Skip to content

Bump the workerd-and-workers-types group with 2 updates - #16307

Merged
edmundhung merged 4 commits into
mainfrom
dependabot/npm_and_yarn/workerd-and-workers-types-b028ffc03c
Oct 16, 2026
Merged

edmundhung merged 4 commits into
mainfrom
dependabot/npm_and_yarn/workerd-and-workers-types-b028ffc03c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Update workerd from 1.20261012.1 to 1.20261016.1, Workers types from 5.20261006.1 to 5.20261016.1, and the default compatibility date to 2026-10-16.

CI compatibility fixes

  • Windows assets: normalize filesystem paths to URL slashes before encoding. The Rust-server migration (workerd#7639) validates each decoded disk-path segment, rejecting the previous about%5Cindex.html URLs.
  • Certificate fixture: use a CA-signed server certificate explicitly naming localhost; the same migration switches to rustls, which rejects the old Common-Name-only fixture. Certificate verification remains enabled.
  • Types: remove obsolete @ts-expect-error directives. workerd#7149 intentionally declares Node globals with var, making the existing globalThis.process assignments valid.
  • Browser tests: acknowledge sockets already closing instead of waiting for a close event that has already happened. The new test forces this previously untested ordering: it fails with the old helper on both runtime versions and passes with the fix. This is an existing test race, not a new runtime requirement; what changed CI timing remains unproven.

Validation

Local: 1,557 Miniflare tests, all 22 browser tests, 16 Vite asset tests, targeted asset fixtures and Wrangler asset-watch E2E, type checks, lint, and formatting pass. All cross-platform CI checks pass on 9df0e327a.


  • Tests
    • Tests included/updated
    • Automated tests not possible - manual testing has been completed as follows:
    • Additional testing not necessary because:
  • Public documentation
    • Cloudflare docs PR(s):
    • Documentation not necessary because: runtime/dependency compatibility fixes and test-fixture corrections do not introduce a new API.

Bumps the workerd-and-workers-types group with 2 updates: [@cloudflare/workers-types](https://github.com/cloudflare/workerd) and [workerd](https://github.com/cloudflare/workerd).


Updates `@cloudflare/workers-types` from 5.20261006.1 to 5.20261016.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `workerd` from 1.20261012.1 to 1.20261016.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](cloudflare/workerd@v1.20261012.1...v1.20261016.1)

---
updated-dependencies:
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20261016.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workerd-and-workers-types
- dependency-name: workerd
  dependency-version: 1.20261016.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workerd-and-workers-types
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from workers-devprod as a code owner October 16, 2026 10:19
@dependabot dependabot Bot added ci:skip-pr-description-validation Skip validation of the required PR description format dependencies Used by dependabot to mark PRs as updates to dependencies. package:miniflare Relating to Miniflare labels Oct 16, 2026
@changeset-bot

changeset-bot Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 9df0e32

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 8 packages
Name Type
miniflare Patch
wrangler Patch
@cloudflare/deploy-helpers Patch
@cloudflare/pages-shared Patch
@cloudflare/remote-bindings Patch
@cloudflare/runtime-types Patch
@cloudflare/vite-plugin Patch
@cloudflare/vitest-plugin Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-project-automation github-project-automation Bot moved this to Untriaged in workers-sdk Oct 16, 2026
@workers-devprod
workers-devprod requested review from a team and petebacondarwin and removed request for a team October 16, 2026 10:20
@workers-devprod

workers-devprod commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Codeowners approval required for this PR:

  • ✅ @cloudflare/wrangler
Show detailed file reviewers

@devin-ai-integration devin-ai-integration Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Devin Review

@pkg-pr-new

pkg-pr-new Bot commented Oct 16, 2026 •

Copy link
Copy Markdown
@cloudflare/autoconfig

npm i https://pkg.pr.new/@cloudflare/autoconfig@16307

@cloudflare/build-output-utils

npm i https://pkg.pr.new/@cloudflare/build-output-utils@16307

@cloudflare/codemods

npm i https://pkg.pr.new/@cloudflare/codemods@16307

@cloudflare/config

npm i https://pkg.pr.new/@cloudflare/config@16307

@cloudflare/containers-shared

npm i https://pkg.pr.new/@cloudflare/containers-shared@16307

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@16307

@cloudflare/deploy-helpers

npm i https://pkg.pr.new/@cloudflare/deploy-helpers@16307

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@16307

miniflare

npm i https://pkg.pr.new/miniflare@16307

@cloudflare/pages-functions

npm i https://pkg.pr.new/@cloudflare/pages-functions@16307

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@16307

@cloudflare/runtime-types

npm i https://pkg.pr.new/@cloudflare/runtime-types@16307

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@16307

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@16307

@cloudflare/vitest-plugin

npm i https://pkg.pr.new/@cloudflare/vitest-plugin@16307

@cloudflare/workers-auth

npm i https://pkg.pr.new/@cloudflare/workers-auth@16307

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@16307

@cloudflare/workers-utils

npm i https://pkg.pr.new/@cloudflare/workers-utils@16307

wrangler

npm i https://pkg.pr.new/wrangler@16307

commit: 9df0e32

The following dependency versions have been updated:

| Dependency                | From          | To            |
| ------------------------- | ------------- | ------------- |
| @cloudflare/workers-types | ^5.20261006.1 | ^5.20261016.1 |
| workerd                   | 1.20261012.1  | 1.20261016.1  |
devin-ai-integration[bot]

This comment was marked as resolved.

The Rust disk service rejects encoded Windows path separators, so normalize
asset paths before constructing URLs. Update the certificate fixture and
Node-global typing expectations for the upstream changes.

The browser close helper could miss an event delivered before it started
waiting. A forced early-close reproduction fails on both runtime versions;
acknowledge already-closing sockets without changing runtime behavior.

Include the default compatibility date's Vite and Create Cloudflare
consumers in the release notes.
Keep the generated dependency entry unchanged and explain the compatibility fixes in the pull request description instead.

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

Devin Review

Comment thread .changeset/dependabot-update-16307.md

@workers-devprod workers-devprod left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Codeowners reviews satisfied

@github-project-automation github-project-automation Bot moved this from Untriaged to Approved in workers-sdk Oct 16, 2026
@edmundhung
edmundhung merged commit 37ab91c into main Oct 16, 2026
109 of 112 checks passed
@edmundhung
edmundhung deleted the dependabot/npm_and_yarn/workerd-and-workers-types-b028ffc03c branch October 16, 2026 13:39
@github-project-automation github-project-automation Bot moved this from Approved to Done in workers-sdk Oct 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:skip-pr-description-validation Skip validation of the required PR description format dependencies Used by dependabot to mark PRs as updates to dependencies. package:miniflare Relating to Miniflare

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants