Update all non-major dependencies #79
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.14.4->^1.14.7^4.1.17->^4.1.18^24.10.1->^24.10.4^0.556.0->^0.562.016.0.10->16.1.110.24.0->10.26.1^19.2.1->^19.2.3^19.2.1->^19.2.3^4.1.17->^4.1.18^4.53.0->^4.56.0Release Notes
opennextjs/opennextjs-cloudflare (@opennextjs/cloudflare)
v1.14.7Compare Source
Patch Changes
d447125Thanks @vicb! - Support composable cache in Next 16v1.14.6Compare Source
Patch Changes
#1043
c83cb83Thanks @vicb! - fix for CVE-2025-67779See https://nextjs.org/blog/security-update-2025-12-11
v1.14.5Compare Source
Patch Changes
#1042
763c4ecThanks @vicb! - Bump Next, React, and @opennextjs/aws to fix vulnerabilities (CVE-2025-55184 and CVE-2025-55183)See https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components
See https://nextjs.org/blog/security-update-2025-12-11
See https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.5
#1034
721bff0Thanks @james-elicx! - output more wrangler command logs when the command fails#1023
a4a2f02Thanks @dario-piotrowicz! - When runningwrangler deployadd aOPEN_NEXT_DEPLOYenvironment variable to let wrangler know that it is being run by open-nexttailwindlabs/tailwindcss (@tailwindcss/postcss)
v4.1.18Compare Source
Fixed
source(…)happens relative to the file it is in (#19274)!in the value (#19243)@tailwindcss/vite(#18970)--watch(#19373)ringColor.DEFAULT) in JS configs (#19348)contenttheme key from JS configs (#19381)futureandexperimentalconfig keys (#19344)text-*andleading-*classes (#19396)@keyframes(#19419)/dev/stdout(#19421)lucide-icons/lucide (lucide-react)
v0.562.0Compare Source
v0.561.0: Version 0.561.0Compare Source
What's Changed
stoneicon by @Alportan in #3850Full Changelog: lucide-icons/lucide@0.560.0...0.561.0
v0.560.0: Version 0.560.0Compare Source
What's Changed
cannabis-officon by @NickVeles in #3748New Contributors
Full Changelog: lucide-icons/lucide@0.559.0...0.560.0
v0.559.0: Version 0.559.0Compare Source
What's Changed
fishing-hookicon by @7ender in #3837New Contributors
Full Changelog: lucide-icons/lucide@0.558.0...0.559.0
v0.558.0: Version 0.558.0Compare Source
What's Changed
hdicon by @jamiemlaw in #2958Full Changelog: lucide-icons/lucide@0.557.0...0.558.0
v0.557.0: Version 0.557.0Compare Source
What's Changed
memory-stickicon by @karsa-mistmere in #3017microchipicon by @karsa-mistmere in #3018paint-bucketicon by @jguddas in #3865brush-cleaningicon by @jguddas in #3863thumbs-upthumbs-downpaths to fix fill issue by @theianjones in #3873ticketsicon by @karsa-mistmere in #3859layers-plusicon by @juanisidoro in #3367search-erroricon by @Veatec22 in #3292cloud-syncandcloud-backupby @ericfennis in #3466circle-pileicon by @nathan-de-pachtere in #3681balloonicon by @peteruithoven in #2519New Contributors
Full Changelog: lucide-icons/lucide@0.556.0...0.557.0
vercel/next.js (next)
v16.1.1Compare Source
v16.1.0Compare Source
pnpm/pnpm (pnpm)
v10.26.1Compare Source
v10.26.0Compare Source
v10.25.0Compare Source
facebook/react (react)
v19.2.3: 19.2.3 (December 11th, 2025)Compare Source
React Server Components
v19.2.2: 19.2.2 (December 11th, 2025)Compare Source
React Server Components
react-server-dom-webpack/*.unbundledto privatereact-server-dom-unbundled(@eps1lon #35290)cloudflare/workers-sdk (wrangler)
v4.56.0Compare Source
Minor Changes
#11196
171cfd9Thanks @emily-shen! - For containers being created in a FedRAMP high environment, registry credentials are encrypted by the container platform.Update wrangler to correctly send a request to configure a registry for FedRAMP containers.
#11646
472cf72Thanks @vovacf201! - feat: add R2 Data Catalog snapshot expiration commandsAdds new commands to manage automatic snapshot expiration for R2 Data Catalog tables:
wrangler r2 bucket catalog snapshot-expiration enable- Enable automatic snapshot expirationwrangler r2 bucket catalog snapshot-expiration disable- Disable automatic snapshot expirationSnapshot expiration helps manage storage costs by automatically removing old table snapshots while keeping a minimum number of recent snapshots for recovery purposes.
Example usage:
Patch Changes
#11649
428ae9eThanks @ascorbic! - fix: respect TypeScript path aliases when resolving non-JS modules with module rulesWhen importing non-JavaScript files (like
.graphql,.txt, etc.) using TypeScript path aliases defined intsconfig.json, Wrangler's module-collection plugin now correctly resolves these imports. Previously, path aliases were only respected for JavaScript/TypeScript files, causing imports likeimport schema from '~lib/schema.graphql'to fail when using module rules.#11647
c0e249eThanks @dario-piotrowicz! - The auto-configuration logic present inwrangler setupandwrangler deploy --x-autoconfigcannot reliably handle Hono projects, so in these cases make sure to properly error saying that automatically configuring such projects is not supported.#11694
3853200Thanks @dario-piotrowicz! - fix: improve the open-next detection thatwrangler deployperforms to eliminate false positives for non open-next projectsUpdated dependencies [
ae1ad22,737c0f4]:v4.55.0Compare Source
Minor Changes
#11301
6c590a0Thanks @dario-piotrowicz! - Makewrangler deployrunopennextjs-cloudflare deploywhen executed in an open-next project#11045
12a63efThanks @edmundhung! - Add an internalunstable_printBindingsAPI for vite plugin integration#11590
7d8d4a6Thanks @pombosilva! - Add Workflows send-event to wrangler commands.#11301
6c590a0Thanks @dario-piotrowicz! - Support Next.js (via OpenNext) projects in autoconfigPatch Changes
#11615
ed42010Thanks @elithrar! - Add helpful warning when SSL certificate errors occur due to corporate proxies or VPNs intercepting HTTPS traffic. When errors like "self-signed certificate in certificate chain" are detected, wrangler now displays guidance about installing missing system roots from your corporate proxy vendor.#11641
6b28de1Thanks @petebacondarwin! - update command status text and formatting#11578
4201472Thanks @gpanders! - Fixup UX papercuts in containers SSH#11550
95d81e1Thanks @hiendv! - Fix "TypeError: Body is unusable: Body has already been read" when failing to exchange oauth code because of doubleresponse.text().Updated dependencies [
5d085fb,b75b710,1e9be12]:v4.54.0Compare Source
Minor Changes
#11512
c15e99eThanks @emily-shen! - Enable usingctx.exportswith containersYou can now use containers with Durable Objects that are accessed via
ctx.exports.Now your config file can look something like this:
Note that when using
ctx.exports, where you previously accessed a Durable Object via something likeenv.DO, you should now access withctx.exports.MyDOClassname.Refer to the docs for more information on using
ctx.exports.#11508
b17797cThanks @dario-piotrowicz! - Wrangler will no longer try to add additional configuration to projects using@cloudflare/vite-pluginwhen deploying or runningwrangler setup#11508
b17797cThanks @dario-piotrowicz! - When a Vite project is detected, install@cloudflare/vite-plugin#11576
bb47e20Thanks @dario-piotrowicz! - Support Analog projects in autoconfig#10582
991760dThanks @flakey5! - Addcontainers sshcommandPatch Changes
#11467
235d325Thanks @edmundhung! - fix: prevent reporting SQLite error fromwrangler d1 executeto Sentry#11414
41103f5Thanks @petebacondarwin! - add extra logging to user log-in flow for diagnosing failed login requests#11559
ea6fbecThanks @nikitassharma! - Remove image validation for containers on wrangler deploy.Internal customers are able to use additional image registries and will run into failures with this validation. Image registry validation will now be handled by the API.
Updated dependencies [
31c162a,bd5f087,c6dd86f]:Configuration
📅 Schedule: Branch creation - Only on Monday ( * * * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.