chore(deps): bump the bun-dependencies group with 5 updates

[dependabot]

Bumps the bun-dependencies group with 5 updates:

Package	From	To
hono	4.13.8	4.13.9
openai	7.20.0	7.23.0
postal-mime	3.0.0	3.0.1
@types/node	26.6.2	26.6.3
wrangler	4.135.0	4.141.0

Updates hono from 4.13.8 to 4.13.9

Release notes

Sourced from hono's releases.

v4.13.9

What's Changed

• fix(jsx): replace Suspense and ErrorBoundary content across newlines in honojs/hono#5380
• fix(accepts): match media types and language tags case-insensitively in honojs/hono#5376
• fix(linear-router): don't match an empty path segment as a param in honojs/hono#5373
• fix(pretty-json): don't break responses with unparseable JSON bodies in honojs/hono#5377
• fix(jwt): throw JwtTokenInvalid when the signature is not valid base64url in honojs/hono#5379
• fix(aws-lambda): treat binary +xml archive media types as binary in honojs/hono#5424
• fix(aws-lambda): preserve empty query parameters in honojs/hono#5292
• fix(lambda-edge): sync content type detection with aws-lambda in honojs/hono#5426
• fix(lambda-edge): fail with a descriptive error on a malformed event in honojs/hono#5358

Full Changelog: honojs/hono@v4.13.8...v4.13.9

Commits

• 7c3b0df 4.13.9
• 6cadf75 fix(lambda-edge): fail with a descriptive error on a malformed event (#5358)
• de310ac fix(lambda-edge): sync content type detection with aws-lambda (#5426)
• 28e8572 fix(aws-lambda): preserve empty query parameters (#5292)
• 0d86899 fix(aws-lambda): treat binary +xml archive media types as binary (#5424)
• 52febbc fix(jwt): throw JwtTokenInvalid when the signature is not valid base64url (#5...
• f950277 fix(pretty-json): don't break responses with unparseable JSON bodies (#5377)
• 00ee875 fix(linear-router): don't match an empty path segment as a param (#5373)
• f5a5346 fix(accepts): match media types and language tags case-insensitively (#5376)
• cb5bea3 fix(jsx): replace Suspense and ErrorBoundary content across newlines (#5380)
• See full diff in compare view

Updates openai from 7.20.0 to 7.23.0

Release notes

Sourced from openai's releases.

v7.23.0

7.23.0 (2026-09-23)

Features

• api: add GCP external storage support (#2794) (7cd0629)
• api: add GPT-Rosalind research model (#2792) (d0e6fcd)

Chores

• api: document exact Chat Completions seed bounds (#2796) (13b844f)

v7.22.0

7.22.0 (2026-09-22)

Features

• api: add GPT-6 Sol and Luna model identifiers (#2790) (cff2135)

v7.21.0

7.21.0 (2026-09-22)

Features

• api: add session environment reset events (#2777) (5de2360)

Bug Fixes

• api: preserve model choices and improve request handling (#2787) (a4a4396)

Chores

• api: document response management resources (#2775) (0472fb3)

Changelog

Sourced from openai's changelog.

7.23.0 (2026-09-23)

Features

• api: add GCP external storage support (#2794) (7cd0629)
• api: add GPT-Rosalind research model (#2792) (d0e6fcd)

Chores

• api: document exact Chat Completions seed bounds (#2796) (13b844f)

7.22.0 (2026-09-22)

Features

• api: add GPT-6 Sol and Luna model identifiers (#2790) (cff2135)

7.21.0 (2026-09-22)

Features

• api: add session environment reset events (#2777) (5de2360)

Bug Fixes

• api: preserve model choices and improve request handling (#2787) (a4a4396)

Chores

• api: document response management resources (#2775) (0472fb3)

Commits

• b073a4d release: 7.23.0 (#2793)
• 13b844f chore(api): document exact Chat Completions seed bounds (#2796)
• 7cd0629 feat(api): add GCP external storage support (#2794)
• d0e6fcd feat(api): add GPT-Rosalind research model (#2792)
• 1dd5587 release: 7.22.0 (#2791)
• cff2135 feat(api): add GPT-6 Sol and Luna model identifiers (#2790)
• cf1b7e1 release: 7.21.0 (#2776)
• a4a4396 fix(api): preserve model choices and improve request handling (#2787)
• 5de2360 feat(api): add session environment reset events (#2777)
• 0472fb3 chore(api): document response management resources (#2775)
• See full diff in compare view

Updates postal-mime from 3.0.0 to 3.0.1

Release notes

Sourced from postal-mime's releases.

v3.0.1

3.0.1 (2026-09-25)

Bug Fixes

• collect parsed addresses in linear time (68cd065), closes #97
• convert html to text in linear time (38b2a83), closes #97
• detect angle bracket addresses in decoded words in linear time (390be2b), closes #97
• normalize calendar attachment line endings in linear time (36edda7), closes #97
• strip header comments in linear time (5d877da), closes #97
• trim header whitespace in linear time (932441f), closes #97
• trim text around an extracted address in linear time (511a194), closes #97
• unfold format=flowed text in linear time (237c7a9), closes #97

Performance Improvements

• skip decoder construction for charset labels TextDecoder cannot know (5407771), closes #97

Changelog

Sourced from postal-mime's changelog.

3.0.1 (2026-09-25)

Bug Fixes

• collect parsed addresses in linear time (68cd065), closes #97
• convert html to text in linear time (38b2a83), closes #97
• detect angle bracket addresses in decoded words in linear time (390be2b), closes #97
• normalize calendar attachment line endings in linear time (36edda7), closes #97
• strip header comments in linear time (5d877da), closes #97
• trim header whitespace in linear time (932441f), closes #97
• trim text around an extracted address in linear time (511a194), closes #97
• unfold format=flowed text in linear time (237c7a9), closes #97

Performance Improvements

• skip decoder construction for charset labels TextDecoder cannot know (5407771), closes #97

Commits

• 2067a16 chore(master): release 3.0.1 (#98)
• 952a101 test: check the charset label list without assuming every encoding is built in
• a9595ad refactor: keep native replace for plain tag patterns in htmlToText
• 38b2a83 fix: convert html to text in linear time
• 5407771 perf: skip decoder construction for charset labels TextDecoder cannot know
• 36edda7 fix: normalize calendar attachment line endings in linear time
• 390be2b fix: detect angle bracket addresses in decoded words in linear time
• 511a194 fix: trim text around an extracted address in linear time
• 5d877da fix: strip header comments in linear time
• 68cd065 fix: collect parsed addresses in linear time
• Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.3

Commits

• See full diff in compare view

Updates wrangler from 4.135.0 to 4.141.0

Release notes

Sourced from wrangler's releases.

wrangler@4.141.0

Minor Changes

• #15658 8280086 Thanks @​jqmmes! - Add Durable Objects code update strategies to Worker deployments

  Use --durable-objects-code-update-mode immediate with wrangler deploy, wrangler versions deploy, and wrangler rollback to update code without waiting for active instances to hibernate. Use --durable-objects-code-update-mode deferred 30s to set a maximum delay, or configure durable_objects.code_update_strategy with mode and max_delay. When unset, the strategy defaults to deferred with a 5-minute maximum delay; delays cannot exceed 24 hours and must use millisecond precision.

• #15800 bd56b98 Thanks @​Refaerds! - Add Browser Run as an event source for Queue subscriptions

  You can now create Queue subscriptions with --source browserRun.

Patch Changes

• #15864 ee2b200 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260923.1	^5.20260925.1
  workerd	1.20260923.1	1.20260925.1

• #15207 805af2f Thanks @​exKAZUu! - Show the stack and cause of failed proxied requests in wrangler dev debug logs

  When a request proxied to the local Worker fails, running with --log-level debug now shows the underlying error's stack and cause chain.

• Updated dependencies [ee2b200, c91279b]:

  • miniflare@5.20260925.0-alpha

wrangler@4.140.0

Minor Changes

• #15822 8f7916c Thanks @​GregBrimble! - Support Containers in Worker Preview deployments with the Build Output.

Patch Changes

• Updated dependencies []:
  • miniflare@5.20260923.0-alpha

wrangler@4.139.0

Minor Changes

• #15792 479e1e8 Thanks @​flakey5! - Configure SSH for experimental Durable Object-managed Containers

  Set containers[].ssh and containers[].authorized_keys when using scheduling_policy: "durable_object". These are application-wide settings that follow the same rules as the existing Durable Object-managed Container settings: normal deployments create missing applications and update explicitly configured values, while omitted settings preserve the existing application configuration.

  // wrangler.jsonc
  {
    "containers": [

... (truncated)

Commits

• 8d61ca8 Version Packages (#15867)
• 8280086 [wrangler] Add Durable Objects hibernation timeout option (#15658)
• 805af2f [wrangler] Log ProxyWorker request error details at debug level (#15207)
• bd56b98 [wrangler] Add browserRun event source type for queue subscriptions (#15800)
• 72056b7 [wrangler] Clean up retired Container image binding tests (#15787)
• 84c819f Version Packages (#15857)
• 8f7916c [deploy-helpers] Containers support for Worker Preview deployments in the Bui...
• c59dae6 Version Packages (#15828)
• 15799d4 [wrangler] Update smol-toml to 1.9.0 (#15838)
• 479e1e8 Allow ssh config for DO containers (#15792)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	mine-personal-accounting	ad3c559	Commit Preview URL Branch Preview URL	Sep 29 2026, 07:04 PM