Skip to content

fix(deps): update workers-sdk derived dependencies - #493

Merged
petebacondarwin merged 2 commits into
mainfrom
renovate/workers-sdk
Nov 3, 2026
Merged

petebacondarwin merged 2 commits into
mainfrom
renovate/workers-sdk

Conversation

@ant-release-bot

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/autoconfig (source) 0.9.1 → 0.9.2 age confidence
@cloudflare/build-output-utils (source) 0.9.8 → 0.9.9 age confidence
@cloudflare/cli-shared-helpers (source) 0.3.2 → 0.3.3 age confidence
@cloudflare/codemods (source) 0.7.2 → 0.7.3 age confidence
@cloudflare/config (source) 0.30.0 → 0.30.1 age confidence
@cloudflare/containers-shared (source) 0.23.7 → 0.23.8 age confidence
@cloudflare/deploy-helpers (source) 0.24.5 → 0.25.0 age confidence
@cloudflare/runtime-types (source) 0.1.21 → 0.1.22 age confidence
@cloudflare/workers-auth (source) 0.15.5 → 0.15.6 age confidence
@cloudflare/workers-utils (source) 0.51.0 → 0.51.1 age confidence
miniflare (source) 5.20261102.0-beta → 5.20261103.0-beta age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

cloudflare/workers-sdk (@​cloudflare/autoconfig)

v0.9.2

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/build-output-utils)

v0.9.9

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/cli-shared-helpers)

v0.3.3

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/codemods)

v0.7.3

Compare Source

Patch Changes
  • #​16670 b14b9dc Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-03

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

cloudflare/workers-sdk (@​cloudflare/config)

v0.30.1

Compare Source

Patch Changes
  • #​16670 b14b9dc Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-03

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

cloudflare/workers-sdk (@​cloudflare/containers-shared)

v0.23.8

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/deploy-helpers)

v0.25.0

Compare Source

Minor Changes
  • #​16653 8ac43df Thanks @​dario-piotrowicz! - Require explicit route metadata flags when downloading Worker configuration

    fetchWorkerConfig and downloadWorkerConfig now accept separate fetchRoutes and fetchCustomDomains booleans instead of inferring them from an optional local route list. This clarifies which route metadata callers require without changing Wrangler behavior.

Patch Changes
cloudflare/workers-sdk (@​cloudflare/runtime-types)

v0.1.22

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/workers-auth)

v0.15.6

Compare Source

Patch Changes
cloudflare/workers-sdk (@​cloudflare/workers-utils)

v0.51.1

Compare Source

Patch Changes
  • #​16670 b14b9dc Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-03

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

cloudflare/workers-sdk (miniflare)

v5.20261103.0-beta

Compare Source

Minor Changes
Breaking changes

Miniflare v5 no longer exports getNodeCompat, NodeJSCompatMode, or getFreshSourceMapSupport. Add a dependency on @cloudflare/workers-utils and replace the Miniflare imports with:

import {
  getNodeCompat,
  type NodeJSCompatMode,
} from "@cloudflare/workers-utils/node-compat";
import { getFreshSourceMapSupport } from "@cloudflare/workers-utils/sourcemap";

These focused entry points support compatibility checks and isolated source-map handling without loading Miniflare or resolving the workerd binary. The helpers retain their behavior, and Miniflare continues to use the shared source-map helper internally.

  • #​16650 2750917 Thanks @​jeffa5! - Support weighted increments with delta in the emulated Ratelimit binding

    limit() now accepts an optional delta, matching production, so a single call can count for more than one request:

    const { success } = await env.MY_RATE_LIMITER.limit({
      key: userId,
      delta: tokens,
    });

    delta defaults to 1. As in production, the decision is based on the count before the call, so a call is allowed while any headroom remains even if its delta takes the count past the limit, and a rejected call is not counted. Invalid values (zero, negative, non-numeric or larger than a uint32) throw the same errors as production. Previously local development rejected delta with bad rate limit options: [delta].

Patch Changes
  • #​16670 b14b9dc Thanks @​dependabot! - Update DEFAULT_COMPAT_DATE to 2026-11-03

    Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.

  • #​16670 b14b9dc Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20261102.1 ^5.20261103.1
    workerd 1.20261102.1 1.20261103.1

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@ant-release-bot ant-release-bot added the dependencies Pull requests that update a dependency file label Nov 3, 2026
@ant-release-bot
ant-release-bot requested a review from a team as a code owner November 3, 2026 12:33
@ant-release-bot ant-release-bot added the dependencies Pull requests that update a dependency file label Nov 3, 2026
@ant-release-bot
ant-release-bot requested a review from cjol November 3, 2026 12:33
@ask-bonk

ask-bonk Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

LGTM!

github run

@clanky-the-clanker clanky-the-clanker Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Superseded by the review of 225f9edc.

This review, of c5e3f5df

✅ Approved — This is a clean dependency bump with a changeset. Nothing in the repository uses the APIs removed or changed upstream, and no issues were found.

The decision is advisory: this review is a comment and never approves, blocks or requests changes on the pull request.


✅ All checks passed

🚀 Release: ✅ LGTM

Risk: Low. The changeset is present for this dependency update.


🔒 Security: ✅ LGTM

No issues found.


📖 AGENTS.md: ✅ LGTM

No issues found.


📋 Code Quality: ✅ LGTM

No issues found.


⚡ Performance: ✅ LGTM

No issues found.


📝 Documentation: ✅ LGTM

No issues found.


Reviewed commit: c5e3f5df

@clanky-the-clanker clanky-the-clanker Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Superseded by the review of 61881751.

This review, of 225f9edc

✅ Approved — This is a clean dependency bump with a changeset. The patch files only have refreshed hunk offsets, and nothing in the repository uses the APIs that were removed or changed upstream.

The decision is advisory: this review is a comment and never approves, blocks or requests changes on the pull request.


✅ All checks passed

🚀 Release: ✅ LGTM

Risk: Low. The changeset is present for this dependency update.


🔒 Security: ✅ LGTM

No security concerns in this dependency update.


📖 AGENTS.md: ✅ LGTM

No AGENTS.md concerns.


📋 Code Quality: ✅ LGTM

The package.json changes only bump versions, and miniflare and @cloudflare/workers-utils are pinned to the same versions in packages/cli and packages/wrangler-tests. The two patch-file edits only update hunk offsets. The patches still apply through the @* selectors in pnpm-workspace.yaml, and the lockfile patch hashes match.


⚡ Performance: ✅ LGTM

No performance concerns.


📝 Documentation: ✅ LGTM

No documentation issues.


Reviewed commit: 225f9edc

@pkg-pr-new

pkg-pr-new Bot commented Nov 3, 2026

Copy link
Copy Markdown
npm i https://pkg.pr.new/cf@493

commit: 6188175

@clanky-the-clanker clanky-the-clanker Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Approved — This is a clean dependency bump that includes a changeset. The patch files only refresh hunk offsets, and nothing in the repository uses the Miniflare exports or deploy-helpers APIs that were removed or changed upstream.

The decision is advisory: this review is a comment and never approves, blocks or requests changes on the pull request.


✅ All checks passed

🚀 Release: ✅ LGTM

Risk: Low. The changeset for this dependency update is present.


🔒 Security: ✅ LGTM

No security concerns in this dependency update.


📖 AGENTS.md: ✅ LGTM

No AGENTS.md concerns.


📋 Code Quality: ✅ LGTM

The package.json changes only bump versions, and packages/cli and packages/wrangler-tests stay on the same versions of the shared packages. The patch-file edits only update hunk offsets. Nothing in packages/ imports getNodeCompat, NodeJSCompatMode, getFreshSourceMapSupport, fetchWorkerConfig or downloadWorkerConfig, so the breaking upstream changes do not affect this repository.


⚡ Performance: ✅ LGTM

No performance concerns.


📝 Documentation: ✅ LGTM

No documentation issues.


Reviewed commit: 61881751

@ask-bonk

ask-bonk Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

LGTM

github run

@github-actions

github-actions Bot commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

cf --help startup

mean stddev min max
PR 264.6 ms 4.0 ms 258.9 ms 270.1 ms
base 263.4 ms 4.9 ms 257.7 ms 275.3 ms

Δ (PR vs base): ↑ +1.2 ms (+0.5%)

Measured with hyperfine on ubuntu-latest (3 warmup runs, 20 timed runs). CI numbers carry ±a few ms of runner jitter; treat small deltas as noise.

@petebacondarwin
petebacondarwin added this pull request to the merge queue Nov 3, 2026
@ant-release-bot

Copy link
Copy Markdown
Collaborator Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Merged via the queue into main with commit 3f3a6af Nov 3, 2026
11 checks passed
@petebacondarwin
petebacondarwin deleted the renovate/workers-sdk branch November 3, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants