Bump the npm-patching group with 17 updates by dependabot[bot] · Pull Request #132 · eustasy/puff-serverless

dependabot · 2026-09-19T08:51:45Z

Bumps the npm-patching group with 17 updates:

Package	From	To
@types/node	`26.4.0`	`26.6.1`
prettier	`3.9.6`	`3.9.7`
wrangler	`4.131.0`	`4.132.0`
@cloudflare/workerd-darwin-64	`1.20260910.1`	`1.20260915.1`
@cloudflare/workerd-darwin-arm64	`1.20260910.1`	`1.20260915.1`
@cloudflare/workerd-linux-64	`1.20260910.1`	`1.20260915.1`
@cloudflare/workerd-linux-arm64	`1.20260910.1`	`1.20260915.1`
@cloudflare/workerd-windows-64	`1.20260910.1`	`1.20260915.1`
ast-v8-to-istanbul	`1.0.5`	`1.0.6`
magicast	`0.5.4`	`0.5.5`
miniflare	`5.20260910.0-alpha`	`5.20260915.0-alpha`
postcss	`8.5.26`	`8.5.28`
rolldown	`1.2.6`	`1.2.9`
tinyexec	`1.3.0`	`1.3.1`
undici-types	`8.3.0`	`8.9.0`
vite	`8.2.2`	`8.3.0`
workerd	`1.20260910.1`	`1.20260915.1`

Updates @types/node from 26.4.0 to 26.6.1

Commits

See full diff in compare view

Updates prettier from 3.9.6 to 3.9.7

Release notes

Sourced from prettier's releases.

3.9.7

Support Angular 22.2

Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by `@Austin1serb`, `@giaBaoJS`)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by `@fisker`)

// Input
const foo = html`
            <div>${getText({
            value,
            })}</div>
`;
// Prettier 3.9.6 (first format)
const foo = html&lt;div&gt; ${getText({ value, })} &lt;/div&gt;;
// Prettier 3.9.6 (second format)
const foo = html`
<div>
</tr></table>

... (truncated)

Commits

0449af3 Release 3.9.7
43cd5b0 Allow verify markdown test with mdx parser
ab8c911 Fix test on Node.js v26 (#19927)
4a5adf9 Fix tests
3404375 Update @typescript-eslint/typescript-estree to v8.70.0
c60f106 Angular: Support @boundary / @error error boundaries (#20015)
297117a Fix HTML block indentation drift in markdown list items (#19987)
0df4e49 Fix indentation drift for indented code blocks in list items (#19990)
9ef216d Fix Markdown task list indentation drift (#19647)
2158d48 Strip blockquote markers from a setext heading's continuation lines (#19878)
Additional commits viewable in compare view

Updates wrangler from 4.131.0 to 4.132.0

Release notes

Sourced from wrangler's releases.

wrangler@4.132.0

Minor Changes
#14587 76c0ce6 Thanks @MattieTK! - Categorise the positional path argument to wrangler deploy and wrangler versions upload in command telemetry

Command telemetry now records a coarse category for the entry-point/assets positional (wrangler deploy <path>) under sanitizedArgs.path, so we can understand whether people pass a file, a directory, or a relational reference such as . or ../example. The possible values are file, directory, current-dir, parent-relative, and not-found, or null when no positional is provided. The raw path is never sent — only the category.

#15597 a83d7ac Thanks @skepticfx! - Configure application-wide logs for experimental Durable Object-managed Containers

Set containers[].observability.enabled or containers[].observability.logs.enabled when using scheduling_policy: "durable_object". Normal deployments create missing applications and update explicitly configured log settings without a Container rollout. Omitted settings preserve the application configuration; root Worker observability is not inherited for this policy.

Version uploads may initialize missing applications but preserve existing settings. Deploying or rolling back Worker versions also preserves existing application settings, and --containers-rollout=none skips their updates.
#15597 a83d7ac Thanks @skepticfx! - Support per-image build options for experimental Durable Object-managed Containers

Set build_context and build_vars alongside dockerfile in a Container's named images entries. Context paths resolve relative to the Wrangler configuration file and default to the Dockerfile's directory. Build variables are passed as Docker build arguments. Entries using the same Dockerfile with different contexts or variables are built separately.
{
  "containers": [
    {
      "class_name": "Sandbox",
      "scheduling_policy": "durable_object",
      "images": {
        "app": {
          "dockerfile": "./docker/Dockerfile",
          "build_context": ".",
          "build_vars": { "APP_ENV": "production" }
        }
      }
    }
  ]
}
#15638 fa79b26 Thanks @G4brym! - Support AI Search bindings in Worker Previews

wrangler preview now accepts ai_search and ai_search_namespaces entries in the previews block and includes them in Preview deployment bindings. This lets Workers that use AI Search instance or namespace bindings attach existing resources to Preview deployments, including preview-specific instance or namespace names.

These bindings are non-inheritable: declare them explicitly under previews. They attach to existing AI Search resources; preview does not provision new isolated instances or namespaces.

#15256 16d1310 Thanks @theoephraim! - [private beta]: Add --secrets-file and --var flags to wrangler preview

Like wrangler deploy and wrangler versions upload, wrangler preview now accepts a --secrets-file flag pointing to a JSON or .env format file, and --var KEY:VALUE pairs that are injected into the Preview deployment as plain text variables. CLI vars override same-named vars from the previews section of your config file, and secrets from the file take precedence over both:

wrangler preview --secrets-file .env.preview --var API_URL:https://api.example.com

#15453 ca71205 Thanks @G4brym! - Remove the gated Web Search binding and Wrangler command

The unreleased search binding and its experimental command have been removed from Wrangler, Miniflare, and configuration APIs.

... (truncated)

Commits

bbf2f79 Version Packages (#15634)
7db596c Bump the workerd-and-workers-types group across 1 directory with 2 updates (#...
a83d7ac CC-8364 Support Durable Object container settings and exports (#15597)
74bf083 [deploy-helpers] Extract Worker startup profiling from Wrangler (#15612)
ffabe74 perf(wrangler): remove execa (#12369)
b149147 [wrangler] Send AI search options in correct Schema (#15409)
16d1310 [wrangler] Add --secrets-file and --var flags to wrangler preview (#15256)
ca71205 Remove Web Search binding and commands (#15453)
76c0ce6 [wrangler] Categorise deploy positional path in command telemetry (#14587)
fa79b26 [wrangler] Support AI Search bindings in Worker Previews (#15638)
Additional commits viewable in compare view

Updates @cloudflare/workerd-darwin-64 from 1.20260910.1 to 1.20260915.1

Release notes

Sourced from @cloudflare/workerd-darwin-64's releases.

v1.20260915.1

What's Changed

build: depend on the kj-async layer each target actually uses by @danlapid in cloudflare/workerd#7350

Python workers: Replace string Pyodide patches with ast patches by @hoodmane in cloudflare/workerd#7325

disable profiler tests under tsan by @mikea in cloudflare/workerd#7355

feat: expose client IP and port as remoteAddress in TCP connect() handler by @ThomasRubini in cloudflare/workerd#7304

Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel by @danlapid in cloudflare/workerd#7356

node: make the isolate the port namespace for http and net servers by @guybedford in cloudflare/workerd#7357

Pin error() during a pending close in the readable stream suites by @jasnell in cloudflare/workerd#7335

[build] JSG: move TypeWrapper members that ignore the type list to a base by @fhanau in cloudflare/workerd#7269

Fix memory snapshots with Python 3.14 by @hoodmane in cloudflare/workerd#7311

chore: Tidy up Pyodide patches by @hoodmane in cloudflare/workerd#7367

New Contributors

@ThomasRubini made their first contribution in cloudflare/workerd#7304

Full Changelog: cloudflare/workerd@v1.20260914.1...v1.20260915.1

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime by @danlapid in cloudflare/workerd#7011

node:net: add net.Server and cloudflare:node connectHandler by @guybedford in cloudflare/workerd#7306

