Skip to content

Bump the workerd-and-workers-types group with 2 updates - #15633

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/workerd-and-workers-types-00ed58a539
Open

Bump the workerd-and-workers-types group with 2 updates#15633
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/workerd-and-workers-types-00ed58a539

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the workerd-and-workers-types group with 2 updates: @cloudflare/workers-types and workerd.

Updates @cloudflare/workers-types from 4.20260702.1 to 5.20260914.1

Commits

Updates workerd from 1.20260911.1 to 1.20260914.1

Release notes

Sourced from workerd's releases.

v1.20260914.1

Full Changelog: cloudflare/workerd@v1.20260913.1...v1.20260914.1

v1.20260913.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260912.1...v1.20260913.1

v1.20260912.1

What's Changed

Full Changelog: cloudflare/workerd@v1.20260911.1...v1.20260912.1

Commits
  • c018b9f Release 2026-09-14
  • db75e60 Release 2026-09-13
  • 17e4f5a node:net: add net.Server and cloudflare:node connectHandler (#7306)
  • 10c0673 kj-rs-tokio: a kj::EventPort driven by a per-thread tokio runtime
  • 909e388 Release 2026-09-12
  • 3e02c0f Python: Add numpy vendor snapshot stability test (#7326)
  • 7d23293 sockets: close() with a pipe close in flight logged an uncaught exception (#7...
  • 3a1aba7 Add jsg::Lenient based on Rust jsg::Nullable
  • 999ef4b Merge pull request #7317 from cloudflare/harris/2026-09-11-tokio-minimal-prer...
  • 644fa66 [nfc] Keep kj-rs off the OS event loop
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Devin Review

Bumps the workerd-and-workers-types group with 2 updates: [@cloudflare/workers-types](https://github.com/cloudflare/workerd) and [workerd](https://github.com/cloudflare/workerd).


Updates `@cloudflare/workers-types` from 4.20260702.1 to 5.20260914.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `workerd` from 1.20260911.1 to 1.20260914.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20260911.1...v1.20260914.1)

---
updated-dependencies:
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260914.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: workerd-and-workers-types
- dependency-name: workerd
  dependency-version: 1.20260914.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workerd-and-workers-types
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added ci:skip-pr-description-validation Skip validation of the required PR description format dependencies Used by dependabot to mark PRs as updates to dependencies. package:miniflare Relating to Miniflare labels Sep 14, 2026
@changeset-bot

changeset-bot Bot commented Sep 14, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: a15a550

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 8 packages
Name Type
miniflare Patch
wrangler Patch
@cloudflare/deploy-helpers Patch
@cloudflare/pages-shared Patch
@cloudflare/remote-bindings Patch
@cloudflare/runtime-types Patch
@cloudflare/vite-plugin Patch
@cloudflare/vitest-plugin Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-project-automation github-project-automation Bot moved this to Untriaged in workers-sdk Sep 14, 2026
@workers-devprod
workers-devprod requested review from a team and edmundhung and removed request for a team September 14, 2026 06:07
@workers-devprod

workers-devprod commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

Codeowners approval required for this PR:

  • @cloudflare/wrangler
Show detailed file reviewers
  • .changeset/dependabot-update-15633.md: [@cloudflare/wrangler]
  • packages/workers-utils/src/default-compat-date.ts: [@cloudflare/wrangler]
  • pnpm-lock.yaml: [@cloudflare/wrangler]
  • pnpm-workspace.yaml: [@cloudflare/wrangler]

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Devin Review: 1 flag

Not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

Devin Review

@pkg-pr-new

pkg-pr-new Bot commented Sep 14, 2026

Copy link
Copy Markdown
@cloudflare/autoconfig

npm i https://pkg.pr.new/@cloudflare/autoconfig@15633

@cloudflare/build-output-utils

npm i https://pkg.pr.new/@cloudflare/build-output-utils@15633

@cloudflare/codemods

npm i https://pkg.pr.new/@cloudflare/codemods@15633

@cloudflare/config

npm i https://pkg.pr.new/@cloudflare/config@15633

@cloudflare/containers-shared

npm i https://pkg.pr.new/@cloudflare/containers-shared@15633

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@15633

@cloudflare/deploy-helpers

npm i https://pkg.pr.new/@cloudflare/deploy-helpers@15633

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@15633

miniflare

npm i https://pkg.pr.new/miniflare@15633

@cloudflare/pages-functions

npm i https://pkg.pr.new/@cloudflare/pages-functions@15633

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@15633

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@15633

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@15633

@cloudflare/vitest-plugin

npm i https://pkg.pr.new/@cloudflare/vitest-plugin@15633

@cloudflare/workers-auth

npm i https://pkg.pr.new/@cloudflare/workers-auth@15633

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@15633

@cloudflare/workers-utils

npm i https://pkg.pr.new/@cloudflare/workers-utils@15633

wrangler

npm i https://pkg.pr.new/wrangler@15633

commit: a15a550

The following dependency versions have been updated:

| Dependency                | From          | To            |
| ------------------------- | ------------- | ------------- |
| @cloudflare/workers-types | ^5.20260911.1 | ^5.20260914.1 |
| workerd                   | 1.20260911.1  | 1.20260914.1  |
@petebacondarwin

Copy link
Copy Markdown
Contributor

This workerd bump has broken the Vite plugin's node-compat test that uses http.createServer() to expose a server on 8080, that is registered in the new per-DO port table in module-runner and not accessible from the stateless runner-worker.
Introduced in cloudflare/workerd#7306.

@petebacondarwin

Copy link
Copy Markdown
Contributor

A workers-sdk-only one-line fix is unsafe. Invoking handlers through runInRunnerObject() fixes this GET, but experiments showed:

The clean fix likely needs a small workerd capability plus workers-sdk plumbing:

  1. Add a host-only workerd option allowing a specifically marked, pinned internal runner actor to use the isolate’s Node port scope.
  2. Plumb it through Miniflare.
  3. Enable it for Vite’s runner DO (packages/vite-plugin-cloudflare/src/miniflare-options.ts:531), and assess Vitest’s equivalent.
  4. Keep normal user DOs—including ordinary ephemeralLocal actors—per-actor scoped.

That preserves the intentional semantics from workerd #7306 while making Vite’s artificial runner transparent to user module initialization.

@petebacondarwin

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:skip-pr-description-validation Skip validation of the required PR description format dependencies Used by dependabot to mark PRs as updates to dependencies. package:miniflare Relating to Miniflare

Projects

Status: Untriaged

Development

Successfully merging this pull request may close these issues.

2 participants