Skip to content

Bump the npm-patching group with 10 updates#98

Merged
lewisgoddard merged 1 commit intocf-pagesfrom
dependabot/npm_and_yarn/npm-patching-6a5205611f
Apr 26, 2026
Merged

Bump the npm-patching group with 10 updates#98
lewisgoddard merged 1 commit intocf-pagesfrom
dependabot/npm_and_yarn/npm-patching-6a5205611f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Bumps the npm-patching group with 10 updates:

Package From To
wrangler 4.83.0 4.85.0
@cloudflare/unenv-preset 2.16.0 2.16.1
@cloudflare/workerd-darwin-64 1.20260415.1 1.20260424.1
@cloudflare/workerd-darwin-arm64 1.20260415.1 1.20260424.1
@cloudflare/workerd-linux-64 1.20260415.1 1.20260424.1
@cloudflare/workerd-linux-arm64 1.20260415.1 1.20260424.1
@cloudflare/workerd-windows-64 1.20260415.1 1.20260424.1
@scure/base 2.0.0 2.2.0
miniflare 4.20260415.0 4.20260424.0
workerd 1.20260415.1 1.20260424.1

Updates wrangler from 4.83.0 to 4.85.0

Release notes

Sourced from wrangler's releases.

wrangler@4.84.1

Patch Changes

  • #13615 8fec8b8 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260420.1 1.20260421.1

  • #13572 a610749 Thanks @​dario-piotrowicz! - Fix wrangler types --check ignoring --env-interface and secondary --config entries

    Previously, wrangler types --check ran its staleness check before resolving the --env-interface flag and before collecting secondary worker entry points from additional --config arguments. This meant it could incorrectly report types as up to date when they were actually stale due to a different env interface name or changes in secondary worker configs. The check now runs after all options are fully resolved, so it correctly detects mismatches.

  • Updated dependencies [8fec8b8, 2f3d7b9]:

    • miniflare@4.20260421.0

wrangler@4.84.0

Minor Changes

  • #13326 4a9ba90 Thanks @​mattzcarey! - Add Artifacts binding support to wrangler

    You can now configure Artifacts bindings in your wrangler configuration:

    // wrangler.jsonc
{
  "artifacts": [{ "binding": "MY_ARTIFACTS", "namespace": "default" }]
}

    Type generation produces the correct Artifacts type reference from the workerd type definitions:

    interface Env {
  MY_ARTIFACTS: Artifacts;
}

  • #13567 d8c895a Thanks @​gpanders! - Rename the documented containers SSH config option to ssh

    Wrangler now accepts and documents containers.ssh in config files while continuing to accept containers.wrangler_ssh as an undocumented backwards-compatible alias. Wrangler still sends and reads wrangler_ssh when talking to the containers API.

  • #13571 7dc0433 Thanks @​must108! - Add regional and jurisdictional placement constraints for Containers. Users can now set constraints.regions and constraints.jurisdiction in wrangler config to control where containers run.

  • #12600 50bf819 Thanks @​penalosa! - Use workerd's debug port to power cross-process service bindings, Durable Objects, and tail workers via the dev registry. This enables Durable Object RPC via the dev registry, and is an overall stability improvement.

Patch Changes

... (truncated)

Commits

Updates @cloudflare/unenv-preset from 2.16.0 to 2.16.1

Changelog

Sourced from @​cloudflare/unenv-preset's changelog.

2.16.1

Patch Changes

Commits

Updates @cloudflare/workerd-darwin-64 from 1.20260415.1 to 1.20260424.1

Release notes

Sourced from @​cloudflare/workerd-darwin-64's releases.

v1.20260424.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260423.1...v1.20260424.1

v1.20260423.1

Full Changelog: cloudflare/workerd@v1.20260422.2...v1.20260423.1

v1.20260422.2

What's Changed

Full Changelog: cloudflare/workerd@v1.20260422.1...v1.20260422.2

v1.20260422.1

What's Changed

New Contributors

Full Changelog: cloudflare/workerd@v1.20260421.1...v1.20260422.1

v1.20260421.1

What's Changed

... (truncated)

Commits
  • c63bb6e Release 2026-04-24
  • 73c75fa Dead code removal: remove no longer used implementations of send and sendBatc...
  • 8af12c7 [build] Update Rust, workerd-cxx
  • a35dc68 Support 'primary-only' routing mode on workerd
  • 4028835 Merge pull request #6648 from cloudflare/kenton/debug-external-pusher
  • 0d86b66 Try to debug "pushed external is not a byte stream".
  • 9e6e5cb [build] Remove obsolete crate build files
  • de2990b [build] Adopt build without vendored Rust files
  • b322726 Release 2026-04-23
  • f936a1d Revert "CACHE-13504: remove gate from request cf" (#6642)
  • Additional commits viewable in compare view

Updates @cloudflare/workerd-darwin-arm64 from 1.20260415.1 to 1.20260424.1

Release notes

Sourced from @​cloudflare/workerd-darwin-arm64's releases.

v1.20260424.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260423.1...v1.20260424.1

v1.20260423.1

Full Changelog: cloudflare/workerd@v1.20260422.2...v1.20260423.1

v1.20260422.2

What's Changed

Full Changelog: cloudflare/workerd@v1.20260422.1...v1.20260422.2

v1.20260422.1

What's Changed

New Contributors

Full Changelog: cloudflare/workerd@v1.20260421.1...v1.20260422.1

v1.20260421.1

What's Changed

... (truncated)

Commits
  • c63bb6e Release 2026-04-24
  • 73c75fa Dead code removal: remove no longer used implementations of send and sendBatc...
  • 8af12c7 [build] Update Rust, workerd-cxx
  • a35dc68 Support 'primary-only' routing mode on workerd
  • 4028835 Merge pull request #6648 from cloudflare/kenton/debug-external-pusher
  • 0d86b66 Try to debug "pushed external is not a byte stream".
  • 9e6e5cb [build] Remove obsolete crate build files
  • de2990b [build] Adopt build without vendored Rust files
  • b322726 Release 2026-04-23
  • f936a1d Revert "CACHE-13504: remove gate from request cf" (#6642)
  • Additional commits viewable in compare view

Updates @cloudflare/workerd-linux-64 from 1.20260415.1 to 1.20260424.1

Release notes

Sourced from @​cloudflare/workerd-linux-64's releases.

v1.20260424.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260423.1...v1.20260424.1

v1.20260423.1

Full Changelog: cloudflare/workerd@v1.20260422.2...v1.20260423.1

v1.20260422.2

What's Changed

Full Changelog: cloudflare/workerd@v1.20260422.1...v1.20260422.2

v1.20260422.1

What's Changed

New Contributors

Full Changelog: cloudflare/workerd@v1.20260421.1...v1.20260422.1

v1.20260421.1

What's Changed

... (truncated)

Commits
  • c63bb6e Release 2026-04-24
  • 73c75fa Dead code removal: remove no longer used implementations of send and sendBatc...
  • 8af12c7 [build] Update Rust, workerd-cxx
  • a35dc68 Support 'primary-only' routing mode on workerd
  • 4028835 Merge pull request #6648 from cloudflare/kenton/debug-external-pusher
  • 0d86b66 Try to debug "pushed external is not a byte stream".
  • 9e6e5cb [build] Remove obsolete crate build files
  • de2990b [build] Adopt build without vendored Rust files
  • b322726 Release 2026-04-23
  • f936a1d Revert "CACHE-13504: remove gate from request cf" (#6642)
  • Additional commits viewable in compare view

Updates @cloudflare/workerd-linux-arm64 from 1.20260415.1 to 1.20260424.1

Release notes

Sourced from @​cloudflare/workerd-linux-arm64's releases.

v1.20260424.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260423.1...v1.20260424.1

v1.20260423.1

Full Changelog: cloudflare/workerd@v1.20260422.2...v1.20260423.1

v1.20260422.2

What's Changed

Full Changelog: cloudflare/workerd@v1.20260422.1...v1.20260422.2

v1.20260422.1

What's Changed

New Contributors

Full Changelog: cloudflare/workerd@v1.20260421.1...v1.20260422.1

v1.20260421.1

What's Changed

... (truncated)

Commits
  • c63bb6e Release 2026-04-24
  • 73c75fa Dead code removal: remove no longer used implementations of send and sendBatc...
  • 8af12c7 [build] Update Rust, workerd-cxx
  • a35dc68 Support 'primary-only' routing mode on workerd
  • 4028835 Merge pull request #6648 from cloudflare/kenton/debug-external-pusher
  • 0d86b66 Try to debug "pushed external is not a byte stream".
  • 9e6e5cb [build] Remove obsolete crate build files
  • de2990b [build] Adopt build without vendored Rust files
  • b322726 Release 2026-04-23
  • f936a1d Revert "CACHE-13504: remove gate from request cf" (#6642)
  • Additional commits viewable in compare view

Updates @cloudflare/workerd-windows-64 from 1.20260415.1 to 1.20260424.1

Release notes

Sourced from @​cloudflare/workerd-windows-64's releases.

v1.20260424.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260423.1...v1.20260424.1

v1.20260423.1

Full Changelog: cloudflare/workerd@v1.20260422.2...v1.20260423.1

v1.20260422.2

What's Changed

Full Changelog: cloudflare/workerd@v1.20260422.1...v1.20260422.2

v1.20260422.1

What's Changed

New Contributors

Full Changelog: cloudflare/workerd@v1.20260421.1...v1.20260422.1

v1.20260421.1

What's Changed

... (truncated)

Commits
  • c63bb6e Release 2026-04-24
  • 73c75fa Dead code removal: remove no longer used implementations of send and sendBatc...
  • 8af12c7 [build] Update Rust, workerd-cxx
  • a35dc68 Support 'primary-only' routing mode on workerd
  • 4028835 Merge pull request #6648 from cloudflare/kenton/debug-external-pusher
  • 0d86b66 Try to debug "pushed external is not a byte stream".
  • 9e6e5cb [build] Remove obsolete crate build files
  • de2990b [build] Adopt build without vendored Rust files
  • b322726 Release 2026-04-23
  • f936a1d Revert "CACHE-13504: remove gate from request cf" (#6642)
  • Additional commits viewable in compare view

Updates @scure/base from 2.0.0 to 2.2.0

Release notes

Sourced from @​scure/base's releases.

2.2.0

  • April 2026 self-audit (all files): no major issues found
    • Audited for spec compliance and security
  • Fix all Byte Array types, to ensure proper work in both TypeScript 5.6 & TypeScript 5.9+
    • TS 5.6 has Uint8Array, while TS 5.9+ made it generic Uint8Array<ArrayBuffer>
    • This creates incompatibility of code between versions
    • Previously, it was hard to use and constantly emitted errors similar to TS2345
    • See typescript#62240 for more context
  • Fix compilation issues on TypeScript v6
  • Improve tree-shaking, reduce bundle sizes
  • utf8: make decoder strict, use isWellFormed (polyfilled in some envs)
  • Add strict ascii decoder (char range 0..127)
  • Bech32 examples in the docs by @​davay42 in paulmillr/scure-base#44
  • Add overload to Bech32.decode to handle arbitrary string input by @​webmaster128 in paulmillr/scure-base#45
  • perf: trust Uint8Array.fromBase64 to check non-whitespace chars by @​ChALkeR in paulmillr/scure-base#47

New Contributors

(We're skipping v2.1, to align with other noble / scure packages)

Full Changelog: paulmillr/scure-base@2.0.0...2.2.0

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​scure/base since your current version.


Updates miniflare from 4.20260415.0 to 4.20260424.0

Release notes

Sourced from miniflare's releases.

miniflare@4.20260421.0

Patch Changes

  • #13615 8fec8b8 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260420.1 1.20260421.1

  • #13613 2f3d7b9 Thanks @​dario-piotrowicz! - Fix sourcemap warnings caused by references to files outside the package boundary

    miniflare's bundled sourcemap contained sources entries pointing into node_modules dependencies (zod, capnp-es, chokidar, etc.), which produced dozens of warnings in pnpm monorepos when tools like Vite or Vitest validated the sourcemaps at runtime. The build now inlines sourcesContent and patches any null entries left by upstream dependencies that don't publish their original source files

miniflare@4.20260420.0

Minor Changes

  • #13326 4a9ba90 Thanks @​mattzcarey! - Add Artifacts binding support to wrangler

    You can now configure Artifacts bindings in your wrangler configuration:

    // wrangler.jsonc
{
  "artifacts": [{ "binding": "MY_ARTIFACTS", "namespace": "default" }]
}

    Type generation produces the correct Artifacts type reference from the workerd type definitions:

    interface Env {
  MY_ARTIFACTS: Artifacts;
}

  • #12600 50bf819 Thanks @​penalosa! - Use workerd's debug port to power cross-process service bindings, Durable Objects, and tail workers via the dev registry. This enables Durable Object RPC via the dev registry, and is an overall stability improvement.

Patch Changes

  • #13515 b35617b Thanks @​petebacondarwin! - fix: close all open handles on dispose to prevent process hangs

    Several resources were not being properly cleaned up during Miniflare.dispose(), which could leave the Node.js event loop alive and cause processes (particularly tests using node --test) to hang instead of exiting cleanly:

    • The internal undici Pool used to dispatch fetch requests to the workerd runtime was not closed. Lingering TCP sockets from this pool could keep the event loop alive indefinitely.
    • WebSocketServer instances for live reload and WebSocket proxying were never closed, leaving connected clients' sockets open.
    • The InspectorProxy was not closing its runtime WebSocket connection, relying on process death to break the connection.
    • HyperdriveProxyController.dispose() had a missing return in a .map() callback, causing Promise.allSettled to resolve immediately without waiting for net.Server instances to close.
    • ProxyClientBridge was not clearing its finalization batch setTimeout during disposal.

... (truncated)

Changelog

Sourced from miniflare's changelog.

4.20260424.0

Minor Changes

  • #13234 7fc50c1 Thanks @​natewong1313! - Support serving videos locally, add publicUrl option for stable stream preview URLs, and add caption upload support via ReadableStream

    Videos uploaded while in local mode are now served at /cdn-cgi/mf/stream/<video-id>/watch. The preview field in StreamVideo is now directly fetchable during development.

    A new publicUrl option on MiniflareOptions allows callers (e.g. Wrangler, the Vite plugin) to advertise a stable, externally-reachable URL for the Miniflare instance. When set, Stream preview URLs use this value instead of the runtime entry URL, so they remain valid across runtime restarts and port changes. The same value is also exposed as a mutable miniflare.publicUrl property.

    The helper functions buildPublicUrl and getLocallyAccessibleHost are now exported from miniflare, enabling consumers to construct client-reachable URLs that correctly handle IPv6 addresses (bracketing) and wildcard listen addresses (0.0.0.0, ::, * → 127.0.0.1).

    Caption uploads via ReadableStream are now supported in local mode. They no longer throw a "not supported in local mode" error.

Patch Changes

@dependabot
Bump the npm-patching group with 10 updates
8068cff 
Bumps the npm-patching group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.83.0` | `4.85.0` |
| [@cloudflare/unenv-preset](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/unenv-preset) | `2.16.0` | `2.16.1` |
| [@cloudflare/workerd-darwin-64](https://github.com/cloudflare/workerd) | `1.20260415.1` | `1.20260424.1` |
| [@cloudflare/workerd-darwin-arm64](https://github.com/cloudflare/workerd) | `1.20260415.1` | `1.20260424.1` |
| [@cloudflare/workerd-linux-64](https://github.com/cloudflare/workerd) | `1.20260415.1` | `1.20260424.1` |
| [@cloudflare/workerd-linux-arm64](https://github.com/cloudflare/workerd) | `1.20260415.1` | `1.20260424.1` |
| [@cloudflare/workerd-windows-64](https://github.com/cloudflare/workerd) | `1.20260415.1` | `1.20260424.1` |
| [@scure/base](https://github.com/paulmillr/scure-base) | `2.0.0` | `2.2.0` |
| [miniflare](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/miniflare) | `4.20260415.0` | `4.20260424.0` |
| [workerd](https://github.com/cloudflare/workerd) | `1.20260415.1` | `1.20260424.1` |


Updates `wrangler` from 4.83.0 to 4.85.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/HEAD/packages/wrangler)

Updates `@cloudflare/unenv-preset` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/unenv-preset/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/create-cloudflare@2.16.1/packages/unenv-preset)

Updates `@cloudflare/workerd-darwin-64` from 1.20260415.1 to 1.20260424.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260415.1...v1.20260424.1)

Updates `@cloudflare/workerd-darwin-arm64` from 1.20260415.1 to 1.20260424.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260415.1...v1.20260424.1)

Updates `@cloudflare/workerd-linux-64` from 1.20260415.1 to 1.20260424.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260415.1...v1.20260424.1)

Updates `@cloudflare/workerd-linux-arm64` from 1.20260415.1 to 1.20260424.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260415.1...v1.20260424.1)

Updates `@cloudflare/workerd-windows-64` from 1.20260415.1 to 1.20260424.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260415.1...v1.20260424.1)

Updates `@scure/base` from 2.0.0 to 2.2.0
- [Release notes](https://github.com/paulmillr/scure-base/releases)
- [Commits](paulmillr/scure-base@2.0.0...2.2.0)

Updates `miniflare` from 4.20260415.0 to 4.20260424.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/miniflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/HEAD/packages/miniflare)

Updates `workerd` from 1.20260415.1 to 1.20260424.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260415.1...v1.20260424.1)

---
updated-dependencies:
- dependency-name: wrangler
  dependency-version: 4.85.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: "@cloudflare/unenv-preset"
  dependency-version: 2.16.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm-patching
- dependency-name: "@cloudflare/workerd-darwin-64"
  dependency-version: 1.20260424.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: "@cloudflare/workerd-darwin-arm64"
  dependency-version: 1.20260424.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: "@cloudflare/workerd-linux-64"
  dependency-version: 1.20260424.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: "@cloudflare/workerd-linux-arm64"
  dependency-version: 1.20260424.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: "@cloudflare/workerd-windows-64"
  dependency-version: 1.20260424.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: "@scure/base"
  dependency-version: 2.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: miniflare
  dependency-version: 4.20260424.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
- dependency-name: workerd
  dependency-version: 1.20260424.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm-patching
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 26, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Apr 26, 2026

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs		 puff-serverless 8068cff Commit Preview URL

Branch Preview URL		 Apr 26 2026, 03:24 AM

@lewisgoddard lewisgoddard merged commit 018198f into cf-pages Apr 26, 2026
3 checks passed
@lewisgoddard lewisgoddard deleted the dependabot/npm_and_yarn/npm-patching-6a5205611f branch April 26, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lewisgoddard lewisgoddard lewisgoddard approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lewisgoddard