chore: bump up all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node (source)	22.13.1 -> 22.13.4
prettier (source)	3.5.0 -> 3.5.1
wrangler (source)	3.107.3 -> 3.109.1

---

Release Notes

prettier/prettier (prettier)

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.

cloudflare/workers-sdk (wrangler)

v3.109.1

Compare Source

Patch Changes

• #​8021 28b1dc7 Thanks @​0xD34DC0DE! - fix: prevent __cf_cjs name collision in the hybrid Nodejs compat plugin

v3.109.0

Compare Source

Minor Changes

• #​8120 3fb801f Thanks @​sdnts! - Add a new update subcommand for Queues to allow updating Queue settings

• #​8120 3fb801f Thanks @​sdnts! - Allow overriding message retention duration when creating Queues

• #​8026 542c6ea Thanks @​penalosa! - Add --outfile to wrangler deploy for generating a worker bundle.

  This is an advanced feature that most users won't need to use. When set, Wrangler will output your built Worker bundle in a Cloudflare specific format that captures all information needed to deploy a Worker using the Worker Upload API

• #​8026 542c6ea Thanks @​penalosa! - Add a wrangler check startup command to generate a CPU profile of your Worker's startup phase.

  This can be imported into Chrome DevTools or opened directly in VSCode to view a flamegraph of your Worker's startup phase. Additionally, when a Worker deployment fails with a startup time error Wrangler will automatically generate a CPU profile for easy investigation.

  Advanced usage:

  • --args: to customise the way wrangler check startup builds your Worker for analysis, provide the exact arguments you use when deploying your Worker with wrangler deploy. For instance, if you deploy your Worker with wrangler deploy --no-bundle, you should use wrangler check startup --args="--no-bundle" to profile the startup phase.
  • --worker-bundle: if you don't use Wrangler to deploy your Worker, you can use this argument to provide a Worker bundle to analyse. This should be a file path to a serialised multipart upload, with the exact same format as the API expects: https://developers.cloudflare.com/api/resources/workers/subresources/scripts/methods/update/

Patch Changes

• #​8112 fff677e Thanks @​penalosa! - When reporting errors to Sentry, Wrangler will now include the console output as additional metadata

• #​8120 3fb801f Thanks @​sdnts! - Check bounds when overriding delivery delay when creating Queues

• #​7950 4db1fb5 Thanks @​cmackenzie1! - Add local binding support for Worker Pipelines

• #​8119 1bc60d7 Thanks @​penalosa! - Output correct config format from wrangler d1 create. Previously, this command would always output TOML, regardless of the config file format

• #​8130 1aa2a91 Thanks @​emily-shen! - Include default values for wrangler types --path and --x-include-runtime in telemetry

  User provided strings are still left redacted as always.

• #​8061 35710e5 Thanks @​emily-shen! - fix: respect WRANGLER_LOG in wrangler dev

  Previously, --log-level=debug was the only way to see debug logs in wrangler dev, which was unlike all other commands.

• Updated dependencies [4db1fb5]:

  • [email protected]

v3.108.1

Compare Source

Patch Changes

• #​8103 a025ad2 Thanks @​emily-shen! - fix: fix bug where wrangler secret list --format=json was printing the wrangler banner.

• Updated dependencies []:

  • [email protected]

v3.108.0

Compare Source

Minor Changes

• #​7990 b1966df Thanks @​cmsparks! - Add WRANGLER_CI_OVERRIDE_NAME for Workers CI

• #​8028 b2dca9a Thanks @​emily-shen! - feat: Also log when no bindings are found.

  We currently print a worker's bindings during dev, versions upload and deploy. This just also prints something when there's no bindings found, in case you were expecting bindings.

• #​8037 71fd250 Thanks @​WillTaylorDev! - Provides unsafe.metadata configurations when using wrangler versions secret put.

Patch Changes

• #​8058 1f80d69 Thanks @​WillTaylorDev! - Bugfix: Modified versions secret put to inherit all known bindings, which circumvents a limitation in the API which does not return all fields for all bindings.

• #​7986 88514c8 Thanks @​andyjessop! - docs: clarifies that local resources are "simulated locally" or "connected to remote resource", and adds console messages to help explain local dev

• #​8008 9d08af8 Thanks @​ns476! - Add support for Images bindings (in private beta for now), with optional local support for platforms where Sharp is available.

• #​7769 6abe69c Thanks @​cmackenzie1! - Adds the following new option for wrangler pipelines create and wrangler pipelines update commands:

  --cors-origins           CORS origin allowlist for HTTP endpoint (use * for any origin)  [array]
  

• #​7290 0c0374c Thanks @​emily-shen! - fix: add support for workers with assets when running multiple workers in one wrangler dev instance

  https://github.com/cloudflare/workers-sdk/pull/7251 added support for running multiple Workers in one wrangler dev/miniflare session. e.g. wrangler dev -c wrangler.toml -c ../worker2/wrangler.toml, which among other things, allowed cross-service RPC to Durable Objects.

  However this did not work in the same way as production when there was a Worker with assets - this PR should fix that.

• #​7769 6abe69c Thanks @​cmackenzie1! - Rename wrangler pipelines <create|update> flags

  The following parameters have been renamed:

  Previous Name	New Name
  access-key-id	r2-access-key-id
  secret-access-key	r2-secret-access-key
  transform	transform-worker
  r2	r2-bucket
  prefix	r2-prefix
  binding	enable-worker-binding
  http	enable-http
  authentication	require-http-auth
  filename	file-template
  filepath	partition-template

• #​8012 c412a31 Thanks @​mtlemilio! - Use fetchPagedListResult when listing Hyperdrive configs from the API

  This fixes an issue where only 20 configs were being listed.

• #​8077 60310cd Thanks @​emily-shen! - feat: add telemetry to experimental auto-provisioning

• Updated dependencies [c80dbd8, 0c0374c]:

  • [email protected]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@types/[email protected] 🔁 npm/@types/[email protected]	None	+1	2.39 MB	types
npm/[email protected] 🔁 npm/[email protected]	Transitive: environment, filesystem, network, shell, unsafe	+47	24 MB	wrangler-publisher

View full report↗︎