Skip to content

Bump undici and @cloudflare/vitest-pool-workers in /app#7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/multi-4aaeaa4187
Closed

Bump undici and @cloudflare/vitest-pool-workers in /app#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app/multi-4aaeaa4187

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 9, 2026

Copy link
Copy Markdown

Bumps undici to 7.24.8 and updates ancestor dependency @cloudflare/vitest-pool-workers. These dependencies need to be updated together.

Updates undici from 7.18.2 to 7.24.8

Release notes

Sourced from undici's releases.

v7.24.8

What's Changed

Full Changelog: nodejs/undici@v7.24.7...v7.24.8

v7.24.7

What's Changed

New Contributors

Full Changelog: nodejs/undici@v7.24.6...v7.24.7

v7.24.6

What's Changed

New Contributors

Full Changelog: nodejs/undici@v7.24.5...v7.24.6

v7.24.5

What's Changed

... (truncated)

Commits
  • 7a6f7fe Bumped v7.24.8 (#5020)
  • 1f85ae4 fix: avoid 401 failures for stream-backed request bodies (#4941) (#5006)
  • c661067 chore: update v7.x maintenance release flow
  • 84f23e2 Bumped v7.24.7 (#4947)
  • a770b10 ignore AGENTS.md (#4942)
  • 6acd19b fix: correctly handle multi-value rawHeaders in fetch (#4938)
  • 1da1c74 test: skip IPv6 tests when IPv6 is not available (#4939)
  • 04cb773 fix(types): Fix clone method type declaration to be an instance method rather...
  • 5145a7c fix(types): align Response with DOM fetch types (#4867)
  • ec23620 test: skip flaky macOS Node 20 cookie fetch cases
  • Additional commits viewable in compare view

Updates @cloudflare/vitest-pool-workers from 0.12.21 to 0.16.3

Release notes

Sourced from @​cloudflare/vitest-pool-workers's releases.

@​cloudflare/vitest-pool-workers@​0.16.3

Patch Changes

@​cloudflare/vitest-pool-workers@​0.16.2

Patch Changes

@​cloudflare/vitest-pool-workers@​0.16.1

Patch Changes

@​cloudflare/vitest-pool-workers@​0.16.0

Minor Changes

  • #13810 2b8c0cc Thanks @​jamesopstad! - Stabilize the secrets configuration property

    The secrets property in the Wrangler config file is no longer experimental and will no longer emit an experimental warning when used. Required secrets are validated during local development and deploy, and used as the source of truth for type generation.

    {
  "secrets": {
    "required": ["API_KEY", "DB_PASSWORD"]
  }
}

Patch Changes

  • #12974 1127114 Thanks @​ask-bonk! - Rewrite self-referencing service bindings to kCurrentWorker before renaming the runner worker

    When a wrangler config has a service binding to itself (e.g. services: [{ binding: "SELF", service: "my-worker" }] where the worker is named "my-worker"), the binding's literal name pointed to a worker that no longer existed once vitest-pool-workers renamed the runner to vitest-pool-workers-runner-<project>. The self-reference is now rewritten to the miniflare kCurrentWorker symbol, which resolves at request time relative to the referer worker and so survives the rename. Previously this rewrite lived in wrangler's unstable_getMiniflareWorkerOptions, but it's only needed for vitest-pool-workers' rename — other consumers (getPlatformProxy, @cloudflare/vite-plugin) preserve the original worker name and so don't need it.

  • Updated dependencies [e07825a, 58899d8, 3020214, 0099265, 25f5ef2, bb27219, 194d75e, 12fb5db, 18b9d5b, 9f532f7, 1127114, 3ceadef, 2b8c0cc, 1a5cc86]:

    • wrangler@4.88.0
    • miniflare@4.20260504.0

@​cloudflare/vitest-pool-workers@​0.15.2

Patch Changes

... (truncated)

Changelog

Sourced from @​cloudflare/vitest-pool-workers's changelog.

0.16.3

Patch Changes

0.16.2

Patch Changes

0.16.1

Patch Changes

0.16.0

Minor Changes

  • #13810 2b8c0cc Thanks @​jamesopstad! - Stabilize the secrets configuration property

    The secrets property in the Wrangler config file is no longer experimental and will no longer emit an experimental warning when used. Required secrets are validated during local development and deploy, and used as the source of truth for type generation.

    {
  "secrets": {
    "required": ["API_KEY", "DB_PASSWORD"]
  }
}

Patch Changes

  • #12974 1127114 Thanks @​ask-bonk! - Rewrite self-referencing service bindings to kCurrentWorker before renaming the runner worker

    When a wrangler config has a service binding to itself (e.g. services: [{ binding: "SELF", service: "my-worker" }] where the worker is named "my-worker"), the binding's literal name pointed to a worker that no longer existed once vitest-pool-workers renamed the runner to vitest-pool-workers-runner-<project>. The self-reference is now rewritten to the miniflare kCurrentWorker symbol, which resolves at request time relative to the referer worker and so survives the rename. Previously this rewrite lived in wrangler's unstable_getMiniflareWorkerOptions, but it's only needed for vitest-pool-workers' rename — other consumers (getPlatformProxy, @cloudflare/vite-plugin) preserve the original worker name and so don't need it.

  • Updated dependencies [e07825a, 58899d8, 3020214, 0099265, 25f5ef2, bb27219, 194d75e, 12fb5db, 18b9d5b, 9f532f7, 1127114, 3ceadef, 2b8c0cc, 1a5cc86]:

    • wrangler@4.88.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump undici and @cloudflare/vitest-pool-workers in /app
4628212 
Bumps [undici](https://github.com/nodejs/undici) to 7.24.8 and updates ancestor dependency [@cloudflare/vitest-pool-workers](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vitest-pool-workers). These dependencies need to be updated together.


Updates `undici` from 7.18.2 to 7.24.8
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.18.2...v7.24.8)

Updates `@cloudflare/vitest-pool-workers` from 0.12.21 to 0.16.3
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vitest-pool-workers/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vitest-pool-workers@0.16.3/packages/vitest-pool-workers)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.24.8
  dependency-type: indirect
- dependency-name: "@cloudflare/vitest-pool-workers"
  dependency-version: 0.16.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 9, 2026
@williamchong

williamchong commented May 9, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@github-actions

github-actions Bot commented May 9, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

— 🙏 PrayRequest

@williamchong

williamchong commented May 9, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 9, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

— 🙏 PrayRequest

@github-actions

github-actions Bot commented May 9, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

— 🙏 PrayRequest

@williamchong

williamchong commented May 29, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 29, 2026

Copy link
Copy Markdown

耶和华使我坚固，使我领你出水谷，你使我的脚在岩石上立，我的脚步稳固。
— 詩篇 18:33

He hath made my feet like the feet of a hart, and hath set me upon my high places.
— Psalm 18:33

— 🙏 PrayRequest

@williamchong

williamchong commented May 29, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 29, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

The LORD is my shepherd; I shall not want.
— Psalm 23:1

— 🙏 PrayRequest

@williamchong

williamchong commented May 29, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 29, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

The LORD is my shepherd; I shall not want.
— Psalm 23:1

— 🙏 PrayRequest

@williamchong

williamchong commented May 29, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 29, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

The LORD is my shepherd; I shall not want.
— Psalm 23:1

— 🙏 PrayRequest

@williamchong

williamchong commented May 29, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 29, 2026

Copy link
Copy Markdown

耶和華是我的牧者，我必不至缺乏。
— 詩篇 23:1

The LORD is my shepherd; I shall not want.
— Psalm 23:1

— 🙏 PrayRequest

@williamchong

williamchong commented May 29, 2026

Copy link
Copy Markdown
Owner

@prayrequest

@prayrequest

prayrequest Bot commented May 29, 2026

Copy link
Copy Markdown

你們要彼此擔代，這樣就完全了基督的律法。
— 加拉太書 6:2

Bear ye one another's burdens, and so fulfil the law of Christ.
— Galatians 6:2

— 🙏 PrayRequest

@dependabot @github

dependabot Bot commented on behalf of github Jun 20, 2026

Copy link
Copy Markdown
Author

Superseded by #14.

@dependabot dependabot Bot closed this Jun 20, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/app/multi-4aaeaa4187 branch June 20, 2026 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@williamchong