Update dependency @cloudflare/vitest-pool-workers to v0.13.5

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/vitest-pool-workers (source)	0.5.29 → 0.13.5

---

Release Notes

cloudflare/workers-sdk (@​cloudflare/vitest-pool-workers)

v0.13.5

Compare Source

Patch Changes

• #​13077 11c77b7 Thanks @​penalosa! - fix: runInDurableObject now correctly returns redirect responses (3xx) from Durable Object callbacks instead of throwing "Expected callback for X" errors

• #​13056 8384743 Thanks @​penalosa! - fix: Support dynamic import() inside entrypoint and Durable Object handlers

  Previously, calling exports.default.fetch() or SELF.fetch() on a worker whose handler used a dynamic import() would hang and fail with "Cannot perform I/O on behalf of a different Durable Object". This happened because the module runner's transport — which communicates over a WebSocket owned by the runner Durable Object — was invoked from a different DO context.

  The fix patches the module runner's transport via the onModuleRunner hook so that all invoke() calls are routed through the runner DO's I/O context, regardless of where the import() originates.

• #​13074 4618c05 Thanks @​penalosa! - fix: only apply module fallback extension probing for require(), not import

  The module fallback service previously tried adding .js, .mjs, .cjs, and .json suffixes to extensionless specifiers unconditionally. Per the Node.js spec, this extension-probing behaviour is specific to CommonJS require(). ESM import statements must include explicit file extensions.

  Extension-less TypeScript import specifiers continue to work correctly — they are resolved by Vite's resolver rather than the fallback's extension loop.

• #​13073 baec845 Thanks @​penalosa! - Add adminSecretsStore() to cloudflare:test for seeding secrets in tests

  Secrets store bindings only expose a read-only .get() method, so there was previously no way to seed secret values from within a test. The new adminSecretsStore() helper returns Miniflare's admin API for a secrets store binding, giving tests full control over create, update, and delete operations.

  import { adminSecretsStore } from "cloudflare:test";
  import { env } from "cloudflare:workers";
  
  const admin = adminSecretsStore(env.MY_SECRET);
  await admin.create("test-value");
  
  const value = await env.MY_SECRET.get(); // "test-value"

• #​13083 cfd513f Thanks @​penalosa! - Add a 30-second timeout to waitUntil promise draining to prevent hanging tests

  Previously, if a ctx.waitUntil() promise never resolved, the test suite would hang indefinitely after the test file finished. Now, any waitUntil promises that haven't settled within 30 seconds are abandoned with a warning, allowing the test suite to continue. This aligns with the production waitUntil limit.

• Updated dependencies [eeaa473, 9fcdfca, bc24ec8, 1faff35, 0b4c21a, 535582d, 992f9a3, f4ea4ac, 91b7f73, f6cdab2, 53ed15a, ce65246, 7a5be20, 6b50bfa, 0386553, 9c5ebf5, 53ed15a, 53ed15a]:

  • wrangler@​4.78.0
  • miniflare@​4.20260317.3

v0.13.4

Compare Source

Patch Changes

• #​12999 f9728fd Thanks @​hiendv! - chore: update some tests and fixtures to Vitest 4 / vpw 0.13.x

• Updated dependencies [593c4db, b8f3309, 451dae3, 5aaaab2, 5aaaab2, f8516dd, 9c9fe30, 379f2a2, c2e9163, 6a6449e, 9a1cf29, 875da60]:

  • wrangler@​4.77.0
  • miniflare@​4.20260317.2

v0.13.3

Compare Source

Patch Changes

• #​12881 8729f3d Thanks @​pombosilva! - Workflows testing util waitForStatus now supports waiting for "terminated" and "paused" states.

• Updated dependencies [782df44, 3c988e2, 62545c9, cb71403, 71ab981, 3a1c149, 7c3c6c6, ce48b77, 8729f3d]:

  • wrangler@​4.76.0
  • miniflare@​4.20260317.1

v0.13.2

Compare Source

Patch Changes

• Updated dependencies [c9b3184, 13df6c7, df0d112, 81ee98e, c600ce0, f509d13, 3b81fc6, 0a7fef9]:
  • wrangler@​4.75.0
  • miniflare@​4.20260317.0

v0.13.1

Compare Source

Patch Changes

• Updated dependencies [ade0aed, 2b9a186, 65f1092, 7b0d8f5, 351e1e1, 2b9a186]:
  • miniflare@​4.20260312.1
  • wrangler@​4.74.0

v0.13.0

Compare Source

Minor Changes

• #​11632 a6ddbdb Thanks @​penalosa! - Support Vitest 4 in @cloudflare/vitest-pool-workers.

  This a breaking change to the @cloudflare/vitest-pool-workers integration in order to support Vitest v4. Along with supporting Vitest v4 (and dropping support for Vitest v2 and v3), we've made a number of changes that may require changes to your tests. Our aim has been to improve stability & the foundations of @cloudflare/vitest-pool-workers as we move towards a v1 release of the package.

  We've made a codemod to make the migration easier, which will make the required changes to your config file:

  npx jscodeshift -t node_modules/@​cloudflare/vitest-pool-workers/dist/codemods/vitest-v3-to-v4.mjs vitest.config.ts

  Or, without installing the package first:

  npx jscodeshift -t https://unpkg.com/@​cloudflare/vitest-pool-workers/dist/codemods/vitest-v3-to-v4.mjs --parser=ts vitest.config.ts

  • Config API: defineWorkersProject and defineWorkersConfig from @cloudflare/vitest-pool-workers/config have been replaced with a cloudflareTest() Vite plugin exported from @cloudflare/vitest-pool-workers. The test.poolOptions.workers options are now passed directly to cloudflareTest():

    Before:

    import { defineWorkersProject } from "@​cloudflare/vitest-pool-workers/config";
    
    export default defineWorkersProject({
      test: {
        poolOptions: {
          workers: {
            wrangler: { configPath: "./wrangler.jsonc" },
          },
        },
      },
    });

    After:

    import { cloudflareTest } from "@​cloudflare/vitest-pool-workers";
    import { defineConfig } from "vitest/config";
    
    export default defineConfig({
      plugins: [
        cloudflareTest({
          wrangler: { configPath: "./wrangler.jsonc" },
        }),
      ],
    });

  • isolatedStorage & singleWorker: These have been removed in favour of a simpler isolation model that more closely matches Vitest. Storage isolation is now on a per test file basis, and you can make your test files share the same storage by using the Vitest flags --max-workers=1 --no-isolate

  • import { env, SELF } from "cloudflare:test": These have been removed in favour of import { env, exports } from "cloudflare:workers". exports.default.fetch() has the same behaviour as SELF.fetch(), except that it doesn't expose Assets. To test your assets, write an integration test using startDevWorker()

  • import { fetchMock } from "cloudflare:test": This has been removed. Instead, mock globalThis.fetch or use ecosystem libraries like MSW (recommended).

  • Vitest peer dependency: @cloudflare/vitest-pool-workers now requires vitest@^4.1.0.

Patch Changes

• Updated dependencies [f7de0fd, ff543e3, 8e89e85, e63539d, 8d1e130, 6ee18e1, ecc7f79, 1dda1c8, 4bb61b9]:
  • miniflare@​4.20260312.0
  • wrangler@​4.73.0

v0.12.21

Compare Source

Patch Changes

• #​12790 5451a7f Thanks @​petebacondarwin! - Bump devalue to ^5.6.3 to address security vulnerabilities

  Devalue had denial of service and prototype pollution vulnerabilities. This is a bundled dependency.

• Updated dependencies [5451a7f, 5451a7f, 82cc2a8, 3c67c2a, d645594, 211d75d, 6ed249b, 9f93b54, de65c58, cb14820, a7c87d1, b8c33f5, e4d9510]:

  • miniflare@​4.20260310.0
  • wrangler@​4.72.0

v0.12.20

Compare Source

Patch Changes

• Updated dependencies [ec2459e]:
  • wrangler@​4.71.0
  • miniflare@​4.20260301.1

v0.12.19

Compare Source

Patch Changes

• #​12682 b5b91c9 Thanks @​hiendv! - Fix resource leak where remote proxy sessions were not disposed during pool shutdown, causing vitest processes to hang.

• Updated dependencies [6a8aa5f, d672e2e, 35b2c56, 5f7aaf2, 209b396, 23a365a, 596b8a0, 00e729e, 0769056, 150ef7b, bf9cb3d]:

  • wrangler@​4.70.0
  • miniflare@​4.20260301.1

v0.12.18

Compare Source

Patch Changes

• Updated dependencies [99037e3, 295297a, f765244, c0e9e08]:
  • miniflare@​4.20260305.0
  • wrangler@​4.69.0

v0.12.17

Compare Source

Patch Changes

• Updated dependencies [3d6e421, 294297e]:
  • wrangler@​4.68.1
  • miniflare@​4.20260302.0

v0.12.16

Compare Source

Patch Changes

• Updated dependencies [8d882fa, 8d882fa]:
  • wrangler@​4.68.0

v0.12.15

Compare Source

Patch Changes

• #​12602 58a4020 Thanks @​anonrig! - Optimize filesystem operations by using Node.js's throwIfNoEntry: false option

  This reduces the number of system calls made when checking for file existence by avoiding the overhead of throwing and catching errors for missing paths. This is an internal performance optimization with no user-visible behavioral changes.

