chore(deps): update dependency @cloudflare/vite-plugin to v1.28.0#8444
Merged
renovate[bot] merged 1 commit intolatestfrom Mar 13, 2026
Merged
chore(deps): update dependency @cloudflare/vite-plugin to v1.28.0#8444renovate[bot] merged 1 commit intolatestfrom
renovate[bot] merged 1 commit intolatestfrom
Conversation
83989a6 to
7dbb4b4
Compare
7dbb4b4 to
efe6cf2
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.8.0→1.28.0Release Notes
cloudflare/workers-sdk (@cloudflare/vite-plugin)
v1.28.0Compare Source
Minor Changes
#12855
c2b76bcThanks @jamesopstad! - Support local explorer/cdn-cgi/routesThe local explorer UI can now be accessed at
/cdn-cgi/explorer.Patch Changes
#12834
64edac7Thanks @jamesopstad! - Warn when theassetsfield is provided for auxiliary WorkersAuxiliary Workers do not support static assets. Previously, the
assetsfield was silently ignored but we now warn if it is used.#12794
b980af6Thanks @aron-cf! - Fix Sandbox SDK preview URL WebSocket routingWhen using Sandbox SDK preview URLs, WebSocket requests using the
vite-hmrprotocol could be dropped before they reached the worker, causing HMR to fail. The plugin now forwards Sandbox WebSocket traffic and preserves the original request origin/host so worker proxy logic receives the correct URL.Updated dependencies [
f7de0fd,ff543e3,8e89e85,e63539d,8d1e130,6ee18e1,ecc7f79,1dda1c8,4bb61b9]:v1.27.0Compare Source
Minor Changes
#12826
de65c58Thanks @gabivlj! - Enable container egress interception in local dev without theexperimentalcompatibility flagContainer local development now always prepares the egress interceptor sidecar image needed for
interceptOutboundHttp(). This makes container-to-Worker interception available by default in Wrangler, Miniflare, and the Cloudflare Vite plugin.Patch Changes
5451a7f,5451a7f,82cc2a8,3c67c2a,d645594,211d75d,6ed249b,9f93b54,de65c58,cb14820,a7c87d1,b8c33f5,e4d9510]:v1.26.1Compare Source
Patch Changes
5cc8fcf,ec2459e]:v1.26.0Compare Source
Minor Changes
#12649
35b2c56Thanks @gabivlj! - Add experimental support for containers to workers communication with interceptOutboundHttpThis feature is experimental and requires adding the "experimental" compatibility flag to your Wrangler configuration.
#12701
23a365aThanks @jamesopstad! - Add local dev validation for the experimentalsecretsconfiguration propertyWhen the new
secretsproperty is defined,wrangler devandvite devnow validate secrets declared insecrets.required. When required secrets are missing from.dev.varsor.env/process.env, a warning is logged listing the missing secret names.When
secretsis defined, only the keys listed insecrets.requiredare loaded. Additional keys in.dev.varsor.envare excluded. If you are not using.dev.vars, keys listed insecrets.requiredare loaded fromprocess.envas well as.env. TheCLOUDFLARE_INCLUDE_PROCESS_ENVenvironment variable is therefore not needed when using this feature.When
secretsis not defined, the existing behavior is unchanged.Patch Changes
6a8aa5f,d672e2e,35b2c56,5f7aaf2,209b396,23a365a,596b8a0,00e729e,0769056,150ef7b,bf9cb3d]:v1.25.6Compare Source
Patch Changes
#12673
a04f6f1Thanks @jamesopstad! - Move proxy shared secret to a constant that is reused across restarts.#12684
53025f9Thanks @jamesopstad! - Fix Miniflare being incorrectly disposed during rapid dev server restartsUpdated dependencies [
99037e3,295297a,f765244,c0e9e08]:v1.25.5Compare Source
Patch Changes
#12628
494ee7bThanks @Master-Hash! - Append Cloudflare defaults to existing.assetsignorefiles during build outputWhen a project includes a
PUBLIC_DIR/.assetsignore, the plugin now preserves those rules and appends the requiredwrangler.jsonand.dev.varsentries instead of replacing the file content.Updated dependencies [
3d6e421,294297e]:v1.25.4Compare Source
Patch Changes
8d882fa,8d882fa]:v1.25.3Compare Source
Patch Changes
e93dc01,c2ed7c2,d920811,896734d,ebdbe52,58a4020,6f6cd94]:v1.25.2Compare Source
Patch Changes
f239077,aaa7200,2f19a40,8723684,e2a6600,5f9f0b4,452cdc8,527e4f5,aa82c2b,0b17117,ca58062]:v1.25.1Compare Source
Patch Changes
5a868a0,caf9b11,c58e81b,33a9a8f,8077c14,caf9b11,7d2355e,936187d,7ea69af,5cc7158,caf9b11,9a565d5,7f18183,39491f9,43c462a,c4c86f8,7d2355e,c9d0f9d,5cc7158,5cc7158,c9d0f9d]:v1.25.0Compare Source
Minor Changes
#12535
bd06ad2Thanks @edmundhung! - Set{ serverHandler: false }automatically when using@vitejs/plugin-rscBy default,
@vitejs/plugin-rscadds dev and preview server middleware that imports the RSC entry in Node.js. This fails withcloudflare:*imports (ERR_UNSUPPORTED_ESM_URL_SCHEME) and is unnecessary since the Cloudflare plugin handles requests via workerd. Users no longer need to passrsc({ serverHandler: false })manually.Patch Changes
#12521
a8183dbThanks @edmundhung! - AvoidThe WebSocket is undefinederror when frameworks create a child Vite server during buildReact Router creates a child Vite dev server during production builds to compile route files. This could previously cause an intermittent
The WebSocket is undefinedassertion error.Updated dependencies [
ad817dd,b900c5a,f7fa326,734792a,7aaa2a5,cc5ac22,62a8d48,84252b7,e5efa5d,d06ad09,10a1c4a,be9745f,d7b492c,122791d,8809411,1a9eddd,41e18aa]:v1.24.0Compare Source
Minor Changes
#12446
1231a2eThanks @jamesopstad! - Inferupload_source_mapssetting in the output Worker config from thebuild.sourcemapsetting in the Vite config.If build.sourcemap is enabled for a Worker environment, as in the following example,
"upload_source_maps": truewill now automatically be added to the outputwrangler.jsonfile.This removes the need to additionally specify the
upload_source_mapsproperty in the input Worker config.Note that if
upload_source_mapsis set in the input Worker config, this value will take precedence.This makes it possible to generate source maps without uploading them.
Patch Changes
#12393
fd8b3e5Thanks @BlankParticle! - Provide proxy shared secret to Miniflare so that the Worker receives the original Host headerUpdated dependencies [
5d56487,2d90127,2acb277,c8dda16,e02b5f5,8ba1d11,555b32a,d636d6a,bf8df0c,e02b5f5,988dea9,1f1c3ce,62635a0,fd902aa,312b5eb,961705c,355c6da,bfd17cd,3388c84,ce9dc01,21ac7ab,937425c]:v1.23.1Compare Source
Patch Changes
#12381
98283faThanks @jamesopstad! - Avoid collectingnodejs_compatwarnings during dependency optimization.Previously, a custom plugin was provided during dependency optimization to collect warnings when Node.js built-ins were imported and the
nodejs_compatflag was not enabled.Because optimized dependencies are cached, the warning was only displayed when dependencies changed.
Additionally, it sometimes included false positives from dependencies that were no longer used.
We now always externalize Node.js built-ins during dependency optimization and collect the warnings at runtime.
This is more consistent with how warnings are collected for direct imports of Node.js built-ins.
Updated dependencies [
ee9b81f,63f1adb,ba13de9,447daa3,fe3af35,bd4bb98,dab4bc9,83adb2c,18c0784]:v1.23.0Compare Source
Minor Changes
#11697
67a4ab1Thanks @jamesopstad! - Addexperimental.prerenderWorkeroption to the plugin config.This enables configuring a dedicated Worker for prerendering at build time. This is an experimental feature and may change or be removed at any time.
#12214
4db3864Thanks @jamesopstad! - Use Hook Filters to optimize plugin performance with Vite 8. This skips unnecessary Rust-to-JS calls with Rolldown powered Vite.Patch Changes
#12358
4340c42Thanks @jamesopstad! - Always emit a.assetsignorefile in the client output directory.Previously, we would emit a
.assetsignorefile in the client output directory only if the client output included awrangler.jsonfile.We now always emit it, which prevents a
wrangler.jsonfile being deployed as an asset if it is copied into this directory by mistake.Updated dependencies [
964a39d,253a85d,ce736b9,0c9625a,47944d1,4c4d5a5,b05b919,0aaf080,b981db5,a113c0d,fdd7a9f,a5fca2c,1bd1488,f7aa8c7]:v1.22.1Compare Source
Patch Changes
#12187
0c85b05Thanks @jamesopstad! - UseesmExternalRequirePluginto convert externalrequirecalls in Vite 8.Updated dependencies [
8a210af,eb8a415,3b06b18,17961bb,52fdfe7,6d8d9cd,5f060c9,cb72c11]:v1.22.0Compare Source
Minor Changes
05714f8Thanks @emily-shen! - Add a no-op local explorer worker, which is gated by the experimental flagX_LOCAL_EXPLORER.Patch Changes
#12052
9c76067Thanks @edmundhung! - Fix dev server crash on WebSocket client disconnectWhen a WebSocket client disconnects while an upgrade request is being processed, the server would crash with an unhandled
ECONNRESETerror. The fix adds an error handler to the socket at the start of the upgrade process.Updated dependencies [
a0a9ef6,ad4666c,014e7aa,e414f05,77e82d2,f08ef21,0641e6c,eacedba,05714f8,e8b2ef5,bbd8a5e]:v1.21.2Compare Source
Patch Changes
#11875
ae2459cThanks @bxff! - Skip shortcut registration in non-TTY environmentsPreviously, registering keyboard shortcuts in non-TTY environments (e.g., Turborepo) caused Miniflare
ERR_DISPOSEDerrors during prerendering. Shortcuts are now only registered when running in an interactive terminal.Updated dependencies [
614bbd7,788bf78,1375577,ae108f0,bba0968,c3407ad,f9e8a45]:v1.21.1Compare Source
Patch Changes
#11951
77fdc18Thanks @jamesopstad! - Add validation for environment name collisions and improve error message for missing environments.Updated dependencies [
75386b1,8e4a0e5,133bf95,93d8d78,69ff962,22727c2,fa39a73,4ac7c82,69ff962,029531a,d58fbd1,202c59e,133bf95,25e2c60,69ff962]:v1.21.0Compare Source
Minor Changes
#11879
5c8ff05Thanks @jamesopstad! - Add support for child environments.This is to support React Server Components via @vitejs/plugin-rsc and frameworks that build on top of it. A
childEnvironmentsoption is now added to the plugin config to enable using multiple environments within a single Worker. The parent environment can import modules from a child environment in order to access a separate module graph. For a typical RSC use case, the plugin might be configured as in the following example:Patch Changes
#11898
c17e971Thanks @petebacondarwin! - Bundle more third-party dependencies to reduce supply chain riskPreviously, several small utility packages were listed as runtime dependencies and
installed separately. These are now bundled directly into the published packages,
reducing the number of external dependencies users need to trust.
Bundled dependencies:
acorn,acorn-walk,exit-hook,glob-to-regexp,stoppablemime@remix-run/node-fetch-server,defu,get-port,picocolors,tinyglobbybirpc,devalue,get-port,semverUpdated dependencies [
e78186d,fe4faa3,fec8f5b,d39777f,4714ca1,c17e971,695b043]:v1.20.3Compare Source
Patch Changes
99b1f32]:v1.20.2Compare Source
Patch Changes
#11834
5c59217Thanks @vicb! - fix handling of Node builtin modulesThe list of builtin modules should not depend on the version of Node.
Switch to using the lists published by
@cloudflare/unenv-preset.This fixes an issue with trying to import i.e.
node:sqlitewith Node < 22.5.0which does not implement this module.
#11838
88a9e20Thanks @jamesopstad! - Setbuild.rolldownOptions.resolve.extensionsfor compatibility with Vite 8 beta.#11847
46e09a6Thanks @jamesopstad! - Applyvite-plugin-cloudflare:nodejs-compat-warningsplugin only to relevant environments.This is an optimisation so that it doesn't run for the
clientenvironment or Worker environments that have thenodejs_compatcompatibility flag enabled.Updated dependencies [
b0e54b2,ed60c4f,5c59217,faa5753,e574ef3,b6148ed,beb96af,5c59217,ab3859c,0eb973d,ad65efa,fc96e5f,43d5363,0f8d69d]:v1.20.1Compare Source
Patch Changes
#11807
fada563Thanks @jamesopstad! - UserolldownOptionsin plugin config when available.This improves compatibility with Vite 8 beta and removes warnings related to use of
esbuildOptions.Updated dependencies [
97e67b9,7d63fa5]:v1.20.0Compare Source
Minor Changes
#11620
25f6672Thanks @dario-piotrowicz! - Expose a newgetLocalWorkerdCompatibilityDateutility that allows callers to get the compatibility date of the locally installedworkerdpackage.#11723
3455912Thanks @jamesopstad! - Add a postbuildApphook that builds Worker environments that haven't already been built.This ensures that auxiliary Workers are included in the build when using full-stack frameworks that define their own
builder.buildAppfunction. Note that this feature is not supported with Vite 6 as thebuildApphook was introduced in Vite 7.#11738
c54f8daThanks @jamesopstad! - Add defaultTextmodule rule for.sqlfiles.This enables importing
.sqlfiles directly in Wrangler and the Cloudflare Vite plugin without extra configuration.Patch Changes
#11815
70ef3edThanks @jamesopstad! - SetignoreOutdatedRequeststotrueinoptimizeDepsconfig.This is a workaround for vitejs/vite#20867 and will resolve
Error: There is a new version of the pre-bundle for ...errors that some users are experiencing. The longer term solution is to use full-bundle mode rather thanoptimizeDepsonce it is supported for server environments. Vite v7.3.1 or above is needed for this change to take effect.#11735
dd66dcdThanks @jamesopstad! - RemovetopLevelNameandnamewhen passingentryWorkerConfigto theconfigfunction for auxiliary Workers.The
namefor each Worker should be unique and thetopLevelNameis computed rather than provided directly.#11720
0457de6Thanks @jamesopstad! - fix: regression where plain class and object types were no longer supported as Durable Objects and Worker entrypointsUpdated dependencies [
02fbd22,b993d95,f612b46,77078ef,2510723,65d1850,1615fce,b2769bf,554a4df,9f6dd71,8eede3f,d123ad0,9e360f6,5121b23,82e7e90,6a05b1c,62fd118,a7e9f80,fc95831,b0dbf1a,4688f59,69979a3,c54f8da,df1f9c9,d059f69,eac5cf7,b827893]:v1.19.0Compare Source
Minor Changes
3483b84Thanks @jamesopstad! - Provide the resolved entry Worker config in the second parameter to the auxiliary Workerconfigfunction. This makes it straightforward to inherit configuration from the entry WConfiguration
📅 Schedule: Branch creation - "before 8am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.