chore(deps): update minor and patch updates#1519
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
Contributor
Greptile SummaryRoutine Renovate bot PR that bumps 17 devDependencies and 2 GitHub Actions to their latest minor/patch versions. All changes are confined to development tooling — no production code or runtime dependencies are affected.
Confidence Score: 5/5
Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
Renovate["Renovate Bot PR"] --> Actions["GitHub Actions Updates"]
Renovate --> DevDeps["DevDependency Updates"]
Actions --> SetupNode["actions/setup-node\nv6.2.0 → v6.3.0"]
Actions --> SetupBun["oven-sh/setup-bun\nv2.1.2 → v2.2.0"]
SetupNode --> CI["ci.yml"]
SetupNode --> FixLatest["fix-latest.yml"]
SetupNode --> Release["release.yml"]
SetupNode --> Runtime["runtime-tests.yml"]
SetupBun --> Runtime
DevDeps --> Testing["Testing\njest 30.2.0→30.3.0\nbabel-jest 30.2.0→30.3.0"]
DevDeps --> Linting["Linting\neslint 9.39.2→9.39.4\ntypescript-eslint 8.52.0→8.57.0\nprettier 3.7.4→3.8.1"]
DevDeps --> Build["Build Tools\n@babel/* minor bumps\ntsdown 0.21.0→0.21.2"]
DevDeps --> Other["Other\n@types/node patch\njose 6.2.0→6.2.1\nminiflare minor bump"]
Last reviewed commit: 545945e |
renovate
bot
force-pushed
the
renovate/minor-and-patch-updates
branch
from
545945e to
06df27b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
7.27.1→7.28.67.28.5→7.29.09.39.2→9.39.420.19.27→20.19.378.52.0→8.57.0v6.2.0→v6.3.030.2.0→30.3.09.39.2→9.39.429.12.1→29.15.017.23.1→17.24.030.2.0→30.3.06.2.0→6.2.14.20260107.0→4.20260312.0v2.1.2→v2.2.03.7.4→3.8.10.21.0→0.21.38.52.0→8.57.0Release Notes
babel/babel (@babel/plugin-transform-modules-commonjs)
v7.28.6Compare Source
v7.28.6 (2026-01-12)
Thanks @kadhirash and @kolvian for your first PRs!
🐛 Bug Fix
babel-cli,babel-code-frame,babel-core,babel-helper-check-duplicate-nodes,babel-helper-fixtures,babel-helper-plugin-utils,babel-node,babel-plugin-transform-flow-comments,babel-plugin-transform-modules-commonjs,babel-plugin-transform-property-mutators,babel-preset-env,babel-traverse,babel-typesbabel-plugin-transform-regeneratortransform-regeneratorcorrectly handles scope (@liuxingbaoyu)babel-plugin-transform-react-jsx💅 Polish
babel-core,babel-standalone🏠 Internal
babel-plugin-bugfix-v8-static-class-fields-redefine-readonly,babel-plugin-proposal-decorators,babel-plugin-proposal-import-attributes-to-assertions,babel-plugin-proposal-import-wasm-source,babel-plugin-syntax-async-do-expressions,babel-plugin-syntax-decorators,babel-plugin-syntax-destructuring-private,babel-plugin-syntax-do-expressions,babel-plugin-syntax-explicit-resource-management,babel-plugin-syntax-export-default-from,babel-plugin-syntax-flow,babel-plugin-syntax-function-bind,babel-plugin-syntax-function-sent,babel-plugin-syntax-import-assertions,babel-plugin-syntax-import-attributes,babel-plugin-syntax-import-defer,babel-plugin-syntax-import-source,babel-plugin-syntax-jsx,babel-plugin-syntax-module-blocks,babel-plugin-syntax-optional-chaining-assign,babel-plugin-syntax-partial-application,babel-plugin-syntax-pipeline-operator,babel-plugin-syntax-throw-expressions,babel-plugin-syntax-typescript,babel-plugin-transform-async-generator-functions,babel-plugin-transform-async-to-generator,babel-plugin-transform-class-properties,babel-plugin-transform-class-static-block,babel-plugin-transform-dotall-regex,babel-plugin-transform-duplicate-named-capturing-groups-regex,babel-plugin-transform-explicit-resource-management,babel-plugin-transform-exponentiation-operator,babel-plugin-transform-json-strings,babel-plugin-transform-logical-assignment-operators,babel-plugin-transform-nullish-coalescing-operator,babel-plugin-transform-numeric-separator,babel-plugin-transform-object-rest-spread,babel-plugin-transform-optional-catch-binding,babel-plugin-transform-optional-chaining,babel-plugin-transform-private-methods,babel-plugin-transform-private-property-in-object,babel-plugin-transform-regexp-modifiers,babel-plugin-transform-unicode-property-regex,babel-plugin-transform-unicode-sets-regex🏃♀️ Performance
babel-plugin-transform-react-jsx__source,__self(@liuxingbaoyu)Committers: 7
eslint/eslint (@eslint/js)
v9.39.4Compare Source
v9.39.3Compare Source
Bug Fixes
791bf8dfix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)Chores
8594a43chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)9ceef92chore: package.json update for @eslint/js release (Jenkins)af498c6chore: ignore/docs/v9.xin link checker (#20453) (Milos Djermanovic)typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.57.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.56.1Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.56.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.55.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.54.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.53.1Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.53.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
actions/setup-node (actions/setup-node)
v6.3.0Compare Source
What's Changed
Enhancements:
devEnginesfield by @susnux in #1283Dependency updates:
Bug fixes:
New Contributors
Full Changelog: actions/setup-node@v6...v6.3.0
jestjs/jest (babel-jest)
v30.3.0Compare Source
Features
[jest-config]AdddefineConfigandmergeConfighelpers for type-safe Jest config (#15844)[jest-fake-timers]AddsetTimerTickModeto configure how timers advance[*]Reduce token usage when run through LLMs (3f17932)Fixes
[jest-config]Keep CLI coverage output when using--jsonwith--outputFile(#15918)[jest-mock]UseSymbolfrom test environment (#15858)[jest-reporters]Fix issue where console output not displayed for GHA reporter even withsilent: falseoption (#15864)[jest-runtime]Fix issue where user cannot utilize dynamic import despite specifying--experimental-vm-modulesNode option (#15842)[jest-test-sequencer]Fix issue where failed tests due to compilation errors not getting re-executed even with--onlyFailuresCLI option (#15851)[jest-util]Make sureprocess.features.require_moduleisfalse(#15867)Chore & Maintenance
[*]Replace remaining micromatch uses with picomatch[deps]Update to sinon/fake-timers v15[docs]Update V30 migration guide to notify users onjest.mock()work with case-sensitive path (#15849)eslint/eslint (eslint)
v9.39.4Compare Source
Bug Fixes
f18f6c8fix: update dependency minimatch to ^3.1.5 (#20564) (Milos Djermanovic)a3c868ffix: update dependency @eslint/eslintrc to ^3.3.4 (#20554) (Milos Djermanovic)234d005fix: minimatch security vulnerability patch for v9.x (#20549) (Andrej Beles)b1b37eefix: updateajvto6.14.0to address security vulnerabilities (#20538) (루밀LuMir)Documentation
4675152docs: add deprecation notice partial (#20520) (Milos Djermanovic)Chores
b8b4eb1chore: update dependencies for ESLint v9.39.4 (#20596) (Francesco Trotta)71b2f6bchore: package.json update for @eslint/js release (Jenkins)1d16c2fci: pin Node.js 25.6.1 (#20563) (Milos Djermanovic)v9.39.3Compare Source
Bug Fixes
791bf8dfix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)Chores
8594a43chore: upgrade @eslint/js@9.39.3 (#20529) (Milos Djermanovic)9ceef92chore: package.json update for @eslint/js release (Jenkins)af498c6chore: ignore/docs/v9.xin link checker (#20453) (Milos Djermanovic)jest-community/eslint-plugin-jest (eslint-plugin-jest)
v29.15.0Compare Source
Features
allowOptionalChainingis false (#1934) (3f5751e)v29.14.0Compare Source
Features
v29.13.0Compare Source
Features
29.12.2 (2026-02-03)
Bug Fixes
29.12.1 (2026-01-02)
Bug Fixes
anyandunknowntypes (#1918) (388a36c)v29.12.2Compare Source
Bug Fixes
eslint-community/eslint-plugin-n (eslint-plugin-n)
v17.24.0Compare Source
🌟 Features
prefer-global/cryptorule (#514) (2ea0f22)prefer-global/timersrule (#515) (10b24ae)🧹 Chores
v17.23.2Compare Source
🩹 Fixes
📚 Documentation
🧹 Chores
panva/jose (jose)
v6.2.1Compare Source
Refactor
cloudflare/workers-sdk (miniflare)
v4.20260312.0Compare Source
Patch Changes
#12861
f7de0fdThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12864
ecc7f79Thanks @NuroDev! - Fix local explorer route matching to be more precisePreviously, the route matching used
startsWith("/cdn-cgi/explorer")which would incorrectly match paths like/cdn-cgi/explorerfooor/cdn-cgi/explorereeeeee, causing unexpected behavior. The route matching has been improved to only match:/cdn-cgi/explorer(exact match)/cdn-cgi/explorer/and any sub-paths (e.g.,/cdn-cgi/explorer/api/*)Paths that merely start with
/cdn-cgi/explorerbut aren't actually the explorer (like/cdn-cgi/explorerfoo) will now correctly fall through to the user worker.#12775
1dda1c8Thanks @fhanau! - Add support for worker connect handler in miniflarev4.20260310.0Compare Source
Minor Changes
#12826
de65c58Thanks @gabivlj! - Enable container egress interception in local dev without theexperimentalcompatibility flagContainer local development now always prepares the egress interceptor sidecar image needed for
interceptOutboundHttp(). This makes container-to-Worker interception available by default in Wrangler, Miniflare, and the Cloudflare Vite plugin.#12754
e4d9510Thanks @emily-shen! - Add cross-process support to the local explorerWhen running multiple miniflare processes, the local explorer will now be able to view and edit resources that are bound to workers in other miniflare instances.
Patch Changes
#12790
5451a7fThanks @petebacondarwin! - Bump hono to ^4.12.5 and devalue to ^5.6.3 to address security vulnerabilitiesHono had multiple advisories including arbitrary file access via serveStatic, JWT algorithm confusion, and XSS through ErrorBoundary. Devalue had denial of service vulnerabilities in devalue.parse. These are bundled dependencies so the fix is delivered via this patch.
#12795
82cc2a8Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12811
3c67c2aThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12827
d645594Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12828
cb14820Thanks @jamesopstad! - Update@hey-api/openapi-tsto ^0.94.0#12786
a7c87d1Thanks @emily-shen! - local explorer: validate origin and host headersThe local explorer is a WIP experimental feature.
v4.20260305.0Compare Source
Patch Changes
#12661
99037e3Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12680
295297aThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
v4.20260302.0Compare Source
Patch Changes
#12582
c2ed7c2Thanks @penalosa! - Internal refactor to use capnweb's nativeReadableStreamsupport to power remote Media and Dispatch Namespace bindings.#12618
d920811Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12637
896734dThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12602
58a4020Thanks @anonrig! - Optimize filesystem operations by using Node.js's throwIfNoEntry: false optionThis reduces the number of system calls made when checking for file existence by avoiding the overhead of throwing and catching errors for missing paths. This is an internal performance optimization with no user-visible behavioral changes.
v4.20260301.1Compare Source
Minor Changes
#12649
35b2c56Thanks @gabivlj! - Add experimental support for containers to workers communication with interceptOutboundHttpThis feature is experimental and requires adding the "experimental" compatibility flag to your Wrangler configuration.
#10153
5f7aaf2Thanks @mglewis! - Add Hosted Images CRUD operations to Images binding.This is an experimental API that only works locally for the moment.
#12622
bf9cb3dThanks @LuisDuarte1! - Add configurable step limits for WorkflowsYou can now set a maximum number of steps for a Workflow instance via the
limits.stepsconfiguration in your Wrangler config. When a Workflow instance exceeds this limit, it will fail with an error indicating the limit was reached.The
stepsvalue must be an integer between 1 and 25,000. If not specified, the default limit of 10,000 steps is used. Step limits are also enforced in local development viawrangler dev.Patch Changes
#12698
209b396Thanks @penalosa! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12691
596b8a0Thanks @penalosa! - Remove temporary AI Search RPC workaround (no user-facing changes)v4.20260219.0Compare Source
Minor Changes
#12462
f239077Thanks @petebacondarwin! - AddMiniflare#purgeCache()method to clear cache entries programmaticallyThis allows developers to clear cached data during local development without
restarting the Miniflare instance. Useful when working with Workers Sites
or any application that uses the Cache API.
#12574
527e4f5Thanks @emily-shen! - Local explorer: add /query endpoint to introspect sqlite in DOsThis required adding a wrapper that extends user DO classes and adds in an extra method to access
ctx.storage.sql. This shouldn't have any impact on user code, but is gated by the env varX_LOCAL_EXPLORER.This is for an experimental WIP feature.
Patch Changes
#12592
aaa7200Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12606
2f19a40Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12597
0b17117Thanks @sdnts! - The maximum allowed delivery and retry delays for Queues is now 24 hoursv4.20260217.0Compare Source
Minor Changes
#12546
43c462aThanks @emily-shen! - Local explorer: add endpoints to list DO namespaces and objectsThis is part of an experimental, WIP feature.
Patch Changes
#12543
5a868a0Thanks @G4brym! - Fix AI Search binding failing in local devUsing AI Search bindings with
wrangler devwould fail with "RPC stub points at a non-serializable type". AI Search bindings now work correctly in local development.#12552
c58e81bThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12568
33a9a8fThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12576
8077c14Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12466
caf9b11Thanks @petebacondarwin! - AddMINIFLARE_CACHE_DIRenvironment variable and smart cache directory detectionMiniflare now intelligently detects where to store its cf.json cache file:
MINIFLARE_CACHE_DIRenv var if setnode_modules/.mfor.wrangler/cache)node_modules/.mfifnode_modulesexists.wrangler/cacheThis improves compatibility with Yarn PnP, pnpm, and other package managers that don't use traditional
node_modulesdirectories, without requiring any configuration.v4.20260212.0Compare Source
Minor Changes
#12431
7aaa2a5Thanks @emily-shen! - Add ability to search KV keys by prefixThe UI and list keys API now lets you search KV keys by prefix.
This is an experimental WIP feature.
Patch Changes
#12541
f7fa326Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12025
d06ad09Thanks @petebacondarwin! - Fix potential EBADF error when restarting workerd processPreviously, when the workerd process was restarted (e.g., via
setOptions()or Vite server restart), the stdio pipes from the previous process were not explicitly destroyed. This could lead toEBADF(Bad File Descriptor) errors during spawn on some systems.The
Runtime#dispose()method now explicitly destroys all stdio streams (stdin, stdout, stderr, and the control pipe) before killing the process to ensure file descriptors are properly released.v4.20260210.0Compare Source
Minor Changes
#12469
2d90127Thanks @petebacondarwin! - Add environment variables to control cf.json fetching behaviorYou can now use environment variables to control how Miniflare handles the
Request.cfobject caching:CLOUDFLARE_CF_FETCH_ENABLED- Set to "false" to disable fetching entirely and use fallback data. Nonode_modules/.mf/cf.jsonfile will be created. Defaults to "true".CLOUDFLARE_CF_FETCH_PATH- Set to a custom path to use a different location for caching the cf.json file instead of the defaultnode_modules/.mf/cf.json.This is particularly useful for non-JavaScript projects (like Rust or Go Workers) that don't want a
node_modulesdirectory created automatically.Example:
#12391
ce9dc01Thanks @emily-shen! - Serve the local explorer UI from MiniflareThis bundles the local explorer UI into Miniflare, and if enabled, Miniflare serves the UI at
/cdn-cgi/explorer.This is an experimental, WIP feature.
Patch Changes
#12440
555b32aThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12485
d636d6aThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
#12502
bf8df0cThanks @dependabot! - Update dependencies of "miniflare", "wrangler"The following dependency versions have been updated:
[
v4.20260205.0](https://redirect.github.com/cloudflare/workers-sdk/blob/HEAD/packages/miniflare/CHANGELOG.md#4202602050Configuration
📅 Schedule: Branch creation - "on the 15th day of the month before 12pm" in timezone UTC, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.