Skip to content

chore(deps): update all non-major dependencies - #4035

Merged
pi0 merged 1 commit into
mainfrom
renovate/all-minor-patch
Feb 17, 2026
Merged

chore(deps): update all non-major dependencies#4035
pi0 merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Feb 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/workers-types ^4.20260210.0 → ^4.20260217.0 age confidence
@scalar/api-reference (source) ^1.44.15 → ^1.44.20 age confidence
@typescript/native-preview (source) ^7.0.0-dev.20260210.1 → ^7.0.0-dev.20260216.1 age confidence
citty ^0.2.0 → ^0.2.1 age confidence
httpxy ^0.2.0 → ^0.3.0 age confidence
miniflare (source) ^4.20260210.0 → ^4.20260212.0 age confidence
oxfmt (source) ^0.28.0 → ^0.33.0 age confidence
oxlint (source) ^1.43.0 → ^1.48.0 age confidence
pnpm (source) 10.29.2 → 10.29.3 age confidence
rolldown (source) ^1.0.0-rc.3 → ^1.0.0-rc.4 age confidence
shaders ^2.2.48 → ^2.3.63 age confidence
srvx (source) ^0.11.3 → ^0.11.4 age confidence
vite (source) 8.0.0-beta.13 → 8.0.0-beta.14 age confidence
wrangler (source) ^4.64.0 → ^4.65.0 age confidence
youch ^4.1.0-beta.13 → ^4.1.0-beta.14 age confidence

Release Notes

cloudflare/workerd (@​cloudflare/workers-types)

v4.20260217.0

Compare Source

v4.20260214.0

Compare Source

v4.20260213.0

Compare Source

v4.20260212.0

Compare Source

scalar/scalar (@​scalar/api-reference)

v1.44.20

Patch Changes
  • #​8159: fix: do not mutate document after ingress
  • #​8178: chore: package bump due to ci failure
Updated Dependencies

v1.44.18

Patch Changes
  • #​8109: feat: keep the sidebar scrolled near the top
  • #​8134: fix(components): change caret position to right
  • #​8121: chore: moved client plugin types to oas-utils so they can be shared
Updated Dependencies

v1.44.17

Patch Changes
  • #​8094: feat: open client to the correct example name
Updated Dependencies

v1.44.16

Patch Changes
  • #​8081: feat(components): improve ScalarCodeBlock copy UI
  • #​8098: fix(api-reference): revert stacking context for toolbar
  • #​8086: fix(api-reference): inconsistent styles throughout api-reference
Updated Dependencies
microsoft/typescript-go (@​typescript/native-preview)

v7.0.0-dev.20260216.1

Compare Source

v7.0.0-dev.20260215.1

Compare Source

v7.0.0-dev.20260214.1

Compare Source

v7.0.0-dev.20260213.1

Compare Source

v7.0.0-dev.20260212.1

Compare Source

v7.0.0-dev.20260211.1

Compare Source

unjs/citty (citty)

v0.2.1

Compare Source

compare changes

🩹 Fixes
  • Propagate --no- negation to aliases and main option (#​225)
🏡 Chore
❤️ Contributors
unjs/httpxy (httpxy)

v0.3.0

Compare Source

compare changes

🚀 Enhancements
  • proxyFetch (#​98)
  • web-incoming: Implement native followRedirects support (d3d7f39)
🩹 Fixes
  • proxy: Ensure leading slash on toProxy outgoing path (7759c94)
  • server: Emit proxy error when listener exists, reject only when unhandled (c9d2c51)
  • web-incoming: Destroy request socket on timeout (40105be)
  • utils: Preserve multiple consecutive slashes in request URL (18e4d0d)
  • web-incoming: Abort proxy request when client disconnects (a5d4996)
  • ws: Handle client socket errors before upstream upgrade (aebb5c6)
💅 Refactors
  • ⚠️ Remove legacy node Url support (b2e6c92)
🏡 Chore
✅ Tests
🤖 CI
⚠️ Breaking Changes
  • ⚠️ Remove legacy node Url support (b2e6c92)
❤️ Contributors

v0.2.2

Compare Source

compare changes

🏡 Chore
❤️ Contributors

v0.2.1

Compare Source

compare changes

🌊 Types
  • Make httpxy's server event type map generic (#​97)
🏡 Chore
❤️ Contributors
cloudflare/workers-sdk (miniflare)

v4.20260212.0

Compare Source

Minor Changes

  • #​12431 7aaa2a5 Thanks @​emily-shen! - Add ability to search KV keys by prefix

    The UI and list keys API now lets you search KV keys by prefix.

    This is an experimental WIP feature.

Patch Changes

  • #​12541 f7fa326 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260210.0 1.20260212.0

  • #​12025 d06ad09 Thanks @​petebacondarwin! - Fix potential EBADF error when restarting workerd process

    Previously, when the workerd process was restarted (e.g., via setOptions() or Vite server restart), the stdio pipes from the previous process were not explicitly destroyed. This could lead to EBADF (Bad File Descriptor) errors during spawn on some systems.

    The Runtime#dispose() method now explicitly destroys all stdio streams (stdin, stdout, stderr, and the control pipe) before killing the process to ensure file descriptors are properly released.

oxc-project/oxc (oxfmt)

v0.33.0

Compare Source

💥 BREAKING CHANGES
  • 9c34f72 formatter/sort_imports: [BREAKING] Report invalid group name with renaming side-effect > side_effect (#​19416) (leaysgur)
🚀 Features
  • 4baebef formatter/sort_imports: Support { newlinesBetween: bool } inside groups (#​19358) (leaysgur)
  • d1c2fb6 formatter/sort_imports: Support customGroups attributes(selector and modifiers) (#​19356) (leaysgur)

v0.32.0

Compare Source

v0.30.0

🐛 Bug Fixes
  • 1b2f354 ci: Add missing riscv64/s390x napi targets for oxfmt and oxlint (#​19217) (Cameron)
oxc-project/oxc (oxlint)

v1.48.0

Compare Source

v1.47.0

Compare Source

v1.45.0

🐛 Bug Fixes
  • 1b2f354 ci: Add missing riscv64/s390x napi targets for oxfmt and oxlint (#​19217) (Cameron)
pnpm/pnpm (pnpm)

v10.29.3

Compare Source

rolldown/rolldown (rolldown)

v1.0.0-rc.4

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
🧪 Testing
  • ensure runtime module is preserved even if it's not used but has side effects (#​8213) by @​hyf0
⚙️ Miscellaneous Tasks
h3js/srvx (srvx)

v0.11.4

Compare Source

compare changes

🚀 Enhancements
  • loader: Intercept nested srvx.serve() (#​181)
❤️ Contributors
vitejs/vite (vite)

v8.0.0-beta.14

Compare Source

Features
Bug Fixes
  • clear tsconfig cache only when tsconfig.json is cached (#​21622) (50c9675)
  • deps: update all non-major dependencies (#​21594) (becdc5d)
  • lib: CSS injection point error with nested name IIFE output (#​21606) (5003de6)
  • module-runner: incorrect column with sourcemapInterceptor: "prepareStackTrace" (#​21562) (416c095)
  • module-runner: prevent crash on negative column in stacktrace (#​21585) (a075590)
  • rolldownOptions/rollupOptions merging at environment level (#​21612) (db2ecc7)
Miscellaneous Chores
Code Refactoring
Tests
cloudflare/workers-sdk (wrangler)

v4.65.0

Compare Source

Minor Changes

  • #​12473 b900c5a Thanks @​petebacondarwin! - Add CF_PAGES environment variables to wrangler pages dev

    wrangler pages dev now automatically injects Pages-specific environment variables (CF_PAGES, CF_PAGES_BRANCH, CF_PAGES_COMMIT_SHA, CF_PAGES_URL) for improved dev/prod parity. This enables frameworks like SvelteKit to auto-detect the Pages environment during local development.

