Skip to content

fix(deps): update all non-major dependencies - #1327

Merged
hi-ogawa merged 1 commit into
mainfrom
renovate/all-minor-patch
Jul 27, 2026
Merged

fix(deps): update all non-major dependencies#1327
hi-ogawa merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@cloudflare/vite-plugin (source) ^1.44.0 → ^1.47.0 age confidence devDependencies minor
@playwright/test (source) ^1.61.1 → ^1.62.0 age confidence devDependencies minor
fs-extra ^11.3.6 → ^11.4.0 age confidence devDependencies minor
globals ^17.7.0 → ^17.8.0 age confidence devDependencies minor
lint-staged ^17.1.0 → ^17.2.0 age confidence devDependencies minor
oxfmt (source) ^0.58.0 → ^0.60.0 age confidence devDependencies minor
playwright-chromium (source) ^1.61.1 → ^1.62.0 age confidence devDependencies minor
rolldown (source) ^1.1.5 → ^1.2.0 age confidence devDependencies minor
srvx (source) ^0.11.22 → ^0.12.4 age confidence dependencies minor
styled-components (source) ^6.4.3 → ^6.4.4 age confidence dependencies patch
tsdown (source) ^0.22.7 → ^0.22.14 age confidence devDependencies patch
typescript-eslint (source) ^8.64.0 → ^8.65.0 age confidence devDependencies minor
vite (source) ^8.1.4 → ^8.1.5 age confidence devDependencies patch
wrangler (source) ^4.110.0 → ^4.114.0 age confidence devDependencies minor
zizmorcore/zizmor-action v0.5.7 → v0.6.1 age confidence action minor

Release Notes

cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.47.0

Compare Source

Minor Changes

  • #​14633 3203b5d Thanks @​nickpatt! - Add local-dev observability

    wrangler dev and the Vite plugin now capture a trace for every local Worker invocation - spans, logs, and console.* output, including requests that cross worker or Durable Object boundaries.

    You can explore this data two ways:

    • A new Observability tab in the Local Explorer, with a Traces view (recent invocations, an inline timeline waterfall, and filters) and an Events view.
    • A read-only SQL endpoint at /cdn-cgi/explorer/api/local/observability/query, discoverable via the Local Explorer's OpenAPI document, so coding agents and tools can query the same spans and logs tables.

    While this is in testing it's off by default; set X_LOCAL_OBSERVABILITY=true to turn it on. It will be on by default in the public release.

Patch Changes

  • #​14792 c4bacec Thanks @​matthewp! - Recover local development after the Workers runtime crashes

    Previously, an unexpected workerd crash left Miniflare running but unable to serve subsequent requests. Miniflare now restarts workerd after post-startup crashes, while continuing to surface startup crashes as fatal errors.

    The Cloudflare Vite plugin also restarts the Vite development server after workerd recovers so its environments, hot channels, and module runners are recreated.

  • Updated dependencies [246ce92, c38a2c3, 8416b33, c079ba3, 4683ff8, 95b026e, 02232f3, c4bacec, f8a8c2c, 3203b5d]:

    • wrangler@​4.114.0
    • miniflare@​4.20260722.0

v1.46.0

Compare Source

Minor Changes

  • #​14724 a50f73a Thanks @​jamesopstad! - Add a settings export to the experimental cloudflare.config.ts config

    Account-level settings (accountId, complianceRegion) now live in a dedicated, named settings export authored via defineSettings, rather than on the Worker config. A cloudflare.config.ts can export at most one settings object; the Worker itself is the default export.

    // cloudflare.config.ts
import { defineSettings, defineWorker } from "wrangler/experimental-config";
import * as entrypoint from "./src/index.ts" with { type: "cf-worker" };

export const settings = defineSettings({
	accountId: "<your-account-id>",
});

export default defineWorker({
	name: "my-worker",
	entrypoint,
	compatibilityDate: "2026-05-18",
});

    This is only used behind the experimental new-config path (wrangler --experimental-new-config and the @cloudflare/vite-plugin experimental.newConfig option).

Patch Changes

v1.45.1

Compare Source

Patch Changes

  • #​14610 e727842 Thanks @​martijnwalraven! - Keep watching config changes after a failed dev server restart

    Previously, when a config change made the dev server restart fail — for example because the updated Worker config was invalid — the plugin stopped watching config changes entirely: the change handler (covering the Worker config files, local dev vars, and the assets configuration) removed itself before restarting, and only a successfully created server would register a fresh one. Since Vite keeps the current server running when a restart fails, every subsequent config change (including the one that fixes the config) was silently ignored for the rest of the session.

    The handler now stays registered and guards against re-entrant restarts instead, so fixing the config restarts the dev server as expected.

  • #​14418 cb30df3 Thanks @​matthewdavidrodgers! - Improve routing performance for Workers with assets

    Reduce request handling latency by streamlining the router Worker's request path. The loopback infrastructure remains available for future use.

  • Updated dependencies [34e696d, d39ae01, 3de70df, c79504f, 9f04a7e, 9f04a7e, cb30df3, cb6c3f9, c7dbe1a, 3f3afbb, e6fbc4e, 4e1a7a7, 9f04a7e]:

    • miniflare@​4.20260714.0
    • wrangler@​4.112.0

v1.45.0

Compare Source

Minor Changes

  • #​14652 317ce1f Thanks @​jamesopstad! - Append Workers runtime types to the generated types when using experimental.newConfig, with a new types.includeRuntime option

    When using the experimental new config (cloudflare.config.ts), the plugin now appends the Workers runtime types (generated from your compatibility date and flags) to worker-configuration.d.ts, alongside the types inferred from your config. This is controlled by a new experimental.newConfig.types.includeRuntime option, which defaults to true.

    As part of this change, types are now generated only during vite dev (not vite build), since compatibility settings are resolved from the active dev session. This affects the experimental new config path only.

Patch Changes

  • #​14588 eb99ab1 Thanks @​emily-shen! - fix: Respect auth profiles when using remote bindings in the Vite plugin

    Auth profiles (configured via wrangler auth create and wrangler auth activate) were previously being ignored when using remote bindings with the Vite plugin. This is now fixed.

    Note that the profile directory is resolved based on the Vite project root.

  • #​14645 cbdd107 Thanks @​jamesopstad! - Fix load time crash on Node.js versions earlier than 22.15

    The plugin eagerly imported registerHooks from node:module, which only exists on Node.js v22.15.0+. registerHooks is now read lazily, meaning that missing support is only surfaced when using experimental.newConfig.

  • Updated dependencies [7692a61, ed33326, 018574b, eb99ab1, cdf3148, 7692a61, 7692a61, 3015320, 899c297, 9da77ac, 317ce1f]:

    • miniflare@​4.20260710.0
    • wrangler@​4.111.0
microsoft/playwright (@​playwright/test)

v1.62.0

Compare Source

🧱 New component testing model

Component testing moves to a stories and galleries model.
A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a

gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates
to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) /
unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an
AbortSignal, letting you
cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);

await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot()
can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');

// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and locator.screenshot() also accept webp as a type,
where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before
reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded,
fixed, or failing through a TestRun object:

class MyReporter {
  async preprocess({ config, suite, testRun }) {
    for (const test of suite.allTests()) {
      if (shouldSkip(test))
        testRun.skip(test);
    }
  }
}
🔁 Isolated retries

New testConfig.retryStrategy controls when failed tests are retried. The default
'immediate' retries as soon as a worker is free; 'isolated' runs all retries at the end,
one by one in a single worker, to minimize interference with the rest of the suite:

// playwright.config.ts
export default defineConfig({
  retries: 2,
  retryStrategy: 'isolated',
});
New APIs
Browser and Context
  • New option credentials includes the context's virtual WebAuthn Credentials (passkeys) in the storage state, so they can be persisted and re-seeded into later contexts.
Actions
  • New scroll option ("auto" | "none") on actions to opt out of Playwright's automatic scroll-into-view.
Network
Evaluation
Command line & MCP
Reporters
  • The HTML report's Merge files grouping — previously only a UI toggle — can now be enabled from the config with the new mergeFiles reporter option:
// playwright.config.ts
export default defineConfig({
  reporter: [['html', { mergeFiles: true }]],
});
Announcements
  • ⚠️ Debian 11 is not supported anymore.
Browser Versions
  • Chromium 151.0.7922.34
  • Mozilla Firefox 153.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 151
  • Microsoft Edge 151
jprichardson/node-fs-extra (fs-extra)

v11.4.0

Compare Source

  • Proper EEXIST error when trying to create a symlink and the dest already exists as a broken symlink (#​925, #​1076)
sindresorhus/globals (globals)

v17.8.0

Compare Source

lint-staged/lint-staged (lint-staged)

v17.2.0

Compare Source

Minor Changes

  • #​1823 ee156cc - The chunking of tasks based on maximum command line argument length has been re-implemented to be more precise. Now the chunking happens based on the final generated command string, instead of just the list of staged files like previously. This benefits mainly Windows platforms and function commands like:

    /** @&#8203;type {import('lint-staged').Configuration} */
export default {
  "*.ts": () => "tsc", // Run "tsc" when any TS file is changed (for entire project)
};

    Where the spawned command is literally "tsc" without any extra arguments. Previously, this was still chunked when a lot of files were staged. Now, it probably won't be chunked because the length of the command is just three letters.

    Also, native JavaScript/Node.js function tasks won't be chunked at all, when previously they were run multiple times when chunked:

    /** @&#8203;type {import('lint-staged').Configuration} */
export default {
  "*.js": {
    title: "Log staged JS files to console",
    task: async (files) => {
      console.log("Staged JS files:", files);
    },
  },
};

v17.1.1

Compare Source

Patch Changes
  • #​1820 a626a9f - It's now possible to set --max-arg-length=Infinity to effectively disable chunking of tasks based on the number of staged files. The parsing and validation of the numeric CLI options --max-arg-length and --concurrency has been improved.
oxc-project/oxc (oxfmt)

v0.60.0

Compare Source

v0.59.0

Compare Source

🐛 Bug Fixes
  • 415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#​24286) (leaysgur)
rolldown/rolldown (rolldown)

v1.2.0

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
⚡ Performance
  • sourcemap: owned merge in SourceJoiner::join (4005->5 allocs/chunk) (#​10250) by @​Boshen
  • avoid redundant sourcemap string copies in collapse and minify paths (#​10093) by @​Boshen
🧪 Testing
⚙️ Miscellaneous Tasks
❤️ New Contributors
h3js/srvx (srvx)

v0.12.4

Compare Source

compare changes

🚀 Enhancements
  • body-limit: Allow injecting the over-limit error (#​282)
❤️ Contributors

v0.12.3

Compare Source

compare changes

🩹 Fixes
  • body-limit: Preserve ServerRequest in limitRequestBody (#​281)
📖 Documentation
❤️ Contributors

v0.12.2

Compare Source

compare changes

🚀 Enhancements
  • Export body size limit helpers via srvx/body-limit (#​280)
🏡 Chore
❤️ Contributors

v0.12.1

Compare Source

compare changes

🔥 Performance
  • node: Fast path for FastResponse.json (2d28bae)
🏡 Chore
  • Apply automated updates (b0e2274)
❤️ Contributors

v0.12.0

Compare Source

compare changes

🚀 Enhancements
  • static: ⚠️ Security hardenings and general improvements (#​252)
  • static: Add Last-Modified and ETag conditional caching (#​269)
  • static: Add opt-in Cache-Control via maxAge/immutable (#​273)
  • log: Flush on default-handled SIGTERM/SIGINT and add batch option (#​274)
  • static: Add byte-range request support (#​275)
🔥 Performance
  • middleware: Precompose the middleware chain at construction time (#​264)
  • log: Batch stdout writes and cache the timestamp (#​266)
🩹 Fixes
  • service-worker: Call respondWith synchronously and drop extension bypass (#​226)
  • node/web: Correct body handling in toFetchHandler compat layer (#​232)
  • Handle file:// entry in loader and node-level TLS in mtls (#​231)
  • node: Prevent body-read crashes and wire corruption in the Node adapter (#​228)
  • Prevent waitUntil leak and reject NaN ports (#​225)
  • cli: Stabilization batch and add CLI test suite (#​234)
  • url: Repair FastURL origin-form string and HTTP/2 char normalization (#​227)
  • Resolve x-forwarded-* hop-aware, right-to-left (#​229)
  • node: Node adapter correctness fixes (statusText, empty body, HEAD streaming, send errors, sync bridge) (#​243)
  • node: Make patchGlobalRequest idempotent (#​255)
  • node/web: Remove "data" listener from the socket it was added to (#​261)
  • node: Guard already-destroyed streamBody cancel against unhandled rejection (#​257)
  • node: Enable SO_REUSEPORT for reusePort option (#​258)
  • node: Don't permanently cache a missed kNeedDrain symbol lookup (#​256)
  • node: Reject body reads after the body is consumed (#​254)
  • node/web: Supply next to connect-style middleware on the synthetic bridge path (#​259)
  • node: Answer 500 for unhandled handler errors (#​251)
  • node: Copy FastResponse init headers instead of adopting them (#​263)
  • node: Keep req.headers live and consistent across _request materialization (#​265)
  • node/web: Strip explicit Transfer-Encoding to avoid corrupting the bridged body (#​268)
  • node/web: Strip hop-by-hop headers from toWebResponse() (#​270)
  • node/web: Stream bridged responses instead of buffering until end() (#​248, #​271)
  • url: Keep searchParams identity and reflect mutations across deopt (#​276)
💅 Refactors
  • Improve edge adapters and tests (#​242)
  • ⚠️ Rename subpath exports to *Middleware / *Plugin (#​278)
📖 Documentation
🏡 Chore
✅ Tests
  • node-adapters: Run fetch(nodeHandler) suite on Deno and Bun in CI (#​272)
🤖 CI
  • Run the full test suite (#​224)
⚠️ Breaking Changes
  • static: ⚠️ Security hardenings and general improvements (#​252)
  • ⚠️ Rename subpath exports to *Middleware / *Plugin (#​278)
❤️ Contributors
styled-components/styled-components (styled-components)

v6.4.4

Compare Source

Patch Changes
  • 537ea42: Reduce TypeScript type-checking cost for styled components, most noticeably styled(Component) wrappers and polymorphic as usage. Large codebases that saw elevated tsc memory and type-instantiation counts get lower type-check memory and time, with no change to the emitted types or runtime behavior.
rolldown/tsdown (tsdown)

v0.22.14

Compare Source

   🚀 Features
  • Add CLI build concurrency option  -  by @​sxzz and Jeroen Zwartepoorte (8a14c)
    View changes on GitHub

v0.22.13

Compare Source

   🚀 Features
  • deps: Support neverBundle: true to externalize all dependencies  -  by @​sxzz (d30a7)
   🐞 Bug Fixes
    View changes on GitHub

v0.22.12

Compare Source

   🚨 Breaking Changes
    View changes on GitHub

v0.22.11

Compare Source

   🚀 Features
    View changes on GitHub

v0.22.10

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.22.9

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v0.22.8

Compare Source

   🚀 Features
   🐞 Bug Fixes
  • config: Concat plugins arrays when merging config  -  by @​sxzz (b1c80)
    View changes on GitHub
typescript-eslint/typescript-eslint (typescript-eslint)

v8.65.0

[Compare Source](https://github.com/proxy/redirect.github.com/t

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3edc003 to 1969152 Compare July 27, 2026 04:05
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1969152 to edb613f Compare July 27, 2026 04:17
@hi-ogawa
hi-ogawa merged commit a00a9f8 into main Jul 27, 2026
23 checks passed
@hi-ogawa
hi-ogawa deleted the renovate/all-minor-patch branch July 27, 2026 04:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hi-ogawa