You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#17209fbcfa03 Thanks @matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
#17209fbcfa03 Thanks @matthewp! - Hardens RSS feed generation by escaping the source and enclosure item fields. These fields are now serialized as structured XML values, ensuring that special characters in values like source.title and enclosure.type are always treated as text rather than markup, consistent with how other feed fields are handled.
#147937b3fea6 Thanks @trafgals! - Prevent worker disposal errors from failing otherwise successful test runs
Errors raised while disposing test Workers are now logged for diagnostics rather than overriding the test result. Set NODE_DEBUG=vitest-pool-workers to view these errors.
#14713de34449 Thanks @allocsys! - Fix a non-ASCII path failure during the Miniflare WebSocket handshake: the MF-Vitest-Worker-Data header embedded the raw process.cwd() value, which threw a Latin-1/ASCII header encoding error when the workspace path contained non-ASCII characters (e.g. CJK characters) on Windows. The value is now percent-encoded on write and decoded on read, matching the fix applied to the module fallback redirect response.
#14713de34449 Thanks @allocsys! - Fix a runtime start-up failure ("No such module "cloudflare:test-internal"") when the project workspace path contains non-ASCII characters (e.g. CJK characters) on Windows. The module fallback service's redirect response set the target file path directly as an HTTP Location header value, but headers are restricted to the Latin-1/ASCII byte range, so any non-ASCII byte in the path caused header construction to throw. Such paths are now percent-encoded (and tagged with a sentinel prefix) before being used as a header value, and decoded again only for the values we encoded, so the round-trip is unambiguous and a workspace path containing a literal % is left untouched instead of being mis-decoded.
#147395eac99e Thanks @Ankcorn! - Support testing Streaming Tail Workers in Vitest Pool Workers.
#14763538e867 Thanks @gianghungtien! - Treat webSocketMessage(), webSocketClose() and webSocketError() as optional Durable Object handlers
The pool wraps each Durable Object class and installs a prototype method for every default handler before user code is loaded, so workerd always sees a handler and always dispatches. When the wrapped class didn't actually define one, the wrapper threw <ClassName> exported by <path> does not define a `webSocketClose()` method, even though deployed Workers silently ignore these events for classes that omit them. A hibernatable Durable Object defining only webSocketMessage() would log an uncaught TypeError on every close.
These three handlers now no-op when absent, matching deployed behaviour. alarm() is unchanged and still reports a missing handler, since workerd rejects setAlarm() up front on a class without one.
#146784e62bba Thanks @apeacock1991! - Fix test runs hanging after a Durable Object logs and rejects blockConcurrencyWhile()
Console messages emitted from another Durable Object are now buffered until execution returns to the test runner, avoiding I/O that cannot complete after the object's input gate breaks.
#147937b3fea6 Thanks @trafgals! - Prevent worker disposal errors from failing otherwise successful test runs
Errors raised while disposing test Workers are now logged for diagnostics rather than overriding the test result. Set NODE_DEBUG=vitest-pool-workers to view these errors.
#14713de34449 Thanks @allocsys! - Fix a non-ASCII path failure during the Miniflare WebSocket handshake: the MF-Vitest-Worker-Data header embedded the raw process.cwd() value, which threw a Latin-1/ASCII header encoding error when the workspace path contained non-ASCII characters (e.g. CJK characters) on Windows. The value is now percent-encoded on write and decoded on read, matching the fix applied to the module fallback redirect response.
#14713de34449 Thanks @allocsys! - Fix a runtime start-up failure ("No such module "cloudflare:test-internal"") when the project workspace path contains non-ASCII characters (e.g. CJK characters) on Windows. The module fallback service's redirect response set the target file path directly as an HTTP Location header value, but headers are restricted to the Latin-1/ASCII byte range, so any non-ASCII byte in the path caused header construction to throw. Such paths are now percent-encoded (and tagged with a sentinel prefix) before being used as a header value, and decoded again only for the values we encoded, so the round-trip is unambiguous and a workspace path containing a literal % is left untouched instead of being mis-decoded.
#147395eac99e Thanks @Ankcorn! - Support testing Streaming Tail Workers in Vitest Pool Workers.
#14763538e867 Thanks @gianghungtien! - Treat webSocketMessage(), webSocketClose() and webSocketError() as optional Durable Object handlers
The pool wraps each Durable Object class and installs a prototype method for every default handler before user code is loaded, so workerd always sees a handler and always dispatches. When the wrapped class didn't actually define one, the wrapper threw <ClassName> exported by <path> does not define a `webSocketClose()` method, even though deployed Workers silently ignore these events for classes that omit them. A hibernatable Durable Object defining only webSocketMessage() would log an uncaught TypeError on every close.
These three handlers now no-op when absent, matching deployed behaviour. alarm() is unchanged and still reports a missing handler, since workerd rejects setAlarm() up front on a class without one.
#146784e62bba Thanks @apeacock1991! - Fix test runs hanging after a Durable Object logs and rejects blockConcurrencyWhile()
Console messages emitted from another Durable Object are now buffered until execution returns to the test runner, avoiding I/O that cannot complete after the object's input gate breaks.
035c03ecad fix(specs): BREAKING CHANGE – remove recommend query params overridden by the API (#6604) by @raed667
The ranking, facetFilters, and enableABTest parameters have been removed from the Recommend request, and enableRules from its fallback parameters, as the Recommend API ignores them. API behavior is unchanged, but code setting these fields must be updated.
Most of the 33 bumps are patch/minor updates to direct devDependencies with limited visitor impact. The exceptions that warrant extra care are @cloudflare/nimbus-docs (0.6.1 → 0.7.1), the framework behind the docs layouts, components, plugins, and client scripts; @base-ui/react (Select/Combobox behavior fixes) used on the AI models page; marked and mermaid, which are used broadly for rendered content and diagrams; wrangler, whose experimental_getWranglerCommands output drives WranglerCommand blocks; and @cloudflare/vitest-pool-workers (0.16 → 0.18), which may affect test-runner behavior. The Prettier 3.9.6 bump already produced formatting changes included in the PR. The rest are unused direct deps, icon/font/data-only updates, or tooling-only changes.
Package details
@astrojs/rss: 4.0.18 → 4.0.19
Type: bug fix Dependency type: direct
What changed
Escapes source and enclosure item fields in RSS feed generation by serializing them as structured XML values.
Usage in this repo
src/pages/[...changelog].xml.ts generates changelog RSS feeds.
Impact: 🟡 Low — Change only hardens XML escaping; it should not break normal feeds and requires no code changes.
@base-ui/react: 1.5.0 → 1.6.0
Type: bug fix Dependency type: direct
What changed
Bug fixes and behavior changes for Select, Combobox, Accordion, Checkbox, and focus/keyboard handling.
Usage in this repo
src/components/models/SortSelect.tsx (Select) and src/components/models/FilterDropdown.tsx (Combobox).
Impact: 🟠 Medium — Select and Combobox behavior changes could affect the interactive filters on the AI models page.
@cloudflare/vitest-pool-workers: 0.16.15 → 0.18.8
Type: dependency bump Dependency type: direct
What changed
0.x minor/patch bump with optional Durable Object webSocket* handlers, fixes for non-ASCII paths/worker disposal, update to wrangler@4.114.0/miniflare@4.20260722.0.
Usage in this repo
vitest.config.ts via cloudflareTest() and package.json test scripts.
Impact: 🟠 Medium — A two-minor-version jump in the test pool can change test execution or require config tweaks; run the test suite before merging.
@floating-ui/react: 0.27.19 → 0.27.20
Type: dependency bump Dependency type: direct
What changed
Type-only fix for exactOptionalPropertyTypes and dependency updates; no runtime API changes.
Usage in this repo
Not imported directly in repo sources.
Impact: 🟢 Very Low — Unused directly and only type-level changes; any consumption is transitive through other UI packages.
@fontsource-variable/inter: 5.2.8 → 5.3.0
Type: dependency bump Dependency type: direct
What changed
Font file update for Inter Variable.
Usage in this repo
src/layouts/BaseLayout.astro imports the font.
Impact: 🟡 Low — Minor font update; could subtly change typography but unlikely to break anything.
Usage in this repo
Not imported directly in repo sources; may be present for transitive DocSearch use.
Impact: 🟢 Very Low — No direct callsites; breaking Recommend param changes do not affect this repo.
astro-skills: 0.1.0 → 0.1.1
Type: dependency bump Dependency type: direct
What changed
Patch release for astro-skills.
Usage in this repo
Related to bin/fetch-skills.ts skills integration.
Impact: 🟡 Low — Used only in the skills fetch/build path; patch release unlikely to affect normal builds.
cidr-tools: 12.0.3 → 12.1.2
Type: dependency bump Dependency type: direct
What changed
Minor/patch release of cidr-tools.
Usage in this repo
src/components/react/SubtractIPCalculator.tsx (parseCidr/excludeCidr).
Impact: 🟡 Low — Only one calculator component uses it; output may shift slightly but is unlikely to break.
globals: 17.6.0 → 17.7.0
Type: dependency bump Dependency type: direct
What changed
Global identifiers list update.
Usage in this repo
eslint.config.js (globals.node).
Impact: 🟡 Low — Only affects ESLint global definitions; no content impact.
happy-dom: 20.10.3 → 20.11.1
Type: dependency bump Dependency type: direct
What changed
Patch release of happy-dom DOM implementation.
Usage in this repo
vitest.config.ts environment for Node tests.
Impact: 🟡 Low — Only used in tests; could change DOM behavior in tests but not production output.
lint-staged: 17.0.7 → 17.2.0
Type: dependency bump Dependency type: direct
What changed
Minor release of lint-staged pre-commit tooling.
Usage in this repo
.husky/pre-commit and package.json lint-staged configuration.
Impact: 🟡 Low — Git hook tooling only; no site output impact.
marked: 18.0.5 → 18.0.7
Type: bug fix Dependency type: direct
What changed
Patch release of the markdown parser (bug fixes).
Usage in this repo
Widely used for inline markdown: src/util/changelog.ts, src/pages/[...changelog].xml.ts, src/components/cf/Details.astro, Glossary.astro, Markdown.astro, WranglerCommand.astro, etc.
Impact: 🟠 Medium — Used in many content-rendering paths; any parser output change can affect rendered HTML across the site.
mermaid: 11.15.0 → 11.16.0
Type: dependency bump Dependency type: direct
What changed
Minor release of Mermaid diagram renderer.
Usage in this repo
src/plugins/satteri/mermaid.ts, src/scripts/mermaid.client.ts, and many MDX docs with ```mermaid fences.
Impact: 🟠 Medium — Diagram rendering is visitor-facing; changes in theme or syntax could break existing diagrams.
nanostores: 1.3.0 → 1.4.1
Type: dependency bump Dependency type: direct
What changed
Minor release of nanostores state library.
Usage in this repo
Not imported directly; consumed transitively through @nanostores/react.
Impact: 🟢 Very Low — No direct imports in the repo; transitive consumption only.
@cloudflare/nimbus-docs: 0.6.1 → 0.7.1
Type: dependency bump Dependency type: direct
What changed
Minor release of the docs site framework used for layouts, components, markdown transforms, and client scripts.
Usage in this repo
Extensive: layouts (BaseLayout.astro, DocsLayout.astro), components (Header, PageHead, Code.astro, Dialog.astro, TOC, diagrams), plugins (satteri heading-slugs, autolink, markdown transforms), client scripts, sidebar logic, and rendered-toc utility.
Impact: 🔴 High — This is the core framework package for the docs site; a 0.x minor bump can affect rendered output, components, and build behavior.
parse-duration: 2.1.6 → 2.1.8
Type: dependency bump Dependency type: direct
What changed
Patch release of parse-duration.
Usage in this repo
Not imported directly (Stream.astro uses an inline parser); listed as direct dependency only.
Impact: 🟢 Very Low — No direct usage in the repo.
prettier: 3.8.4 → 3.9.6
Type: dependency bump Dependency type: direct
What changed
Minor release of Prettier; formatting changes from the new version are already applied in this PR.
Usage in this repo
Formatting scripts, .prettierrc.mjs, and src/components/cf/TypeScriptExample.astro (runtime formatting).
Impact: 🟡 Low — The PR already includes the formatting diff from 3.9.6; only future formatting is affected.
prettier-plugin-tailwindcss: 0.8.0 → 0.8.1
Type: dependency bump Dependency type: direct
What changed
Patch release of the Tailwind Prettier plugin.
Usage in this repo
.prettierrc.mjs plugin list.
Impact: 🟡 Low — Build-time formatting only; no site behavior impact.
pretty-bytes: 7.1.0 → 7.1.1
Type: dependency bump Dependency type: direct
What changed
Patch release of pretty-bytes.
Usage in this repo
src/components/cf/WARPRelease.astro and its client script.
Impact: 🟡 Low — Only affects byte formatting in the WARP release component.
react-icons: 5.6.0 → 5.7.0
Type: dependency bump Dependency type: direct
What changed
Icon set update.
Usage in this repo
Not imported directly in repo sources.
Impact: 🟢 Very Low — Unused direct dependency; no impact.
sharp: 0.35.1 → 0.35.3
Type: dependency bump Dependency type: direct
What changed
Patch release of sharp image processor.
Usage in this repo
Astro image service entrypoint in astro.config.ts; native binary dependency allowed in pnpm-workspace.yaml.
Impact: 🟡 Low — Only affects image optimization output at build time; patch unlikely to break.
svgo: 4.0.1 → 4.0.2
Type: dependency bump Dependency type: direct
What changed
Patch release of SVGO SVG optimizer.
Usage in this repo
scripts/optimize-svgs.ts.
Impact: 🟡 Low — Only used in the SVG optimization script; no runtime site impact.
tsx: 4.22.4 → 4.23.1
Type: dependency bump Dependency type: direct
What changed
Patch release of tsx TS execution engine.
Usage in this repo
bin/fetch-skills.ts shebang and package.json prebuild/predev scripts.
Impact: 🟡 Low — Build-time script runner only.
typescript-eslint: 8.61.1 → 8.65.0
Type: feature Dependency type: direct
What changed
Minor release with new rules, parser updates, and deprecations (mirrors @typescript-eslint/parser 8.65.0).
Usage in this repo
eslint.config.js (pluginTypeScript.configs.recommended).
Impact: 🟡 Low — Could introduce new lint warnings but will not affect site output.
valibot: 1.4.1 → 1.4.2
Type: dependency bump Dependency type: direct
What changed
Patch release of valibot schema validation library.
Usage in this repo
.flue/lib schema files (code-review-results.ts, style-guide-results.ts, dependabot-review.ts, spam-filter.ts, etc.).
Impact: 🟡 Low — Used for schema validation in the Flue agent workflows; patch should be safe.
vitest: 4.1.9 → 4.1.10
Type: dependency bump Dependency type: direct
What changed
Patch release of Vitest.
Usage in this repo
vitest.config.ts and package.json test scripts.
Impact: 🟡 Low — Patch release; run the test suite to confirm.
wrangler: 4.107.0 → 4.114.0
Type: dependency bump Dependency type: direct
What changed
Minor release of wrangler CLI and API; command registry may include new/changed commands and flags.
Usage in this repo
package.json typegen:worker/flue scripts and src/components/cf/WranglerCommand.astro (experimental_getWranglerCommands).
Impact: 🟠 Medium — WranglerCommand.astro renders command metadata from wrangler, so command/flag changes can affect published docs content.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the non-major group with 33 updates in the / directory:
4.0.184.0.191.5.01.6.00.16.150.18.80.27.190.27.205.2.85.3.05.2.85.3.01.2.861.2.911.2.561.2.673.1.33.1.43.0.43.0.58.61.18.65.05.54.15.56.00.1.00.1.112.0.312.1.217.6.017.7.020.10.320.11.117.0.717.2.018.0.518.0.711.15.011.16.01.3.01.4.10.6.10.7.12.1.62.1.83.8.43.9.60.8.00.8.17.1.07.1.15.6.05.7.00.35.10.35.34.0.14.0.24.22.44.23.18.61.18.65.01.4.11.4.24.1.94.1.104.107.04.114.0Updates
@astrojs/rssfrom 4.0.18 to 4.0.19Release notes
Sourced from @astrojs/rss's releases.
Changelog
Sourced from @astrojs/rss's changelog.
Commits
5978993[ci] release (#17213)2bfb179chore: simpler package.json types (#17229)fbcfa03Escape source and enclosure fields in RSS feed generation (#17209)5a8cd09refactor: update tsconfig to use TypeScript project references (#16505)46633f5refactor(create-astro): migrate tests to typescript (#16400)747a5b3refactor: migrate astro-rss tests to typescript (#16357)88fcc98fix integrations links across docs (#16098)Updates
@base-ui/reactfrom 1.5.0 to 1.6.0Release notes
Sourced from @base-ui/react's releases.
... (truncated)
Changelog
Sourced from @base-ui/react's changelog.
... (truncated)
Commits
b34551d[code-infra] Fix package publishing (#5074)615b0e8[release] v1.6.0 (#5064)8b7ca5d[test] Restore slider listener spies (#5072)2502524[combobox][autocomplete] Documentopenrequirement for theinlineprop (#...4c33d74[slider] Fix touchend listener accumulation leak (#5070)d169cd5[combobox] Fix autofill and selected state edge cases (#4972)2d8b8f6[avatar] Fix image status edge cases (#4835)ee3c13a[select] Skip disabled items in typeahead and fix multiple-mode serialization...b167c85[drawer] Commit swipe on primary-button release (#5057)e972d74[combobox] Avoid re-rendering every item on each keystroke (#4964)Updates
@cloudflare/vitest-pool-workersfrom 0.16.15 to 0.18.8Release notes
Sourced from @cloudflare/vitest-pool-workers's releases.
... (truncated)
Changelog
Sourced from @cloudflare/vitest-pool-workers's changelog.
... (truncated)
Commits
16b3d5aVersion Packages (#14799)7b3fea6fix(vitest-pool-workers): tolerate dispose rejections in pool worker stop() (...88f42e7Version Packages (#14740)0df3d43[wrangler] Extract remote bindings into a package (#14720)538e867[vitest-pool-workers] TreatwebSocket*as optional Durable Object handlers ...de34449[vitest-pool-workers] Fix module fallback failure on non-ASCII workspace path...5eac99e[vitest-pool-workers] Support streaming tails to the main worker (#14739)82918adVersion Packages (#14699)4e62bbafix(vitest-pool-workers): avoid hanging on broken DO logs (#14678)b449bb0Version Packages (#14644)Updates
@floating-ui/reactfrom 0.27.19 to 0.27.20Release notes
Sourced from @floating-ui/react's releases.
Changelog
Sourced from @floating-ui/react's changelog.
Commits
12d9473chore: version packages (#3480)9887c96fix(types): restore bivariant parameters for optional callbacks73c1f76fix(types): supportexactOptionalPropertyTypes(#3456)8999976chore: upgrade vulnerable direct dependencies (#3484)fa63ca6chore: remove unnecessary passive flag from scroll events (#3470)fabb80bbreaking(vue): dropvue-demiand require Vue >=3.3.0 (#3452)Updates
@fontsource-variable/interfrom 5.2.8 to 5.3.0Commits
Updates
@fontsource-variable/jetbrains-monofrom 5.2.8 to 5.3.0Commits
Updates
@iconify-json/simple-iconsfrom 1.2.86 to 1.2.91Commits
Updates
@iconify-json/vscode-iconsfrom 1.2.56 to 1.2.67Commits
Updates
@iconify/utilsfrom 3.1.3 to 3.1.4Commits
Updates
@types/hastfrom 3.0.4 to 3.0.5Commits
Updates
@typescript-eslint/parserfrom 8.61.1 to 8.65.0Release notes
Sourced from @typescript-eslint/parser's releases.
... (truncated)
Changelog
Sourced from @typescript-eslint/parser's changelog.
... (truncated)
Commits
63ba81bchore(release): publish 8.65.0eaf4576feat: add warning when TS 7 is detected (#12529)d8f1044feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...0d06406chore: add attw validation to repo (#12437)c2386e4chore(deps): update dependency prettier to v3.9.5 (#12486)414d9abchore(release): publish 8.64.0290cf6cchore(release): publish 8.63.03ea32f4chore(release): publish 8.62.154e2857chore(release): publish 8.62.081e4c26feat: remove redundant package.json "files" (#12444)Updates
algoliasearchfrom 5.54.1 to 5.56.0Release notes
Sourced from algoliasearch's releases.