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Add public workflows event subscription type definitions by @mkuritsu in cloudflare/workerd#7261

CI: minimal bridge prerequisites for Tokio I/O by @harrishancock in cloudflare/workerd#7317

Add jsg::Lenient based on Rust jsg::Nullable by @LordGoatius in cloudflare/workerd#7037

sockets: close() with a pipe close in flight logged an uncaught exception by @guybedford in cloudflare/workerd#7313

Python: Add numpy vendor snapshot stability test by @hoodmane in cloudflare/workerd#7326

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

v1.20260911.1

What's Changed

Build cleanups by @danlapid in cloudflare/workerd#7300

Improve error message when top-level randomness is used in Python workers by @ryanking13 in cloudflare/workerd#7283

Refactor Durable Object Retries to be fetch-agnostic by @apeacock1991 in cloudflare/workerd#7266

fix identity transform stream resolve/state change order by @mikea in cloudflare/workerd#7297

node:net: add net.BoundSocket by @guybedford in cloudflare/workerd#7299

Python: Patch workers.wait_until as well as ctx.waitUntil by @hoodmane in cloudflare/workerd#7293

... (truncated)

Commits

e52fd07 Release 2026-09-15
f75e6b4 chore: Tidy up Pyodide patches (#7367)
aec43b4 Fix memory snapshots with Python 3.14 (#7311)
35125c9 Add vendored packages tests for shapely, pillow and pywavelets
18f1fbe Add a mechanism for Pyodide-version-specific snapshot flags
2a69756 Python snapshot release: make update-released flag only refer to baseline sna...
4cfb37f Fix memory snapshots with Python 3.14
d14feab [build] JSG: move TypeWrapper members that ignore the type list to a base
81e7d3e Make PYODIDE_VERSION refer to realPyodideVersion (not 'dev')
4cd51d9 Merge pull request #7335 from cloudflare/jasnell/streams-pin-error-pending-close
Additional commits viewable in compare view

Updates @cloudflare/workerd-darwin-arm64 from 1.20260910.1 to 1.20260915.1

Release notes

Sourced from @cloudflare/workerd-darwin-arm64's releases.

v1.20260915.1

What's Changed

build: depend on the kj-async layer each target actually uses by @danlapid in cloudflare/workerd#7350

Python workers: Replace string Pyodide patches with ast patches by @hoodmane in cloudflare/workerd#7325

disable profiler tests under tsan by @mikea in cloudflare/workerd#7355

feat: expose client IP and port as remoteAddress in TCP connect() handler by @ThomasRubini in cloudflare/workerd#7304

Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel by @danlapid in cloudflare/workerd#7356

node: make the isolate the port namespace for http and net servers by @guybedford in cloudflare/workerd#7357

Pin error() during a pending close in the readable stream suites by @jasnell in cloudflare/workerd#7335

[build] JSG: move TypeWrapper members that ignore the type list to a base by @fhanau in cloudflare/workerd#7269

Fix memory snapshots with Python 3.14 by @hoodmane in cloudflare/workerd#7311

chore: Tidy up Pyodide patches by @hoodmane in cloudflare/workerd#7367

New Contributors

@ThomasRubini made their first contribution in cloudflare/workerd#7304

Full Changelog: cloudflare/workerd@v1.20260914.1...v1.20260915.1

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime by @danlapid in cloudflare/workerd#7011

node:net: add net.Server and cloudflare:node connectHandler by @guybedford in cloudflare/workerd#7306

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Add public workflows event subscription type definitions by @mkuritsu in cloudflare/workerd#7261

CI: minimal bridge prerequisites for Tokio I/O by @harrishancock in cloudflare/workerd#7317

Add jsg::Lenient based on Rust jsg::Nullable by @LordGoatius in cloudflare/workerd#7037

sockets: close() with a pipe close in flight logged an uncaught exception by @guybedford in cloudflare/workerd#7313

Python: Add numpy vendor snapshot stability test by @hoodmane in cloudflare/workerd#7326

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

v1.20260911.1

What's Changed

Build cleanups by @danlapid in cloudflare/workerd#7300

Improve error message when top-level randomness is used in Python workers by @ryanking13 in cloudflare/workerd#7283

Refactor Durable Object Retries to be fetch-agnostic by @apeacock1991 in cloudflare/workerd#7266

fix identity transform stream resolve/state change order by @mikea in cloudflare/workerd#7297

node:net: add net.BoundSocket by @guybedford in cloudflare/workerd#7299

Python: Patch workers.wait_until as well as ctx.waitUntil by @hoodmane in cloudflare/workerd#7293

... (truncated)

Commits

e52fd07 Release 2026-09-15
f75e6b4 chore: Tidy up Pyodide patches (#7367)
aec43b4 Fix memory snapshots with Python 3.14 (#7311)
35125c9 Add vendored packages tests for shapely, pillow and pywavelets
18f1fbe Add a mechanism for Pyodide-version-specific snapshot flags
2a69756 Python snapshot release: make update-released flag only refer to baseline sna...
4cfb37f Fix memory snapshots with Python 3.14
d14feab [build] JSG: move TypeWrapper members that ignore the type list to a base
81e7d3e Make PYODIDE_VERSION refer to realPyodideVersion (not 'dev')
4cd51d9 Merge pull request #7335 from cloudflare/jasnell/streams-pin-error-pending-close
Additional commits viewable in compare view

Updates @cloudflare/workerd-linux-64 from 1.20260910.1 to 1.20260915.1

Release notes

Sourced from @cloudflare/workerd-linux-64's releases.

v1.20260915.1

What's Changed

build: depend on the kj-async layer each target actually uses by @danlapid in cloudflare/workerd#7350

Python workers: Replace string Pyodide patches with ast patches by @hoodmane in cloudflare/workerd#7325

disable profiler tests under tsan by @mikea in cloudflare/workerd#7355

feat: expose client IP and port as remoteAddress in TCP connect() handler by @ThomasRubini in cloudflare/workerd#7304

Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel by @danlapid in cloudflare/workerd#7356

node: make the isolate the port namespace for http and net servers by @guybedford in cloudflare/workerd#7357

Pin error() during a pending close in the readable stream suites by @jasnell in cloudflare/workerd#7335

[build] JSG: move TypeWrapper members that ignore the type list to a base by @fhanau in cloudflare/workerd#7269

Fix memory snapshots with Python 3.14 by @hoodmane in cloudflare/workerd#7311

chore: Tidy up Pyodide patches by @hoodmane in cloudflare/workerd#7367

New Contributors

@ThomasRubini made their first contribution in cloudflare/workerd#7304

Full Changelog: cloudflare/workerd@v1.20260914.1...v1.20260915.1

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime by @danlapid in cloudflare/workerd#7011

node:net: add net.Server and cloudflare:node connectHandler by @guybedford in cloudflare/workerd#7306

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Add public workflows event subscription type definitions by @mkuritsu in cloudflare/workerd#7261

CI: minimal bridge prerequisites for Tokio I/O by @harrishancock in cloudflare/workerd#7317

Add jsg::Lenient based on Rust jsg::Nullable by @LordGoatius in cloudflare/workerd#7037

sockets: close() with a pipe close in flight logged an uncaught exception by @guybedford in cloudflare/workerd#7313

Python: Add numpy vendor snapshot stability test by @hoodmane in cloudflare/workerd#7326

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

v1.20260911.1

What's Changed

Build cleanups by @danlapid in cloudflare/workerd#7300

Improve error message when top-level randomness is used in Python workers by @ryanking13 in cloudflare/workerd#7283

Refactor Durable Object Retries to be fetch-agnostic by @apeacock1991 in cloudflare/workerd#7266

fix identity transform stream resolve/state change order by @mikea in cloudflare/workerd#7297

node:net: add net.BoundSocket by @guybedford in cloudflare/workerd#7299

Python: Patch workers.wait_until as well as ctx.waitUntil by @hoodmane in cloudflare/workerd#7293

... (truncated)

Commits

e52fd07 Release 2026-09-15
f75e6b4 chore: Tidy up Pyodide patches (#7367)
aec43b4 Fix memory snapshots with Python 3.14 (#7311)
35125c9 Add vendored packages tests for shapely, pillow and pywavelets
18f1fbe Add a mechanism for Pyodide-version-specific snapshot flags
2a69756 Python snapshot release: make update-released flag only refer to baseline sna...
4cfb37f Fix memory snapshots with Python 3.14
d14feab [build] JSG: move TypeWrapper members that ignore the type list to a base
81e7d3e Make PYODIDE_VERSION refer to realPyodideVersion (not 'dev')
4cd51d9 Merge pull request #7335 from cloudflare/jasnell/streams-pin-error-pending-close
Additional commits viewable in compare view

Updates @cloudflare/workerd-linux-arm64 from 1.20260910.1 to 1.20260915.1

Release notes

Sourced from @cloudflare/workerd-linux-arm64's releases.

v1.20260915.1

What's Changed

build: depend on the kj-async layer each target actually uses by @danlapid in cloudflare/workerd#7350

Python workers: Replace string Pyodide patches with ast patches by @hoodmane in cloudflare/workerd#7325

disable profiler tests under tsan by @mikea in cloudflare/workerd#7355

feat: expose client IP and port as remoteAddress in TCP connect() handler by @ThomasRubini in cloudflare/workerd#7304

Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel by @danlapid in cloudflare/workerd#7356

node: make the isolate the port namespace for http and net servers by @guybedford in cloudflare/workerd#7357

Pin error() during a pending close in the readable stream suites by @jasnell in cloudflare/workerd#7335

[build] JSG: move TypeWrapper members that ignore the type list to a base by @fhanau in cloudflare/workerd#7269

Fix memory snapshots with Python 3.14 by @hoodmane in cloudflare/workerd#7311

chore: Tidy up Pyodide patches by @hoodmane in cloudflare/workerd#7367

New Contributors

@ThomasRubini made their first contribution in cloudflare/workerd#7304

Full Changelog: cloudflare/workerd@v1.20260914.1...v1.20260915.1

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime by @danlapid in cloudflare/workerd#7011

node:net: add net.Server and cloudflare:node connectHandler by @guybedford in cloudflare/workerd#7306

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Add public workflows event subscription type definitions by @mkuritsu in cloudflare/workerd#7261

CI: minimal bridge prerequisites for Tokio I/O by @harrishancock in cloudflare/workerd#7317

Add jsg::Lenient based on Rust jsg::Nullable by @LordGoatius in cloudflare/workerd#7037

sockets: close() with a pipe close in flight logged an uncaught exception by @guybedford in cloudflare/workerd#7313

Python: Add numpy vendor snapshot stability test by @hoodmane in cloudflare/workerd#7326

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

v1.20260911.1

What's Changed

Build cleanups by @danlapid in cloudflare/workerd#7300

Improve error message when top-level randomness is used in Python workers by @ryanking13 in cloudflare/workerd#7283

Refactor Durable Object Retries to be fetch-agnostic by @apeacock1991 in cloudflare/workerd#7266

fix identity transform stream resolve/state change order by @mikea in cloudflare/workerd#7297

node:net: add net.BoundSocket by @guybedford in cloudflare/workerd#7299

Python: Patch workers.wait_until as well as ctx.waitUntil by @hoodmane in cloudflare/workerd#7293

... (truncated)

Commits

e52fd07 Release 2026-09-15
f75e6b4 chore: Tidy up Pyodide patches (#7367)
aec43b4 Fix memory snapshots with Python 3.14 (#7311)
35125c9 Add vendored packages tests for shapely, pillow and pywavelets
18f1fbe Add a mechanism for Pyodide-version-specific snapshot flags
2a69756 Python snapshot release: make update-released flag only refer to baseline sna...
4cfb37f Fix memory snapshots with Python 3.14
d14feab [build] JSG: move TypeWrapper members that ignore the type list to a base
81e7d3e Make PYODIDE_VERSION refer to realPyodideVersion (not 'dev')
4cd51d9 Merge pull request #7335 from cloudflare/jasnell/streams-pin-error-pending-close
Additional commits viewable in compare view

Updates @cloudflare/workerd-windows-64 from 1.20260910.1 to 1.20260915.1

Release notes

Sourced from @cloudflare/workerd-windows-64's releases.

v1.20260915.1

What's Changed

build: depend on the kj-async layer each target actually uses by @danlapid in cloudflare/workerd#7350

Python workers: Replace string Pyodide patches with ast patches by @hoodmane in cloudflare/workerd#7325

disable profiler tests under tsan by @mikea in cloudflare/workerd#7355

feat: expose client IP and port as remoteAddress in TCP connect() handler by @ThomasRubini in cloudflare/workerd#7304

Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel by @danlapid in cloudflare/workerd#7356

node: make the isolate the port namespace for http and net servers by @guybedford in cloudflare/workerd#7357

Pin error() during a pending close in the readable stream suites by @jasnell in cloudflare/workerd#7335

[build] JSG: move TypeWrapper members that ignore the type list to a base by @fhanau in cloudflare/workerd#7269

Fix memory snapshots with Python 3.14 by @hoodmane in cloudflare/workerd#7311

chore: Tidy up Pyodide patches by @hoodmane in cloudflare/workerd#7367

New Contributors

@ThomasRubini made their first contribution in cloudflare/workerd#7304

Full Changelog: cloudflare/workerd@v1.20260914.1...v1.20260915.1

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime by @danlapid in cloudflare/workerd#7011

node:net: add net.Server and cloudflare:node connectHandler by @guybedford in cloudflare/workerd#7306

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Add public workflows event subscription type definitions by @mkuritsu in cloudflare/workerd#7261

CI: minimal bridge prerequisites for Tokio I/O by @harrishancock in cloudflare/workerd#7317

Add jsg::Lenient based on Rust jsg::Nullable by @LordGoatius in cloudflare/workerd#7037

sockets: close() with a pipe close in flight logged an uncaught exception by @guybedford in cloudflare/workerd#7313

Python: Add numpy vendor snapshot stability test by @hoodmane in cloudflare/workerd#7326

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

v1.20260911.1

What's Changed

Build cleanups by @danlapid in cloudflare/workerd#7300

Improve error message when top-level randomness is used in Python workers by @ryanking13 in cloudflare/workerd#7283

Refactor Durable Object Retries to be fetch-agnostic by @apeacock1991 in cloudflare/workerd#7266

fix identity transform stream resolve/state change order by @mikea in cloudflare/workerd#7297

node:net: add net.BoundSocket by @guybedford in cloudflare/workerd#7299

Python: Patch workers.wait_until as well as ctx.waitUntil by @hoodmane in cloudflare/workerd#7293

... (truncated)

Commits

e52fd07 Release 2026-09-15
f75e6b4 chore: Tidy up Pyodide patches (#7367)
aec43b4 Fix memory snapshots with Python 3.14 (#7311)
35125c9 Add vendored packages tests for shapely, pillow and pywavelets
18f1fbe Add a mechanism for Pyodide-version-specific snapshot flags
2a69756 Python snapshot release: make update-released flag only refer to baseline sna...
4cfb37f Fix memory snapshots with Python 3.14
d14feab [build] JSG: move TypeWrapper members that ignore the type list to a base
81e7d3e Make PYODIDE_VERSION refer to realPyodideVersion (not 'dev')
4cd51d9 Merge pull request #7335 from cloudflare/jasnell/streams-pin-error-pending-close
Additional commits viewable in compare view

Updates ast-v8-to-istanbul from 1.0.5 to 1.0.6

Release notes

Sourced from ast-v8-to-istanbul's releases.

v1.0.6

What's Changed

perf: skip tokenization if no ignore hints are found by @AriPerkkio in AriPerkkio/ast-v8-to-istanbul#199

Full Changelog: AriPerkkio/ast-v8-to-istanbul@v1.0.5...v1.0.6

Commits

48f88c7 1.0.6
f115cf4 chore: migrate to @vitest/istanbuljs packages (#200)
597312d perf: skip tokenization if no ignore hints are found (#199)
09f04a5 chore(deps): update all non-major npm dependencies (#197)
9f6be64 chore(dev-deps): vitest 5 (#196)
a39d377 chore(deps): update all non-major npm dependencies (#195)
503d568 chore(deps): update all non-major npm dependencies (#194)
5f34def chore(deps): update all non-major npm dependencies (#192)

Bumps the npm-patching group with 17 updates: | Package | From | To | | --- | --- | --- | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.0` | `26.6.1` | | [prettier](https://github.com/prettier/prettier) | `3.9.6` | `3.9.7` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.131.0` | `4.132.0` | | [@cloudflare/workerd-darwin-64](https://github.com/cloudflare/workerd) | `1.20260910.1` | `1.20260915.1` | | [@cloudflare/workerd-darwin-arm64](https://github.com/cloudflare/workerd) | `1.20260910.1` | `1.20260915.1` | | [@cloudflare/workerd-linux-64](https://github.com/cloudflare/workerd) | `1.20260910.1` | `1.20260915.1` | | [@cloudflare/workerd-linux-arm64](https://github.com/cloudflare/workerd) | `1.20260910.1` | `1.20260915.1` | | [@cloudflare/workerd-windows-64](https://github.com/cloudflare/workerd) | `1.20260910.1` | `1.20260915.1` | | [ast-v8-to-istanbul](https://github.com/AriPerkkio/ast-v8-to-istanbul) | `1.0.5` | `1.0.6` | | [magicast](https://github.com/unjs/magicast) | `0.5.4` | `0.5.5` | | [miniflare](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/miniflare) | `5.20260910.0-alpha` | `5.20260915.0-alpha` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` | | [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.6` | `1.2.9` | | [tinyexec](https://github.com/tinylibs/tinyexec) | `1.3.0` | `1.3.1` | | [undici-types](https://github.com/nodejs/undici) | `8.3.0` | `8.9.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` | | [workerd](https://github.com/cloudflare/workerd) | `1.20260910.1` | `1.20260915.1` | Updates `@types/node` from 26.4.0 to 26.6.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `prettier` from 3.9.6 to 3.9.7 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.6...3.9.7) Updates `wrangler` from 4.131.0 to 4.132.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.132.0/packages/wrangler) Updates `@cloudflare/workerd-darwin-64` from 1.20260910.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260910.1...v1.20260915.1) Updates `@cloudflare/workerd-darwin-arm64` from 1.20260910.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260910.1...v1.20260915.1) Updates `@cloudflare/workerd-linux-64` from 1.20260910.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260910.1...v1.20260915.1) Updates `@cloudflare/workerd-linux-arm64` from 1.20260910.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260910.1...v1.20260915.1) Updates `@cloudflare/workerd-windows-64` from 1.20260910.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260910.1...v1.20260915.1) Updates `ast-v8-to-istanbul` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/AriPerkkio/ast-v8-to-istanbul/releases) - [Commits](AriPerkkio/ast-v8-to-istanbul@v1.0.5...v1.0.6) Updates `magicast` from 0.5.4 to 0.5.5 - [Release notes](https://github.com/unjs/magicast/releases) - [Changelog](https://github.com/unjs/magicast/blob/main/CHANGELOG.md) - [Commits](unjs/magicast@v0.5.4...v0.5.5) Updates `miniflare` from 5.20260910.0-alpha to 5.20260915.0-alpha - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/miniflare/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/miniflare@5.20260915.0-alpha/packages/miniflare) Updates `postcss` from 8.5.26 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.28) Updates `rolldown` from 1.2.6 to 1.2.9 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.9/packages/rolldown) Updates `tinyexec` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/tinylibs/tinyexec/releases) - [Commits](tinylibs/tinyexec@1.3.0...1.3.1) Updates `undici-types` from 8.3.0 to 8.9.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.3.0...v8.9.0) Updates `vite` from 8.2.2 to 8.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite) Updates `workerd` from 1.20260910.1 to 1.20260915.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](cloudflare/workerd@v1.20260910.1...v1.20260915.1) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: prettier dependency-version: 3.9.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patching - dependency-name: wrangler dependency-version: 4.132.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: "@cloudflare/workerd-darwin-64" dependency-version: 1.20260915.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: "@cloudflare/workerd-darwin-arm64" dependency-version: 1.20260915.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: "@cloudflare/workerd-linux-64" dependency-version: 1.20260915.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: "@cloudflare/workerd-linux-arm64" dependency-version: 1.20260915.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: "@cloudflare/workerd-windows-64" dependency-version: 1.20260915.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: ast-v8-to-istanbul dependency-version: 1.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-patching - dependency-name: magicast dependency-version: 0.5.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-patching - dependency-name: miniflare dependency-version: 5.20260915.0-alpha dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: postcss dependency-version: 8.5.28 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-patching - dependency-name: rolldown dependency-version: 1.2.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-patching - dependency-name: tinyexec dependency-version: 1.3.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: npm-patching - dependency-name: undici-types dependency-version: 8.9.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: vite dependency-version: 8.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching - dependency-name: workerd dependency-version: 1.20260915.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: npm-patching ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 19, 2026

lewisgoddard approved these changes Sep 19, 2026

View reviewed changes

lewisgoddard merged commit c13c821 into cf-pages Sep 19, 2026
6 checks passed

lewisgoddard deleted the dependabot/npm_and_yarn/npm-patching-d27d1a43f2 branch September 19, 2026 08:55

Navigation Menu

Uh oh!

Bump the npm-patching group with 17 updates - #132

Bump the npm-patching group with 17 updates#132
lewisgoddard merged 1 commit into
cf-pagesfrom
dependabot/npm_and_yarn/npm-patching-d27d1a43f2

dependabot Bot commented on behalf of github Sep 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 19, 2026

3.9.7

3.9.7

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

wrangler@4.132.0

Minor Changes

v1.20260915.1

What's Changed

New Contributors

v1.20260914.1

v1.20260913.1

What's Changed

v1.20260912.1

What's Changed

v1.20260911.1

What's Changed

v1.20260915.1

What's Changed

New Contributors

v1.20260914.1

v1.20260913.1

What's Changed

v1.20260912.1

What's Changed

v1.20260911.1

What's Changed

v1.20260915.1

What's Changed

New Contributors

v1.20260914.1

v1.20260913.1

What's Changed

v1.20260912.1

What's Changed

v1.20260911.1

What's Changed

v1.20260915.1

What's Changed

New Contributors

v1.20260914.1

v1.20260913.1

What's Changed

v1.20260912.1

What's Changed

v1.20260911.1

What's Changed

v1.20260915.1

What's Changed

New Contributors

v1.20260914.1

v1.20260913.1

What's Changed

v1.20260912.1

What's Changed

v1.20260911.1

What's Changed

v1.0.6

What's Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by `@Austin1serb`, `@giaBaoJS`)

JavaScript: Fix embedded template literal idempotency (#19725 by `@fisker`)