diff --git a/.changeset/autoconfig-output-dir-option.md b/.changeset/autoconfig-output-dir-option.md deleted file mode 100644 index 746ed822a7..0000000000 --- a/.changeset/autoconfig-output-dir-option.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"@cloudflare/autoconfig": minor ---- - -Add an `outputDir` option to `getDetailsForAutoConfig` - -Callers that already know which directory holds their built static assets can pass it as `outputDir` instead of having autoconfig detect one. Relative paths are resolved against the project path. This selects static-asset configuration for unconfigured projects even when framework dependencies are present, without running framework migrations or builds that could replace the requested assets. Existing Workers and Pages configurations, including deployments configured through the Cloudflare Vite plugin alone, retain their usual detection behavior. - -Checking whether a Vite project already uses the Cloudflare plugin no longer writes the Vite config back to disk, preserving its line endings and trailing newline. diff --git a/.changeset/cf-user-token-scope.md b/.changeset/cf-user-token-scope.md deleted file mode 100644 index 4161318d06..0000000000 --- a/.changeset/cf-user-token-scope.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"@cloudflare/workers-auth": patch ---- - -Request the user API token management scope when logging in with cf - -Include `user-api-tokens.write` in cf's default OAuth scopes so users can list and manage their user API tokens, including when they have reached the token creation limit. Existing OAuth sessions need a new login to request the scope. diff --git a/.changeset/clean-containers-validate.md b/.changeset/clean-containers-validate.md deleted file mode 100644 index f1cf9b0972..0000000000 --- a/.changeset/clean-containers-validate.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"@cloudflare/config": patch ---- - -Reject duplicate Container names and invalid Container links - -Duplicate Container names, references to missing Containers, and multiple Durable Objects linked to the same Container now produce configuration errors before development starts or build output is generated. This also catches invalid Container links introduced by the Vite plugin's `config` customizer. diff --git a/.changeset/crlf-types-check.md b/.changeset/crlf-types-check.md deleted file mode 100644 index f165bd14b1..0000000000 --- a/.changeset/crlf-types-check.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"wrangler": patch -"@cloudflare/runtime-types": patch ---- - -Fix `wrangler types --check` reporting CRLF types files as out of date - -When `worker-configuration.d.ts` was checked out with CRLF line endings (for example with Git's `core.autocrlf=true`, the default on Windows), the runtime header kept a trailing `\r` and never matched the expected header. `wrangler types --check` then always failed, `wrangler dev` always warned that the types might be out of date, and cached runtime types were never reused. Generated types files are now read with either line ending. diff --git a/.changeset/friendly-workers-customize.md b/.changeset/friendly-workers-customize.md deleted file mode 100644 index ba56030f3f..0000000000 --- a/.changeset/friendly-workers-customize.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"@cloudflare/vite-plugin": minor ---- - -Customize the full parsed Cloudflare configuration through the beta Vite plugin's `config` callback - -The `config` option now accepts `(loadedConfig: ParsedInputConfigWithWorker) => ParsedInputConfigWithWorker`, allowing frameworks to customize account settings and Containers alongside the entry Worker. Both the loaded and returned configurations include a Worker, and `ParsedInputConfigWithWorker` is exported for framework authors. The returned configuration is revalidated, including resource relationships, before being used for development and recorded in the build output for preview and deployment. - -This is a breaking change to the beta API: object overrides and callbacks that mutate or return partial Worker configurations must return a complete configuration instead. Copy the loaded configuration and any nested fields to preserve, for example `config: (loadedConfig) => ({ ...loadedConfig, worker: { ...loadedConfig.worker, name: "my-worker", compatibilityDate: "2026-10-01" } })`. Fields and arrays are replaced rather than deep-merged. diff --git a/.changeset/miniflare-resolve-local-bindings.md b/.changeset/miniflare-resolve-local-bindings.md deleted file mode 100644 index 67f393abd4..0000000000 --- a/.changeset/miniflare-resolve-local-bindings.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"miniflare": minor ---- - -Add `resolveLocalBindings()` - -It fills in a Worker's secrets and Hyperdrive connection strings for local development, and warns about secrets that have no local value. diff --git a/.changeset/pages-assets-directory-boundary.md b/.changeset/pages-assets-directory-boundary.md deleted file mode 100644 index 1113d3c279..0000000000 --- a/.changeset/pages-assets-directory-boundary.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"wrangler": patch ---- - -Keep Pages development asset lookups within the configured directory - -Validate resolved asset paths relative to the Pages output directory, preventing neighboring files and directories with a shared name prefix from being served. This also applies to the Vitest Pages ASSETS helper. Assets inside the directory and existing not-found fallbacks retain their behavior. diff --git a/.changeset/pages-deploy-requested-directory.md b/.changeset/pages-deploy-requested-directory.md deleted file mode 100644 index 416916fa3f..0000000000 --- a/.changeset/pages-deploy-requested-directory.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"wrangler": patch ---- - -Deploy the requested directory when `wrangler pages deploy ` is run as a Workers static-assets deploy - -When `wrangler pages deploy ` was carried out as a Workers static-assets deploy, the `` argument was only used to check for unsupported Pages features and was then dropped. Autoconfig detected an assets directory of its own instead, and when the project root contained an `index.html` it chose the whole project root, even when a narrower directory such as `public` had been requested. Source files and configuration outside the requested directory that were not excluded by `.assetsignore` could then be uploaded as public static assets. - -The requested directory is now validated before files are written and passed through to the deploy. Unconfigured projects are set up for static assets even when framework dependencies are present; existing Workers configs receive an `--assets` or legacy `--site` override. Projects configured through the Cloudflare Vite plugin alone keep their configuration and scripts, using the requested directory and an explicit or default compatibility date just for this deploy. Successful deployments without a config file are recorded in the project's `.wrangler/deployments` directory for that account and Worker, surviving dependency reinstalls. Repeat deploys verify the recorded version still belongs to the target Worker before allowing an update, preserving protection against name collisions and replacements. diff --git a/.changeset/preserve-duplicate-account-names.md b/.changeset/preserve-duplicate-account-names.md deleted file mode 100644 index 5945890eb2..0000000000 --- a/.changeset/preserve-duplicate-account-names.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"create-cloudflare": patch ---- - -Preserve accounts with duplicate display names during account selection - -Create Cloudflare now keeps accounts by their IDs and includes each ID in the selection prompt, so accounts with the same name remain distinct choices. This applies to both Wrangler and cf projects. diff --git a/.changeset/react-router-cf-minimum-version.md b/.changeset/react-router-cf-minimum-version.md deleted file mode 100644 index 82ea58f9fe..0000000000 --- a/.changeset/react-router-cf-minimum-version.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"@cloudflare/autoconfig": patch ---- - -Support React Router on `cf` from version 8.5.1 - -React Router 8.5.1 builds into the output directories that the Cloudflare Vite plugin v2 uses, which `cf` needs. Autoconfig now requires React Router 8.5.1 or later when configuring a project for `cf`, and stops with a clear message on earlier versions instead of letting `cf build` fail later. Projects configured for Wrangler keep the existing minimum of React Router 7.0.0. diff --git a/.changeset/tidy-assets-retry.md b/.changeset/tidy-assets-retry.md deleted file mode 100644 index b6dad2d0b2..0000000000 --- a/.changeset/tidy-assets-retry.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@cloudflare/deploy-helpers": patch -"wrangler": patch ---- - -Retry transient failures when starting a Workers assets upload session - -Asset manifest registration now uses the same bounded API retry policy as Worker uploads, including support for `Retry-After`. Temporary server errors no longer immediately abort an otherwise valid deployment. Persistent failures still surface the original error after the retry limit; this does not repair server-side issues affecting a specific Worker. diff --git a/.changeset/tidy-slashes-protect-middleware.md b/.changeset/tidy-slashes-protect-middleware.md deleted file mode 100644 index 6d8cd75419..0000000000 --- a/.changeset/tidy-slashes-protect-middleware.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@cloudflare/pages-functions": patch -"wrangler": patch ---- - -Fix repeated slashes in URL paths bypassing Pages Functions middleware - -Pages Functions now collapse repeated slashes when looking up middleware, so requests such as `//secure/one` run the same middleware as `/secure/one`. The original request URL and function-route matching are preserved. Middleware receives a `functionPath` prefix from the original URL so imported assets can still resolve their relative paths. diff --git a/.changeset/validate-oauth-error-callbacks.md b/.changeset/validate-oauth-error-callbacks.md deleted file mode 100644 index c51324f62c..0000000000 --- a/.changeset/validate-oauth-error-callbacks.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@cloudflare/workers-auth": patch -"wrangler": patch ---- - -Validate OAuth error callbacks against the pending login - -All authorization callbacks, including ones without a code or error, now require the matching login state. Unrelated callbacks leave the login running so the authorization page can complete it, and control characters in provider error messages are displayed as escaped text. diff --git a/.changeset/viteplus-project-commands.md b/.changeset/viteplus-project-commands.md deleted file mode 100644 index d6eebda3bd..0000000000 --- a/.changeset/viteplus-project-commands.md +++ /dev/null @@ -1,7 +0,0 @@ ---- -"@cloudflare/autoconfig": patch ---- - -Run the project-local Vite+ executable for Vite+ projects - -Use `vp dev` and `vp build` when Vite+ is declared. Its Vite alias does not expose a `vite` executable, so invoking `vite` can fail with pnpm or cause npm to fetch a separate Vite. Preserve framework-owned commands and custom scripts. diff --git a/.changeset/wasm-stack-frames.md b/.changeset/wasm-stack-frames.md deleted file mode 100644 index 373c0a724e..0000000000 --- a/.changeset/wasm-stack-frames.md +++ /dev/null @@ -1,8 +0,0 @@ ---- -"@cloudflare/deploy-helpers": patch -"wrangler": patch ---- - -Fix WebAssembly stack frames printing as `at [object Object]` in source-mapped errors - -WebAssembly frames in source-mapped error stack traces now show their original function and location instead of `[object Object]`. diff --git a/packages/autoconfig/CHANGELOG.md b/packages/autoconfig/CHANGELOG.md index 72b023ae1c..4097c1a028 100644 --- a/packages/autoconfig/CHANGELOG.md +++ b/packages/autoconfig/CHANGELOG.md @@ -1,5 +1,28 @@ # @cloudflare/autoconfig +## 0.9.0 + +### Minor Changes + +- [#16366](https://github.com/cloudflare/workers-sdk/pull/16366) [`d174de8`](https://github.com/cloudflare/workers-sdk/commit/d174de8818c79ff82293150917fa6da11516e795) Thanks [@MattieTK](https://github.com/MattieTK)! - Add an `outputDir` option to `getDetailsForAutoConfig` + + Callers that already know which directory holds their built static assets can pass it as `outputDir` instead of having autoconfig detect one. Relative paths are resolved against the project path. This selects static-asset configuration for unconfigured projects even when framework dependencies are present, without running framework migrations or builds that could replace the requested assets. Existing Workers and Pages configurations, including deployments configured through the Cloudflare Vite plugin alone, retain their usual detection behavior. + + Checking whether a Vite project already uses the Cloudflare plugin no longer writes the Vite config back to disk, preserving its line endings and trailing newline. + +### Patch Changes + +- [#16537](https://github.com/cloudflare/workers-sdk/pull/16537) [`a2d1338`](https://github.com/cloudflare/workers-sdk/commit/a2d1338708fa36881bb265d277a579e64fe59eb7) Thanks [@edmundhung](https://github.com/edmundhung)! - Support React Router on `cf` from version 8.5.1 + + React Router 8.5.1 builds into the output directories that the Cloudflare Vite plugin v2 uses, which `cf` needs. Autoconfig now requires React Router 8.5.1 or later when configuring a project for `cf`, and stops with a clear message on earlier versions instead of letting `cf build` fail later. Projects configured for Wrangler keep the existing minimum of React Router 7.0.0. + +- [#16588](https://github.com/cloudflare/workers-sdk/pull/16588) [`3f14c76`](https://github.com/cloudflare/workers-sdk/commit/3f14c760aba638b3ef4ade1a1c5b935e64ddcc64) Thanks [@irvinebroque](https://github.com/irvinebroque)! - Run the project-local Vite+ executable for Vite+ projects + + Use `vp dev` and `vp build` when Vite+ is declared. Its Vite alias does not expose a `vite` executable, so invoking `vite` can fail with pnpm or cause npm to fetch a separate Vite. Preserve framework-owned commands and custom scripts. + +- Updated dependencies [[`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d)]: + - @cloudflare/config@0.29.1 + ## 0.8.3 ### Patch Changes diff --git a/packages/autoconfig/package.json b/packages/autoconfig/package.json index 68711caf71..5472fb5f90 100644 --- a/packages/autoconfig/package.json +++ b/packages/autoconfig/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/autoconfig", - "version": "0.8.3", + "version": "0.9.0", "description": "Framework autoconfig detection and configuration for Cloudflare Workers", "license": "MIT OR Apache-2.0", "repository": { diff --git a/packages/build-output-utils/CHANGELOG.md b/packages/build-output-utils/CHANGELOG.md index a42f292a0b..5e3abb8789 100644 --- a/packages/build-output-utils/CHANGELOG.md +++ b/packages/build-output-utils/CHANGELOG.md @@ -1,5 +1,12 @@ # @cloudflare/build-output-utils +## 0.9.7 + +### Patch Changes + +- Updated dependencies [[`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d)]: + - @cloudflare/config@0.29.1 + ## 0.9.6 ### Patch Changes diff --git a/packages/build-output-utils/package.json b/packages/build-output-utils/package.json index a51d8fe095..a36826efe2 100644 --- a/packages/build-output-utils/package.json +++ b/packages/build-output-utils/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/build-output-utils", - "version": "0.9.6", + "version": "0.9.7", "description": "Utilities for reading and writing the Build Output Specification directory. This is not yet stable enough for external use — APIs may change without notice.", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/build-output-utils#readme", "bugs": { diff --git a/packages/config/CHANGELOG.md b/packages/config/CHANGELOG.md index a9dd53febc..c50f26fc62 100644 --- a/packages/config/CHANGELOG.md +++ b/packages/config/CHANGELOG.md @@ -1,5 +1,13 @@ # @cloudflare/config +## 0.29.1 + +### Patch Changes + +- [#16573](https://github.com/cloudflare/workers-sdk/pull/16573) [`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Reject duplicate Container names and invalid Container links + + Duplicate Container names, references to missing Containers, and multiple Durable Objects linked to the same Container now produce configuration errors before development starts or build output is generated. This also catches invalid Container links introduced by the Vite plugin's `config` customizer. + ## 0.29.0 ### Minor Changes diff --git a/packages/config/package.json b/packages/config/package.json index 020dc8d14b..ae31149b42 100644 --- a/packages/config/package.json +++ b/packages/config/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/config", - "version": "0.29.0", + "version": "0.29.1", "description": "Definitions and utilities for configuring Cloudflare Workers and related products. This is not yet stable enough for external use — APIs may change without notice.", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/config#readme", "bugs": { diff --git a/packages/containers-shared/CHANGELOG.md b/packages/containers-shared/CHANGELOG.md index ef01590e47..9b3c1c8161 100644 --- a/packages/containers-shared/CHANGELOG.md +++ b/packages/containers-shared/CHANGELOG.md @@ -1,5 +1,13 @@ # @cloudflare/containers-shared +## 0.23.6 + +### Patch Changes + +- Updated dependencies [[`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d)]: + - @cloudflare/config@0.29.1 + - @cloudflare/build-output-utils@0.9.7 + ## 0.23.5 ### Patch Changes diff --git a/packages/containers-shared/package.json b/packages/containers-shared/package.json index 5580873592..0de4992ff4 100644 --- a/packages/containers-shared/package.json +++ b/packages/containers-shared/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/containers-shared", - "version": "0.23.5", + "version": "0.23.6", "description": "Internal-only shared container helpers for workers-sdk. Do not use directly; APIs are unstable and may change or disappear without notice.", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/containers-shared#readme", "bugs": { diff --git a/packages/create-cloudflare/CHANGELOG.md b/packages/create-cloudflare/CHANGELOG.md index 12bec13252..53a4d296a9 100644 --- a/packages/create-cloudflare/CHANGELOG.md +++ b/packages/create-cloudflare/CHANGELOG.md @@ -1,5 +1,13 @@ # create-cloudflare +## 2.74.6 + +### Patch Changes + +- [#16524](https://github.com/cloudflare/workers-sdk/pull/16524) [`3819800`](https://github.com/cloudflare/workers-sdk/commit/38198002a3ae331d214b2bc78c6574275203f3ed) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Preserve accounts with duplicate display names during account selection + + Create Cloudflare now keeps accounts by their IDs and includes each ID in the selection prompt, so accounts with the same name remain distinct choices. This applies to both Wrangler and cf projects. + ## 2.74.5 ### Patch Changes diff --git a/packages/create-cloudflare/package.json b/packages/create-cloudflare/package.json index c2f16c4b4f..53d610f0aa 100644 --- a/packages/create-cloudflare/package.json +++ b/packages/create-cloudflare/package.json @@ -1,6 +1,6 @@ { "name": "create-cloudflare", - "version": "2.74.5", + "version": "2.74.6", "description": "A CLI for creating and deploying new applications to Cloudflare.", "keywords": [ "cloudflare", diff --git a/packages/deploy-helpers/CHANGELOG.md b/packages/deploy-helpers/CHANGELOG.md index 3ed947d0c2..54ebee0655 100644 --- a/packages/deploy-helpers/CHANGELOG.md +++ b/packages/deploy-helpers/CHANGELOG.md @@ -1,5 +1,22 @@ # @cloudflare/deploy-helpers +## 0.24.4 + +### Patch Changes + +- [#16562](https://github.com/cloudflare/workers-sdk/pull/16562) [`aece4df`](https://github.com/cloudflare/workers-sdk/commit/aece4df134bc89ebba4f59ca3f737c049ac09668) Thanks [@audricbizouarn-dashdoc](https://github.com/audricbizouarn-dashdoc)! - Retry transient failures when starting a Workers assets upload session + + Asset manifest registration now uses the same bounded API retry policy as Worker uploads, including support for `Retry-After`. Temporary server errors no longer immediately abort an otherwise valid deployment. Persistent failures still surface the original error after the retry limit; this does not repair server-side issues affecting a specific Worker. + +- [#16597](https://github.com/cloudflare/workers-sdk/pull/16597) [`f9dbb22`](https://github.com/cloudflare/workers-sdk/commit/f9dbb2232d5c233a09828fbe0c6272ea0e7cf471) Thanks [@guybedford](https://github.com/guybedford)! - Fix WebAssembly stack frames printing as `at [object Object]` in source-mapped errors + + WebAssembly frames in source-mapped error stack traces now show their original function and location instead of `[object Object]`. + +- Updated dependencies [[`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d), [`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14)]: + - @cloudflare/config@0.29.1 + - miniflare@5.20261023.4-beta + - @cloudflare/containers-shared@0.23.6 + ## 0.24.3 ### Patch Changes diff --git a/packages/deploy-helpers/package.json b/packages/deploy-helpers/package.json index 33f1380449..69bc579c34 100644 --- a/packages/deploy-helpers/package.json +++ b/packages/deploy-helpers/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/deploy-helpers", - "version": "0.24.3", + "version": "0.24.4", "description": "Internal deploy helpers for workers-sdk. Not intended for external use — APIs may change without notice.", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/deploy-helpers#readme", "bugs": { diff --git a/packages/miniflare/CHANGELOG.md b/packages/miniflare/CHANGELOG.md index 4064343596..3e2c3c9dfb 100644 --- a/packages/miniflare/CHANGELOG.md +++ b/packages/miniflare/CHANGELOG.md @@ -1,5 +1,13 @@ # miniflare +## 5.20261023.4-beta + +### Minor Changes + +- [#16514](https://github.com/cloudflare/workers-sdk/pull/16514) [`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14) Thanks [@edmundhung](https://github.com/edmundhung)! - Add `resolveLocalBindings()` + + It fills in a Worker's secrets and Hyperdrive connection strings for local development, and warns about secrets that have no local value. + ## 5.20261023.3-beta ### Patch Changes diff --git a/packages/miniflare/package.json b/packages/miniflare/package.json index 174bea4702..8d76d590f1 100644 --- a/packages/miniflare/package.json +++ b/packages/miniflare/package.json @@ -1,6 +1,6 @@ { "name": "miniflare", - "version": "5.20261023.3-beta", + "version": "5.20261023.4-beta", "description": "Fun, full-featured, fully-local simulator for Cloudflare Workers", "keywords": [ "cloudflare", diff --git a/packages/pages-functions/CHANGELOG.md b/packages/pages-functions/CHANGELOG.md index b5037ce563..6651b4379b 100644 --- a/packages/pages-functions/CHANGELOG.md +++ b/packages/pages-functions/CHANGELOG.md @@ -1,5 +1,13 @@ # @cloudflare/pages-functions +## 0.1.3 + +### Patch Changes + +- [#16603](https://github.com/cloudflare/workers-sdk/pull/16603) [`2667a9f`](https://github.com/cloudflare/workers-sdk/commit/2667a9f1e5dabd0ca5c9a238f3c6a1ca0719d935) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Fix repeated slashes in URL paths bypassing Pages Functions middleware + + Pages Functions now collapse repeated slashes when looking up middleware, so requests such as `//secure/one` run the same middleware as `/secure/one`. The original request URL and function-route matching are preserved. Middleware receives a `functionPath` prefix from the original URL so imported assets can still resolve their relative paths. + ## 0.1.2 ### Patch Changes diff --git a/packages/pages-functions/package.json b/packages/pages-functions/package.json index 3d3b5f9b53..98a1fd3807 100644 --- a/packages/pages-functions/package.json +++ b/packages/pages-functions/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/pages-functions", - "version": "0.1.2", + "version": "0.1.3", "description": "Compile a Pages Functions directory into a Cloudflare Worker bundle", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/pages-functions#readme", "bugs": { diff --git a/packages/pages-shared/CHANGELOG.md b/packages/pages-shared/CHANGELOG.md index e359006dee..b2f90b03f5 100644 --- a/packages/pages-shared/CHANGELOG.md +++ b/packages/pages-shared/CHANGELOG.md @@ -1,5 +1,12 @@ # @cloudflare/pages-shared +## 0.13.206 + +### Patch Changes + +- Updated dependencies [[`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14)]: + - miniflare@5.20261023.4-beta + ## 0.13.205 ### Patch Changes diff --git a/packages/pages-shared/package.json b/packages/pages-shared/package.json index 3369a82b8c..0efcc40846 100644 --- a/packages/pages-shared/package.json +++ b/packages/pages-shared/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/pages-shared", - "version": "0.13.205", + "version": "0.13.206", "repository": { "type": "git", "url": "https://github.com/cloudflare/workers-sdk.git", diff --git a/packages/remote-bindings/CHANGELOG.md b/packages/remote-bindings/CHANGELOG.md index 5519b159bd..a849bde947 100644 --- a/packages/remote-bindings/CHANGELOG.md +++ b/packages/remote-bindings/CHANGELOG.md @@ -1,5 +1,14 @@ # @cloudflare/remote-bindings +## 0.0.57 + +### Patch Changes + +- Updated dependencies [[`30d9f72`](https://github.com/cloudflare/workers-sdk/commit/30d9f7207938b7091f6c54e12a9e6f69b83bb3ec), [`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14), [`aece4df`](https://github.com/cloudflare/workers-sdk/commit/aece4df134bc89ebba4f59ca3f737c049ac09668), [`ed7fb41`](https://github.com/cloudflare/workers-sdk/commit/ed7fb4165a0c5de605b57b8f8443ff401b5194c4), [`f9dbb22`](https://github.com/cloudflare/workers-sdk/commit/f9dbb2232d5c233a09828fbe0c6272ea0e7cf471)]: + - @cloudflare/workers-auth@0.15.4 + - miniflare@5.20261023.4-beta + - @cloudflare/deploy-helpers@0.24.4 + ## 0.0.56 ### Patch Changes diff --git a/packages/remote-bindings/package.json b/packages/remote-bindings/package.json index 91978db3eb..92b81fd2de 100644 --- a/packages/remote-bindings/package.json +++ b/packages/remote-bindings/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/remote-bindings", - "version": "0.0.56", + "version": "0.0.57", "private": true, "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/remote-bindings#readme", "bugs": { diff --git a/packages/runtime-types/CHANGELOG.md b/packages/runtime-types/CHANGELOG.md index 3534e13a8e..cf8d5d9de9 100644 --- a/packages/runtime-types/CHANGELOG.md +++ b/packages/runtime-types/CHANGELOG.md @@ -1,5 +1,16 @@ # @cloudflare/runtime-types +## 0.1.20 + +### Patch Changes + +- [#16594](https://github.com/cloudflare/workers-sdk/pull/16594) [`effe4ed`](https://github.com/cloudflare/workers-sdk/commit/effe4ed13b1677744428cfb0c37e4512ec5d52f7) Thanks [@jaeminbird](https://github.com/jaeminbird)! - Fix `wrangler types --check` reporting CRLF types files as out of date + + When `worker-configuration.d.ts` was checked out with CRLF line endings (for example with Git's `core.autocrlf=true`, the default on Windows), the runtime header kept a trailing `\r` and never matched the expected header. `wrangler types --check` then always failed, `wrangler dev` always warned that the types might be out of date, and cached runtime types were never reused. Generated types files are now read with either line ending. + +- Updated dependencies [[`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14)]: + - miniflare@5.20261023.4-beta + ## 0.1.19 ### Patch Changes diff --git a/packages/runtime-types/package.json b/packages/runtime-types/package.json index 4aac84d94c..2b1f66ef9e 100644 --- a/packages/runtime-types/package.json +++ b/packages/runtime-types/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/runtime-types", - "version": "0.1.19", + "version": "0.1.20", "description": "Utilities for generating Cloudflare Workers runtime types from compatibility dates and flags. This is not yet stable enough for external use — APIs may change without notice.", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/runtime-types#readme", "bugs": { diff --git a/packages/vite-plugin-cloudflare/CHANGELOG.md b/packages/vite-plugin-cloudflare/CHANGELOG.md index ef1b3e0b7e..09aaee79bc 100644 --- a/packages/vite-plugin-cloudflare/CHANGELOG.md +++ b/packages/vite-plugin-cloudflare/CHANGELOG.md @@ -1,5 +1,23 @@ # @cloudflare/vite-plugin +## 2.0.0-beta.v.9 + +### Minor Changes + +- [#16573](https://github.com/cloudflare/workers-sdk/pull/16573) [`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Customize the full parsed Cloudflare configuration through the beta Vite plugin's `config` callback + + The `config` option now accepts `(loadedConfig: ParsedInputConfigWithWorker) => ParsedInputConfigWithWorker`, allowing frameworks to customize account settings and Containers alongside the entry Worker. Both the loaded and returned configurations include a Worker, and `ParsedInputConfigWithWorker` is exported for framework authors. The returned configuration is revalidated, including resource relationships, before being used for development and recorded in the build output for preview and deployment. + + This is a breaking change to the beta API: object overrides and callbacks that mutate or return partial Worker configurations must return a complete configuration instead. Copy the loaded configuration and any nested fields to preserve, for example `config: (loadedConfig) => ({ ...loadedConfig, worker: { ...loadedConfig.worker, name: "my-worker", compatibilityDate: "2026-10-01" } })`. Fields and arrays are replaced rather than deep-merged. + +### Patch Changes + +- Updated dependencies [[`91f0e03`](https://github.com/cloudflare/workers-sdk/commit/91f0e03b28790e349d0bd7371fae7b59d755f79d), [`effe4ed`](https://github.com/cloudflare/workers-sdk/commit/effe4ed13b1677744428cfb0c37e4512ec5d52f7), [`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14)]: + - @cloudflare/config@0.29.1 + - @cloudflare/runtime-types@0.1.20 + - miniflare@5.20261023.4-beta + - @cloudflare/build-output-utils@0.9.7 + ## 2.0.0-beta.v.8 ### Patch Changes diff --git a/packages/vite-plugin-cloudflare/package.json b/packages/vite-plugin-cloudflare/package.json index ba5108d3ff..c5e5dc9b65 100644 --- a/packages/vite-plugin-cloudflare/package.json +++ b/packages/vite-plugin-cloudflare/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/vite-plugin", - "version": "2.0.0-beta.v.8", + "version": "2.0.0-beta.v.9", "description": "Cloudflare plugin for Vite", "keywords": [ "cloudflare", diff --git a/packages/vitest-plugin/CHANGELOG.md b/packages/vitest-plugin/CHANGELOG.md index 4985c62b71..85a5c755f7 100644 --- a/packages/vitest-plugin/CHANGELOG.md +++ b/packages/vitest-plugin/CHANGELOG.md @@ -1,5 +1,13 @@ # @cloudflare/vitest-plugin +## 1.4.12 + +### Patch Changes + +- Updated dependencies [[`effe4ed`](https://github.com/cloudflare/workers-sdk/commit/effe4ed13b1677744428cfb0c37e4512ec5d52f7), [`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14), [`5740867`](https://github.com/cloudflare/workers-sdk/commit/57408671a0e1ff04ee1881d37c217c0e86a01c0c), [`d174de8`](https://github.com/cloudflare/workers-sdk/commit/d174de8818c79ff82293150917fa6da11516e795), [`aece4df`](https://github.com/cloudflare/workers-sdk/commit/aece4df134bc89ebba4f59ca3f737c049ac09668), [`2667a9f`](https://github.com/cloudflare/workers-sdk/commit/2667a9f1e5dabd0ca5c9a238f3c6a1ca0719d935), [`ed7fb41`](https://github.com/cloudflare/workers-sdk/commit/ed7fb4165a0c5de605b57b8f8443ff401b5194c4), [`f9dbb22`](https://github.com/cloudflare/workers-sdk/commit/f9dbb2232d5c233a09828fbe0c6272ea0e7cf471)]: + - wrangler@4.156.1 + - miniflare@5.20261023.4-beta + ## 1.4.11 ### Patch Changes diff --git a/packages/vitest-plugin/package.json b/packages/vitest-plugin/package.json index 8eb9ec3218..328aa1ddcf 100644 --- a/packages/vitest-plugin/package.json +++ b/packages/vitest-plugin/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/vitest-plugin", - "version": "1.4.11", + "version": "1.4.12", "description": "Workers Vitest integration for writing Vitest unit and integration tests that run inside the Workers runtime", "keywords": [ "cloudflare", diff --git a/packages/workers-auth/CHANGELOG.md b/packages/workers-auth/CHANGELOG.md index 6a0d6da8db..d7d0c6bc6d 100644 --- a/packages/workers-auth/CHANGELOG.md +++ b/packages/workers-auth/CHANGELOG.md @@ -1,5 +1,17 @@ # @cloudflare/workers-auth +## 0.15.4 + +### Patch Changes + +- [#16557](https://github.com/cloudflare/workers-sdk/pull/16557) [`30d9f72`](https://github.com/cloudflare/workers-sdk/commit/30d9f7207938b7091f6c54e12a9e6f69b83bb3ec) Thanks [@Kmschr](https://github.com/Kmschr)! - Request the user API token management scope when logging in with cf + + Include `user-api-tokens.write` in cf's default OAuth scopes so users can list and manage their user API tokens, including when they have reached the token creation limit. Existing OAuth sessions need a new login to request the scope. + +- [#16525](https://github.com/cloudflare/workers-sdk/pull/16525) [`ed7fb41`](https://github.com/cloudflare/workers-sdk/commit/ed7fb4165a0c5de605b57b8f8443ff401b5194c4) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Validate OAuth error callbacks against the pending login + + All authorization callbacks, including ones without a code or error, now require the matching login state. Unrelated callbacks leave the login running so the authorization page can complete it, and control characters in provider error messages are displayed as escaped text. + ## 0.15.3 ### Patch Changes diff --git a/packages/workers-auth/package.json b/packages/workers-auth/package.json index 43a642d5c5..a73fd877c0 100644 --- a/packages/workers-auth/package.json +++ b/packages/workers-auth/package.json @@ -1,6 +1,6 @@ { "name": "@cloudflare/workers-auth", - "version": "0.15.3", + "version": "0.15.4", "description": "Internal OAuth 2.0 + PKCE flow for Cloudflare CLIs. Not intended for external use — APIs may change without notice.", "homepage": "https://github.com/cloudflare/workers-sdk/tree/main/packages/workers-auth#readme", "bugs": { diff --git a/packages/wrangler/CHANGELOG.md b/packages/wrangler/CHANGELOG.md index dd706818bc..b767c15738 100644 --- a/packages/wrangler/CHANGELOG.md +++ b/packages/wrangler/CHANGELOG.md @@ -1,5 +1,42 @@ # wrangler +## 4.156.1 + +### Patch Changes + +- [#16594](https://github.com/cloudflare/workers-sdk/pull/16594) [`effe4ed`](https://github.com/cloudflare/workers-sdk/commit/effe4ed13b1677744428cfb0c37e4512ec5d52f7) Thanks [@jaeminbird](https://github.com/jaeminbird)! - Fix `wrangler types --check` reporting CRLF types files as out of date + + When `worker-configuration.d.ts` was checked out with CRLF line endings (for example with Git's `core.autocrlf=true`, the default on Windows), the runtime header kept a trailing `\r` and never matched the expected header. `wrangler types --check` then always failed, `wrangler dev` always warned that the types might be out of date, and cached runtime types were never reused. Generated types files are now read with either line ending. + +- [#16535](https://github.com/cloudflare/workers-sdk/pull/16535) [`5740867`](https://github.com/cloudflare/workers-sdk/commit/57408671a0e1ff04ee1881d37c217c0e86a01c0c) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Keep Pages development asset lookups within the configured directory + + Validate resolved asset paths relative to the Pages output directory, preventing neighboring files and directories with a shared name prefix from being served. This also applies to the Vitest Pages ASSETS helper. Assets inside the directory and existing not-found fallbacks retain their behavior. + +- [#16366](https://github.com/cloudflare/workers-sdk/pull/16366) [`d174de8`](https://github.com/cloudflare/workers-sdk/commit/d174de8818c79ff82293150917fa6da11516e795) Thanks [@MattieTK](https://github.com/MattieTK)! - Deploy the requested directory when `wrangler pages deploy ` is run as a Workers static-assets deploy + + When `wrangler pages deploy ` was carried out as a Workers static-assets deploy, the `` argument was only used to check for unsupported Pages features and was then dropped. Autoconfig detected an assets directory of its own instead, and when the project root contained an `index.html` it chose the whole project root, even when a narrower directory such as `public` had been requested. Source files and configuration outside the requested directory that were not excluded by `.assetsignore` could then be uploaded as public static assets. + + The requested directory is now validated before files are written and passed through to the deploy. Unconfigured projects are set up for static assets even when framework dependencies are present; existing Workers configs receive an `--assets` or legacy `--site` override. Projects configured through the Cloudflare Vite plugin alone keep their configuration and scripts, using the requested directory and an explicit or default compatibility date just for this deploy. Successful deployments without a config file are recorded in the project's `.wrangler/deployments` directory for that account and Worker, surviving dependency reinstalls. Repeat deploys verify the recorded version still belongs to the target Worker before allowing an update, preserving protection against name collisions and replacements. + +- [#16562](https://github.com/cloudflare/workers-sdk/pull/16562) [`aece4df`](https://github.com/cloudflare/workers-sdk/commit/aece4df134bc89ebba4f59ca3f737c049ac09668) Thanks [@audricbizouarn-dashdoc](https://github.com/audricbizouarn-dashdoc)! - Retry transient failures when starting a Workers assets upload session + + Asset manifest registration now uses the same bounded API retry policy as Worker uploads, including support for `Retry-After`. Temporary server errors no longer immediately abort an otherwise valid deployment. Persistent failures still surface the original error after the retry limit; this does not repair server-side issues affecting a specific Worker. + +- [#16603](https://github.com/cloudflare/workers-sdk/pull/16603) [`2667a9f`](https://github.com/cloudflare/workers-sdk/commit/2667a9f1e5dabd0ca5c9a238f3c6a1ca0719d935) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Fix repeated slashes in URL paths bypassing Pages Functions middleware + + Pages Functions now collapse repeated slashes when looking up middleware, so requests such as `//secure/one` run the same middleware as `/secure/one`. The original request URL and function-route matching are preserved. Middleware receives a `functionPath` prefix from the original URL so imported assets can still resolve their relative paths. + +- [#16525](https://github.com/cloudflare/workers-sdk/pull/16525) [`ed7fb41`](https://github.com/cloudflare/workers-sdk/commit/ed7fb4165a0c5de605b57b8f8443ff401b5194c4) Thanks [@petebacondarwin](https://github.com/petebacondarwin)! - Validate OAuth error callbacks against the pending login + + All authorization callbacks, including ones without a code or error, now require the matching login state. Unrelated callbacks leave the login running so the authorization page can complete it, and control characters in provider error messages are displayed as escaped text. + +- [#16597](https://github.com/cloudflare/workers-sdk/pull/16597) [`f9dbb22`](https://github.com/cloudflare/workers-sdk/commit/f9dbb2232d5c233a09828fbe0c6272ea0e7cf471) Thanks [@guybedford](https://github.com/guybedford)! - Fix WebAssembly stack frames printing as `at [object Object]` in source-mapped errors + + WebAssembly frames in source-mapped error stack traces now show their original function and location instead of `[object Object]`. + +- Updated dependencies [[`009ca6e`](https://github.com/cloudflare/workers-sdk/commit/009ca6e0483fd4a89f44bd02251b0a64491dab14)]: + - miniflare@5.20261023.4-beta + ## 4.156.0 ### Minor Changes diff --git a/packages/wrangler/package.json b/packages/wrangler/package.json index 661f19375c..05591c0a14 100644 --- a/packages/wrangler/package.json +++ b/packages/wrangler/package.json @@ -1,6 +1,6 @@ { "name": "wrangler", - "version": "4.156.0", + "version": "4.156.1", "description": "Command-line interface for all things Cloudflare Workers", "keywords": [ "assembly",