Bump the workerd-and-workers-types group across 1 directory with 2 updates by dependabot[bot] · Pull Request #15633 · cloudflare/workers-sdk

dependabot · 2026-09-14T06:06:28Z

Bumps the workerd-and-workers-types group with 2 updates in the / directory: @cloudflare/workers-types and workerd.

Updates @cloudflare/workers-types from 4.20260702.1 to 5.20260915.1

Commits

See full diff in compare view

Updates workerd from 1.20260911.1 to 1.20260915.1

Release notes

v1.20260915.1

What's Changed

build: depend on the kj-async layer each target actually uses by @danlapid in cloudflare/workerd#7350

Python workers: Replace string Pyodide patches with ast patches by @hoodmane in cloudflare/workerd#7325

disable profiler tests under tsan by @mikea in cloudflare/workerd#7355

feat: expose client IP and port as remoteAddress in TCP connect() handler by @ThomasRubini in cloudflare/workerd#7304

Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel by @danlapid in cloudflare/workerd#7356

node: make the isolate the port namespace for http and net servers by @guybedford in cloudflare/workerd#7357

Pin error() during a pending close in the readable stream suites by @jasnell in cloudflare/workerd#7335

[build] JSG: move TypeWrapper members that ignore the type list to a base by @fhanau in cloudflare/workerd#7269

Fix memory snapshots with Python 3.14 by @hoodmane in cloudflare/workerd#7311

chore: Tidy up Pyodide patches by @hoodmane in cloudflare/workerd#7367

New Contributors

@ThomasRubini made their first contribution in cloudflare/workerd#7304

Full Changelog: cloudflare/workerd@v1.20260914.1...v1.20260915.1

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime by @danlapid in cloudflare/workerd#7011

node:net: add net.Server and cloudflare:node connectHandler by @guybedford in cloudflare/workerd#7306

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Add public workflows event subscription type definitions by @mkuritsu in cloudflare/workerd#7261

CI: minimal bridge prerequisites for Tokio I/O by @harrishancock in cloudflare/workerd#7317

Add jsg::Lenient based on Rust jsg::Nullable by @LordGoatius in cloudflare/workerd#7037

sockets: close() with a pipe close in flight logged an uncaught exception by @guybedford in cloudflare/workerd#7313

Python: Add numpy vendor snapshot stability test by @hoodmane in cloudflare/workerd#7326

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

Commits

e52fd07 Release 2026-09-15
f75e6b4 chore: Tidy up Pyodide patches (#7367)
aec43b4 Fix memory snapshots with Python 3.14 (#7311)
35125c9 Add vendored packages tests for shapely, pillow and pywavelets
18f1fbe Add a mechanism for Pyodide-version-specific snapshot flags
2a69756 Python snapshot release: make update-released flag only refer to baseline sna...
4cfb37f Fix memory snapshots with Python 3.14
d14feab [build] JSG: move TypeWrapper members that ignore the type list to a base
81e7d3e Make PYODIDE_VERSION refer to realPyodideVersion (not 'dev')
4cd51d9 Merge pull request #7335 from cloudflare/jasnell/streams-pin-error-pending-close
Additional commits viewable in compare view

changeset-bot · 2026-09-14T06:06:35Z

🦋 Changeset detected

Latest commit: 1ec9002

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 8 packages

Name	Type
miniflare	Patch
wrangler	Patch
@cloudflare/deploy-helpers	Patch
@cloudflare/pages-shared	Patch
@cloudflare/remote-bindings	Patch
@cloudflare/runtime-types	Patch
@cloudflare/vite-plugin	Patch
@cloudflare/vitest-plugin	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

workers-devprod · 2026-09-14T06:07:08Z

Codeowners approval required for this PR:

✅ @cloudflare/wrangler

Show detailed file reviewers

devin-ai-integration

Note

This report is out of date. Scroll down for Devin Review's latest report on this PR.

🔍 Devin Review: 1 flag

Not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

pkg-pr-new · 2026-09-14T06:09:39Z

@cloudflare/autoconfig

npm i https://pkg.pr.new/@cloudflare/autoconfig@15633

@cloudflare/build-output-utils

npm i https://pkg.pr.new/@cloudflare/build-output-utils@15633

@cloudflare/codemods

npm i https://pkg.pr.new/@cloudflare/codemods@15633

@cloudflare/config

npm i https://pkg.pr.new/@cloudflare/config@15633

@cloudflare/containers-shared

npm i https://pkg.pr.new/@cloudflare/containers-shared@15633

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@15633

@cloudflare/deploy-helpers

npm i https://pkg.pr.new/@cloudflare/deploy-helpers@15633

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@15633

miniflare

npm i https://pkg.pr.new/miniflare@15633

@cloudflare/pages-functions

npm i https://pkg.pr.new/@cloudflare/pages-functions@15633

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@15633

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@15633

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@15633

@cloudflare/vitest-plugin

npm i https://pkg.pr.new/@cloudflare/vitest-plugin@15633

@cloudflare/workers-auth

npm i https://pkg.pr.new/@cloudflare/workers-auth@15633

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@15633

@cloudflare/workers-utils

npm i https://pkg.pr.new/@cloudflare/workers-utils@15633

wrangler

npm i https://pkg.pr.new/wrangler@15633

commit: 1ec9002

petebacondarwin · 2026-09-14T11:07:32Z

This workerd bump has broken the Vite plugin's node-compat test that uses http.createServer() to expose a server on 8080, that is registered in the new per-DO port table in module-runner and not accessible from the stateless runner-worker.
Introduced in cloudflare/workerd#7306.

petebacondarwin · 2026-09-14T11:15:35Z

A workers-sdk-only one-line fix is unsafe. Invoking handlers through runInRunnerObject() fixes this GET, but experiments showed:

POST body reads fail with cross-DO I/O errors.
Response bodies fail crossing back.
Streaming responses truncate.
Moving module evaluation outside the runner DO would regress the deferred-import fix from Fix "Cannot perform I/O on behalf of a different request" errors for deferred dynamic imports #12953.

The clean fix likely needs a small workerd capability plus workers-sdk plumbing:

Add a host-only workerd option allowing a specifically marked, pinned internal runner actor to use the isolate’s Node port scope.
Plumb it through Miniflare.
Enable it for Vite’s runner DO (packages/vite-plugin-cloudflare/src/miniflare-options.ts:531), and assess Vitest’s equivalent.
Keep normal user DOs—including ordinary ephemeralLocal actors—per-actor scoped.

That preserves the intentional semantics from workerd #7306 while making Vite’s artificial runner transparent to user module initialization.

petebacondarwin · 2026-09-14T12:04:20Z

Possible fix:

NuroDev · 2026-09-15T10:04:34Z

@dependabot recreate

…dates Bumps the workerd-and-workers-types group with 2 updates in the / directory: [@cloudflare/workers-types](https://github.com/cloudflare/workerd) and [workerd](https://github.com/cloudflare/workerd). Updates `@cloudflare/workers-types` from 4.20260702.1 to 5.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `workerd` from 1.20260911.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260911.1...v1.20260915.1) --- updated-dependencies: - dependency-name: "@cloudflare/workers-types" dependency-version: 5.20260914.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: workerd-and-workers-types - dependency-name: workerd dependency-version: 1.20260914.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: workerd-and-workers-types ... Signed-off-by: dependabot[bot] <support@github.com>

The following dependency versions have been updated: | Dependency | From | To | | ------------------------- | ------------- | ------------- | | @cloudflare/workers-types | ^5.20260911.1 | ^5.20260915.1 | | workerd | 1.20260911.1 | 1.20260915.1 |

workers-devprod

Codeowners reviews satisfied

…types-00ed58a539

NuroDev · 2026-09-15T13:05:32Z

It seems cloudflare/workerd#7053 enabled spec_compliant_dispatch_exceptions, which Wrangler relied on for loader-sw.ts for the old behaviour where EventTarget.dispatchEvent() rethrows listener errors.

Applied eb22e8e to fix this.

devin-ai-integration

Note

This report is out of date. Scroll down for Devin Review's latest report on this PR.

Devin Review found 4 new potential issues.

…types-00ed58a539

devin-ai-integration

Devin Review found 0 new potential issues.

Refs #15633

…lpha (#461) ## Dependency Updates | Package | From | To | Type | | --- | --- | --- | --- | | `miniflare` | 5.20260911.1-alpha | 5.20260915.0-alpha | minor | ## Release Notes <details> <summary><b>miniflare</b> (5.20260911.1-alpha → 5.20260915.0-alpha)</summary> ### Minor Changes - [#15486](cloudflare/workers-sdk#15486) [`d3565a5`](cloudflare/workers-sdk@d3565a5) Thanks [@tpmmorris](https://github.com/tpmmorris)! - Add production-compatible KV bulk write and delete routes to Local Explorer API clients can now write and delete multiple local KV entries by changing only their Cloudflare API base URL. The new routes support production request and response shapes, including base64 values, expiration options, and metadata. - [#15453](cloudflare/workers-sdk#15453) [`ca71205`](cloudflare/workers-sdk@ca71205) Thanks [@G4brym](https://github.com/G4brym)! - Remove the gated Web Search binding and Wrangler command The unreleased search binding and its experimental command have been removed from Wrangler, Miniflare, and configuration APIs. ### Patch Changes - [#15633](cloudflare/workers-sdk#15633) [`7db596c`](cloudflare/workers-sdk@7db596c) Thanks [@dependabot](https://github.com/apps/dependabot)! - Update dependencies of "miniflare", "wrangler" The following dependency versions have been updated: | Dependency | From | To | | ------------------------- | ------------- | ------------- | | @cloudflare/workers-types | ^5.20260911.1 | ^5.20260915.1 | | workerd | 1.20260911.1 | 1.20260915.1 | - [#15420](cloudflare/workers-sdk#15420) [`e35c4a1`](cloudflare/workers-sdk@e35c4a1) Thanks [@manthaaaaan](https://github.com/manthaaaaan)! - Fix Infinity/-Infinity being emitted as an invalid bare identifier in D1 export - [#15527](cloudflare/workers-sdk#15527) [`1015cfb`](cloudflare/workers-sdk@1015 …[full notes](https://github.com/cloudflare/workers-sdk/releases/tag/miniflare%405.20260915.0-alpha) </details> --- *This PR was auto-generated by [catalog-update-action](https://github.com/brandhaug/catalog-update-action).* Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

dependabot Bot added ci:skip-pr-description-validation Skip validation of the required PR description format dependencies Used by dependabot to mark PRs as updates to dependencies. package:miniflare Relating to Miniflare labels Sep 14, 2026

dependabot Bot requested a review from workers-devprod as a code owner September 14, 2026 06:06

workers-devprod added this to workers-sdk Sep 14, 2026

github-project-automation Bot moved this to Untriaged in workers-sdk Sep 14, 2026

workers-devprod requested review from a team and edmundhung and removed request for a team September 14, 2026 06:07

devin-ai-integration Bot reviewed Sep 14, 2026

View reviewed changes

petebacondarwin mentioned this pull request Sep 14, 2026

[vite-plugin] Fix cloudflare:node server dispatch in Vite and Vitest #15637

Closed

2 of 5 tasks

dependabot Bot changed the title ~~Bump the workerd-and-workers-types group with 2 updates~~ Bump the workerd-and-workers-types group across 1 directory with 2 updates Sep 15, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/workerd-and-workers-types-00ed58a539 branch from a15a550 to 7df7c31 Compare September 15, 2026 10:07

This comment was marked as resolved.

Sign in to view

NuroDev approved these changes Sep 15, 2026

View reviewed changes

NuroDev enabled auto-merge (squash) September 15, 2026 10:40

workers-devprod approved these changes Sep 15, 2026

View reviewed changes

github-project-automation Bot moved this from Untriaged to Approved in workers-sdk Sep 15, 2026

Merge branch 'main' into dependabot/npm_and_yarn/workerd-and-workers-…

194feff

…types-00ed58a539

fix(wrangler): propagate service-worker event listener errors

eb22e8e

devin-ai-integration Bot reviewed Sep 15, 2026

View reviewed changes

Comment thread packages/wrangler/templates/middleware/loader-sw.ts

Comment thread packages/wrangler/templates/middleware/loader-sw.ts

Comment thread .changeset/dependabot-update-15633.md

Comment thread pnpm-workspace.yaml

petebacondarwin approved these changes Sep 15, 2026

View reviewed changes

Merge branch 'main' into dependabot/npm_and_yarn/workerd-and-workers-…

62c4859

…types-00ed58a539

devin-ai-integration Bot reviewed Sep 15, 2026

View reviewed changes

NuroDev added 2 commits September 15, 2026 15:44

fix(miniflare): expect client IP on Windows

bdef07b

Refs #15633

test(miniflare): surface browser launch errors for retries

1ec9002

NuroDev merged commit 7db596c into main Sep 15, 2026
63 of 64 checks passed

NuroDev deleted the dependabot/npm_and_yarn/workerd-and-workers-types-00ed58a539 branch September 15, 2026 15:42

github-project-automation Bot moved this from Approved to Done in workers-sdk Sep 15, 2026

workers-devprod mentioned this pull request Sep 15, 2026

Version Packages #15634

Merged

oddharsh mentioned this pull request Sep 16, 2026

[wrangler] Update smol-toml to 1.8.0 #15662

Merged

2 of 5 tasks

brandhaug mentioned this pull request Sep 19, 2026

chore(deps): bump miniflare from 5.20260911.1-alpha to 5.20260915.0-alpha brandhaug/b2b-saas-starter#461

Merged

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.20260915.1

What's Changed

New Contributors

v1.20260914.1

v1.20260913.1

What's Changed

v1.20260912.1

What's Changed

Uh oh!

changeset-bot Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

workers-devprod commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

devin-ai-integration Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

🔍 Devin Review: 1 flag

Uh oh!

pkg-pr-new Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

petebacondarwin commented Sep 14, 2026

Uh oh!

petebacondarwin commented Sep 14, 2026

Uh oh!

petebacondarwin commented Sep 14, 2026

Uh oh!

NuroDev commented Sep 15, 2026

Uh oh!

This comment was marked as resolved.

Uh oh!

workers-devprod left a comment

Choose a reason for hiding this comment

Uh oh!

NuroDev commented Sep 15, 2026

Uh oh!

devin-ai-integration Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

changeset-bot Bot commented Sep 14, 2026 •

edited

Loading

workers-devprod commented Sep 14, 2026 •

edited

Loading

devin-ai-integration Bot left a comment •

edited

Loading

pkg-pr-new Bot commented Sep 14, 2026 •

edited

Loading

devin-ai-integration Bot left a comment •

edited

Loading