdn-cgi/local/email
    • /cdn-cgi/explorer/* → /cdn-cgi/local/explorer/*
    • /cdn-cgi/mf/scheduled → /cdn-cgi/local/scheduled (Note /cdn-cgi/mf/scheduled is already deprecated)
    • /cdn-cgi/mf/stream/* → /__cf_local/stream/*
    • /cdn-cgi/mf/imagedelivery/* → /__cf_local/imagedelivery/*

  • Updated dependencies [5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda]:

wrangler@4.116.0

Minor Changes

  • #14907 beec0fb Thanks @​NuroDev! - Avoid Worker and workers.dev naming prompts in agent-driven deploys

    Wrangler now derives the Worker name from the project and automatically registers the same project-derived workers.dev account subdomain on a first deploy when running in a detected agent environment. The deploy output explains how to change both names.

  • #14905 b21eac2 Thanks @​jamesopstad! - The experimental build output directory now includes the Worker's configuration at .cloudflare/output/v0/workers/default/config.json instead of .cloudflare/output/v0/workers/<worker-name>/worker.config.json

  • #14893 bb09f1b Thanks @​apeacock1991! - Graduate wrangler check startup from alpha and show bundle size and a local timing summary

    The command no longer prints an alpha warning. It now reports its local profile window, sampled active, garbage collection, and idle time alongside the raw and compressed bundle sizes. The existing measurement warning continues to distinguish these local measurements from startup time measured on Cloudflare.

  • #14685 01d7020 Thanks @​edmundhung! - Add support for dispatching email handlers with createTestHarness

    You can now call server.getWorker().email({ from, to, raw }) to dispatch directly to a Worker's email() handler and inspect its outcome, rejection reason, forwarded messages, and replies.

    const result = await server.getWorker().email({
  from: "sender@example.com",
  to: "inbox@example.com",
  raw: [
    "From: Sender <sender@example.com>",
    "To: Inbox <inbox@example.com>",
    "Message-ID: <test@example.com>",

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the cloudflare-toolchain group across 1 directo…
dab4e70 
…ry with 4 updates

Bumps the cloudflare-toolchain group with 4 updates in the / directory: [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare), [vinext](https://github.com/cloudflare/vinext), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).


Updates `@cloudflare/vite-plugin` from 1.46.0 to 1.49.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.49.1/packages/vite-plugin-cloudflare)

Updates `vinext` from 0.0.50 to 0.2.1
- [Release notes](https://github.com/cloudflare/vinext/releases)
- [Commits](https://github.com/cloudflare/vinext/compare/v0.0.50...vinext@0.2.1)

Updates `vite` from 8.1.5 to 8.2.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite)

Updates `wrangler` from 4.113.0 to 4.117.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.117.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.49.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-toolchain
- dependency-name: vinext
  dependency-version: 0.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-toolchain
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-toolchain
- dependency-name: wrangler
  dependency-version: 4.117.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-toolchain
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 17, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/cloudflare-toolchain-18c92eedff branch August 17, 2026 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants