chore(deps): bump the cloudflare group with 5 updates

[dependabot]

Bumps the cloudflare group with 5 updates:

Package	From	To
@cloudflare/vitest-pool-workers	0.20.1	0.20.3
@cloudflare/workers-types	5.20260801.1	5.20260808.1
wrangler	4.118.0	4.120.0
@cloudflare/sandbox	0.12.4	0.12.5
@cloudflare/playwright	1.3.3	1.3.5

Updates @cloudflare/vitest-pool-workers from 0.20.1 to 0.20.3

Release notes

Sourced from @​cloudflare/vitest-pool-workers's releases.

@​cloudflare/vitest-pool-workers@​0.20.3

Patch Changes

• #15013 8cf78c8 Thanks @​dario-piotrowicz! - Update undici from 7.28.0 to 7.29.0

• Updated dependencies [35c87e9, b4f0c97, 8cf78c8, a60ff4d, 99eb50c, 35c87e9]:

  • wrangler@4.120.0
  • miniflare@5.20260801.1-alpha

@​cloudflare/vitest-pool-workers@​0.20.2

Patch Changes

• Updated dependencies [20470fa, 9c74538, 266172b, a88d169, a88d169, daf65f2, a9e5abb]:
  • wrangler@4.119.0
  • miniflare@5.20260801.0-alpha

Changelog

Sourced from @​cloudflare/vitest-pool-workers's changelog.

0.20.3

Patch Changes

• #15013 8cf78c8 Thanks @​dario-piotrowicz! - Update undici from 7.28.0 to 7.29.0

• Updated dependencies [35c87e9, b4f0c97, 8cf78c8, a60ff4d, 99eb50c, 35c87e9]:

  • wrangler@4.120.0
  • miniflare@5.20260801.1-alpha

0.20.2

Patch Changes

• Updated dependencies [20470fa, 9c74538, 266172b, a88d169, a88d169, daf65f2, a9e5abb]:
  • wrangler@4.119.0
  • miniflare@5.20260801.0-alpha

Commits

• b0aea76 Version Packages (#15036)
• 2938c01 Version Packages (#15021)
• b6a8629 Revert "Version Packages (#14977)" (#15033)
• 42c4227 Version Packages (#14977)
• See full diff in compare view

Updates @cloudflare/workers-types from 5.20260801.1 to 5.20260808.1

Commits

• See full diff in compare view

Updates wrangler from 4.118.0 to 4.120.0

Release notes

Sourced from wrangler's releases.

wrangler@4.120.0

Minor Changes

• #15008 35c87e9 Thanks @​skepticfx! - Adds the ability to find container instances by exact ID or name

  wrangler containers instances <application_id> --search <instance_id_or_name> now searches every page and returns exact matches in human-readable or JSON output. JSON returns a top-level array, including an empty array when there is no match, while human-readable output prints a no-match message. If multiple instances have the same exact name, every matching instance is returned.

• #15008 35c87e9 Thanks @​skepticfx! - Add explicit pagination to container instance JSON output

  Use wrangler containers instances <application_id> --json --per-page <size> to return one page with machine-readable result_info, then pass its next_page_token to --page-token to retrieve the next page. Plain --json remains backward-compatible: it requests the complete list and returns the existing top-level array.

Patch Changes

• #15013 8cf78c8 Thanks @​dario-piotrowicz! - Update undici from 7.28.0 to 7.29.0

• #15015 a60ff4d Thanks @​nickpatt! - Cut the per-request cost of local observability capture

  Every tail event was written to the trace store as its own Durable Object call, so a request paid two or three round-trips per span. On a module-heavy app under the Vite plugin that dominated dev request latency. Rows are now buffered and written in batches, taking a request from roughly thirty calls to three.

  Work in progress still shows up as it happens: the root span is written immediately, console logs and exceptions as they arrive, and a span's completion is written on the next event once 100ms has passed. An invocation that goes completely quiet writes nothing further until it ends, since the flush is driven by tail events rather than a timer.

  The Vite plugin's own router, asset and proxy workers are also no longer captured. Their traces were noise the Observability views already hid, and skipping them cuts the spans recorded per request — a side benefit being that a trace's root is now your Worker rather than __router-worker__.

• Updated dependencies [b4f0c97, 8cf78c8, a60ff4d, 99eb50c]:

  • miniflare@5.20260801.1-alpha

wrangler@4.119.0

Minor Changes

• #14952 20470fa Thanks @​nelsonjsduarte! - Add --parse-type flag to wrangler ai-search create

  wrangler ai-search create now accepts --parse-type to control how a website data source discovers URLs. sitemap (the default) reads XML sitemaps; discover follows links recursively.

  Previously the parse type could only be chosen through the interactive wizard, which was skipped whenever --source was supplied — so it was impossible to create a discover instance from a script.

  wrangler ai-search create my-instance \
    --type web-crawler \
    --source https://example.com \
    --parse-type discover

  The interactive wizard now offers Discover alongside Sitemap. --parse-type is only valid with --type web-crawler; passing it with --type builtin or --type r2 is rejected, since the API stores the value for those source types but never reads it. When the flag is omitted in non-interactive mode the field is left unset and the API default (sitemap) applies.

• #14941 266172b Thanks @​nickpatt! - Improve the Local Explorer's Observability views

  console.log messages now render the way the console would (JSON-encoded strings are unwrapped and multi-argument logs are joined), traces and events can be looked up by trace or span id from the search bar, and an event's "View trace" button jumps to the exact invocation that emitted it — even when a trace_id spans several invocations (e.g. a subrequest or self fetch).

• #14064 a9e5abb Thanks @​petebacondarwin! - Add support for OAuth 2.0 Device Authorization Grant to wrangler login

... (truncated)

Commits

• b0aea76 Version Packages (#15036)
• 386ff6e [miniflare] Register workers in the dev registry by default (#15061)
• 35c87e9 CC-8338, CC-8340: Improve Wrangler container instance listings (#15008)
• 99eb50c [miniflare] Restrict dev registry registration to user workers (#15040)
• 2938c01 Version Packages (#15021)
• b6a8629 Revert "Version Packages (#14977)" (#15033)
• 42c4227 Version Packages (#14977)
• 511635c [wrangler] Skip the CAA half of the unenv-preset testDns E2E (#15016)
• ebd1dfd [vite-plugin] Surface Local Explorer API to headless agents, matching wrangle...
• a9e5abb [wrangler] Add OAuth 2.0 Device Authorization Grant support (#14064)
• Additional commits viewable in compare view

Updates @cloudflare/sandbox from 0.12.4 to 0.12.5

Release notes

Sourced from @​cloudflare/sandbox's releases.

@​cloudflare/sandbox@​0.12.5

• #786 750ca4d Thanks @​aron-cf! - Instrument the bridge API with Cloudflare custom spans. Each endpoint now emits a bridge.<operation> span annotated with the sandbox ID, container UUID, and operation-specific metadata (command, file path, port, session ID, and so on), so requests are traceable end to end. Enable tracing with observability.traces.enabled in your Worker configuration.

• #799 0783596 Thanks @​aron-cf! - Make destroy() succeed when the sandbox container was never admitted, so cleanup no longer fails with a no-instance platform error.

• #799 0783596 Thanks @​aron-cf! - Reduce intermittent startup failures during concurrent sandbox creation where operations could fail with a disposed RPC session error.

• #799 0783596 Thanks @​aron-cf! - Surface container capacity and admission failures as retryable ContainerUnavailableError with a structured reason, including no-instance and max-instances cases. Callers can branch on error.reason instead of parsing platform messages.

• #786 750ca4d Thanks @​aron-cf! - Fill the warm pool in bounded-parallel batches instead of one container at a time, so it primes and recovers far faster after a burst. Tune the batch size with WARM_POOL_SCALE_BATCH_SIZE (default 5, clamped to 20).

• #786 750ca4d Thanks @​aron-cf! - Refill the warm pool the moment it drains instead of waiting for the next background tick. After a burst consumes warm containers, replenishment now starts immediately, cutting the latency tail for sandboxes created during sustained or back-to-back bursts.

• #786 750ca4d Thanks @​aron-cf! - Let the warm pool know its instance ceiling up front via the WARM_POOL_MAX_INSTANCES bridge variable. Set it to match your container's max_instances so the pool makes correct capacity decisions without first crashing into the limit. 0 (the default) preserves the existing auto-learn behaviour.

Commits

• 9eb4410 Version Packages (#813)
• face187 Bump react-router from 7.15.1 to 8.3.0 (#846)
• d11dbd4 Bump ip-address from 10.2.0 to 10.4.0 (#849)
• 179a755 Bump hono from 4.12.31 to 4.13.0 (#850)
• 5a7aedd Bump fast-uri from 3.1.4 to 3.1.5 (#852)
• 6daf375 Bump postcss from 8.5.21 to 8.5.26 (#855)
• 877bd5a Bump mermaid in /bridge/examples/workspace-chat/frontend (#854)
• 0783596 Fix for race condition in RPC connection (#799)
• fd855f0 Bump postcss in /bridge/examples/workspace-chat/frontend (#848)
• e8c7b79 Bump cryptography in /bridge/examples/workspace-chat/backend (#851)
• Additional commits viewable in compare view

Updates @cloudflare/playwright from 1.3.3 to 1.3.5

Release notes

Sourced from @​cloudflare/playwright's releases.

v1.3.5

What's Changed

• fix: package version by @​meddulla in cloudflare/playwright#225

Full Changelog: cloudflare/playwright@v1.3.4...v1.3.5

v1.3.4

What's Changed

• feat: add browser option by @​meddulla in cloudflare/playwright#224

Full Changelog: cloudflare/playwright@v1.3.3...v1.3.4

Commits

• 68f2b40 fix: package version
• 427aafc Merge pull request #224 from cloudflare/scardita/add_browser_option
• 86bec45 feat: add browser option
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions