Update dependency @cloudflare/vitest-plugin to v1.6.0 #8
Loading…
Reference in a new issue
No description provided.
Delete branch "renovate/cloudflare-vitest-plugin-1.x-lockfile"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
1.4.12→1.6.0Release Notes
cloudflare/workers-sdk (@cloudflare/vitest-plugin)
v1.6.0Compare Source
Minor Changes
#16186
f1d81a2Thanks @leostera! - Support local Artifacts across Wrangler, Vite, and Workers VitestSet
remote: falseon an Artifacts binding to opt into the Miniflare simulator and persistent local repositories during development. Omittedremotecontinues to use the deployed resource, with a warning that changes affect real repositories;remote: trueexplicitly selects it. When remote bindings are disabled (wrangler dev --local, or Vite'sremoteBindings: false), Artifacts bindings use the local simulator. Workers Vitest uses the local simulator whenremoteis omitted, so tests do not change real repositories by accident; setremote: trueto test against the deployed resource. Local development does not require Cloudflare credentials, but does require Git 2.32 or newer on the host.In Miniflare's own options, Artifacts bindings route like every other binding: only
dev.remote: truewith a remote proxy connection uses the deployed resource. Wrangler and Vite resolve the deployed-by-default rule, and Workers Vitest its local default, before passing options to Miniflare.Patch Changes
#16700
dc35efbThanks @cjol! - Bump bundledbrace-expansionto pick up security fixesThese packages bundle
brace-expansion(a dependency ofminimatch), and the bundled versions were affected by published advisories. The bundles now includebrace-expansion2.1.7 (from 2.0.1) and 5.0.12 (from 5.0.5). Normal glob patterns expand as before; only the pathological patterns targeted by the advisories are handled differently.#16700
dc35efbThanks @cjol! - Bump bundleddevaluefrom 5.6.3 to 5.9.3 to pick up security fixesdevalueis bundled into these packages, which use it to serialise values between Node.js and workerd. Version 5.6.3 is affected by several published advisories, and 5.9.3 includes their fixes. Serialisation behaviour does not change.#16700
dc35efbThanks @cjol! - Bump bundledminimatchfrom 5.1.6 to 5.1.9 to pick up security fixesThese packages bundle
minimatch, and 5.1.6 is affected by published ReDoS advisories. Version 5.1.9 includes the fixes. 5.1.8 is skipped because it broke recursive**matching, which D1'smigrations_patternrelies on.#16695
b2061f4Thanks @dependabot! - UpdateDEFAULT_COMPAT_DATEto 2026-11-04Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.
Updated dependencies [
dc35efb,dc35efb,dc35efb,dc35efb,dc35efb,dc35efb,dc35efb,b8387a5,fa3edb3,4cde694,b2061f4,b2061f4,f1d81a2,4bb491b,36e64f2,92c4b97]:v1.5.1Compare Source
Patch Changes
#16670
b14b9dcThanks @dependabot! - UpdateDEFAULT_COMPAT_DATEto 2026-11-03Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.
#16609
da26b7fThanks @gpanders! - Fix tests failing to start withresolve.preserveSymlinksin isolatednode_moduleslayoutsWith
resolve.preserveSymlinks: truein a pnpm project, tests failed to start withNo such module ".../node_modules/vitest/dist/chai", because a package's own dependencies are linked only next to its real path. Packages linked from a store insidenode_modulesnow load from their real paths, and other files keep their symlinked paths.Updated dependencies [
b14b9dc,44d1ee4,b14b9dc,d2eda1c,2750917,34f34b3]:v1.5.0Compare Source
Minor Changes
#16424
1598fd3Thanks @edmundhung! - Promoteexperimental.newConfigto a stableconfigoptionThe experimental
experimental.newConfigoption is now the stableconfigoption. Passconfig: truetocloudflareTest()to load your Worker's bindings, entrypoint and compatibility settings fromcloudflare.config.tsin the project root, or pass the path of acloudflare.config.tselsewhere:configcan't be combined withwrangler.miniflareoptions are merged over the Worker fromcloudflare.config.ts, withminiflarevalues taking precedence. Config functions receive Vitest's mode asctx.mode, which defaults totestand can be changed with--mode.If you're moving from
experimental.newConfig, secrets are now read from Vite'senvDirinstead of the directory containingcloudflare.config.ts, and remote bindings authenticate withcfinstead of Wrangler.Patch Changes
#16642
d38cb02Thanks @dependabot! - UpdateDEFAULT_COMPAT_DATEto 2026-11-02Use the bundled workerd release's compatibility date by default when scaffolding new projects or when no compatibility date is configured.
#16623
51bbf8bThanks @petebacondarwin! - Deprecate shared tooling helper exports from MiniflareMiniflare continues to export
getNodeCompat,NodeJSCompatMode, andgetFreshSourceMapSupportfor compatibility. These exports are deprecated and now use the implementations in@cloudflare/workers-utils. Add a dependency on that package and replace the Miniflare imports with:Wrangler and the Cloudflare Vite and Vitest plugins now use the shared helpers directly. The helpers retain their behavior and can be imported without loading the Workers runtime.
The deprecated Miniflare exports will be removed in a later release, allowing downstream tools such as cf to migrate and release independently first.
Updated dependencies [
d38cb02,d38cb02,51bbf8b,e5b1798]:Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
da832dedef51f1954c5aUpdate dependency @cloudflare/vitest-plugin to v1.5.1to Update dependency @cloudflare/vitest-plugin to v1.6.0d77afca103Pull request closed