    • CF_PAGES is set to "1" to indicate the Pages environment
    • CF_PAGES_BRANCH defaults to the current git branch (or "local" if not in a git repo)
    • CF_PAGES_COMMIT_SHA defaults to the current git commit SHA (or a placeholder if not in a git repo)
    • CF_PAGES_URL is set to a simulated commit preview URL (e.g., https://<sha>.<project-name>.pages.dev)

    These variables are displayed with their actual values in the bindings table during startup, making it easy to verify what branch and commit SHA were detected.

    These variables can be overridden by user-defined vars in the Wrangler configuration, .env, .dev.vars, or via CLI flags.

  • #​12464 10a1c4a Thanks @​petebacondarwin! - Allow deleting KV namespaces by name

    You can now delete a KV namespace by providing its name as a positional argument:

    wrangler kv namespace delete my-namespace

    This aligns the delete command with the create command, which also accepts a namespace name.
    The existing --namespace-id and --binding flags continue to work as before.

  • #​12382 d7b492c Thanks @​dario-piotrowicz! - Add Pages detection to autoconfig flows

    When running the autoconfig logic (via wrangler setup, wrangler deploy --x-autoconfig, or the programmatic autoconfig API), Wrangler now detects when a project appears to be a Pages project and handles it appropriately:

    • For wrangler deploy, it warns the user but still allows them to proceed
    • For wrangler setup and the programmatic autoconfig API, it throws a fatal error

  • #​12461 8809411 Thanks @​penalosa! - Support type: inherit bindings when using startWorker()

    This is an internal binding type that should not be used by external users of the API

  • #​12515 1a9eddd Thanks @​ascorbic! - Add --json flag to wrangler whoami for machine-readable output

    wrangler whoami --json now outputs structured JSON containing authentication status, auth type, email, accounts, and token permissions. When the user is not authenticated, the command exits with a non-zero status code and outputs {"loggedIn":false}, making it easy to check auth status in shell scripts without parsing text output.

    # Parse the JSON output
wrangler whoami --json | jq '.accounts'

# Check if authenticated in a script. Returns 0 if authenticated, non-zero if not.
if wrangler whoami --json > /dev/null 2>&1; then
  echo "Authenticated"
else
  echo "Not authenticated"
fi
Patch Changes

  • #​12437 ad817dd Thanks @​MattieTK! - fix: use project's package manager in wranger autoconfig

    wrangler setup now correctly detects and uses the project's package manager based on lockfiles (pnpm-lock.yaml, yarn.lock, bun.lockb, package-lock.json) and the packageManager field in package.json. Previously, it would fall back to the package manager used to execute the command when run directly from the terminal, causing failures in pnpm and yarn workspace projects if the wrong manager was used in this step due to the workspace: protocol not being supported by npm.

    This change leverages the package manager detection already performed by @netlify/build-info during framework detection, ensuring consistent behaviour across the autoconfig process.

  • #​12541 f7fa326 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260210.0 1.20260212.0

  • #​12498 734792a Thanks @​dario-piotrowicz! - Fix: make sure that remote proxy sessions's logs can be silenced when the wrangler log level is set to "none"

  • #​12135 cc5ac22 Thanks @​edmundhung! - Fix spurious config diffs when bindings from local and remote config are shown in different order

    When comparing local and remote Worker configurations, binding arrays like kv_namespaces would incorrectly show additions and removals if the elements were in a different order. The diff now correctly recognizes these as equivalent by reordering remote arrays to match the local config's order before comparison.

  • #​12476 62a8d48 Thanks @​MattieTK! - fix: use unscoped binary name for OpenNext autoconfig command overrides

    The build, deploy, and version command overrides in the Next.js (OpenNext) autoconfig handler used the scoped package name @opennextjs/cloudflare, which pnpm interprets as a workspace filter rather than a binary name. This caused wrangler deploy --x-autoconfig to fail for pnpm-based Next.js projects with ERR_PNPM_RECURSIVE_EXEC_FIRST_FAIL. Changed to use the unscoped binary name opennextjs-cloudflare, which resolves correctly across all package managers.

  • #​12516 84252b7 Thanks @​edmundhung! - Stop proxying localhost requests when proxy environment variables are set

    When HTTP_PROXY or HTTPS_PROXY is configured, all fetch requests including ones to localhost were routed through the proxy. This caused wrangler dev and the Vite plugin to fail with "TypeError: fetch failed" because the proxy can't reach local addresses.

    This switches from ProxyAgent to undici's EnvHttpProxyAgent, which supports the NO_PROXY environment variable. When NO_PROXY is not set, it defaults to localhost,127.0.0.1,::1 so local requests are never proxied.

    The NO_PROXY config only applies to the request destination, not the proxy server address. So a proxy running on localhost (e.g. HTTP_PROXY=http://127.0.0.1:11451) still works for outbound API calls.

  • #​12506 e5efa5d Thanks @​sesteves! - Fix wrangler r2 sql query displaying [object Object] for nested values

    SQL functions that return complex types such as arrays of objects (e.g. approx_top_k) were rendered as [object Object] in the table output because String() was called directly on non-primitive values. These values are now serialized with JSON.stringify so they display as readable JSON strings.

  • #​11725 be9745f Thanks @​dario-piotrowicz! - Fix incorrect logic during autoconfiguration (when running wrangler setup or wrangler deploy --x-autoconfig) that caused parts of the project's package.json file, removed during the process, to incorrectly be added back

  • #​12458 122791d Thanks @​jkoe-cf! - Remove default values for delivery delay and message retention and update messaging on limits

    Fixes the issue of the default maximum message retention (365400 seconds) being longer than the maximum allowed retention period for free tier users (86400 seconds).

    Previous:

    • Wrangler set a default value of 365400 seconds max message retention if the setting was not explicitly provided in the Wrangler configuration.
    • The maximum retention period was documented as 1209600 seconds for all queues users because it was required to be on paid tier.
    • Wrangler also set a default value of 0 seconds for delivery delay if the setting was not explicitly provided in the Wrangler configuration.

    Updated:

    • Wrangler no longer sets a default value for max message retention so that the default can be applied at the API.
    • The maximum retention period is now documented as 86400 seconds for free tier queues and 1209600 seconds for paid tier queues
    • Wrangler also no longer sets a default value for delivery delay so that the default can be applied at the API.

  • #​12513 41e18aa Thanks @​pombosilva! - Add confirmation prompt when deploying workflows with names that belong to different workers.

    When deploying a workflow with a name that already exists and is currently associated with a different worker script, Wrangler will now display a warning and prompt for confirmation before proceeding. This helps prevent accidentally overriding workflows.

    In non-interactive environments this check is skipped by default. Use the --strict flag to enable the check in non-interactive environments, which will cause the deployment to fail if workflow conflicts are detected.

  • Updated dependencies [f7fa326, 7aaa2a5, d06ad09]:

    • miniflare@​4.20260212.0
poppinss/youch (youch)

v4.1.0-beta.14: Escape HTML in error context and copy error with complete stack trace

Compare Source

Bug Fixes
Features
What's Changed
New Contributors

Full Changelog: poppinss/youch@v4.1.0-beta.13...v4.1.0-beta.14

Configuration

📅 Schedule: Branch creation - "after 2am and before 3am" (UTC), Automerge - "after 1am and before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from pi0 as a code owner February 16, 2026 02:08
@vercel

vercel Bot commented Feb 16, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
nitro.build Ready Ready Preview, Comment Feb 17, 2026 6:32am

Request Review

@pkg-pr-new

pkg-pr-new Bot commented Feb 16, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/nitrojs/nitro@4035

commit: d9a8069

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 03f372e to 335a868 Compare February 16, 2026 06:25
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 335a868 to 56d2a92 Compare February 16, 2026 10:40
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 56d2a92 to f36e54b Compare February 16, 2026 14:06
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from f36e54b to f9c1679 Compare February 16, 2026 18:49
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from f9c1679 to d9a8069 Compare February 17, 2026 06:30
@pi0
pi0 merged commit bed0415 into main Feb 17, 2026
11 checks passed
@pi0
pi0 deleted the renovate/all-minor-patch branch February 17, 2026 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pi0 pi0 Awaiting requested review from pi0 pi0 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@pi0