Skip to content

fix(deps): update all non-major dependencies#103

Open
khepri-bot[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major-dependencies
Open

fix(deps): update all non-major dependencies#103
khepri-bot[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major-dependencies

Conversation

@khepri-bot
Copy link
Copy Markdown
Contributor

@khepri-bot khepri-bot Bot commented May 4, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@cloudflare/vite-plugin (source) 1.32.3 → 1.35.0 age confidence
@cloudflare/vitest-pool-workers (source) 0.14.7 → 0.15.2 age confidence
@fast-check/vitest (source) 0.4.0 → 0.4.1 age confidence
@sentry/cloudflare (source) 10.49.0 → 10.51.0 age confidence
@sentry/solid (source) 10.49.0 → 10.51.0 age confidence
@tailwindcss/vite (source) 4.2.2 → 4.2.4 age confidence
tailwindcss (source) 4.2.2 → 4.2.4 age confidence
vite (source) 8.0.8 → 8.0.10 age confidence
vitest (source) 4.1.4 → 4.1.5 age confidence
vitest (source) 4.1.0 → 4.1.5 age confidence
wrangler (source) 4.83.0 → 4.87.0 age confidence
zod (source) 4.3.6 → 4.4.1 age confidence

Release Notes

cloudflare/workers-sdk (@​cloudflare/vite-plugin)

v1.35.0

Compare Source

Minor Changes

  • #​13618 c07d0cb Thanks @​jamesopstad! - Support V2 protocol for module fallback service

    When the new_module_registry compatibility flag is set, requests sent to unsafeModuleFallbackService() use a different protocol. The Vite plugin now supports both protocols in its handling of additional module types.

Patch Changes

v1.34.0

Compare Source

Minor Changes

  • #​13666 edcff69 Thanks @​edmundhung! - Add tunnel: true to the cloudflare() Vite plugin for sharing your local dev and preview servers via Cloudflare Quick Tunnels

    You can now expose your local dev server publicly by setting tunnel: true:

    cloudflare({
  tunnel: true,
});

    You can also enable tunnel sharing dynamically using an environment variable:

    cloudflare({
  tunnel: process.env.ENABLE_DEV_TUNNEL === "true",
});

    This starts a Cloudflare Quick Tunnel that gives you a random *.trycloudflare.com URL to share. The tunnel stops automatically when the dev or preview session ends. Quick tunnels don't require a Cloudflare account or any configuration.

    A warning is shown when Server-Sent Events (SSE) responses are detected through the tunnel, since quick tunnels don't support SSE.

Patch Changes

v1.33.2

Compare Source

Patch Changes

  • #​13636 1d54fb7 Thanks @​edmundhung! - Stop denying vite.config.* files from Vite dev server access

    This allows projects to access vite.config.* files during development when needed.

  • #​13653 48c61b6 Thanks @​jamesopstad! - Use the date that the plugin is built as the default compatibility date.

    When no compatibility date was set by the user, the plugin was falling back to the current date. This meant that the date could get ahead of the latest date supported by the installed version of workerd. We now populate the default compatibility date when the plugin is built. This means that it is updated with each release but then stays fixed.

  • #​13634 f3cb2b2 Thanks @​jamesopstad! - Simplify /cdn-cgi/ handling

    We now only add special handling for /cdn-cgi/handler/* routes, so that trigger handlers are invoked on the User Worker.

  • #​13611 6e99feb Thanks @​smaldd14! - Support Cloudflare-managed registry images in Vite plugin local dev

    Previously, using a registry.cloudflare.com image in a containers binding would crash vite dev with an unsupported error. The Vite plugin now configures the Cloudflare API client using CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID before pulling container images, matching the behavior of wrangler dev.

  • Updated dependencies [5a2968a, 5680287, 3494842, 7d728fb, df9319d, d5e3c57, 3ceeec3, 7567ef7, 0a95061, 2831b54, 7fc50c1, 377715d]:

v1.33.1

Compare Source

Patch Changes

v1.33.0

Compare Source

Minor Changes
  • #​12600 50bf819 Thanks @​penalosa! - Use workerd's debug port to power cross-process service bindings, Durable Objects, and tail workers via the dev registry. This enables Durable Object RPC via the dev registry, and is an overall stability improvement.
Patch Changes
cloudflare/workers-sdk (@​cloudflare/vitest-pool-workers)

v0.15.2

Compare Source

Patch Changes

v0.15.1

Compare Source

Patch Changes

v0.15.0

Compare Source

Minor Changes

  • #​13623 b156b2e Thanks @​penalosa! - Add reset() and abortAllDurableObjects() helpers to cloudflare:test

    The reset() helper deletes all data from attached bindings, and resets all Durable Object instances. This is useful for resetting state between test blocks.

    The abortAllDurableObjects() helper resets all Durable Object instances without deleting persisted data.

    import { reset } from "cloudflare:test";
import { afterEach } from "vitest";

afterEach(async () => {
  await reset();
});
Patch Changes

v0.14.9

Compare Source

Patch Changes

v0.14.8

Compare Source

Patch Changes

  • #​13548 1aee990 Thanks @​emily-shen! - Update warning message when attempting to access exports not defined on the main worker

    Previously this referred to the SELF worker, which is now a deprecated API in the Vitest integration.

  • #​13607 d5d0446 Thanks @​petebacondarwin! - fix: Restore workflow binding before async cleanup in WorkflowIntrospectorHandle.dispose()

    Previously, dispose() awaited all instance abort operations before restoring the original env binding. On slower CI environments (especially Windows), this left a window where the next test could see a stale proxy, causing "Trying to mock step multiple times" errors or failed introspection. The binding is now restored synchronously before the async instance cleanup begins.

  • #​13007 2c3258d Thanks @​sheplu! - Reduce default log verbosity from VERBOSE to INFO

    The pool logger was previously hardcoded to VERBOSE, causing noisy debug messages on every test run (e.g. [vpw:debug] Adding compatibility flag...). Only informational, warning, and error messages are now printed by default.

    For debugging, set NODE_DEBUG=vitest-pool-workers to restore the detailed output.

  • Updated dependencies [05f4443, 4a9ba90, d8c895a, b35617b, 7dc0433, 8ca78bb, b6e1351, d8314c6, b35617b, 7f50300, 4fda685, be5e6a0, e456952, 59eec63, 50bf819, cc1413a, d0a9d1c, 4eb1da9, 8ca78bb, 266c418, 6d887db, 5716d69]:

    • wrangler@​4.84.0
    • miniflare@​4.20260420.0
dubzzz/fast-check (@​fast-check/vitest)

v0.4.1

Support test.each
[Code][Diff]

Fixes

  • (PR#6804) Bug: Fix runtime exception with test.each
  • (PR#6865) Test: Strip AI env vars in child processes
getsentry/sentry-javascript (@​sentry/cloudflare)

v10.51.0

Compare Source

Important Changes

  • feat(cloudflare): Add trace propagation for RPC method calls (#​20343)

    Trace context is now propagated across Cloudflare Workers RPC calls, connecting traces between Workers and Durable Objects.
    This feature is opt-in and requires setting enableRpcTracePropagation: true in your SDK configuration:

    // Worker
export default Sentry.withSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  handler,
);

// Durable Object
export const MyDurableObject = Sentry.instrumentDurableObjectWithSentry(
  env => ({
    dsn: env.SENTRY_DSN,
    enableRpcTracePropagation: true,
  }),
  MyDurableObjectBase,
);

  • feat(hono)!: Change setup for @sentry/hono/node (init in external file) (#​20497)

    To improve Node.js instrumentation, the sentry() middleware exported from @sentry/hono/node no longer accepts configuration options.
    Instead, you must configure the SDK by calling Sentry.init() in a dedicated instrumentation file that runs before your application code (read more in the Hono SDK readme:

    // instrument.mjs (or instrument.ts)
import * as Sentry from '@​sentry/hono/node';

Sentry.init({
  dsn: '__DSN__',
  tracesSampleRate: 1.0,
});

  • feat(nitro): Add @sentry/nitro SDK (#​19224)

    A new @sentry/nitro package provides first-class Sentry support for Nitro applications, with HTTP handler and error instrumentation, middleware tracing, request isolation, and build-time source map uploading via withSentryConfig.
    Read more in the Nitro SDK docs and the Nitro SDK readme.

Other Changes
  • deps(minimatch): Upgrade patch version to use new brace-expansion peer-dep (#​20198)
  • docs: Add deprecation notices to bin scripts (#​20570)
  • feat(astro): Drop prerendered http.server filter via ignoreSpans (#​20513)
  • feat(aws-serverless): Validate extension tunnel DSN against SENTRY_DSN (#​20528)
  • feat(browser): Add ingest_settings to span v2 envelope payload (#​20411)
  • feat(browser): Add support for streamed spans in httpContextIntegration (#​20464)
  • feat(core): Backfill otel attributes on streamed spans (#​20439)
  • feat(core): clear up integrations on dispose (#​20407)
  • feat(core): Instrument langgraph createReactAgent (#​20344)
  • feat(core): Support attribute matching in ignoreSpans (#​20512)
  • feat(feedback): allow error messages to be customized (#​20474)
  • feat(hono): Support middleware spans defined in app groups (#​20465)
  • feat(nextjs): Filter unwanted segments when span streaming is enabled (#​20384)
  • feat(nextjs): Migrate edge event processors to span-first APIs (#​20551)
  • feat(nextjs): Migrate server event processors to span-first APIs (#​20527)
  • feat(nextjs): Set global attribute for turbopack usage (#​20558)
  • feat(nitro): Nitro SDK (#​19224)
  • feat(react-router): Clean up bogus * http.route attribute on segment spans (#​20471)
  • feat(react-router): Drop low-quality transactions via ignoreSpans (#​20514)
  • feat(sveltekit): Support span streaming in svelteKitSpansEnhancement integration (#​20496)
  • feat(tanstackstart-react): Add dynamic tunnel route helper and generator (#​20264)
  • fix: update prisma v7 spans descriptions (#​20456)
  • fix(core): Avoid parse-time SyntaxError on Safari <16.4 in postgresjs (#​20498)
  • fix(core): Ensure isSentryRequest handles subdomains properly (#​20530)
  • fix(core): Ensure ip address headers are stripped when lower case (#​20484)
  • fix(core): Filter more cookie names for PII (#​20485)
  • fix(core): Use symbol for normalization checks (#​20486)
  • fix(hono): Distinguish .use() middleware in sub-apps from .all() handlers (#​20554)
  • fix(nextjs): Ensure we do not match tunnel endpoints too broadly (#​20488)
  • fix(opentelemetry): Add conditional browser export to avoid node deps (#​20556)
  • fix(replay): Avoid main-thread blocking in WorkerHandler under event bursts (#​20548)
  • fix(replay): Ensure maskAttributes works with maskAllText=false (#​20491)
  • fix(supabase): Consider sendDefaultPii for supabase integration (#​20490)
Internal Changes
  • chore: Add size limit reports on PRs for Cloudflare (#​20055)
  • chore: Update CODEOWNERS (#​20559)
  • chore(build): Opt-out of nx analytics (#​20487)
  • chore(ci): Automatically bump size limit every week (#​20531)
  • chore(ci): Bump pnpm/action-setup to v5 and pin to commit SHA (#​20462)
  • chore(ci): Do not report flaky test issues if we cannot find a test name (#​20589)
  • chore(ci): Streamline CI setup to split bundle, layer, tarball generation (#​20396)
  • chore(ci): Vendor nx-affected-list action, drop dkhunt27 dependency (#​20463)
  • chore(e2e): Add vue and vue-router to nuxt-4 canary build step to fix rollup resolution (#​20519)
  • chore(e2e): Remove @​tanstack/start-plugin-core override (#​20518)
  • chore(size-limit): weekly auto-bump (#​20572)
  • chore(skill): Add skill for writing unit and E2E tests (#​20561)
  • chore(test): Reduce unneeded idleTimeout test config (#​20467)
  • ci(size-bump): Fix path in size-limit auto-bump workflow (#​20566)
  • fix(e2e/tanstackstart-react): pin @​tanstack/start-plugin-core to unblock CI (#​20482)
  • fix(tests): Remove nitro canary test job (#​20473)
  • ref(browser): Use safeSetSpanJSONAttributes in cultureContext integration (#​20481)
  • test(browser): Unflake some more tests (#​20591)
  • test(nextjs): Pin eslint-config-next package to major (#​20552)
  • test(node): Fix flaky ANR test (#​20592)
  • test(node): Fix flaky worker thread integration test (#​20588)
  • test(node): Unflake postgres tests (#​20593)
  • test(node): Update timeout for cron integration tests (#​20586)
  • test(supabase): Stop supabase before initializing (#​20563)
  • test(tanstack): Prefix test labels (#​20569)

v10.50.0

Compare Source

Important Changes

  • feat(effect): Support v4 beta (#​20394)

    The @sentry/effect integration now supports Effect v4 beta, enabling Sentry instrumentation for the latest Effect framework version.
    Read more in the Effect SDK readme.

  • feat(hono): Add @sentry/hono/bun for Bun runtime (#​20355)

    A new @sentry/hono/bun entry point adds first-class support for running Hono applications instrumented with Sentry on the Bun runtime.
    Read more in the Hono SDK readme.

  • feat(replay): Add replayStart/replayEnd client lifecycle hooks (#​20369)

    New replayStart and replayEnd client lifecycle hooks let you react to replay session start and end events in your application.

Other Changes
  • feat(core): Emit no_parent_span client outcomes for discarded spans requiring a parent (#​20350)
  • feat(deps): Bump protobufjs from 7.5.4 to 7.5.5 (#​20372)
  • feat(hono): Add runtime packages as optional peer dependencies (#​20423)
  • feat(opentelemetry): Add tracingChannel utility for context propagation (#​20358)
  • fix(browser): Enrich graphqlClient spans for relative URLs (#​20370)
  • fix(browser): Filter implausible LCP values (#​20338)
  • fix(cloudflare): Use TransformStream to keep track of streams (#​20452)
  • fix(console): Re-patch console in AWS Lambda runtimes (#​20337)
  • fix(core): Correct GoogleGenAIIstrumentedMethod typo in type name
  • fix(core): Handle stateless MCP wrapper transport correlation (#​20293)
  • fix(hono): Remove undefined from options type (#​20419)
  • fix(node): Guard against null httpVersion in outgoing request span attributes (#​20430)
  • fix(node-core): Pass rejection reason instead of Promise as originalException (#​20366)
Internal Changes
  • chore: Ignore claude worktrees (#​20440)
  • chore: Prevent test from creating zombie process (#​20392)
  • chore: Update size-limit (#​20412)
  • chore(dev-deps): Bump nx from 22.5.0 to 22.6.5 (#​20458)
  • chore(e2e-tests): Use tarball symlinks for E2E tests instead of verdaccio (#​20386)
  • chore(lint): Remove lint warnings (#​20413)
  • chore(test): Remove empty variant tests (#​20443)
  • chore(tests): Use verdaccio as node process instead of docker image (#​20336)
  • docs(readme): Update usage instructions for binary scripts (#​20426)
  • ref(node): Vendor undici instrumentation (#​20190)
  • test(aws-serverless): Ensure aws-serverless E2E tests run locally (#​20441)
  • test(aws-serverless): Split npm & layer tests (#​20442)
  • test(browser): Fix flaky sessions route-lifecycle test + upgrade axios (#​20197)
  • test(cloudflare): Use .makeRequestAndWaitForEnvelope to wait for envelopes (#​20208)
  • test(effect): Rename effect e2e tests to a versioned folder (#​20390)
  • test(hono): Add E2E test for Hono on Cloudflare, Node and Bun (#​20406)
  • test(hono): Add E2E tests for middleware spans (#​20451)
  • test(nextjs): Unskip blocked cf tests (#​20356)
  • test(node): Refactor integration tests for honoIntegration (#​20397)
  • test(node): Use docker-compose healthchecks for service readiness (#​20429)
  • test(node-core): Fix minute-boundary race in session-aggregate tests (#​20437)
  • test(nuxt): Fix flaky database error test (#​20447)
tailwindlabs/tailwindcss (@​tailwindcss/vite)

v4.2.4

Compare Source

Fixed
  • Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#​19947)

v4.2.3

Compare Source

Fixed
  • Canonicalization: improve canonicalization for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#​19827)
  • Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#​19829)
  • Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#​19723)
  • Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#​19837)
  • Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#​19842)
  • Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#​19842)
  • Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#​19842)
  • Canonicalization: collapse overflow-{x,y}-* into overflow-* (#​19842)
  • Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#​19842)
  • Read from --placeholder-color instead of --background-color for placeholder-* utilities (#​19843)
  • Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#​19846)
  • Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#​19846)
  • Upgrade: never migrate files that are ignored by git (#​19846)
  • Add .env and .env.* to default ignored content files (#​19846)
  • Canonicalization: migrate overflow-ellipsis into text-ellipsis (#​19849)
  • Canonicalization: migrate start-full → inset-s-full, start-auto → inset-s-auto, start-px → inset-s-px, and start-<number> → inset-s-<number> as well as negative versions (#​19849)
  • Canonicalization: migrate end-full → inset-e-full, end-auto → inset-e-auto, end-px → inset-e-px, and end-<number> → inset-e-<number> as well as negative versions (#​19849)
  • Canonicalization: move the - sign inside the arbitrary value -left-[9rem] → left-[-9rem] (#​19858)
  • Canonicalization: move the - sign outside the arbitrary value ml-[calc(-1*var(--width))] → -ml-(--width) (#​19858)
  • Improve performance when scanning JSONL / NDJSON files (#​19862)
  • Support NODE_PATH environment variable in standalone CLI (#​19617)
vitejs/vite (vite)

v8.0.10

[Compare Source](https:/

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • Between 12:00 AM and 08:59 AM, only on Monday (* 0-8 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@khepri-bot khepri-bot Bot added the renovate label May 4, 2026
@khepri-bot khepri-bot Bot force-pushed the renovate/all-non-major-dependencies branch 6 times, most recently from cf02552 to 3dc5465 Compare May 7, 2026 14:05
@khepri-bot khepri-bot Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies May 7, 2026
@khepri-bot khepri-bot Bot force-pushed the renovate/all-non-major-dependencies branch 6 times, most recently from 17e5084 to 687557d Compare May 14, 2026 02:54
@khepri-bot khepri-bot Bot force-pushed the renovate/all-non-major-dependencies branch from 687557d to ba9f052 Compare May 14, 2026 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants