Update NPM Development dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@cloudflare/workers-types	4.20250204.0 -> 4.20250214.0
@types/react (source)	19.0.8 -> 19.0.9
@typescript-eslint/eslint-plugin (source)	8.23.0 -> 8.24.0
@typescript-eslint/parser (source)	8.23.0 -> 8.24.0
miniflare (source)	3.20250129.0 -> 3.20250204.1
postcss (source)	8.5.1 -> 8.5.2
prettier (source)	3.5.0 -> 3.5.1
wrangler (source)	3.107.3 -> 3.109.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cloudflare/workerd (@​cloudflare/workers-types)

v4.20250214.0

Compare Source

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.24.0

Compare Source

🚀 Features

• eslint-plugin: [no-unnecessary-condition] make allowConstantLoopConditions more granular (#​10639)

🩹 Fixes

• eslint-plugin: [no-misused-spread] correct and elaborate string spread report message (#​10751)
• eslint-plugin: [restrict-plus-operands] report adding bigints to strings when allowNumberAndString is false (#​10737)

❤️ Thank You

• Josh Goldberg ✨
• noah
• Ronen Amiel

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.24.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

cloudflare/workers-sdk (miniflare)

v3.20250204.1

Compare Source

Patch Changes

• #​7950 4db1fb5 Thanks @​cmackenzie1! - Add local binding support for Worker Pipelines

v3.20250204.0

Compare Source

Patch Changes

• #​8032 c80dbd8 Thanks @​dependabot! - chore: update dependencies of "miniflare" package

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20250129.0	1.20250204.0
  @​cloudflare/workers-types	^4.20250129.0	^4.20250204.0

• #​7290 0c0374c Thanks @​emily-shen! - fix: add support for workers with assets when running multiple workers in one wrangler dev instance

  https://github.com/cloudflare/workers-sdk/pull/7251 added support for running multiple Workers in one wrangler dev/miniflare session. e.g. wrangler dev -c wrangler.toml -c ../worker2/wrangler.toml, which among other things, allowed cross-service RPC to Durable Objects.

  However this did not work in the same way as production when there was a Worker with assets - this PR should fix that.

postcss/postcss (postcss)

v8.5.2

Compare Source

• Fixed end position of rules with semicolon (by @​romainmenke).

prettier/prettier (prettier)

v3.5.1

Compare Source

diff

Fix CLI crash when cache for old version exists (#​17100 by @​sosukesuzuki)

Prettier 3.5 uses a different cache format than previous versions, Prettier 3.5.0 crashes when reading existing cache file, Prettier 3.5.1 fixed the problem.

Support dockercompose and github-actions-workflow in VSCode (#​17101 by @​remcohaszing)

Prettier now supports the dockercompose and github-actions-workflow languages in Visual Studio Code.

cloudflare/workers-sdk (wrangler)

v3.109.1

Compare Source

Patch Changes

• #​8021 28b1dc7 Thanks @​0xD34DC0DE! - fix: prevent __cf_cjs name collision in the hybrid Nodejs compat plugin

v3.109.0

Compare Source

Minor Changes

• #​8120 3fb801f Thanks @​sdnts! - Add a new update subcommand for Queues to allow updating Queue settings

• #​8120 3fb801f Thanks @​sdnts! - Allow overriding message retention duration when creating Queues

• #​8026 542c6ea Thanks @​penalosa! - Add --outfile to wrangler deploy for generating a worker bundle.

  This is an advanced feature that most users won't need to use. When set, Wrangler will output your built Worker bundle in a Cloudflare specific format that captures all information needed to deploy a Worker using the Worker Upload API

• #​8026 542c6ea Thanks @​penalosa! - Add a wrangler check startup command to generate a CPU profile of your Worker's startup phase.

  This can be imported into Chrome DevTools or opened directly in VSCode to view a flamegraph of your Worker's startup phase. Additionally, when a Worker deployment fails with a startup time error Wrangler will automatically generate a CPU profile for easy investigation.

  Advanced usage:

  • --args: to customise the way wrangler check startup builds your Worker for analysis, provide the exact arguments you use when deploying your Worker with wrangler deploy. For instance, if you deploy your Worker with wrangler deploy --no-bundle, you should use wrangler check startup --args="--no-bundle" to profile the startup phase.
  • --worker-bundle: if you don't use Wrangler to deploy your Worker, you can use this argument to provide a Worker bundle to analyse. This should be a file path to a serialised multipart upload, with the exact same format as the API expects: https://developers.cloudflare.com/api/resources/workers/subresources/scripts/methods/update/

Patch Changes

• #​8112 fff677e Thanks @​penalosa! - When reporting errors to Sentry, Wrangler will now include the console output as additional metadata

• #​8120 3fb801f Thanks @​sdnts! - Check bounds when overriding delivery delay when creating Queues

• #​7950 4db1fb5 Thanks @​cmackenzie1! - Add local binding support for Worker Pipelines

• #​8119 1bc60d7 Thanks @​penalosa! - Output correct config format from wrangler d1 create. Previously, this command would always output TOML, regardless of the config file format

• #​8130 1aa2a91 Thanks @​emily-shen! - Include default values for wrangler types --path and --x-include-runtime in telemetry

  User provided strings are still left redacted as always.

• #​8061 35710e5 Thanks @​emily-shen! - fix: respect WRANGLER_LOG in wrangler dev

  Previously, --log-level=debug was the only way to see debug logs in wrangler dev, which was unlike all other commands.

• Updated dependencies [4db1fb5]:

  • [email protected]

v3.108.1

Compare Source

Patch Changes

• #​8103 a025ad2 Thanks @​emily-shen! - fix: fix bug where wrangler secret list --format=json was printing the wrangler banner.

• Updated dependencies []:

  • [email protected]

v3.108.0

Compare Source

Minor Changes

• #​7990 b1966df Thanks @​cmsparks! - Add WRANGLER_CI_OVERRIDE_NAME for Workers CI

• #​8028 b2dca9a Thanks @​emily-shen! - feat: Also log when no bindings are found.

  We currently print a worker's bindings during dev, versions upload and deploy. This just also prints something when there's no bindings found, in case you were expecting bindings.

• #​8037 71fd250 Thanks @​WillTaylorDev! - Provides unsafe.metadata configurations when using wrangler versions secret put.

Patch Changes

• #​8058 1f80d69 Thanks @​WillTaylorDev! - Bugfix: Modified versions secret put to inherit all known bindings, which circumvents a limitation in the API which does not return all fields for all bindings.

• #​7986 88514c8 Thanks @​andyjessop! - docs: clarifies that local resources are "simulated locally" or "connected to remote resource", and adds console messages to help explain local dev

• #​8008 9d08af8 Thanks @​ns476! - Add support for Images bindings (in private beta for now), with optional local support for platforms where Sharp is available.

• #​7769 6abe69c Thanks @​cmackenzie1! - Adds the following new option for wrangler pipelines create and wrangler pipelines update commands:

  --cors-origins           CORS origin allowlist for HTTP endpoint (use * for any origin)  [array]
  

• #​7290 0c0374c Thanks @​emily-shen! - fix: add support for workers with assets when running multiple workers in one wrangler dev instance

  https://github.com/cloudflare/workers-sdk/pull/7251 added support for running multiple Workers in one wrangler dev/miniflare session. e.g. wrangler dev -c wrangler.toml -c ../worker2/wrangler.toml, which among other things, allowed cross-service RPC to Durable Objects.

  However this did not work in the same way as production when there was a Worker with assets - this PR should fix that.

• #​7769 6abe69c Thanks @​cmackenzie1! - Rename wrangler pipelines <create|update> flags

  The following parameters have been renamed:

  Previous Name	New Name
  access-key-id	r2-access-key-id
  secret-access-key	r2-secret-access-key
  transform	transform-worker
  r2	r2-bucket
  prefix	r2-prefix
  binding	enable-worker-binding
  http	enable-http
  authentication	require-http-auth
  filename	file-template
  filepath	partition-template

• #​8012 c412a31 Thanks @​mtlemilio! - Use fetchPagedListResult when listing Hyperdrive configs from the API

  This fixes an issue where only 20 configs were being listed.

• #​8077 60310cd Thanks @​emily-shen! - feat: add telemetry to experimental auto-provisioning

• Updated dependencies [c80dbd8, 0c0374c]:

  • [email protected]

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.