Bump the development-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #3 · KingPsychopath/owenabel.com

dependabot · 2026-08-01T10:38:01Z

Bumps the development-dependencies group with 6 updates in the / directory:

Package	From	To
astro	`7.0.7`	`7.1.5`
oxfmt	`0.49.0`	`0.61.0`
oxlint	`1.64.0`	`1.76.0`
oxlint-tsgolint	`0.22.1`	`0.25.0`
sharp	`0.34.5`	`0.35.3`
wrangler	`4.110.0`	`4.115.0`

Updates astro from 7.0.7 to 7.1.5

Release notes

Sourced from astro's releases.

astro@7.1.5

Patch Changes

#17524 7613030 Thanks @matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

#17480 f61ba9c Thanks @florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

#17525 e614b7b Thanks @matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

#17284 c775c1f Thanks @matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

#17474 c895b12 Thanks @nicksnyder! - Updates dependency js-yaml to v4.3.0

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

@astrojs/markdown-satteri@0.3.5

astro@7.1.4

Patch Changes

#17488 d4f266d Thanks @emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

#17472 4dc590c Thanks @astrobot-houston! - Adds the missing background prop to the <Image /> and <Picture /> component types. The prop already worked at runtime, but was absent from the types, causing astro check to report that background does not exist on the component props

#17292 0fc519d Thanks @astrobot-houston! - Fixes missing scoped styles for child components inside client:only islands in production builds

#17421 f1448de Thanks @iamkaleemsajjad-hue! - Fixes session runtime errors being silently swallowed by console.error instead of routing through Astro's logger

#17421 f1448de Thanks @iamkaleemsajjad-hue! - Fixes a session being left in a partial state after a storage failure during session.regenerate(), preventing unnecessary storage reads on subsequent operations

#17517 82bf7e2 Thanks @Hashim1999164! - Prevents a visible terminal window from popping up on Windows when the dev server runs in background mode. The detached child process is now spawned with windowsHide: true, so console-subsystem grandchildren (such as workerd.exe) no longer get a new focus-stealing window allocated by Windows Terminal.

#17510 eaa1fb0 Thanks @astrobot-houston! - Fixes the glob() loader watcher so negation patterns like !docs/drafts/** correctly exclude files during development, matching the behavior of the initial scan. Previously, negations were treated as independent matchers, causing unrelated files (including .astro/data-store.json) to be ingested as collection entries

#17511 704e570 Thanks @astrobot-houston! - Fixes TypeScript path aliases from tsconfig.json not resolving in astro.config.ts

astro@7.1.3

Patch Changes

#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

astro@7.1.2

Patch Changes

#17445 a5f7230 Thanks @ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

#17402 a89c137 Thanks @farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

... (truncated)

Changelog

Sourced from astro's changelog.

7.1.5

Patch Changes

#17524 7613030 Thanks @matthewp! - Fixes a bug where an error while finalizing a request could prevent a response from being sent

#17480 f61ba9c Thanks @florian-lefebvre! - Fixes a case where a custom logger.entrypoint failed to load at runtime in a built server bundle.

#17525 e614b7b Thanks @matthewp! - Fixes action path resolution so that properties of a resolved action function are not treated as routable path segments

#17284 c775c1f Thanks @matthewp! - Fixes a bug where the custom 404 (or 500) page was not rendered when a middleware rewrite targeted a route that returned an empty 404/500 response, and a blank page was returned instead

#17474 c895b12 Thanks @nicksnyder! - Updates dependency js-yaml to v4.3.0

Updated dependencies [c895b12]:

@astrojs/internal-helpers@0.10.2

@astrojs/markdown-remark@7.2.2

@astrojs/markdown-satteri@0.3.5

7.1.4

Patch Changes

#17488 d4f266d Thanks @emerson-d-lopes! - Fixes duplicate CSS files being emitted in server output when a prerendered page and a server-rendered page share the same styles (e.g. a shared layout importing Tailwind). The prerender and SSR environments each emitted their own copy of the same stylesheet (index.X.css and _..Y.css); the SSR build now reuses the CSS asset filename from the prerender build when the stylesheet is backed by the same CSS source modules, so only a single file is emitted.

#17472 4dc590c Thanks @astrobot-houston! - Adds the missing background prop to the <Image /> and <Picture /> component types. The prop already worked at runtime, but was absent from the types, causing astro check to report that background does not exist on the component props

#17292 0fc519d Thanks @astrobot-houston! - Fixes missing scoped styles for child components inside client:only islands in production builds

#17421 f1448de Thanks @iamkaleemsajjad-hue! - Fixes session runtime errors being silently swallowed by console.error instead of routing through Astro's logger

#17421 f1448de Thanks @iamkaleemsajjad-hue! - Fixes a session being left in a partial state after a storage failure during session.regenerate(), preventing unnecessary storage reads on subsequent operations

#17517 82bf7e2 Thanks @Hashim1999164! - Prevents a visible terminal window from popping up on Windows when the dev server runs in background mode. The detached child process is now spawned with windowsHide: true, so console-subsystem grandchildren (such as workerd.exe) no longer get a new focus-stealing window allocated by Windows Terminal.

#17510 eaa1fb0 Thanks @astrobot-houston! - Fixes the glob() loader watcher so negation patterns like !docs/drafts/** correctly exclude files during development, matching the behavior of the initial scan. Previously, negations were treated as independent matchers, causing unrelated files (including .astro/data-store.json) to be ingested as collection entries

#17511 704e570 Thanks @astrobot-houston! - Fixes TypeScript path aliases from tsconfig.json not resolving in astro.config.ts

7.1.3

Patch Changes

#17427 630b382 Thanks @astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

7.1.2

Patch Changes

... (truncated)

Commits

b0535ca [ci] release (#17528)
c895b12 Update js-yaml to 4.3.0 (#17474)
f61ba9c fix(logger): loading at runtime when entrypoint is a URL (#17480)
e614b7b fix(astro): do not resolve action function properties as path segments (#17525)
7613030 Return a response when request finalization fails (#17524)
c775c1f Render the custom 404 page when a middleware rewrite dead-ends in an empty 40...
112d3ea [ci] release (#17469)
82bf7e2 fix(astro): hide console window for background dev server on Windows (#17517)
0fc519d fix(css): preserve styles for child components of client:only islands during ...
d4f266d fix(build): deduplicate CSS assets between prerender and SSR environments (#1...
Additional commits viewable in compare view

Updates oxfmt from 0.49.0 to 0.61.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[0.59.0] - 2026-07-13

🐛 Bug Fixes

415fe1e oxfmt: Error on ignorePatterns that cannot match files outside the config directory (#24286) (leaysgur)

[0.55.0] - 2026-06-15

🚀 Features

9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

[0.54.0] - 2026-06-08

📚 Documentation

dadafe3 oxlint, oxfmt: Mention migrate skills in npm READMEs (#22965) (Boshen)

f88961a oxfmt: Annotate each config option with supported languages (#22953) (leaysgur)

[0.52.0] - 2026-05-26

🚀 Features

16b8058 oxfmt: Support vite-plus/resolveConfig for vite.config.ts (#22454) (leaysgur)

[0.50.0] - 2026-05-15

🐛 Bug Fixes

43b9978 formatter/sort_imports: Treat subpath imports as internal (#22440) (leaysgur)

Commits

65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
e2e0f94 chore(docs): update sponsor section (#24588)
2d4e8d2 release(apps): oxlint v1.74.0 && oxfmt v0.59.0 (#24454)
415fe1e fix(oxfmt): error on ignorePatterns that cannot match files outside the confi...
39677ba release(apps): oxlint v1.73.0 && oxfmt v0.58.0 (#24219)
5306f24 release(apps): oxlint v1.72.0 && oxfmt v0.57.0 (#23935)
c4be770 release(apps): oxlint v1.71.0 && oxfmt v0.56.0 (#23707)
aa79b5b release(apps): oxlint v1.70.0 && oxfmt v0.55.0 (#23442)
9a2788b feat(linter/unicorn): implement prefer-export-from rule (#22935)
Additional commits viewable in compare view

Updates oxlint from 1.64.0 to 1.76.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)

2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)

bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)

5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)

7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)

2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)

ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)

6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)

7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)

732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)

a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)

ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)

3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)

ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)

e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)

6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)

85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)

fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)

ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)

dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)

989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)

cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

25d577e language_server: Start tools in parallel (#15500) (Sysix)

3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)

3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)

9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)

3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)

444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)

2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)

a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)

3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)

2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)

57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.76.0] - 2026-07-27

🚀 Features

8d31dfa linter: Verify eslint/no-restricted-globals config schema (#24598) (vigneshwar)

7069621 linter: Verify jest/vitest prefer-lowercase-title config schema (#24724) (Bartok)

016cf2a linter/oxc: Add bad-match-all-arg rule (#24900) (camc314)

cdc941e linter/n: Implement exports-style rule (#24087) (Mikhail Baev)

1ad6f6c linter/eslint: Implement id-denylist rule (#24632) (Mikhail Baev)

📚 Documentation

3ff2e0e linter: Clarify config extends types (#24936) (Boshen)

[1.75.0] - 2026-07-20

🚀 Features

dd18383 linter/node: Implement no-top-level-await rule (#24634) (Connor Shea)

16a65f2 linter/react: Implement function-component-definition rule (#24471) (Cole Ellison)

7f1f585 linter: Reuse jest/padding-around-test-blocks for vitest/padding-around-test-blocks (#24519) (Mikhail Baev)

99978a8 linter/import/consistent-type-specifier-style: Support prefer-top-level-if-only-type-imports option (#24502) (camc314)

🐛 Bug Fixes

8694167 linter/eslint/prefer-destructuring: Handle typed declarations (#24616) (camc314)

[1.74.0] - 2026-07-13

🚀 Features

0433a83 linter/eslint/no-inner-declarations: Add namespaces option (#24044) (Boshen)

🐛 Bug Fixes

8337835 linter: Error on ignorePatterns that cannot match files aoutside the config directory (#24341) (leaysgur)

2ce5a33 linter: Resolve ignorePatterns relative to the config dir (#24339) (leaysgur)

⚡ Performance

7f80cac linter/vue/prop-name-casing: Precompile ignoreProps regex pattern (#24413) (connorshea)

6272051 linter/typescript/no-require-imports: Compile allow patterns once (#24417) (connorshea)

33805b9 linter/jsdoc/require-param: Compile checkTypesPattern regex once (#24420) (connorshea)

[1.73.0] - 2026-07-06

🚀 Features

a2c97f3 linter/unicorn: Implement explicit-timer-delay rule (#23612) (Mikhail Baev)

85735cb linter/unicorn: Implement no-confusing-array-with rule (#23638) (Shekhu☺️)

... (truncated)

Commits

65fe65d release(apps): oxlint v1.76.0 && oxfmt v0.61.0 (#24976)
3ff2e0e docs(linter): clarify config extends types (#24936)
8d31dfa feat(linter): verify eslint/no-restricted-globals config schema (#24598)
7069621 feat(linter): verify jest/vitest prefer-lowercase-title config schema (#24724)
016cf2a feat(linter/oxc): add bad-match-all-arg rule (#24900)
cdc941e feat(linter/n): implement exports-style rule (#24087)
1ad6f6c feat(linter/eslint): implement id-denylist rule (#24632)
83abe3b release(apps): oxlint v1.75.0 && oxfmt v0.60.0 (#24713)
6ce51d3 chore(deps): update dependency oxlint-tsgolint to v7.0.2000 (#24763)
dd18383 feat(linter/node): implement no-top-level-await rule (#24634)
Additional commits viewable in compare view

Updates oxlint-tsgolint from 0.22.1 to 0.25.0

Release notes

Sourced from oxlint-tsgolint's releases.

v0.25.0

What's Changed

chore(deps): update pnpm to v11.9.0 by @renovate[bot] in oxc-project/tsgolint#1043

perf(no-unnecessary-type-parameters): reuse AST-walk visitor closure by @connorshea in oxc-project/tsgolint#1034

perf(strict-void-return): reuse function-body walk visitor closure by @connorshea in oxc-project/tsgolint#1033

chore: update typescript-go submodule by @camc314 in oxc-project/tsgolint#1048

docs: normalize README sponsor section by @Boshen in oxc-project/tsgolint#1050

chore: strip symbols from release binary by @Boshen in oxc-project/tsgolint#1049

chore: add -trimpath to release build by @Boshen in oxc-project/tsgolint#1051

chore(deps): update crate-ci/typos action to v1.48.0 by @renovate[bot] in oxc-project/tsgolint#1052

chore(deps): update github actions by @renovate[bot] in oxc-project/tsgolint#1056

chore(deps): update npm packages by @renovate[bot] in oxc-project/tsgolint#1057

fix(no-deprecated): avoid contextual union property false positives by @camc314 in oxc-project/tsgolint#1059

fix(prefer-optional-chain): preserve negated optional guard by @camc314 in oxc-project/tsgolint#1061

perf(linter): gate reportNodeWithSuggestions on FixSuggestions by @connorshea in oxc-project/tsgolint#1067

fix(switch-exhaustiveness-check): honor default case comment patterns by @camc314 in oxc-project/tsgolint#1070

perf(strict-void-return): skip type queries for never-callable expressions by @connorshea in oxc-project/tsgolint#1068

perf(no-unsafe-argument): skip type queries for never-unsafe arguments by @connorshea in oxc-project/tsgolint#1066

Revert "perf(strict-void-return): skip type queries for never-callable expressions" by @camc314 in oxc-project/tsgolint#1071

chore: update typescript-go submodule by @camc314 in oxc-project/tsgolint#1072

chore(deps): update dependency dprint-json to v0.23.0 by @renovate[bot] in oxc-project/tsgolint#1080

chore(deps): update taiki-e/install-action action to v2.83.0 by @renovate[bot] in oxc-project/tsgolint#1082

chore(deps): update gomod by @renovate[bot] in oxc-project/tsgolint#1081

perf(no-unnecessary-type-arguments): skip signature resolution when node has no type arguments by @connorshea in oxc-project/tsgolint#1064

refactor: miscellaneous code cleanup by @connorshea in oxc-project/tsgolint#1077

refactor: remove dead code from rules by @connorshea in oxc-project/tsgolint#1079

refactor: drop dead isFunction guards built on a bitwise ast.Kind mask by @connorshea in oxc-project/tsgolint#1078

chore: update Node.js to 26.5.0 by @camc314 in oxc-project/tsgolint#1087

fix(no-unnecessary-type-assertion): avoid recursive unknown checks by @camc314 in oxc-project/tsgolint#1086

fix(no-unnecessary-type-assertions): generic array false positive by @camc314 in oxc-project/tsgolint#1045

fix(no-unnecessary-type-assertion): preserve generic write casts by @camc314 in oxc-project/tsgolint#1089

docs: update sponsor section by @Boshen in oxc-project/tsgolint#1090

Full Changelog: oxc-project/tsgolint@v0.24.0...v0.25.0

v0.24.0

What's Changed

ci: run windows e2e pnpm commands outside workspace by @camc314 in oxc-project/tsgolint#969

test(no-deprecated): add test for only allow by @camc314 in oxc-project/tsgolint#970

fix(no-deprecated): report contextual object literal properties by @camc314 in oxc-project/tsgolint#944

Update README with PRs note on new rules by @camchenry in oxc-project/tsgolint#972

fix(strict-boolean-expressions): guard invalid predicate indexes by @camchenry in oxc-project/tsgolint#971

fix(no-deprecated): fix crash when getting prop name for non-literal by @camchenry in oxc-project/tsgolint#973

test(no-deprecated): add non-literal computed key regression by @camc314 in oxc-project/tsgolint#974

test(no-floating-promises): sync tests with typescript-eslint by @camc314 in oxc-project/tsgolint#975

fix(no-floating-promises): handle spread arguments before rejection handlers by @camc314 in oxc-project/tsgolint#976

chore(deps): update crate-ci/typos action to v1.46.2 by @renovate[bot] in oxc-project/tsgolint#979

refactor: remove unneeded nil checks in strict-boolean-expressions by @camchenry in oxc-project/tsgolint#980

perf(no-unsafe-assignment): add fast-path for sender type by @camchenry in oxc-project/tsgolint#981

... (truncated)

Commits

1abf9a5 docs: update sponsor section
6ee7c11 fix(no-unnecessary-type-assertion): preserve generic write casts (#1089)
e23cc83 fix(no-unnecessary-type-assertions): generic array false positive (#1045)
c3269c0 fix(no-unnecessary-type-assertion): avoid recursive unknown checks (#1086)
c214d5c chore: update Node.js to 26.5.0 (#1087)
002b818 refactor: drop dead isFunction guards built on a bitwise ast.Kind mask (#1078)
d6a1cb2 refactor: remove dead code from rules (#1079)
7823d59 refactor: miscellaneous code cleanup (#1077)
fcf43ff perf(no-unnecessary-type-arguments): skip signature resolution when node has ...
6875914 chore(deps): update gomod (#1081)
Additional commits viewable in compare view

Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

Tighten verification of text dimensions, TIFF tile dimensions and extend values.

Improve code bundler support by resolving path to libvips binary.

Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

Emit warning about binaries provided by Electron for use on Linux.

Add hasAlpha property to output info. #4500

TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @Andarist

Bound clahe width and height to avoid signed overflow. #4551 @metsw24-max

Bound trim margin to avoid signed overflow. #4552 @metsw24-max

Reject infinite values when validating numbers. #4553 @metsw24-max

Bound extract region to libvips coordinate limit. #4555 @metsw24-max

Verify background colour values are numbers. #4556 @metsw24-max

Bound create and raw input dimensions to coordinate limit. #4558 @metsw24-max

Tighten recomb and affine matrix verification. #4560 @chatman-media

Verify cache memory limit to avoid overflow. #4561 @metsw24-max

v0.35.3-rc.2

Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

1018449 Release v0.35.3
ba303a7 Prerelease v0.35.3-rc.2
4f94fc5 Upgrade to sharp-libvips v1.3.2
c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
9a8d002 Docs: Add changelog entry and note about transferable #4520
8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
e000d0b Prerelease v0.35.3-rc.1
9554ca9 Prerelease v0.35.3-rc.0
6a29fd5 Emit warning about native binaries on Linux Electron
540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
Additional commits viewable in compare view

Updates wrangler from 4.110.0 to 4.115.0

Release notes

Sourced from wrangler's releases.

wrangler@4.115.0

Minor Changes
#14807 4dfb96e Thanks @oOPa! - Add hidden --jurisdiction option to wrangler kv namespace create for internal testing

This option creates a KV namespace within a specific jurisdiction (for example us, eu, or fedramp), backing it with jurisdiction-scoped storage. It is experimental and currently gated to allow-listed accounts, so it is hidden from --help until the feature is generally available.
#14280 465c0fb Thanks @tahmid-23! - Add experimental local_dev.experimental_s3_credentials to r2_buckets config

When set, the R2 bucket is served over a local S3-compatible API at /cdn-cgi/local/r2/s3/<bucket-id> during local development, authenticated with the configured AWS SigV4 credentials. <bucket-id> is the bucket's bucket_name, or the binding name if bucket_name is not set:
{
  "r2_buckets": [
    {
      "binding": "BUCKET",
      "bucket_name": "my-bucket",
      "local_dev": {
        "experimental_s3_credentials": {
          "accessKeyId": "local-access-key-id",
          "secretAccessKey": "local-secret-access-key"
        }
      }
    }
  ]
}
#14877 552bcfc Thanks @jasoncabot! - Respect and surface the Retry-After header on Cloudflare API responses

Previously, if a Wrangler command (e.g. wrangler versions upload, wrangler deploy) hit the Cloudflare API's rate limit, the resulting error gave no indication of how long to wait before trying again, and 429 responses weren't retried at all (only 5xx errors were, with a fixed linear backoff).

Now:

429 Too Many Requests responses are automatically retried, alongside the existing 5xx retry behaviour.

If a retried response includes a Retry-After header, Wrangler waits for that duration instead of the default backoff, and logs a message indicating how long it's waiting. To avoid blocking for an excessive amount of time, waits longer than 60 seconds fail fast instead — the surfaced Retry-After value lets the caller schedule its own retry.

If a retryable error is ultimately surfaced to the user (e.g. because retries were exhausted), the error message includes a note with the Retry-After duration, and the command-failed entry written to the Wrangler output file (WRANGLER_OUTPUT_FILE_PATH/WRANGLER_OUTPUT_FILE_DIRECTORY) gains a retry_after_ms field. This lets scripts and CI/CD pipelines calling Wrangler repeatedly (for example, wrangler versions upload on every commit) read the wait duration directly instead of regex-parsing stderr.

APIError.isRetryable() is unchanged (still 5xx only); retryOnAPIFailure() separately retries 429s. retryAfterMs, when present, is honoured for any retried error, not just 429s.

retryAfterMs is also now populated on APIErrors raised from direct R2 object requests, the Browser Rendering API, and errors surfaced from commands using the official cloudflare SDK client.

#14712 6e0bf6e Thanks @mack-erel! - Support connect() on remote VPC Network and VPC Service bindings in local development

Remote VPC Network and VPC Service bindings previously only supported HTTP and JSRPC, so calling binding.connect(address) against a private TCP service (for example a database) failed in local dev with Incoming CONNECT on a worker not supported. Raw TCP connections through remote VPC Network and VPC Service bindings now work in local development.

This feature is experimental. Existing HTTP and JSRPC usage of remote VPC Network and VPC Service bindings is unaffected, and no new configuration is required.
Patch Changes

... (truncated)

Commits

760a85b Version Packages (#14824)
ee4472a [wrangler] Remove jurisdiction field from kv_namespaces in wrangler config (#...
552bcfc [wrangler] Respect and surface 429 errors from HTTP requests (#14877)
e353367 fix output comparisons for e2e tests (#14884)
4dfb96e [wrangler] Support jurisdictions for KV namespaces (#14807)
09b8a44 [wrangler] Split cloudchamber curl headers on the first colon only (#14815)
465c0fb [miniflare] Expose R2 via an S3-compatible API locally (#14280)
b737676 [wrangler] Derive old log file age from filename timestamp (#14801)
16b3d5a<... Description has been truncated

…ates Bumps the development-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.0.7` | `7.1.5` | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.49.0` | `0.61.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.64.0` | `1.76.0` | | [oxlint-tsgolint](https://github.com/oxc-project/tsgolint) | `0.22.1` | `0.25.0` | | [sharp](https://github.com/lovell/sharp) | `0.34.5` | `0.35.3` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.110.0` | `4.115.0` | Updates `astro` from 7.0.7 to 7.1.5 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.1.5/packages/astro) Updates `oxfmt` from 0.49.0 to 0.61.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.61.0/npm/oxfmt) Updates `oxlint` from 1.64.0 to 1.76.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.76.0/npm/oxlint) Updates `oxlint-tsgolint` from 0.22.1 to 0.25.0 - [Release notes](https://github.com/oxc-project/tsgolint/releases) - [Commits](oxc-project/tsgolint@v0.22.1...v0.25.0) Updates `sharp` from 0.34.5 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.3) Updates `wrangler` from 4.110.0 to 4.115.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.115.0/packages/wrangler) --- updated-dependencies: - dependency-name: astro dependency-version: 7.1.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxfmt dependency-version: 0.61.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint dependency-version: 1.76.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: oxlint-tsgolint dependency-version: 0.25.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: sharp dependency-version: 0.35.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: wrangler dependency-version: 4.115.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026

Navigation Menu

Bump the development-dependencies group across 1 directory with 6 updates - #3

Bump the development-dependencies group across 1 directory with 6 updates#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-0589ef0ae9

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

astro@7.1.5

Patch Changes

astro@7.1.4

Patch Changes

astro@7.1.3

Patch Changes

astro@7.1.2

Patch Changes

7.1.5

Patch Changes

7.1.4

Patch Changes

7.1.3

Patch Changes

7.1.2

Patch Changes

Changelog

[0.59.0] - 2026-07-13

🐛 Bug Fixes

[0.55.0] - 2026-06-15

🚀 Features

[0.54.0] - 2026-06-08

📚 Documentation

[0.52.0] - 2026-05-26

🚀 Features

[0.50.0] - 2026-05-15

🐛 Bug Fixes

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

Oxfmt v0.12.0

[1.76.0] - 2026-07-27

🚀 Features

📚 Documentation

[1.75.0] - 2026-07-20

🚀 Features

🐛 Bug Fixes

[1.74.0] - 2026-07-13

🚀 Features

🐛 Bug Fixes

⚡ Performance

[1.73.0] - 2026-07-06

🚀 Features

v0.25.0

What's Changed

v0.24.0

What's Changed

v0.35.3

v0.35.3-rc.2

wrangler@4.115.0

Minor Changes

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants