chore(deps): update cloudflare wrangler packages by renovate[bot] · Pull Request #889 · pulsate-dev/caramel

renovate · 2026-09-27T15:27:50Z

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/vite-plugin (source)	`1.55.0` → `1.59.0`
wrangler (source)	`4.134.0` → `4.138.0`

Release Notes

cloudflare/workers-sdk (@cloudflare/vite-plugin)

`v1.59.0`

Compare Source

Minor Changes

#15817 6e77c53 Thanks @jamesopstad! - Allow framework commands to produce Preview Build Output with the experimental config

When cf previews deploy invokes a framework build command, Preview intent is now preserved. Function-based cloudflare.config.ts files receive isPreview: true, and generated Build Output is marked as a Preview build.

Patch Changes

#15806 8fade73 Thanks @NuroDev! - Standardize Zod validation error output

Format validation errors with Zod's built-in prettifyError() helper so Miniflare, Wrangler, the Vite plugin, and the Vitest plugin show consistent messages and property paths.
Updated dependencies [a71237a, b03f960, 8fade73, 6e77c53]:
- miniflare@5.20260921.1-alpha
- wrangler@4.138.0

`v1.58.0`

Compare Source

Minor Changes

#15778 cd7508c Thanks @jamesopstad! - Generate types during development and supported builds with Vite's experimental.newConfig option or Wrangler's --experimental-new-config flag (and --experimental-cf-build-output for builds)

When Wrangler's --experimental-new-config flag or Vite's experimental.newConfig option is enabled, inferred configuration and runtime declarations are now kept in .cloudflare/types/index.d.ts. Vite refreshes them during development and production builds. Wrangler refreshes them during development and when building with both --experimental-new-config and --experimental-cf-build-output. In the experimental wrangler.config.ts format, the types option is now top-level because it applies to both commands.

Patch Changes

#15765 1bdb96d Thanks @th0m! - Prepare the required egress sidecar for local Containers without configured images

Wrangler dev and Vite dev/preview now pull the required sidecar for Durable Object-managed Containers that select their application image at start time. Previously, these Containers failed to start unless the sidecar image was already cached in Docker.
Updated dependencies [1bdb96d, cd7508c, f5605f5]:
- wrangler@4.137.0

Patch Changes

Updated dependencies [0ed4c54, 703922d, 14d946d]:
- wrangler@4.136.1
- @cloudflare/unenv-preset@2.16.2

`v1.57.0`

Compare Source

Minor Changes

#15713 3c75cad Thanks @jamesopstad! - Identify experimental Build Output resource configs by filename and location

The root remains config.json, Worker configs are now worker.config.json, and Container configs are now container.config.json. Resource configs no longer contain top-level type discriminators, while settings and build context are stored together in the root config.
#15713 3c75cad Thanks @jamesopstad! - Define experimental Cloudflare configuration with a single default export

Experimental cloudflare.config.ts files now define settings and resources together in a default-exported defineConfig() call. Add a Worker under worker, add Containers to the containers array, or omit both to provide settings only.
```
import * as entrypoint from "./src/index.ts" with { type: "cf-worker" };

export default defineConfig({
	accountId: "...",
	complianceRegion: "public",
	worker: {
		name: "my-worker",
		compatibilityDate: "2026-09-18",
		entrypoint,
	},
});
```

Patch Changes

#15711 91e2f86 Thanks @ghostwriternr! - Allow local Container images without exposed ports

Wrangler and the Cloudflare Vite plugin no longer reject images that omit Docker EXPOSE metadata. Local Containers can run command-only workloads or serve traffic through workerd without declaring an unused image port.
Updated dependencies [3c75cad, 3c75cad, 91e2f86, c5913a6, 35668d7, 3c75cad, 45b3b81, 8235e6a, 0751490, 43b1f85, 731a2ee]:
- wrangler@4.136.0
- miniflare@5.20260921.0-alpha

`v1.56.0`

Compare Source

Minor Changes

#15609 1f070c8 Thanks @emily-shen! - Build Containers when emitting experimental Build Output

Wrangler and the Cloudflare Vite plugin now build Dockerfile-backed Container images when experimental Build Output is enabled. Container configs are emitted under .cloudflare/output/v0/containers with local image references, while existing registry references pass through unchanged.
#15329 c4c9b75 Thanks @akshitsinha! - Evaluate Flagship flags locally during development

Flagship bindings now use the local Miniflare store by default in Wrangler and the Vite plugin, keeping development offline and isolated from production flags. Set remote: true on a binding to continue using its remote app.

Use wrangler flagship flags pull <APP_ID> to seed the store from a remote app. Flag management commands also accept --local to read and update the local store directly.
#15701 643e5cc Thanks @WillTaylorDev! - Pass Preview intent to defineWorker and upload its resolved configuration

Preview builds now evaluate programmatic Worker configuration with ctx.isPreview set to true and record that intent in Build Output. The shared Preview uploader deploys the resolved bindings and settings while preserving configured Preview base values when it creates a Preview.

Patch Changes

Updated dependencies [1f070c8, a0485d5, 629ddef, c4c9b75, 643e5cc]:
- wrangler@4.135.0
- miniflare@5.20260918.0-alpha

cloudflare/workers-sdk (wrangler)

`v4.138.0`

Compare Source

Minor Changes

#15776 b03f960 Thanks @edevil! - Add event-code support to temporary Worker deployments

Use wrangler deploy --temporary --event-code <code> to provision an account for an event. Wrangler requires explicit server acknowledgement before caching the account and keeps the event code out of its cache and telemetry.
#15817 6e77c53 Thanks @jamesopstad! - Allow framework commands to produce Preview Build Output with the experimental config

When cf previews deploy invokes a framework build command, Preview intent is now preserved. Function-based cloudflare.config.ts files receive isPreview: true, and generated Build Output is marked as a Preview build.

Patch Changes

#15806 8fade73 Thanks @NuroDev! - Standardize Zod validation error output

Format validation errors with Zod's built-in prettifyError() helper so Miniflare, Wrangler, the Vite plugin, and the Vitest plugin show consistent messages and property paths.
Updated dependencies [a71237a, 8fade73]:
- miniflare@5.20260921.1-alpha

`v4.137.0`

Compare Source

Minor Changes

#15778 cd7508c Thanks @jamesopstad! - Generate types during development and supported builds with Vite's experimental.newConfig option or Wrangler's --experimental-new-config flag (and --experimental-cf-build-output for builds)

When Wrangler's --experimental-new-config flag or Vite's experimental.newConfig option is enabled, inferred configuration and runtime declarations are now kept in .cloudflare/types/index.d.ts. Vite refreshes them during development and production builds. Wrangler refreshes them during development and when building with both --experimental-new-config and --experimental-cf-build-output. In the experimental wrangler.config.ts format, the types option is now top-level because it applies to both commands.

Patch Changes

#15765 1bdb96d Thanks @th0m! - Prepare the required egress sidecar for local Containers without configured images

Wrangler dev and Vite dev/preview now pull the required sidecar for Durable Object-managed Containers that select their application image at start time. Previously, these Containers failed to start unless the sidecar image was already cached in Docker.
#15712 f5605f5 Thanks @alsuren! - Match D1 SQL statement splitting to the local SQLite runtime

Wrangler now uses SQLite's statement-completion state machine when splitting D1 SQL files. This keeps trigger, quoted identifier, comment, and keyword handling consistent with local execution.

`v4.136.3`

Compare Source

Patch Changes

#15662 59267fc Thanks @oddharsh! - Update smol-toml to 1.8.0

This updates the bundled TOML parser that reads wrangler.toml to a version that addresses two advisories against 1.5.2: GHSA-7w5x-hrqm-74c2 (a value followed by a comment with no trailing newline, such as a=[1 #, put the parser in an infinite loop) and GHSA-v3rj-xjv7-4jmq (thousands of consecutive comment lines overflowed the stack). On the old version, wrangler deploy against a wrangler.toml ending in a=[1 # never returned; it now fails with Invalid TOML document: cannot find end of structure.
#15760 6906bf0 Thanks @yomna-shousha! - Warn when wrangler preview returns only non-custom-domain URLs even though custom-domain Preview URLs are configured.
#15761 354ebdb Thanks @podonnell-dev! - Fix Preview output artifacts to always include the resolved parent Worker name

Preview artifacts now use Wrangler's resolved Worker name instead of relying on the Preview API response to include it.
Updated dependencies []:
- miniflare@5.20260921.0-alpha

`v4.136.2`

Compare Source

Patch Changes

#15762 ad20547 Thanks @podonnell-dev! - Fix wrangler types generating runtime headers with trailing whitespace

Runtime type headers without compatibility flags now end at the compatibility date, keeping generated types reproducible when tools remove trailing whitespace.
#15703 02c1d83 Thanks @KianNH! - Improve Container image listing and deletion

List all image pages using read-only credentials, validate tags before deletion, and report successful deletion when the garbage-collection request fails.
#15700 275184d Thanks @KianNH! - Fix Container SSH connection setup and shutdown

Prevent SSH connections from stalling during setup and ensure proxy processes exit when sessions close.
#15759 bd59eca Thanks @petebacondarwin! - Show valid sha256-prefixed tags in Container image listings

Container image listings now distinguish valid OCI tags such as sha256-release from synthetic digest entries such as sha256:<digest>.
Updated dependencies []:
- miniflare@5.20260921.0-alpha

`v4.136.1`

Compare Source

Patch Changes

#15744 0ed4c54 Thanks @podonnell-dev! - Improve wrangler preview onboarding guidance

Wrangler now displays placeholder replacement guidance directly beneath the suggested Preview configuration instead of as a separate warning. JSON output continues to include the guidance in its structured onboarding messages.
#15678 703922d Thanks @christhorwarth! - Read workers.dev URLs from the Worker resource during deployment

Wrangler no longer requires account-level subdomain permission to display Worker and version-preview URLs. It now uses the Worker-scoped URL fields while preserving account-level registration for accounts without a workers.dev subdomain.
Updated dependencies [14d946d]:
- @cloudflare/unenv-preset@2.16.2

`v4.136.0`

Compare Source

Minor Changes

#15713 3c75cad Thanks @jamesopstad! - Identify experimental Build Output resource configs by filename and location

The root remains config.json, Worker configs are now worker.config.json, and Container configs are now container.config.json. Resource configs no longer contain top-level type discriminators, while settings and build context are stored together in the root config.
#15713 3c75cad Thanks @jamesopstad! - Define experimental Cloudflare configuration with a single default export

Experimental cloudflare.config.ts files now define settings and resources together in a default-exported defineConfig() call. Add a Worker under worker, add Containers to the containers array, or omit both to provide settings only.
```
import * as entrypoint from "./src/index.ts" with { type: "cf-worker" };

export default defineConfig({
	accountId: "...",
	complianceRegion: "public",
	worker: {
		name: "my-worker",
		compatibilityDate: "2026-09-18",
		entrypoint,
	},
});
```
#15720 35668d7 Thanks @alexkli! - Add experimental --zone and --zone-id flags to wrangler deploy and wrangler triggers deploy to attach a zone to routes passed via --route

Routes passed on the command line were always sent to the Cloudflare API as bare patterns. Zones with an SSL for SaaS entitlement reject such routes with error 10082 ("When using wildcard host ssl for saas entitlement you must specify the zone per route using zone_id or zone_name"), and until now the only way to set a zone was in the config file, which --route overrides.

The new flags are experimental and must be enabled with --experimental-route-zones (alias --x-route-zones). Pass a single zone to apply it to all routes, or one zone per route in the same order as the --route flags:

wrangler deploy --x-route-zones --route "app.example.com/*" --route "api.example.com/*" --zone example.com

wrangler deploy --x-route-zones --route "a.example.com/*" --zone example.com --route "b.example.net/*" --zone example.net

--zone sets zone_name and --zone-id sets zone_id on each route. The two flags cannot be combined, and passing more than one zone requires exactly one per --route. Routes without zone flags behave exactly as before.
#15699 45b3b81 Thanks @skepticfx! - Remove the experimental Container image environment binding

Durable Object-managed Containers now use ctx.container.images without Wrangler generating env.EXPERIMENTAL_CLOUDFLARE_CONTAINER_IMAGES. Update code using the experimental environment binding to read ctx.container.images and regenerate your Worker types.

Version deployments identify managed applications from native named images, and --containers-rollout=none preserves native Container metadata. Containers without named images must first be provisioned with wrangler deploy; versions upload verifies that their applications already exist. The old binding is no longer read or reserved, including on previously uploaded versions. keep_vars retains existing variables as usual; redeploy without it to remove an existing experimental binding.
#15702 8235e6a Thanks @podonnell-dev! - Return structured configuration errors from wrangler preview --json

When a Worker is missing its Preview configuration, JSON mode now returns an error, a suggested_config patch, and any associated onboarding messages without interactive output or terminal formatting. This changes the private-beta Preview command to make automated onboarding reliable.
#15577 731a2ee Thanks @sdnts! - Add support for jurisdictions to Queues subcommands

Patch Changes

#15711 91e2f86 Thanks @ghostwriternr! - Allow local Container images without exposed ports

Wrangler and the Cloudflare Vite plugin no longer reject images that omit Docker EXPOSE metadata. Local Containers can run command-only workloads or serve traffic through workerd without declaring an unused image port.
#15740 c5913a6 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260918.1 ^5.20260921.1

workerd 1.20260918.1 1.20260921.1
#15471 0751490 Thanks @edmundhung! - Fix cf builds for static projects that serve assets from the project root

The experimental Build Output path now omits the reserved .cloudflare directory when the project root is used for static assets. This prevents recursive output copying in Wrangler while preserving the existing behaviour for other asset directories.
#15440 43b1f85 Thanks @HuzaifaAbdulRehman! - Rebase absolute non-JavaScript module specifiers when preserve_file_names is enabled

With preserve_file_names set, a non-JS module imported by an absolute path kept that path as its module name. The build machine's filesystem layout ended up inside the deployed Worker, and the module was never written to --outdir. A local dry run reported success while the upload failed server-side with error code 10021. Tooling that rewrites externals to absolute paths hits this, which is how it was found in @opennextjs/cloudflare with WASM imports.

Absolute specifiers are now rebased to ./<basename>, which is what the hashed branch of the same code already does minus the hash prefix. Relative specifiers keep the behaviour they had.
Updated dependencies [c5913a6, 3c75cad]:
- miniflare@5.20260921.0-alpha

`v4.135.0`

Compare Source

Minor Changes

#15609 1f070c8 Thanks @emily-shen! - Build Containers when emitting experimental Build Output

Wrangler and the Cloudflare Vite plugin now build Dockerfile-backed Container images when experimental Build Output is enabled. Container configs are emitted under .cloudflare/output/v0/containers with local image references, while existing registry references pass through unchanged.
#15329 c4c9b75 Thanks @akshitsinha! - Evaluate Flagship flags locally during development

Flagship bindings now use the local Miniflare store by default in Wrangler and the Vite plugin, keeping development offline and isolated from production flags. Set remote: true on a binding to continue using its remote app.

Use wrangler flagship flags pull <APP_ID> to seed the store from a remote app. Flag management commands also accept --local to read and update the local store directly.
#15701 643e5cc Thanks @WillTaylorDev! - Pass Preview intent to defineWorker and upload its resolved configuration

Preview builds now evaluate programmatic Worker configuration with ctx.isPreview set to true and record that intent in Build Output. The shared Preview uploader deploys the resolved bindings and settings while preserving configured Preview base values when it creates a Preview.

Patch Changes

#15705 a0485d5 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

@cloudflare/workers-types ^5.20260917.1 ^5.20260918.1

workerd 1.20260917.1 1.20260918.1
#15587 629ddef Thanks @Kuldeeep18! - Fix duration calculation for running workflow instances, steps, and attempts in wrangler workflows instances describe

wrangler workflows instances describe previously distorted the elapsed duration of in-progress instances, steps, and attempts across non-UTC timezones by stripping " GMT" from toUTCString(), causing new Date(...) to parse the timestamp in the local client timezone. The duration is now correctly computed against the current time.
Updated dependencies [a0485d5]:
- miniflare@5.20260918.0-alpha

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

Branch creation
- "before 3am"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update cloudflare wrangler packages

cc373ca

renovate Bot added the T: renovate Automatic renewal by renovate label Sep 27, 2026

renovate Bot enabled auto-merge September 27, 2026 15:27

renovate-approve Bot approved these changes Sep 27, 2026

View reviewed changes

renovate Bot added this pull request to the merge queue Sep 27, 2026

Merged via the queue into main with commit 05d1631 Sep 27, 2026
2 checks passed

renovate Bot deleted the renovate/cloudflare-wrangler-packages branch September 27, 2026 15:31

Navigation Menu

Uh oh!

chore(deps): update cloudflare wrangler packages - #889

chore(deps): update cloudflare wrangler packages#889
renovate[bot] merged 1 commit into
mainfrom
renovate/cloudflare-wrangler-packages

renovate Bot commented Sep 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Dependency	From	To
@cloudflare/workers-types	^5.20260918.1	^5.20260921.1
workerd	1.20260918.1	1.20260921.1

Dependency	From	To
@cloudflare/workers-types	^5.20260917.1	^5.20260918.1
workerd	1.20260917.1	1.20260918.1

Uh oh!

Conversation

renovate Bot commented Sep 27, 2026

Release Notes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants