From 673b09e0fa26368125fb527596a8eb5d31c27302 Mon Sep 17 00:00:00 2001 From: James Opstad <13586373+jamesopstad@users.noreply.github.com> Date: Thu, 18 Jun 2026 11:18:58 +0100 Subject: [PATCH 1/3] Update undici from 7.24.8 to 7.28.0 (#14347) --- .changeset/bump-undici-7-28-0.md | 11 +++ pnpm-lock.yaml | 128 +++++++++++++++---------------- pnpm-workspace.yaml | 4 +- 3 files changed, 77 insertions(+), 66 deletions(-) create mode 100644 .changeset/bump-undici-7-28-0.md diff --git a/.changeset/bump-undici-7-28-0.md b/.changeset/bump-undici-7-28-0.md new file mode 100644 index 0000000000..93aa324877 --- /dev/null +++ b/.changeset/bump-undici-7-28-0.md @@ -0,0 +1,11 @@ +--- +"@cloudflare/deploy-helpers": patch +"@cloudflare/vitest-pool-workers": patch +"@cloudflare/workers-auth": patch +"@cloudflare/workers-utils": patch +"create-cloudflare": patch +"miniflare": patch +"wrangler": patch +--- + +Update undici from 7.24.8 to 7.28.0 diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 57e69e53f0..c1242bb1b2 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -73,8 +73,8 @@ catalogs: specifier: 5.8.3 version: 5.8.3 undici: - specifier: 7.24.8 - version: 7.24.8 + specifier: 7.28.0 + version: 7.28.0 vite: specifier: 8.0.13 version: 8.0.13 @@ -91,7 +91,7 @@ overrides: '@types/react-transition-group>@types/react': ^18 '@cloudflare/elements>@types/react': ^18 '@types/node': 22.15.17 - '@types/node>undici-types': 7.24.8 + '@types/node>undici-types': 7.28.0 patchedDependencies: '@cloudflare/component-listbox@1.10.6': @@ -191,7 +191,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -254,7 +254,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -275,7 +275,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -314,7 +314,7 @@ importers: version: link:../../packages/workers-tsconfig undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -332,7 +332,7 @@ importers: version: 4.20260617.1 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -368,7 +368,7 @@ importers: version: 2.2.0 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -392,7 +392,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -419,7 +419,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -464,7 +464,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -481,7 +481,7 @@ importers: version: link:../shared undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -563,7 +563,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -618,7 +618,7 @@ importers: version: 4.20260617.1 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -651,7 +651,7 @@ importers: version: 1.2.7 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -672,7 +672,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -700,7 +700,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -721,7 +721,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -739,7 +739,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -760,7 +760,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -781,7 +781,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -802,7 +802,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -842,7 +842,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -863,7 +863,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -878,7 +878,7 @@ importers: version: link:../../packages/workers-tsconfig undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -899,7 +899,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -920,7 +920,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -938,7 +938,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -956,7 +956,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -974,7 +974,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -992,7 +992,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1010,7 +1010,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1028,7 +1028,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1043,7 +1043,7 @@ importers: version: link:../../packages/workers-tsconfig undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1058,7 +1058,7 @@ importers: version: link:../../packages/workers-tsconfig undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.9.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1267,7 +1267,7 @@ importers: version: link:../shared undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 wrangler: specifier: workspace:* version: link:../../packages/wrangler @@ -1289,7 +1289,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1385,7 +1385,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1406,7 +1406,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1427,7 +1427,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1448,7 +1448,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1469,7 +1469,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1502,7 +1502,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1529,7 +1529,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1550,7 +1550,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1568,7 +1568,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -1821,7 +1821,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vite: specifier: catalog:default version: 8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1) @@ -1878,7 +1878,7 @@ importers: version: 6.1.1 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 devDependencies: '@cloudflare/config': specifier: workspace:* @@ -2159,7 +2159,7 @@ importers: version: 0.34.5 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 workerd: specifier: 1.20260617.1 version: 1.20260617.1 @@ -2408,7 +2408,7 @@ importers: version: 4.0.0(patch_hash=60bdb1dcdbde0a135bb56d6fa1a1027caba891b149e2cfcb48d6a5b3524e0a91) undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 wrangler: specifier: workspace:* version: link:../wrangler @@ -3823,7 +3823,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -3835,7 +3835,7 @@ importers: version: link:../workers-utils undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 devDependencies: '@cloudflare/workers-tsconfig': specifier: workspace:* @@ -4012,7 +4012,7 @@ importers: version: 4.13.0 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vite: specifier: catalog:default version: 8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1) @@ -4065,7 +4065,7 @@ importers: dependencies: undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 devDependencies: '@cloudflare/workers-shared': specifier: workspace:* @@ -4458,7 +4458,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 vitest: specifier: catalog:default version: 4.1.0(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(@vitest/ui@4.1.0)(msw@2.12.4(@types/node@22.15.17)(typescript@5.8.3))(vite@8.0.13(@types/node@22.15.17)(esbuild@0.28.1)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.8.1)) @@ -4516,7 +4516,7 @@ importers: version: 2.2.0 undici: specifier: catalog:default - version: 7.24.8 + version: 7.28.0 wrangler: specifier: workspace:* version: link:../packages/wrangler @@ -14940,8 +14940,8 @@ packages: unconfig@7.3.3: resolution: {integrity: sha512-QCkQoOnJF8L107gxfHL0uavn7WD9b3dpBcFX6HtfQYmjw2YzWxGuFQ0N0J6tE9oguCBJn9KOvfqYDCMPHIZrBA==} - undici-types@7.24.8: - resolution: {integrity: sha512-YqWg3ldzJEZ5NXBSIs+FJwgx1/c71Noi9dDfz6CWh32MvnrPmBxqOUsZM6PyY7P16/TU8jVyNlIU3LSsJ3PcUQ==} + undici-types@7.28.0: + resolution: {integrity: sha512-LJAfY+2w6HGeT8d8J1wNQsUGUEGio6NWWpwdwurQe4f6oojzCFuGLizl1KSve4irsTxyLly1QhEeE6iapdaIvQ==} undici@5.28.5: resolution: {integrity: sha512-zICwjrDrcrUE0pyyJc1I2QzBkLM8FINsgOrt6WjA+BgajVq9Nxu2PbFFXUrAggLfDXlZGZBVZYw7WNV5KiBiBA==} @@ -14951,8 +14951,8 @@ packages: resolution: {integrity: sha512-BM/JzwwaRXxrLdElV2Uo6cTLEjhSb3WXboncJamZ15NgUURmvlXvxa6xkwIOILIjPNo9i8ku136ZvWV0Uly8+w==} engines: {node: '>=20.18.1'} - undici@7.24.8: - resolution: {integrity: sha512-6KQ/+QxK49Z/p3HO6E5ZCZWNnCasyZLa5ExaVYyvPxUwKtbCPMKELJOqh7EqOle0t9cH/7d2TaaTRRa6Nhs4YQ==} + undici@7.28.0: + resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==} engines: {node: '>=20.18.1'} unenv@2.0.0-rc.24: @@ -20194,7 +20194,7 @@ snapshots: '@types/node@22.15.17': dependencies: - undici-types: 7.24.8 + undici-types: 7.28.0 '@types/normalize-package-data@2.4.4': {} @@ -26562,7 +26562,7 @@ snapshots: jiti: 2.6.1 quansync: 0.2.11 - undici-types@7.24.8: {} + undici-types@7.28.0: {} undici@5.28.5: dependencies: @@ -26570,7 +26570,7 @@ snapshots: undici@7.24.4: {} - undici@7.24.8: {} + undici@7.28.0: {} unenv@2.0.0-rc.24: dependencies: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index e842d57db6..bc3b31ed03 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -109,10 +109,10 @@ catalog: "@vitest/snapshot": 4.1.0 "@vitest/ui": 4.1.0 typescript: "5.8.3" - undici: "7.24.8" + undici: "7.28.0" # Override undici-types from @types/node so that the Cloudflare SDK typings match our installed # version of Undici - undici-types: "7.24.8" + undici-types: "7.28.0" vitest: "4.1.0" vite: "8.0.13" "ws": "8.20.1" From e930bd4ca9880eb0b68ce6d1933c1d9ce290317d Mon Sep 17 00:00:00 2001 From: Haidar <33404432+haidargit@users.noreply.github.com> Date: Thu, 18 Jun 2026 17:27:27 +0700 Subject: [PATCH 2/3] Bump ws to 8.21.0 to address GHSA-96hv-2xvq-fx4p (#14346) --- .changeset/bump-ws-8-21-0.md | 9 +++++++++ pnpm-lock.yaml | 16 ++++++++-------- pnpm-workspace.yaml | 2 +- 3 files changed, 18 insertions(+), 9 deletions(-) create mode 100644 .changeset/bump-ws-8-21-0.md diff --git a/.changeset/bump-ws-8-21-0.md b/.changeset/bump-ws-8-21-0.md new file mode 100644 index 0000000000..fc1bcf5193 --- /dev/null +++ b/.changeset/bump-ws-8-21-0.md @@ -0,0 +1,9 @@ +--- +"miniflare": patch +"wrangler": patch +"@cloudflare/vite-plugin": patch +--- + +Bump `ws` from 8.20.1 to 8.21.0 to address GHSA-96hv-2xvq-fx4p + +[GHSA-96hv-2xvq-fx4p](https://github.com/advisories/GHSA-96hv-2xvq-fx4p) / [CVE-2026-48779](https://www.cve.org/CVERecord?id=CVE-2026-48779) (high severity) reports a remote memory-exhaustion DoS in `ws@<8.21.0`: a peer sending a high volume of tiny fragments and data chunks over modest network traffic can crash a `ws` server or client via OOM. The fix shipped in [ws@8.21.0](https://github.com/websockets/ws/releases/tag/8.21.0) (commit `2b2abd45`, released 2026-05-22), which also introduces the `maxBufferedChunks` and `maxFragments` options. This change bumps the workspace catalog entry so that `miniflare`, `wrangler`, and `@cloudflare/vite-plugin` all pick up the patched release. diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index c1242bb1b2..60af1092b6 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -82,8 +82,8 @@ catalogs: specifier: 4.1.0 version: 4.1.0 ws: - specifier: 8.20.1 - version: 8.20.1 + specifier: 8.21.0 + version: 8.21.0 overrides: '@types/react-dom@18>@types/react': ^18 @@ -2165,7 +2165,7 @@ importers: version: 1.20260617.1 ws: specifier: catalog:default - version: 8.20.1 + version: 8.21.0 youch: specifier: 4.1.0-beta.10 version: 4.1.0-beta.10(patch_hash=3e73fc48581841f22ea1d2cf5a3560bde280fdba04940253073fb121a70a9269) @@ -2512,7 +2512,7 @@ importers: version: link:../wrangler ws: specifier: catalog:default - version: 8.20.1 + version: 8.21.0 devDependencies: '@cloudflare/config': specifier: workspace:* @@ -4467,7 +4467,7 @@ importers: version: 0.4.0(vitest@4.1.0) ws: specifier: catalog:default - version: 8.20.1 + version: 8.21.0 xxhash-wasm: specifier: ^1.0.1 version: 1.0.1 @@ -15399,8 +15399,8 @@ packages: utf-8-validate: optional: true - ws@8.20.1: - resolution: {integrity: sha512-It4dO0K5v//JtTXuPkfEOaI3uUN87iYPnqo/ZzqCoG3g8uhA66QUMs/SrM0YK7/NAu+r4LMh/9dq2A7k+rHs+w==} + ws@8.21.0: + resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==} engines: {node: '>=10.0.0'} peerDependencies: bufferutil: ^4.0.1 @@ -27149,7 +27149,7 @@ snapshots: ws@8.18.0: {} - ws@8.20.1: {} + ws@8.21.0: {} wsl-utils@0.3.1: dependencies: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index bc3b31ed03..48a9e71956 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -115,7 +115,7 @@ catalog: undici-types: "7.28.0" vitest: "4.1.0" vite: "8.0.13" - "ws": "8.20.1" + "ws": "8.21.0" esbuild: "0.28.1" playwright-chromium: "1.60.0" "@cloudflare/workers-types": "^4.20260617.1" From 3eec0f7b8829af28634955f693af53918acf00af Mon Sep 17 00:00:00 2001 From: James Opstad <13586373+jamesopstad@users.noreply.github.com> Date: Thu, 18 Jun 2026 15:06:32 +0100 Subject: [PATCH 3/3] Fix React Router template overriding newly released v8 dependencies (#14349) --- .changeset/wise-planets-stare.md | 5 +++++ .../create-cloudflare/e2e/tests/frameworks/test-config.ts | 1 + packages/create-cloudflare/src/frameworks/package.json | 2 +- packages/create-cloudflare/templates/react-router/c3.ts | 6 ------ 4 files changed, 7 insertions(+), 7 deletions(-) create mode 100644 .changeset/wise-planets-stare.md diff --git a/.changeset/wise-planets-stare.md b/.changeset/wise-planets-stare.md new file mode 100644 index 0000000000..bd2dc4f326 --- /dev/null +++ b/.changeset/wise-planets-stare.md @@ -0,0 +1,5 @@ +--- +"create-cloudflare": patch +--- + +Upgrade `create-react-router` to `8.0.0` and prevent React Router template overriding v8 dependencies diff --git a/packages/create-cloudflare/e2e/tests/frameworks/test-config.ts b/packages/create-cloudflare/e2e/tests/frameworks/test-config.ts index f75efee352..17b34aceaf 100644 --- a/packages/create-cloudflare/e2e/tests/frameworks/test-config.ts +++ b/packages/create-cloudflare/e2e/tests/frameworks/test-config.ts @@ -943,6 +943,7 @@ function getExperimentalFrameworkTestConfig( }, { name: "react-router", + quarantine: true, unsupportedOSs: ["win32"], testCommitMessage: true, timeout: LONG_TIMEOUT, diff --git a/packages/create-cloudflare/src/frameworks/package.json b/packages/create-cloudflare/src/frameworks/package.json index c3b933b7cd..2b3711df85 100644 --- a/packages/create-cloudflare/src/frameworks/package.json +++ b/packages/create-cloudflare/src/frameworks/package.json @@ -9,7 +9,7 @@ "create-hono": "0.19.4", "create-next-app": "16.2.9", "create-qwik": "1.20.0", - "create-react-router": "7.17.0", + "create-react-router": "8.0.0", "create-rwsdk": "3.1.3", "create-solid": "0.7.0", "create-vike": "0.0.651", diff --git a/packages/create-cloudflare/templates/react-router/c3.ts b/packages/create-cloudflare/templates/react-router/c3.ts index d592f52e9d..925be756c8 100644 --- a/packages/create-cloudflare/templates/react-router/c3.ts +++ b/packages/create-cloudflare/templates/react-router/c3.ts @@ -67,12 +67,6 @@ const config: TemplateConfig = { generate, configure, transformPackageJson: async () => ({ - dependencies: { - "react-router": "^7.10.0", - }, - devDependencies: { - "@react-router/dev": "^7.10.0", - }, scripts: { deploy: `${npm} run build && wrangler deploy`, preview: `${npm} run build && vite preview`,