Update NPM Development dependencies #19170

renovate · 2025-07-07T03:24:35Z

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/workers-types	`4.20250603.0` -> `4.20250705.0`
@eslint/js (source)	`9.28.0` -> `9.30.1`
@tailwindcss/vite (source)	`4.1.8` -> `4.1.11`
@types/react (source)	`19.1.6` -> `19.1.8`
@types/react-dom (source)	`19.1.5` -> `19.1.6`
@vitejs/plugin-react-swc (source)	`3.10.1` -> `3.10.2`
eslint (source)	`9.28.0` -> `9.30.1`
eslint-plugin-import	`2.31.0` -> `2.32.0`
miniflare (source)	`4.20250525.0` -> `4.20250617.5`
prettier (source)	`3.5.3` -> `3.6.2`
tailwindcss (source)	`4.1.8` -> `4.1.11`
typescript-eslint (source)	`8.33.1` -> `8.35.1`
vite (source)	`^6.2.2` -> `^7.0.0`
vite-plugin-static-copy	`3.0.0` -> `3.1.0`
wrangler (source)	`4.18.0` -> `4.23.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cloudflare/workerd (@cloudflare/workers-types)

eslint/eslint (@eslint/js)

`v9.30.1`

Compare Source

`v9.30.0`

Compare Source

`v9.29.0`

Compare Source

tailwindlabs/tailwindcss (@tailwindcss/vite)

`v4.1.11`

Compare Source

Fixed

Add heuristic to skip candidate migrations inside emit(…) (#18330)
Extract candidates with variants in Clojure/ClojureScript keywords (#18338)
Document --watch=always in the CLI's usage (#18337)
Add support for Vite 7 to @tailwindcss/vite (#18384)

`v4.1.10`

Compare Source

Fixed

Fix incorrectly generated CSS when using percentages in arbitrary values with calc (e.g. w-[calc(100%-var(--offset))]) (#18289)

`v4.1.9`

Compare Source

Fixed

Correctly parse custom properties with strings containing semicolons (#18251)
Upgrade: Migrate arbitrary modifiers without percentage signs to bare values (e.g. /[0.16] → /16) (#18184)
Upgrade: Migrate CSS variable shorthands where fallback value contains function call (#18184)
Upgrade: Migrate negative arbitrary values to negative bare values (e.g. mb-[-32rem] → -mb-128) (#18212)
Upgrade: Do not migrate blur in wire:model.blur (#18216)
Don't add spaces around CSS dashed idents when formatting math expressions (#18220)

vitejs/vite-plugin-react (@vitejs/plugin-react-swc)

`v3.10.2`

Compare Source

Suggest `@vitejs/plugin-react-oxc` if rolldown-vite is detected #491

Emit a log which recommends @vitejs/plugin-react-oxc when rolldown-vite is detected to improve performance and use Oxc under the hood. The warning can be disabled by setting disableOxcRecommendation: true in the plugin options.

Use `optimizeDeps.rollupOptions` instead of `optimizeDeps.esbuildOptions` for rolldown-vite #489

This suppresses the warning about optimizeDeps.esbuildOptions being deprecated in rolldown-vite.

Add Vite 7-beta to peerDependencies range #497

React plugins are compatible with Vite 7, this removes the warning when testing the beta.

eslint/eslint (eslint)

`v9.30.1`

Compare Source

`v9.30.0`

Compare Source

`v9.29.0`

Compare Source

import-js/eslint-plugin-import (eslint-plugin-import)

`v2.32.0`

Compare Source

Added

add [enforce-node-protocol-usage] rule and import/node-version setting ([#3024], thanks [@GoldStrikeArch] and [@sevenc-nanashi])
add TypeScript types ([#3097], thanks [@G-Rath])
[extensions]: add `pathGroupOverrides to allow enforcement decision overrides based on specifier ([#3105], thanks [@Xunnamius])
[order]: add sortTypesGroup option to allow intragroup sorting of type-only imports ([#3104], thanks [@Xunnamius])
[order]: add newlines-between-types option to control intragroup sorting of type-only imports ([#3127], thanks [@Xunnamius])
[order]: add consolidateIslands option to collapse excess spacing for aesthetically pleasing imports ([#3129], thanks [@Xunnamius])

Fixed

[no-unused-modules]: provide more meaningful error message when no .eslintrc is present ([#3116], thanks [@michaelfaith])
configs: added missing name attribute for eslint config inspector ([#3151], thanks [@NishargShah])
[order]: ensure arcane imports do not cause undefined behavior ([#3128], thanks [@Xunnamius])
[order]: resolve undefined property access issue when using named ordering ([#3166], thanks [@Xunnamius])
[enforce-node-protocol-usage]: avoid a crash with some TS code ([#3173], thanks [@ljharb])
[order]: codify invariants from docs into config schema ([#3152], thanks [@Xunnamius])

Changed

[Docs] [extensions], [order]: improve documentation ([#3106], thanks [@Xunnamius])
[Docs] add flat config guide for using tseslint.config() ([#3125], thanks [@lnuvy])
[Docs] add missing comma ([#3122], thanks [@RyanGst])
[readme] Update flatConfig example to include typescript config ([#3138], thanks [@intellix])
[Refactor] [order]: remove unnecessary negative check ([#3167], thanks [@JounQin])
[Docs] [no-unused-modules]: add missing double quote ([#3191], thanks [@albertpastrana])
[Docs] no-restricted-paths: clarify wording and fix errors ([#3172], thanks [@greim])

cloudflare/workers-sdk (miniflare)

`v4.20250617.5`

Compare Source

Minor Changes

#9535 56dc5c4 Thanks @penalosa! - In 2023 we announced breakpoint debugging support for Workers, which meant that you could easily debug your Worker code in Wrangler's built-in devtools (accessible via the [d] hotkey) as well as multiple other devtools clients, including VSCode. For most developers, breakpoint debugging via VSCode is the most natural flow, but until now it's required manually configuring a launch.json file, running wrangler dev, and connecting via VSCode's built-in debugger.

Now, using VSCode's built-in JavaScript Debug Terminals, there are just two steps: open a JS debug terminal and run wrangler dev (or vite dev). VSCode will automatically connect to your running Worker (even if you're running multiple Workers at once!) and start a debugging session.

`v4.20250617.4`

Compare Source

Patch Changes

#9689 b137a6f Thanks @emily-shen! - fix: correctly pass container engine config to miniflare

`v4.20250617.3`

Compare Source

Minor Changes

#9640 bfb791e Thanks @emily-shen! - Add ability to dump workerd config into a file for debugging.

You can enable this by setting MINIFLARE_WORKERD_CONFIG_DEBUG to a file path where you want the config to be written.

Patch Changes

#9596 5162c51 Thanks @CarmenPopoviciu! - add ability to pull images for containers local dev

`v4.20250617.2`

Compare Source

Patch Changes

#9605 17d23d8 Thanks @emily-shen! - Add rebuild hotkey for containers local dev, and clean up containers at the end of a dev session.

`v4.20250617.1`

Compare Source

Patch Changes

#9586 d1d34fe Thanks @penalosa! - Remove the Mixed Mode naming in favour of "remote bindings"/"remote proxy"

`v4.20250617.0`

Compare Source

Patch Changes

#9591 828b7df Thanks @dependabot! - chore: update dependencies of "miniflare" package

The following dependency versions have been updated:

Dependency From To

workerd 1.20250612.0 1.20250617.0

@cloudflare/workers-types ^4.20250612.0 ^4.20250617.0
#9576 2671e77 Thanks @vicb! - Add core local dev functionality for containers.
Adds a new WRANGLER_DOCKER_HOST env var to customise what socket to connect to.

`v4.20250612.0`

Compare Source

Patch Changes

#9529 bd528d5 Thanks @dependabot! - chore: update dependencies of "miniflare" package

The following dependency versions have been updated:

Dependency From To

workerd 1.20250604.0 1.20250612.0

@cloudflare/workers-types ^4.20250604.0 ^4.20250612.0
#9582 2177fb4 Thanks @vicb! - Update capnp generated code from the workerd.capnp
#9506 36113c2 Thanks @penalosa! - Strip the CF-Connecting-IP header from outgoing fetches
#9493 e16fcc7 Thanks @vicb! - bump capnp-es to 0.0.11 in miniflare

`v4.20250604.1`

Compare Source

Minor Changes

#9509 0b2ba45 Thanks @emily-shen! - feat: add static routing options via 'run_worker_first' to Wrangler

Implements the proposal noted here https://github.com/cloudflare/workers-sdk/discussions/9143.

This is now usable in wrangler dev and in production - just specify the routes that should hit the worker first with run_worker_first in your Wrangler config. You can also omit certain paths with ! negative rules.

Patch Changes

#9475 931f467 Thanks @edmundhung! - add hello world binding that serves as as an explanatory example.
#9443 95eb47d Thanks @dario-piotrowicz! - add mixed-mode support for mtls bindings

`v4.20250604.0`

Compare Source

Patch Changes

#9508 4ab5a40 Thanks @edmundhung! - fix: ensure default registry path matches wrangler settings"
#9385 485cd08 Thanks @dependabot! - chore: update dependencies of "miniflare" package

The following dependency versions have been updated:

Dependency From To

workerd 1.20250525.0 1.20250604.0

@cloudflare/workers-types ^4.20250525.0 ^4.20250604.0
#9469 e3b3ef5 Thanks @edmundhung! - refactor: the dev registry will now create a file watcher only when the Worker has a binding to external services.

`v4.20250525.1`

Compare Source

Minor Changes

#9173 fac2f9d Thanks @edmundhung! - feat: export getDefaultDevRegistryPath() utility

This provides a default XDG app-path for the Dev Registry, which can be used to set the unsafeDevRegistryPath option in Miniflare and will be used by both Wrangler and @cloudflare/vite-plugin.
#9313 92719a5 Thanks @edmundhung! - feat: add Dev Registry support

This change introduces two new options to support cross-process service bindings, durable objects and tail consumers via a file-system based registry, with backward compatibility to Wrangler’s implementation:
- unsafeDevRegistryPath (string): Filesystem path to the Dev Registry directory.
- unsafeDevRegistryDurableObjectProxy (boolean): When enabled, exposes internal Durable Objects to other local dev sessions and allows Workers to connect to external Durable Objects.
Example usage:
```
import { Miniflare } from "miniflare";

const mf = new Miniflare({
	scriptPath: "./dist/worker.js",
	unsafeDevRegistryPath: "/registry",
	unsafeDevRegistryDurableObjectProxy: true,
	// ...other options
});
```

Patch Changes

#9440 8c7ce77 Thanks @penalosa! - Preserve original error messages
#9390 80e75f4 Thanks @penalosa! - Support additional Mixed Mode resources in Wrangler:
- AI
- Browser
- Images
- Vectorize
- Dispatch Namespaces
#9390 80e75f4 Thanks @penalosa! - Additional option for the Miniflare plugin interface to allow defining workerd extensions without having to include deduplication logic.

prettier/prettier (prettier)

`v3.6.2`

Compare Source

diff

Markdown: Add missing blank line around code block (#17675 by @fisker)

<!-- Input -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

<!-- Prettier 3.6.1 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```
   1. Another
   2. List

<!-- Prettier 3.6.2 -->
1. Some text, and code block below, with newline after code block

   ```yaml
   ---
   foo: bar
   ```

   1. Another
   2. List

`v3.6.1`

Compare Source

diff

TypeScript: Allow const without initializer (#17650, #17654 by @fisker)

// Input
export const version: string;

// Prettier 3.6.0 (--parser=babel-ts)
SyntaxError: Unexpected token (1:21)
> 1 | export const version: string;
    |                     ^

// Prettier 3.6.0 (--parser=oxc-ts)
SyntaxError: Missing initializer in const declaration (1:14)
> 1 | export const version: string;
    |              ^^^^^^^^^^^^^^^

// Prettier 3.6.1
export const version: string;

Miscellaneous: Avoid closing files multiple times (#17665 by @43081j)

When reading a file to infer the interpreter from a shebang, we use the
n-readlines library to read the first line in order to get the shebang.

This library closes files when it reaches EOF, and we later try close the same
files again. We now close files only if n-readlines did not already close
them.

`v3.6.0`

Compare Source

diff

🔗 Release Notes

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.35.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.35.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.34.1`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

`v8.34.0`

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

`v7.0.2`

Compare Source

Bug Fixes

css: resolve relative paths in sass, revert #20300 (#20349) (db8bd41)

`v7.0.1`

Compare Source

Bug Fixes

css: skip resolving resolved paths in sass (#20300) (ac528a4)
deps: update all non-major dependencies (#20324) (3e81af3)
types: add a global interface for Worker (#20243) (37bdfc1)

Miscellaneous Chores

deps: update rolldown-related dependencies (#20323) (30d2f1b)
fix typos and grammatical errors across documentation and comments (#20337) (c1c951d)
group commits by category in changelog (#20310) (41e83f6)
rearrange 7.0 changelog (#20280) (eafd28a)

`v7.0.0`

Compare Source

fix: keep import.meta.url in bundled Vite (#20235) (3bf3a8a), closes #20235
fix(deps): update all non-major dependencies (#20271) (6b64d63), closes #20271
fix(module-runner): export ssrExportNameKey (#20266) (ac302a7), closes #20266
fix(module-runner): expose normalizeModuleId (#20277) (9b98dcb), closes #20277
feat(types): use terser types from terser package (#20274) (a5799fa), closes #20274
chore: "indentity" → "identity" in test description (#20225) (ea9aed7), closes #20225
chore: typos in comments (#20259) (b135918), closes #20259
chore(deps): update rolldown-related dependencies (#20270) (f7377c3), closes #20270
perf(utils): improve performance of numberToPos (#20244) (3f46901), closes #20244

sapphi-red/vite-plugin-static-copy (vite-plugin-static-copy)

`v3.1.0`

Compare Source

Minor Changes

#171 9c7cf2e Thanks @MrRefactoring! - add Vite 7 to peer dep range

`v3.0.2`

Compare Source

Patch Changes

#167 89458b2 Thanks @sapphi-red! - improved file grouping algorithm for better performance

`v3.0.1`

Compare Source

Patch Changes

#166 60409c5 Thanks @sapphi-red! - fix absolute destination paths in copy targets incorrectly returning contents in dev
#164 337f976 Thanks @sapphi-red! - fixes case-insensitive path conflicts causing copy failures (EEXIST error)

cloudflare/workers-sdk (wrangler)

`v4.23.0`

Compare Source

Minor Changes

#9535 56dc5c4 Thanks @penalosa! - In 2023 we announced breakpoint debugging support for Workers, which meant that you could easily debug your Worker code in Wrangler's built-in devtools (accessible via the [d] hotkey) as well as multiple other devtools clients, including VSCode. For most developers, breakpoint debugging via VSCode is the most natural flow, but until now it's required manually configuring a launch.json file, running wrangler dev, and connecting via VSCode's built-in debugger.

Now, using VSCode's built-in JavaScript Debug Terminals, there are just two steps: open a JS debug terminal and run wrangler dev (or vite dev). VSCode will automatically connect to your running Worker (even if you're running multiple Workers at once!) and start a debugging session.
#9810 8acaf43 Thanks @WillTaylorDev! - WC-3626 Pull branch name from WORKERS_CI_BRANCH if exists.

Patch Changes

#9775 4309bb3 Thanks @vicb! - Cap the number of errors and warnings for bulk KV put to avoid consuming too much memory
#9799 d11288a Thanks @penalosa! - Better messaging for account owned tokens in wrangler whoami
Updated dependencies [56dc5c4]:
- [email protected]

`v4.22.0`

Compare Source

Minor Changes

#7871 f2a8d4a Thanks @dario-piotrowicz! - add support for assets bindings to getPlatformProxy

this change makes sure that that getPlatformProxy, when the input configuration
file contains an assets field, correctly returns the appropriate asset binding proxy

example:

// wrangler.jsonc
{
	"name": "my-worker",
	"assets": {
		"directory": "./public/",
		"binding": "ASSETS",
	},
}

import { getPlatformProxy } from "wrangler";

const { env, dispose } = await getPlatformProxy();

const text = await (await env.ASSETS.fetch("http://0.0.0.0/file.txt")).text();
console.log(text); // logs the content of file.txt

await dispose();

Patch Changes

#9717 d2f2f72 Thanks @nikitassharma! - Containers should default to a "dev" instance type when no instance type is specified in the wrangler config
#9620 1b967ea Thanks @gpanders! - Simplify containers images list output format
#9684 94a340e Thanks @WillTaylorDev! - Select only successfully deployed deployments when tailing.

`v4.21.2`

Compare Source

Patch Changes

#9731 75b75f3 Thanks @gabivlj! - containers: Check for container scopes before running a container command to give a better error
#9641 fdbc9f6 Thanks @IRCody! - Update container builds to use a more robust method for detecting if the currently built image already exists.
#9736 55c83a7 Thanks @gabivlj! - containers: Do not check scopes if not defined
#9667 406fba5 Thanks @IRCody! - Fail earlier in the deploy process when deploying a container worker if docker is not detected.

`v4.21.1`

Compare Source

Patch Changes

#9626 9c938c2 Thanks @penalosa! - Support wrangler version upload for Python Workers
#9718 fb83341 Thanks @mhart! - fix error message when docker daemon is not running
#9689 [b137a6f](https://github.com/clou

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…c_tokens * 'main' of https://github.com/astral-sh/ruff: (27 commits) [ty] First cut at semantic token provider (astral-sh#19108) [`flake8-simplify`] Make example error out-of-the-box (`SIM116`) (astral-sh#19111) [`flake8-use-pathlib`] Make example error out-of-the-box (`PTH210`) (astral-sh#19189) [`flake8-use-pathlib`] Add autofixes for `PTH203`, `PTH204`, `PTH205` (astral-sh#18922) [`flake8-type-checking`] Fix syntax error introduced by fix (`TC008`) (astral-sh#19150) [`flake8-pyi`] Make example error out-of-the-box (`PYI007`, `PYI008`) (astral-sh#19103) Update Rust crate indicatif to 0.18.0 (astral-sh#19165) [ty] Add separate CI job for memory usage stats (astral-sh#19134) [ty] Add documentation for server traits (astral-sh#19137) Rename to `SessionSnapshot`, move unwind assertion closer (astral-sh#19177) [`flake8-type-checking`] Make example error out-of-the-box (`TC001`) (astral-sh#19151) [ty] Bare `ClassVar` annotations (astral-sh#15768) [ty] Re-enable multithreaded pydantic benchmark (astral-sh#19176) [ty] Implement equivalence for protocols with method members (astral-sh#18659) [ty] Use RHS inferred type for bare `Final` symbols (astral-sh#19142) [ty] Support declaration-only attributes (astral-sh#19048) [ty] Sync vendored typeshed stubs (astral-sh#19174) Update dependency pyodide to ^0.28.0 (astral-sh#19164) Update NPM Development dependencies (astral-sh#19170) Update taiki-e/install-action action to v2.56.7 (astral-sh#19169) ...

renovate bot added the internal An internal refactor or improvement label Jul 7, 2025

Update NPM Development dependencies

71c36ac

renovate bot force-pushed the renovate/npm-development-dependencies branch from 3b99e4a to 71c36ac Compare July 7, 2025 03:27

MichaReiser merged commit d0099fd into main Jul 7, 2025
35 checks passed

MichaReiser deleted the renovate/npm-development-dependencies branch July 7, 2025 08:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update NPM Development dependencies #19170

Update NPM Development dependencies #19170

Uh oh!

renovate bot commented Jul 7, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Dependency	From	To
workerd	1.20250612.0	1.20250617.0
@cloudflare/workers-types	^4.20250612.0	^4.20250617.0

Dependency	From	To
workerd	1.20250604.0	1.20250612.0
@cloudflare/workers-types	^4.20250604.0	^4.20250612.0

Dependency	From	To
workerd	1.20250525.0	1.20250604.0
@cloudflare/workers-types	^4.20250525.0	^4.20250604.0

Update NPM Development dependencies #19170

Update NPM Development dependencies #19170

Uh oh!

Conversation

renovate bot commented Jul 7, 2025

Release Notes

Fixed

Fixed

Fixed

Suggest @vitejs/plugin-react-oxc if rolldown-vite is detected #​491

Use optimizeDeps.rollupOptions instead of optimizeDeps.esbuildOptions for rolldown-vite #​489

Add Vite 7-beta to peerDependencies range #​497

Added

Fixed

Changed

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Markdown: Add missing blank line around code block (#​17675 by @​fisker)

TypeScript: Allow const without initializer (#​17650, #​17654 by @​fisker)

Miscellaneous: Avoid closing files multiple times (#​17665 by @​43081j)

Bug Fixes

Bug Fixes

Miscellaneous Chores

Minor Changes

Patch Changes

Patch Changes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Patch Changes

Patch Changes

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Suggest `@vitejs/plugin-react-oxc` if rolldown-vite is detected #491

Use `optimizeDeps.rollupOptions` instead of `optimizeDeps.esbuildOptions` for rolldown-vite #489

Add Vite 7-beta to peerDependencies range #497

Markdown: Add missing blank line around code block (#17675 by @fisker)

TypeScript: Allow const without initializer (#17650, #17654 by @fisker)

Miscellaneous: Avoid closing files multiple times (#17665 by @43081j)