• Updated dependencies [e93dc01, c2ed7c2, d920811, 896734d, ebdbe52, 58a4020, 6f6cd94]:

  • wrangler@​4.67.1
  • miniflare@​4.20260302.0

v0.12.14

Compare Source

Patch Changes

• Updated dependencies [f239077, aaa7200, 2f19a40, 8723684, e2a6600, 527e4f5, aa82c2b, 0b17117, ca58062]:
  • miniflare@​4.20260219.0
  • wrangler@​4.67.0

v0.12.13

Compare Source

Patch Changes

• Updated dependencies [5a868a0, caf9b11, c58e81b, 33a9a8f, 8077c14, caf9b11, 7d2355e, 936187d, 7ea69af, 5cc7158, caf9b11, 43c462a, c4c86f8, 7d2355e, c9d0f9d, 5cc7158, 5cc7158, c9d0f9d]:
  • miniflare@​4.20260217.0
  • wrangler@​4.66.0

v0.12.12

Compare Source

Patch Changes

• #​11771 4b6fd36 Thanks @​avenceslau! - Fix Durable Object storage causing SQLITE_CANTOPEN errors on repeated test runs

  When running vitest multiple times in watch mode, Durable Object storage would fail with SQLITE_CANTOPEN errors. This happened because the storage reset function was deleting directories that workerd still had file handles to.

  The fix preserves directory structure during storage reset, deleting only files while
  keeping directories intact. This allows workerd to maintain valid handles to SQLite
  database directories across test runs.

• Updated dependencies [ad817dd, b900c5a, f7fa326, 734792a, 7aaa2a5, cc5ac22, 62a8d48, 84252b7, e5efa5d, d06ad09, 10a1c4a, be9745f, d7b492c, 122791d, 8809411, 1a9eddd, 41e18aa]:

  • wrangler@​4.65.0
  • miniflare@​4.20260212.0

v0.12.11

Compare Source

Patch Changes

• Updated dependencies [5d56487, 2d90127, 2acb277, c8dda16, e02b5f5, 8ba1d11, 555b32a, d636d6a, bf8df0c, e02b5f5, 988dea9, 1f1c3ce, 62635a0, fd902aa, 961705c, 355c6da, bfd17cd, 3388c84, ce9dc01, 21ac7ab, 937425c]:
  • wrangler@​4.64.0
  • miniflare@​4.20260210.0

v0.12.10

Compare Source

Patch Changes

• Updated dependencies [ee9b81f, 63f1adb, ba13de9, 447daa3, fe3af35, bd4bb98, dab4bc9, 83adb2c, 18c0784]:
  • wrangler@​4.63.0
  • miniflare@​4.20260205.0

v0.12.9

Compare Source

Patch Changes

• Updated dependencies [964a39d, 253a85d, ce736b9, 0c9625a, 47944d1, 4c4d5a5, b05b919, 0aaf080, b981db5, a113c0d, fdd7a9f, a5fca2c, 1bd1488, f7aa8c7]:
  • wrangler@​4.62.0
  • miniflare@​4.20260131.0

v0.12.8

Compare Source

Patch Changes

• Updated dependencies [8a210af, eb8a415, 3b06b18, 17961bb, 52fdfe7, 6d8d9cd, cb72c11]:
  • miniflare@​4.20260128.0
  • wrangler@​4.61.1

v0.12.7

Compare Source

Patch Changes

• #​12056 6d5f69f Thanks @​edmundhung! - fix: allow Vite query parameters like ?raw on .sql file imports

  Importing .sql files with Vite query parameters (e.g., import sql from "./query.sql?raw") would fail with "No such module" errors in vitest-pool-workers 0.12.x. Both import styles now work:

  • import sql from "./query.sql?raw" (Vite handles the ?raw transform)
  • import sql from "./query.sql" (loaded as Text module)

• #​11917 7b40ceb Thanks @​ksawaneh! - Fix CommonJS require() of .json files in the module fallback service (avoids SyntaxError: Unexpected token ':').

• #​11897 bbd8a5e Thanks @​dario-piotrowicz! - Bundle the zod dependency to reduce supply chain attack surface

  In order to prevent possible npm vulnerability attacks, the team's policy is to bundle
  dependencies in our packages where possible. This helps ensure that only trusted code
  runs on the user's system, even if compromised packages are later published to npm.

  This change bundles zod (a pure JavaScript validation library with no native dependencies)
  into miniflare and @​cloudflare/vitest-pool-workers.

  Other dependencies remain external for technical reasons:

  • sharp: Native binary with platform-specific builds
  • undici: Dynamically required at runtime in worker threads
  • ws: Has optional native bindings for performance
  • workerd: Native binary (Cloudflare's JavaScript runtime)
  • @cspotcode/source-map-support: Uses require.cache manipulation at runtime
  • youch: Dynamically required for lazy loading

• Updated dependencies [a0a9ef6, ad4666c, 014e7aa, e414f05, 77e82d2, f08ef21, 0641e6c, eacedba, 05714f8, e8b2ef5, bbd8a5e]:

  • wrangler@​4.61.0
  • miniflare@​4.20260124.0

v0.12.6

Compare Source

Patch Changes

• Updated dependencies [614bbd7, 788bf78, 1375577, bba0968, c3407ad, f9e8a45]:
  • wrangler@​4.60.0
  • miniflare@​4.20260120.0

v0.12.5

Compare Source

Patch Changes

• #​11967 202c59e Thanks @​emily-shen! - chore: update undici

  The following dependency versions have been updated:

  Dependency	From	To
  undici	7.14.0	7.18.2

• #​11943 25e2c60 Thanks @​vicb! - Bump capnp-es to ^0.0.14

• Updated dependencies [75386b1, 8e4a0e5, 133bf95, 93d8d78, 69ff962, 22727c2, fa39a73, 4ac7c82, 69ff962, 029531a, d58fbd1, 202c59e, 133bf95, 25e2c60, 69ff962]:

  • wrangler@​4.59.3
  • miniflare@​4.20260116.0

v0.12.4

Compare Source

Patch Changes

• #​11898 c17e971 Thanks @​petebacondarwin! - Bundle more third-party dependencies to reduce supply chain risk

  Previously, several small utility packages were listed as runtime dependencies and
  installed separately. These are now bundled directly into the published packages,
  reducing the number of external dependencies users need to trust.

  Bundled dependencies:

  • miniflare: acorn, acorn-walk, exit-hook, glob-to-regexp, stoppable
  • kv-asset-handler: mime
  • vite-plugin-cloudflare: @remix-run/node-fetch-server, defu, get-port, picocolors, tinyglobby
  • vitest-pool-workers: birpc, devalue, get-port, semver

• Updated dependencies [e78186d, fe4faa3, 4714ca1, c17e971, 695b043]:

  • miniflare@​4.20260114.0
  • wrangler@​4.59.2

v0.12.3

Compare Source

Patch Changes

• Updated dependencies [99b1f32]:
  • wrangler@​4.59.1

v0.12.2

Compare Source

Patch Changes

• Updated dependencies [b0e54b2, ed60c4f, faa5753, e574ef3, b6148ed, ab3859c, 0eb973d, ad65efa, fc96e5f, 43d5363, 0f8d69d]:
  • wrangler@​4.59.0
  • miniflare@​4.20260111.0

v0.12.1

Compare Source

Patch Changes

• Updated dependencies [97e67b9, 7d63fa5]:
  • miniflare@​4.20260107.0
  • wrangler@​4.58.0

v0.12.0

Compare Source

Minor Changes

• #​11648 eac5cf7 Thanks @​pombosilva! - Add Workflows test handlers in vitest-pool-workers to get the Workflow instance output and error:

  • getOutput(): Returns the output of the successfully completed Workflow instance.
  • getError(): Returns the error information of the errored Workflow instance.

  Example:

  // First wait for the workflow instance to complete:
  await expect(
  	instance.waitForStatus({ status: "complete" })
  ).resolves.not.toThrow();
  
  // Then, get its output
  const output = await instance.getOutput();
  
  // Or for errored workflow instances, get their error:
  await expect(
  	instance.waitForStatus({ status: "errored" })
  ).resolves.not.toThrow();
  const error = await instance.getError();

Patch Changes

• #​11681 1223663 Thanks @​ascorbic! - Fix vitest-pool-workers hanging when the default inspector port (9229) is already in use. When debugging is enabled and the default port is unavailable, the pool now automatically finds the next available port. If a user explicitly specifies an inspector port that is unavailable, an error is thrown with a clear message.

• Updated dependencies [02fbd22, b993d95, f612b46, 77078ef, 2510723, 65d1850, 1615fce, b2769bf, 554a4df, 9f6dd71, 8eede3f, d123ad0, 9e360f6, 5121b23, 82e7e90, 6a05b1c, [

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
deep-real	Error		Mar 27, 2026 5:13pm