fix(deps): update workers-sdk derived dependencies by ant-release-bot · Pull Request #441 · cloudflare/cf

ant-release-bot · 2026-10-28T20:49:48Z

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/autoconfig (source)	`0.8.1` → `0.8.2`
@cloudflare/build-output-utils (source)	`0.9.5` → `0.9.6`
@cloudflare/cli-shared-helpers (source)	`0.2.9` → `0.2.10`
@cloudflare/codemods (source)	`0.6.1` → `0.7.0`
@cloudflare/config (source)	`0.28.1` → `0.29.0`
@cloudflare/containers-shared (source)	`0.23.3` → `0.23.4`
@cloudflare/deploy-helpers (source)	`0.24.1` → `0.24.2`
@cloudflare/runtime-types (source)	`0.1.17` → `0.1.18`
@cloudflare/workers-auth (source)	`0.15.1` → `0.15.2`
@cloudflare/workers-utils (source)	`0.49.0` → `0.50.0`
miniflare (source)	`5.20261023.1-beta` → `5.20261023.2-beta`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cloudflare/workers-sdk (@cloudflare/autoconfig)

`v0.8.2`

Compare Source

Patch Changes

#16546 dd31809 Thanks @edmundhung! - Include the types generated by cf workers types in tsconfig.json when configuring for cf

cf workers types writes the Worker's types to .cloudflare/types. Patterns in the include array of tsconfig.json, such as **/*, skip folders whose names start with a dot, so type checking couldn't find Env after autoconfig. Autoconfig now adds .cloudflare/types to that include array for cf projects with a Worker, as cf init does for new projects. When tsconfig.json has no include array, autoconfig asks you to add the entry yourself.
Updated dependencies [a95d647]:
- @cloudflare/config@0.29.0
- @cloudflare/workers-utils@0.50.0
- @cloudflare/cli-shared-helpers@0.2.10

cloudflare/workers-sdk (@cloudflare/build-output-utils)

`v0.9.6`

Compare Source

Patch Changes

Updated dependencies [a95d647]:
- @cloudflare/config@0.29.0

cloudflare/workers-sdk (@cloudflare/cli-shared-helpers)

`v0.2.10`

Compare Source

Patch Changes

Updated dependencies [a95d647]:
- @cloudflare/workers-utils@0.50.0

cloudflare/workers-sdk (@cloudflare/codemods)

`v0.7.0`

Compare Source

Minor Changes

#16536 a95d647 Thanks @WalshyDev! - Support remote Analytics Engine bindings in local development

Setting remote: true on an Analytics Engine dataset now sends writeDataPoint() calls from wrangler dev and the Vite plugin to the real dataset. Without it, writes are still dropped locally.
```
{
  "analytics_engine_datasets": [
    {
      "binding": "EVENTS",
      "dataset": "my-dataset",
      "remote": true
    }
  ]
}
```

cloudflare/workers-sdk (@cloudflare/config)

`v0.29.0`

Compare Source

Minor Changes

#16536 a95d647 Thanks @WalshyDev! - Support remote Analytics Engine bindings in local development

Setting remote: true on an Analytics Engine dataset now sends writeDataPoint() calls from wrangler dev and the Vite plugin to the real dataset. Without it, writes are still dropped locally.
```
{
  "analytics_engine_datasets": [
    {
      "binding": "EVENTS",
      "dataset": "my-dataset",
      "remote": true
    }
  ]
}
```

cloudflare/workers-sdk (@cloudflare/containers-shared)

`v0.23.4`

Compare Source

Patch Changes

Updated dependencies [a95d647]:
- @cloudflare/config@0.29.0
- @cloudflare/workers-utils@0.50.0
- @cloudflare/build-output-utils@0.9.6
- @cloudflare/cli-shared-helpers@0.2.10

cloudflare/workers-sdk (@cloudflare/deploy-helpers)

`v0.24.2`

Compare Source

Patch Changes

#16521 ec6eddd Thanks @petebacondarwin! - Validate .assetsignore encoding before building asset manifests

Asset uploads and local development now stop with an actionable user error when .assetsignore is not valid UTF-8 or contains null characters, instead of silently losing its patterns. This also applies to standalone Miniflare and the Wrangler, Vite and Vitest development integrations. Save the file as UTF-8 to continue; UTF-8 files with a byte order mark and intentionally empty files remain supported.
Updated dependencies [a95d647, c7a3373, c7a3373, c7a3373]:
- @cloudflare/config@0.29.0
- @cloudflare/workers-utils@0.50.0
- miniflare@5.20261023.2-beta
- @cloudflare/containers-shared@0.23.4
- @cloudflare/cli-shared-helpers@0.2.10

cloudflare/workers-sdk (@cloudflare/runtime-types)

`v0.1.18`

Compare Source

Patch Changes

Updated dependencies [a95d647, c7a3373, c7a3373, c7a3373]:
- miniflare@5.20261023.2-beta

cloudflare/workers-sdk (@cloudflare/workers-auth)

`v0.15.2`

Compare Source

Patch Changes

Updated dependencies [a95d647]:
- @cloudflare/workers-utils@0.50.0

cloudflare/workers-sdk (@cloudflare/workers-utils)

`v0.50.0`

Compare Source

Minor Changes

#16536 a95d647 Thanks @WalshyDev! - Support remote Analytics Engine bindings in local development

Setting remote: true on an Analytics Engine dataset now sends writeDataPoint() calls from wrangler dev and the Vite plugin to the real dataset. Without it, writes are still dropped locally.
```
{
  "analytics_engine_datasets": [
    {
      "binding": "EVENTS",
      "dataset": "my-dataset",
      "remote": true
    }
  ]
}
```

cloudflare/workers-sdk (miniflare)

`v5.20261023.2-beta`

Compare Source

Minor Changes

#16536 a95d647 Thanks @WalshyDev! - Support remote Analytics Engine bindings in local development

Setting remote: true on an Analytics Engine dataset now sends writeDataPoint() calls from wrangler dev and the Vite plugin to the real dataset. Without it, writes are still dropped locally.
```
{
  "analytics_engine_datasets": [
    {
      "binding": "EVENTS",
      "dataset": "my-dataset",
      "remote": true
    }
  ]
}
```
#16489 fc57bc0 Thanks @akshitsinha! - Support standalone local Flagship access through the Local Explorer API

You can now list, create, update, delete, and evaluate flags for any local Flagship app by its ID, even when no Worker binds it and no dev server is running. This lets cf flagship commands manage local flags with --local.

Explorer Flagship routes now follow the public Flagship API: evaluate moves to /apps/{app_id}/evaluate, full updates use PUT, and PATCH changes only enabled, description, default_variation, and metadata. Flag metadata is stored, validated, and returned in evaluation results.

Explorer requests are no longer routed to the development process that owns each app. To share flags between local processes, use the same persistence directory.

Patch Changes

#16492 a2dd5ff Thanks @Hrushikesh-ramilla! - Ensure Miniflare removes temporary files before disposal completes
#16521 ec6eddd Thanks @petebacondarwin! - Validate .assetsignore encoding before building asset manifests

Asset uploads and local development now stop with an actionable user error when .assetsignore is not valid UTF-8 or contains null characters, instead of silently losing its patterns. This also applies to standalone Miniflare and the Wrangler, Vite and Vitest development integrations. Save the file as UTF-8 to continue; UTF-8 files with a byte order mark and intentionally empty files remain supported.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

ask-bonk · 2026-10-28T20:51:01Z

LGTM

github run

clanky-the-clanker · 2026-10-28T20:52:02Z

✅ Approved — Routine exact-pinned workers-sdk dependency update. The refreshed deploy-helpers patch and the lockfile hashes match, and a changeset is included. No issues found.

_{The decision is advisory: this comment never approves, blocks or requests changes on the pull request.}

✅ All checks passed

🚀 Release: ✅ LGTM

Risk: Low. The "cf": patch changeset covers the dependency update.

🔒 Security: ✅ LGTM

Every package comes from the same upstream workers-sdk monorepo with exact pins. No new sources or registries are added.

📖 AGENTS.md: ✅ LGTM

Follows the repository's changeset and dependency-patch conventions.

📋 Code Quality: ✅ LGTM

The deploy-helpers patch changes only its hunk header (-7333,13 → -7370,13) to follow the line shift in 0.24.2, and the patch body is unchanged. pnpm-workspace.yaml still maps @cloudflare/deploy-helpers@* to this patch file. In pnpm-lock.yaml, the patchedDependencies hash and the snapshot patch_hash both have the new value, and the old hash is gone. Every dependency edge points at the new versions.

⚡ Performance: ✅ LGTM

No performance concerns.

📝 Documentation: ✅ LGTM

No documentation concerns.

_{Reviewed commit: 6f19df20}

ask-bonk · 2026-10-28T21:26:18Z

LGTM

github run

pkg-pr-new · 2026-10-28T21:36:49Z

npm i https://pkg.pr.new/cf@441

commit: 6f19df2

ask-bonk · 2026-10-28T21:36:58Z

LGTM

github run

github-actions · 2026-10-28T21:37:59Z

`cf --help` startup

	mean	stddev	min	max
PR	286.4 ms	3.8 ms	280.1 ms	291.6 ms
base	286.9 ms	4.8 ms	280.2 ms	295.1 ms

Δ (PR vs base): — -0.5 ms (-0.2%)

Measured with hyperfine on ubuntu-latest (3 warmup runs, 20 timed runs). CI numbers carry ±a few ms of runner jitter; treat small deltas as noise.

ant-release-bot added the dependencies Pull requests that update a dependency file label Oct 28, 2026

ant-release-bot requested a review from a team as a code owner October 28, 2026 20:49

ant-release-bot requested a review from edmundhung October 28, 2026 20:49

fix(deps): update workers-sdk derived dependencies

e794934

ant-release-bot force-pushed the renovate/workers-sdk branch from cbbbcd9 to e794934 Compare October 28, 2026 21:25

update deploy-helpers patch

6f19df2

dario-piotrowicz approved these changes Oct 28, 2026

View reviewed changes

dario-piotrowicz added this pull request to the merge queue Oct 28, 2026

Merged via the queue into main with commit 5db5ab3 Oct 28, 2026
11 checks passed

dario-piotrowicz deleted the renovate/workers-sdk branch October 28, 2026 21:47

Navigation Menu

Repository navigation

fix(deps): update workers-sdk derived dependencies - #441

fix(deps): update workers-sdk derived dependencies#441
dario-piotrowicz merged 2 commits into
mainfrom
renovate/workers-sdk

ant-release-bot commented Oct 28, 2026 •

edited

Loading

Uh oh!

ask-bonk Bot commented Oct 28, 2026

Uh oh!

clanky-the-clanker Bot commented Oct 28, 2026 •

edited

Loading

🚀 Release: ✅ LGTM

🔒 Security: ✅ LGTM

📖 AGENTS.md: ✅ LGTM

📋 Code Quality: ✅ LGTM

⚡ Performance: ✅ LGTM

📝 Documentation: ✅ LGTM

Uh oh!

ask-bonk Bot commented Oct 28, 2026

Uh oh!

pkg-pr-new Bot commented Oct 28, 2026

Uh oh!

ask-bonk Bot commented Oct 28, 2026

Uh oh!

github-actions Bot commented Oct 28, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

ant-release-bot commented Oct 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Minor Changes

Patch Changes

Configuration

Uh oh!

ask-bonk Bot commented Oct 28, 2026

Uh oh!

clanky-the-clanker Bot commented Oct 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Release: ✅ LGTM

🔒 Security: ✅ LGTM

📖 AGENTS.md: ✅ LGTM

📋 Code Quality: ✅ LGTM

⚡ Performance: ✅ LGTM

📝 Documentation: ✅ LGTM

Uh oh!

ask-bonk Bot commented Oct 28, 2026

Uh oh!

pkg-pr-new Bot commented Oct 28, 2026

Uh oh!

ask-bonk Bot commented Oct 28, 2026

Uh oh!

github-actions Bot commented Oct 28, 2026

cf --help startup

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

ant-release-bot commented Oct 28, 2026 •

edited

Loading

clanky-the-clanker Bot commented Oct 28, 2026 •

edited

Loading

`cf --help` startup