Skip to content

chore(deps-dev): bump the cloudflare-vite-stack group across 1 directory with 5 updates - #74

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sites/cloudflare-vite-stack-560ebaf2f8
Open

chore(deps-dev): bump the cloudflare-vite-stack group across 1 directory with 5 updates#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sites/cloudflare-vite-stack-560ebaf2f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the cloudflare-vite-stack group with 5 updates in the /sites directory:

Package From To
@cloudflare/vite-plugin 1.47.0 1.51.0
@vitejs/plugin-react 6.0.4 6.0.5
@vitejs/plugin-rsc 0.5.30 0.5.33
vite 8.1.5 8.2.1
wrangler 4.114.0 4.119.0

Updates @cloudflare/vite-plugin from 1.47.0 to 1.51.0

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.51.0

Minor Changes

  • #14941 266172b Thanks @​nickpatt! - Improve the Local Explorer's Observability views

    console.log messages now render the way the console would (JSON-encoded strings are unwrapped and multi-argument logs are joined), traces and events can be looked up by trace or span id from the search bar, and an event's "View trace" button jumps to the exact invocation that emitted it — even when a trace_id spans several invocations (e.g. a subrequest or self fetch).

  • #14996 ebd1dfd Thanks @​nickpatt! - Surface Local Explorer API to headless agents

    When a Vite dev or preview server with the Cloudflare plugin is started in a headless AI agent environment, the plugin now prints the Local Explorer API URL and useful resource routes to stdout so agents can discover and call them programmatically.

Patch Changes

@​cloudflare/vite-plugin@​1.50.0

Minor Changes

  • #14944 a249591 Thanks @​nickpatt! - Enable local observability capture by default in dev

    wrangler dev and the Vite plugin now capture request traces and console logs into the Local Explorer's Observability tab out of the box — previously this was opt-in behind X_LOCAL_OBSERVABILITY=true. Set X_LOCAL_OBSERVABILITY=false to opt out (for example if the extra per-worker collector/streaming-tail services cause trouble in a multi-process dev-registry setup).

Patch Changes

@​cloudflare/vite-plugin@​1.49.1

Patch Changes

  • #14586 5a56dda Thanks @​emily-shen! - Rewrite local testing paths (/cdn-cgi/*)

    Miniflare v5 moved its internal local testing endpoints to /cdn-cgi/local/* (and /__cf_local/* for endpoints that must remain reachable over tunnels) to prevent any potential collision with production routes. wrangler dev and the Vite plugin now transparently rewrite the old paths to the new ones, meaning you can continue to use the old paths without issue.

    These are the new paths:

    • /cdn-cgi/handler/scheduled → /cdn-cgi/local/scheduled
    • /cdn-cgi/handler/email → /cdn-cgi/local/email
    • /cdn-cgi/explorer/* → /cdn-cgi/local/explorer/*
    • /cdn-cgi/mf/scheduled → /cdn-cgi/local/scheduled (Note /cdn-cgi/mf/scheduled is already deprecated)
    • /cdn-cgi/mf/stream/* → /__cf_local/stream/*
    • /cdn-cgi/mf/imagedelivery/* → /__cf_local/imagedelivery/*

  • Updated dependencies [5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda]:

@​cloudflare/vite-plugin@​1.49.0

... (truncated)

Changelog

Sourced from @​cloudflare/vite-plugin's changelog.

1.51.0

Minor Changes

  • #14941 266172b Thanks @​nickpatt! - Improve the Local Explorer's Observability views

    console.log messages now render the way the console would (JSON-encoded strings are unwrapped and multi-argument logs are joined), traces and events can be looked up by trace or span id from the search bar, and an event's "View trace" button jumps to the exact invocation that emitted it — even when a trace_id spans several invocations (e.g. a subrequest or self fetch).

  • #14996 ebd1dfd Thanks @​nickpatt! - Surface Local Explorer API to headless agents

    When a Vite dev or preview server with the Cloudflare plugin is started in a headless AI agent environment, the plugin now prints the Local Explorer API URL and useful resource routes to stdout so agents can discover and call them programmatically.

Patch Changes

1.50.0

Minor Changes

  • #14944 a249591 Thanks @​nickpatt! - Enable local observability capture by default in dev

    wrangler dev and the Vite plugin now capture request traces and console logs into the Local Explorer's Observability tab out of the box — previously this was opt-in behind X_LOCAL_OBSERVABILITY=true. Set X_LOCAL_OBSERVABILITY=false to opt out (for example if the extra per-worker collector/streaming-tail services cause trouble in a multi-process dev-registry setup).

Patch Changes

1.49.1

Patch Changes

  • #14586 5a56dda Thanks @​emily-shen! - Rewrite local testing paths (/cdn-cgi/*)

    Miniflare v5 moved its internal local testing endpoints to /cdn-cgi/local/* (and /__cf_local/* for endpoints that must remain reachable over tunnels) to prevent any potential collision with production routes. wrangler dev and the Vite plugin now transparently rewrite the old paths to the new ones, meaning you can continue to use the old paths without issue.

    These are the new paths:

    • /cdn-cgi/handler/scheduled → /cdn-cgi/local/scheduled
    • /cdn-cgi/handler/email → /cdn-cgi/local/email
    • /cdn-cgi/explorer/* → /cdn-cgi/local/explorer/*
    • /cdn-cgi/mf/scheduled → /cdn-cgi/local/scheduled (Note /cdn-cgi/mf/scheduled is already deprecated)
    • /cdn-cgi/mf/stream/* → /__cf_local/stream/*
    • /cdn-cgi/mf/imagedelivery/* → /__cf_local/imagedelivery/*

  • Updated dependencies [5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda, 5a56dda]:

... (truncated)

Commits

Updates @vitejs/plugin-react from 6.0.4 to 6.0.5

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

Commits

Updates @vitejs/plugin-rsc from 0.5.30 to 0.5.33

Release notes

Sourced from @​vitejs/plugin-rsc's releases.

plugin-rsc@0.5.33

Features

  • rsc: add ability to access client entry URL from ssr environment and deprecate loadBootstrapScriptContent (#1360) (c2e0273)
  • rsc: allow transformWrapExport filter by node ast (#1385) (64ae63c)
  • rsc: allow proxy export filter by node ast (#1397) (2fee299)
  • rsc: provide ast node value metadata in transformHoistInlineDirective + update example to exclude undeclared caller arguments for use cache cache keys (inline directive) (#1404) (cd829da)
  • rsc: support hoisting with runtime wrapper in transformHoistInlineDirective + add callable use cache example (#1330) (0f45d15)

Bug Fixes

  • rsc: align transform API types with Vite AST (#1351) (2906fbf)
  • rsc: avoid rewriting filtered exports in transformWrapExport (#1387) (fba021f)
  • rsc: reject static non-function exports for use server file (#1383) (c046a90)
  • rsc: reject uninitialized export in use server file (#1384) (96f3cdd)
  • rsc: treat strings as directives only at the top (#1396) (fcb0ca5)
  • rsc: use module export effect transform for use server file directive (#1355) (640d7d7)

Documentation

  • rsc: prefer /rsc/server and /rsc/client entry points over /rsc (#1345) (8d4b7f2)

Miscellaneous Chores

  • deps: update react-related dependencies (#1374) (ad9d77c)
  • rsc: add use cache example with closure encryption (#1398) (f97d959)
  • rsc: add action request routing example with cross-environment server reference module reachability (#1341) (b8c9264)
  • rsc: align example framework baseline (#1344) (317f769)
  • rsc: remove stale source map todo in transformServerActionServer (#1354) (88f7f0c)
  • rsc: update action reachability example to validate progressive form action (#1364) (793a994)
  • rsc: update example to exclude undeclared caller arguments for use cache cache keys (file directive only) (#1401) (b0521cc)

Code Refactoring

Tests

  • rsc: add e2e for react source map features (#1358) (9db4976)
  • rsc: add readable source map snapshots (#1368) (c185eaa)
  • rsc: add test case for use cache form action cache hits after hydrated reload (#1402) (d10e2ae)
  • rsc: add transform source map fixtures (#1365) (7f0d3c3)
  • rsc: decrypt cache captures once in use cache example (#1403) (42ce5d4)
  • rsc: fail fast when fixture server exits (#1367) (9cb1fda)
  • rsc: invoke re-exported server reference (#1376) (001fe79)
  • rsc: migrate hoist output fixtures (#1406) (c5683a6)
  • rsc: migrate transform output fixtures (#1399) (e208d99)

... (truncated)

Changelog

Sourced from @​vitejs/plugin-rsc's changelog.

0.5.33 (2026-08-06)

Features

  • rsc: add ability to access client entry URL from ssr environment and deprecate loadBootstrapScriptContent (#1360) (c2e0273)
  • rsc: allow transformWrapExport filter by node ast (#1385) (64ae63c)
  • rsc: allow proxy export filter by node ast (#1397) (2fee299)
  • rsc: provide ast node value metadata in transformHoistInlineDirective + update example to exclude undeclared caller arguments for use cache cache keys (inline directive) (#1404) (cd829da)
  • rsc: support hoisting with runtime wrapper in transformHoistInlineDirective + add callable use cache example (#1330) (0f45d15)

Bug Fixes

  • rsc: align transform API types with Vite AST (#1351) (2906fbf)
  • rsc: avoid rewriting filtered exports in transformWrapExport (#1387) (fba021f)
  • rsc: reject static non-function exports for use server file (#1383) (c046a90)
  • rsc: reject uninitialized export in use server file (#1384) (96f3cdd)
  • rsc: treat strings as directives only at the top (#1396) (fcb0ca5)
  • rsc: use module export effect transform for use server file directive (#1355) (640d7d7)

Documentation

  • rsc: prefer /rsc/server and /rsc/client entry points over /rsc (#1345) (8d4b7f2)

Miscellaneous Chores

  • deps: update react-related dependencies (#1374) (ad9d77c)
  • rsc: add use cache example with closure encryption (#1398) (f97d959)
  • rsc: add action request routing example with cross-environment server reference module reachability (#1341) (b8c9264)
  • rsc: align example framework baseline (#1344) (317f769)
  • rsc: remove stale source map todo in transformServerActionServer (#1354) (88f7f0c)
  • rsc: update action reachability example to validate progressive form action (#1364) (793a994)
  • rsc: update example to exclude undeclared caller arguments for use cache cache keys (file directive only) (#1401) (b0521cc)

Code Refactoring

Tests

  • rsc: add e2e for react source map features (#1358) (9db4976)
  • rsc: add readable source map snapshots (#1368) (c185eaa)
  • rsc: add test case for use cache form action cache hits after hydrated reload (#1402) (d10e2ae)
  • rsc: add transform source map fixtures (#1365) (7f0d3c3)
  • rsc: decrypt cache captures once in use cache example (#1403) (42ce5d4)
  • rsc: fail fast when fixture server exits (#1367) (9cb1fda)
  • rsc: invoke re-exported server reference (#1376) (001fe79)
  • rsc: migrate hoist output fixtures (#1406) (c5683a6)
  • rsc: migrate transform output fixtures (#1399) (e208d99)

... (truncated)

Commits
  • 11ad0af release: plugin-rsc@0.5.33 (#1408)
  • 42ce5d4 test(rsc): decrypt cache captures once in use cache example (#1403)
  • cd829da feat(rsc): provide ast node value metadata in transformHoistInlineDirective...
  • c5683a6 test(rsc): migrate hoist output fixtures (#1406)
  • d0bf90c refactor(rsc): name transform option and result types (#1405)
  • f97d959 chore(rsc): add use cache example with closure encryption (#1398)
  • d10e2ae test(rsc): add test case for use cache form action cache hits after hydrate...
  • b0521cc chore(rsc): update example to exclude undeclared caller arguments for `use ca...
  • 8629f28 test(rsc): verify server action closure encryption (#1400)
  • 2fee299 feat(rsc): allow proxy export filter by node ast (#1397)
  • Additional commits viewable in compare view

Updates vite from 8.1.5 to 8.2.1

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.1

Please refer to CHANGELOG.md for details.

v8.2.1

Please refer to CHANGELOG.md for details.

create-vite@8.2.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0

Please refer to CHANGELOG.md for details.

v8.2.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.1 (2026-08-06)

Bug Fixes

  • build: make client chunkImportMap work with sharedPlugins: true (#23184) (15f0307)
  • bundled-dev: inject client script tag before chunk scripts (#23161) (eac0cc8)
  • css: don't re-run lightningcss visitor during minify (fix #23146) (#23147) (de041a7)
  • deps: update all non-major dependencies (#23136) (14454fd)
  • deps: update rolldown-related dependencies (#23070) (7ac6f7f)
  • don't mutate the user config when resolving the lib entry from the top-level input (#23135) (b4bf596)
  • handle shebang ending with uncommon line terminators (#23038) (17f7b2f)
  • server: use a random port when port is 0 (#23158) (fddf4ea)

Performance Improvements

Documentation

  • build: fix incomplete @default for build.minify (#23177) (ef02435)

Miscellaneous Chores

  • deps: update dependency rolldown-plugin-dts to ^0.28.0 (#23137) (4adc1e7)
  • deps: update dependency strip-literal to v4 (#23140) (9db65ce)

Code Refactoring

  • bundled-dev: avoid injecting server values in the bundle (#22967) (23b8a08)
  • bundled-dev: remove rolldown lazy stub module workaround (#23129) (e72036e)

Tests

8.2.0 (2026-07-30)

Features

  • add input to server.fs.allow (#23035) (95a3cda)
  • bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
  • bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
  • config: include column in config incompatibility location (#23064) (8a24572)
  • dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

  • bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
  • deps: update all non-major dependencies (#23069) (4c07b74)
  • hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
  • importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)

... (truncated)

Commits
  • 4216158 release: v8.2.1
  • fddf4ea fix(server): use a random port when port is 0 (#23158)
  • de041a7 fix(css): don't re-run lightningcss visitor during minify (fix #23146) (#23147)
  • 15f0307 fix(build): make client chunkImportMap work with sharedPlugins: true (#23184)
  • c2155fe test(bundled-dev): enable sourcemap playgrounds (#23080)
  • ef02435 docs(build): fix incomplete @default for build.minify (#23177)
  • eac0cc8 fix(bundled-dev): inject client script tag before chunk scripts (#23161)
  • 23b8a08 refactor(bundled-dev): avoid injecting server values in the bundle (#22967)
  • e72036e refactor(bundled-dev): remove rolldown lazy stub module workaround (#23129)
  • 14454fd fix(deps): update all non-major dependencies (#23136)
  • Additional commits viewable in compare view

Updates wrangler from 4.114.0 to 4.119.0

Release notes

Sourced from wrangler's releases.

wrangler@4.119.0

Minor Changes

  • #14952 20470fa Thanks @​nelsonjsduarte! - Add --parse-type flag to wrangler ai-search create

    wrangler ai-search create now accepts --parse-type to control how a website data source discovers URLs. sitemap (the default) reads XML sitemaps; discover follows links recursively.

    Previously the parse type could only be chosen through the interactive wizard, which was skipped whenever --source was supplied — so it was impossible to create a discover instance from a script.

    wrangler ai-search create my-instance \
  --type web-crawler \
  --source https://example.com \
  --parse-type discover

    The interactive wizard now offers Discover alongside Sitemap. --parse-type is only valid with --type web-crawler; passing it with --type builtin or --type r2 is rejected, since the API stores the value for those source types but never reads it. When the flag is omitted in non-interactive mode the field is left unset and the API default (sitemap) applies.

  • #14941 266172b Thanks @​nickpatt! - Improve the Local Explorer's Observability views

    console.log messages now render the way the console would (JSON-encoded strings are unwrapped and multi-argument logs are joined), traces and events can be looked up by trace or span id from the search bar, and an event's "View trace" button jumps to the exact invocation that emitted it — even when a trace_id spans several invocations (e.g. a subrequest or self fetch).

  • #14064 a9e5abb Thanks @​petebacondarwin! - Add support for OAuth 2.0 Device Authorization Grant to wrangler login

    Run wrangler login --device to authenticate without a local callback server. Useful in containers, remote SSH sessions, Codespaces, and any other environment where localhost:8976 is unreachable from your browser.

    The new flow:

    • prints the verification URL and user code to the terminal,
    • attempts to open the verification URL in your default browser automatically (suppressed via --browser=false),
    • and polls the token endpoint until you approve the request (with a 5-minute hard cap).

    The verification URL is supplied by the authorization server, so it is rejected unless it is an https URL on the same auth domain the device code was requested from — it is never printed or opened otherwise.

    --callback-host and --callback-port cannot be combined with --device, since this flow does not start a local callback server.

Patch Changes

  • #14984 9c74538 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20260730.1 ^5.20260731.1
    workerd 1.20260730.1 1.20260731.1

  • #15012 0d33cb8 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@dependabot dependabot Bot changed the title chore(deps-dev): bump the cloudflare-vite-stack group in /sites with 5 updates chore(deps-dev): bump the cloudflare-vite-stack group across 1 directory with 5 updates Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sites/cloudflare-vite-stack-560ebaf2f8 branch 4 times, most recently from b6a282e to c0e66e3 Compare August 8, 2026 02:28
@dependabot
chore(deps-dev): bump the cloudflare-vite-stack group across 1 direct…
bc3873c 
…ory with 5 updates

Bumps the cloudflare-vite-stack group with 5 updates in the /sites directory:

| Package | From | To |
| --- | --- | --- |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.47.0` | `1.51.0` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.4` | `6.0.5` |
| [@vitejs/plugin-rsc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-rsc) | `0.5.30` | `0.5.33` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.5` | `8.2.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.114.0` | `4.119.0` |



Updates `@cloudflare/vite-plugin` from 1.47.0 to 1.51.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.51.0/packages/vite-plugin-cloudflare)

Updates `@vitejs/plugin-react` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react)

Updates `@vitejs/plugin-rsc` from 0.5.30 to 0.5.33
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-rsc/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-rsc@0.5.33/packages/plugin-rsc)

Updates `vite` from 8.1.5 to 8.2.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.1/packages/vite)

Updates `wrangler` from 4.114.0 to 4.119.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.119.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.49.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-vite-stack
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cloudflare-vite-stack
- dependency-name: "@vitejs/plugin-rsc"
  dependency-version: 0.5.32
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: cloudflare-vite-stack
- dependency-name: vite
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-vite-stack
- dependency-name: wrangler
  dependency-version: 4.116.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cloudflare-vite-stack
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/sites/cloudflare-vite-stack-560ebaf2f8 branch from c0e66e3 to bc3873c Compare August 10, 2026 01:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants