build(deps): bump the npm_and_yarn group across 1 directory with 8 updates by dependabot[bot] · Pull Request #150 · nullcoder/ghostpaste

dependabot · 2026-03-08T10:42:02Z

Bumps the npm_and_yarn group with 4 updates in the / directory: next, @opennextjs/cloudflare, minimatch and rollup.

Updates next from 15.5.9 to 15.5.12

Release notes

v15.5.12

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

fix unlock in publish-native

This is a re-release of v15.5.11 applying the turbopack changes.

v15.5.11

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Tracing: Fix memory leak in span map (#85529)

fix: ensure LRU cache items have minimum size of 1 to prevent unbounded growth (#89134)

Turbopack: fix NFT tracing of sharp 0.34 (#82340)

Turbopack: support pattern into exports field (#82757)

NFT tracing fixes (#84155 and #85323)

Turbopack: validate CSS without computing all paths (#83810)

feat: implement LRU cache with invocation ID scoping for minimal mode response cache (#89129)

Credits

Huge thanks to @timneutkens, @mischnic, @ztanner, and @wyattjoh for helping!

v15.5.10

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472

https://vercel.com/changelog/summary-of-cve-2026-23864

Commits

d23f41c v15.5.12
8e75765 fix unlock in publish-native
6cef992 [backport] normalize CRLF line endings in jscodeshift tests on Windows (#8800...
7a94645 Apply needs for publishRelease
bbfd4e3 v15.5.11
50060c9 Unlock swc binaries (#89195)
9599e80 [backport]: Tracing: Fix memory leak in span map (#85529) (#89135)
a2e2900 [backport]: fix: ensure LRU cache items have minimum size of 1 to prevent unb...
a2b10ab [backport] Turbopack: fix NFT tracing of sharp 0.34 (#82340) (#89151)
662f641 [backport] Turbopack: support pattern into exports field (#82757) (#89150)
Additional commits viewable in compare view

Updates @opennextjs/cloudflare from 1.14.3 to 1.17.1

Release notes

Sourced from @opennextjs/cloudflare's releases.

@opennextjs/cloudflare@1.17.1

Patch Changes

#1147 f5bd138 Thanks @vicb! - make dev /cdn-cgi/image behaves like prod for consistency

@opennextjs/cloudflare@1.17.0

Minor Changes

#1133 25d5835 Thanks @dario-piotrowicz! - Update the migrate command to attempt to create an R2 bucket for caching, if that is not possible an application without caching enabled will be generated instead.

@opennextjs/cloudflare@1.16.6

Patch Changes

#1138 4487f1f Thanks @james-elicx! - Fix the CLI potentially setting a future compatibility date in the wrangler config when workerd has published a version matching a future date, by capping to the current date.

@opennextjs/cloudflare@1.16.5

Patch Changes

#1127 2b437f1 Thanks @dario-piotrowicz! - In the migrate command, add an initial step to create a Next.js config file (required by open-next) if it doesn't exist

#1126 8c3a36e Thanks @alex-all3dp! - fix: prevent Worker hang on HEAD requests to static assets

@opennextjs/cloudflare@1.16.4

Patch Changes

#1122 6c94a4a Thanks @dario-piotrowicz! - In migrate command, avoid adding unnecessary newlines when creating files

#1122 6c94a4a Thanks @dario-piotrowicz! - fix migrate command incorrectly erroring if the target application doesn't have a public directory

#1122 6c94a4a Thanks @dario-piotrowicz! - Bump @opennextjs/aws to 3.9.16

Fix migrate command not updating Next.js config files

Fixes #1062, #1115

See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.16

#1097 fea645f Thanks @dario-piotrowicz! - Add --help and --version to the opennextjs-cloudflare CLI

Improve the opennextjs-cloudflare CLI by:

ensuring that unknown commands (e.g., opennextjs-cloudflare foo) display a clear and helpful error message

adding a -h|--help flag to display the CLI's help message

adding a -v|--version flag to display the package's version

@opennextjs/cloudflare@1.16.3

Patch Changes

#1113 09c41f1 Thanks @anonrig! - bump @opennextjs/aws to 3.9.15

See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.15

... (truncated)

Changelog

Sourced from @opennextjs/cloudflare's changelog.

1.17.1

Patch Changes

#1147 f5bd138 Thanks @vicb! - make dev /cdn-cgi/image behaves like prod for consistency

1.17.0

Minor Changes

#1133 25d5835 Thanks @dario-piotrowicz! - Update the migrate command to attempt to create an R2 bucket for caching, if that is not possible an application without caching enabled will be generated instead.

1.16.6

Patch Changes

#1138 4487f1f Thanks @james-elicx! - Fix the CLI potentially setting a future compatibility date in the wrangler config when workerd has published a version matching a future date, by capping to the current date.

1.16.5

Patch Changes

#1127 2b437f1 Thanks @dario-piotrowicz! - In the migrate command, add an initial step to create a Next.js config file (required by open-next) if it doesn't exist

#1126 8c3a36e Thanks @alex-all3dp! - fix: prevent Worker hang on HEAD requests to static assets

1.16.4

Patch Changes

#1122 6c94a4a Thanks @dario-piotrowicz! - In migrate command, avoid adding unnecessary newlines when creating files

#1122 6c94a4a Thanks @dario-piotrowicz! - fix migrate command incorrectly erroring if the target application doesn't have a public directory

#1122 6c94a4a Thanks @dario-piotrowicz! - Bump @opennextjs/aws to 3.9.16

Fix migrate command not updating Next.js config files

Fixes #1062, #1115

See details at https://github.com/opennextjs/opennextjs-aws/releases/tag/v3.9.16

#1097 fea645f Thanks @dario-piotrowicz! - Add --help and --version to the opennextjs-cloudflare CLI

Improve the opennextjs-cloudflare CLI by:

ensuring that unknown commands (e.g., opennextjs-cloudflare foo) display a clear and helpful error message

adding a -h|--help flag to display the CLI's help message

adding a -v|--version flag to display the package's version

1.16.3

... (truncated)

Commits

206794f Version Packages (#1149)
f5bd138 make dev /cdn-cgi/image behaves like prod for consistency (#1147)
e965e4d refactor: creation of config files (#1146)
7d86f42 Version Packages (#1143)
25d5835 Update the migrate command to attempt to create an R2 bucket for caching as...
2e4e595 Version Packages (#1140)
4487f1f fix: future compat date set in wrangler config (#1138)
63e29f2 Version Packages (#1128)
2b437f1 In the migrate command, add an initial step to create a Next.js config file...
8c3a36e fix: prevent Worker hang on HEAD requests to static assets (#1126)
Additional commits viewable in compare view

Updates wrangler from 4.52.1 to 4.71.0

Release notes

Sourced from wrangler's releases.

wrangler@4.71.0

Minor Changes
#11656 ec2459e Thanks @prydt! - feat(hyperdrive): add MySQL SSL mode and Custom CA support

Hyperdrive now supports MySQL-specific SSL modes (REQUIRED, VERIFY_CA, VERIFY_IDENTITY) alongside the existing PostgreSQL modes. The --sslmode flag now validates the provided value based on the database scheme (PostgreSQL or MySQL) and enforces appropriate CA certificate requirements for each.

Usage:
# MySQL with CA verification
wrangler hyperdrive create my-config --connection-string="mysql://user:pass@host:3306/db" --sslmode=VERIFY_CA --ca-certificate-id=<cert-id>
PostgreSQL (unchanged)
wrangler hyperdrive create my-config --connection-string="postgres://user:pass@host:5432/db" --sslmode=verify-full --ca-certificate-id=<cert-id>
Patch Changes

Updated dependencies [5cc8fcf]:

@cloudflare/unenv-preset@2.15.0

miniflare@4.20260301.1

wrangler@4.70.0

Minor Changes
#11332 6a8aa5f Thanks @nikitassharma! - Users are now able to configure DockerHub credentials and have containers reference images stored there.

DockerHub can be configured as follows:
echo $PAT_TOKEN | npx wrangler@latest containers registries configure docker.io --dockerhub-username=user --secret-name=DockerHub_PAT_Token
Containers can then specify an image from DockerHub in their wrangler.jsonc as follows:
"containers": {
  "image": "docker.io/namespace/image:tag",
  ...
}
#12649 35b2c56 Thanks @gabivlj! - Add experimental support for containers to workers communication with interceptOutboundHttp

This feature is experimental and requires adding the "experimental" compatibility flag to your Wrangler configuration.

#12701 23a365a Thanks @jamesopstad! - Add local dev validation for the experimental secrets configuration property

When the new secrets property is defined, wrangler dev and vite dev now validate secrets declared in secrets.required. When required secrets are missing from .dev.vars or .env/process.env, a warning is logged listing the missing secret names.

... (truncated)

Commits

9dff00c Version Packages (#12748)
331d4de Revert "Bump the workerd-and-workers-types group with 2 updates" (#12776)
48bbe20 Bump the workerd-and-workers-types group with 2 updates (#12768)
ec2459e Add MySQL SSL options for hyperdrive creation (#11656)
5cc8fcf [unenv] Use the native workerd perf_hooks modules when available (#10618)
ea57dfd Version Packages (#12702)
bf9cb3d feat: add configurable step limits for Workflows (#12622)
6a8aa5f Allow users to configure DockerHub for use with containers (#11332)
d672e2e Fix SolidStart autoconfig for projects using version 2.0.0-alpha or later (#1...
35b2c56 containers: Add container and test Containers interceptOutboundHttp (#12649)
Additional commits viewable in compare view

Updates @smithy/config-resolver from 2.2.0 to 4.4.10

Release notes

Sourced from @smithy/config-resolver's releases.

@smithy/config-resolver@4.4.10

Patch Changes

a4d95e6: Set downlevel types to be used in typescript@'<4.5'

Updated dependencies [a4d95e6]

@smithy/node-config-provider@4.3.11

@smithy/util-config-provider@4.2.2

@smithy/util-middleware@4.2.11

@smithy/util-endpoints@3.3.2

Changelog

Sourced from @smithy/config-resolver's changelog.

4.4.10

Patch Changes

a4d95e6: Set downlevel types to be used in typescript@'<4.5'

Updated dependencies [a4d95e6]

@smithy/node-config-provider@4.3.11

@smithy/util-config-provider@4.2.2

@smithy/util-middleware@4.2.11

@smithy/util-endpoints@3.3.2

4.4.9

Patch Changes

Updated dependencies [d0954cc]

@smithy/types@4.13.0

@smithy/node-config-provider@4.3.10

@smithy/util-endpoints@3.3.1

@smithy/util-middleware@4.2.10

4.4.8

Patch Changes

Updated dependencies [2bf677c]

@smithy/util-endpoints@3.3.0

4.4.7

Patch Changes

03c3dc8: update for rollup build externalLiveBindings=false

Updated dependencies [03c3dc8]

@smithy/node-config-provider@4.3.9

@smithy/types@4.12.1

@smithy/util-config-provider@4.2.1

@smithy/util-endpoints@3.2.9

@smithy/util-middleware@4.2.9

4.4.6

Patch Changes

Updated dependencies [745867a]

@smithy/types@4.12.0

@smithy/node-config-provider@4.3.8

@smithy/util-endpoints@3.2.8

@smithy/util-middleware@4.2.8

... (truncated)

Commits

5eab7ea Version NPM packages
a4d95e6 fix: set downlevel types to be used in typescript@'<4.5' (#1906)
2acebec Version NPM packages
06793cc Version NPM packages
1f51a0c Version NPM packages
a028fc5 chore: replace rimraf with premove (#1834)
0e8cc49 Version NPM packages
7e4bbf6 chore: upgrade rimraf to v5.0.10 (#1829)
521d67c Version NPM packages
8b90f36 Version NPM packages
Additional commits viewable in compare view

Updates fast-xml-parser from 4.2.5 to 5.4.1

Release notes

Sourced from fast-xml-parser's releases.

Separate Builder

XML Builder was the part of fast-xml-parser for years. But considering that any bug in builder may false-alarm the users who are only using parser and vice-versa, we have decided to split it into a separate package.

Migration

To migrate to fast-xml-builder;

From
import { XMLBuilder } from "fast-xml-parser";
To
import  XMLBuilder  from "fast-xml-builder";
XMLBuilder will be removed from current package in any next major version of this library. So better to migrate.

support strictReservedNames

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.9...v5.3.9

handle non-array input for XML builder && support maxNestedTags

support maxNestedTags

handle non-array input for XML builder when preserveOrder is true (By Angelo Coetzee)

save use of js properies Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.7...v5.3.8

CJS typing fix

What's Changed

Unexport X2jOptions at declaration site by @Drarig29 in NaturalIntelligence/fast-xml-parser#787

New Contributors

@Drarig29 made their first contribution in NaturalIntelligence/fast-xml-parser#787

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.6...v5.3.7

Entity security and performance

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.5...v5.3.6

v5.3.5

What's Changed

Add missing exports to fxp commonjs types by @jeremymeng in NaturalIntelligence/fast-xml-parser#782

fix: Escape regex char in entity name

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

Note: Due to some last quick changes on v4, detail of v4.5.3 & v4.5.4 are not updated here. v4.5.4x is the last tag of v4 in github repository. I'm extremely sorry for the confusion

5.4.2 / 2026-03-03

support maxEntityCount option

5.4.1 / 2026-02-25

fix (#785) unpairedTag node should not have tag content

5.4.0 / 2026-02-25

migrate to fast-xml-builder

5.3.9 / 2026-02-25

support strictReservedNames

5.3.8 / 2026-02-25

support maxNestedTags

handle non-array input for XML builder when preserveOrder is true (By Angelo Coetzee)

save use of js properies

5.3.7 / 2026-02-20

fix typings for CJS (By Corentin Girard)

5.3.6 / 2026-02-14

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

5.3.5 / 2026-02-08

fix: Escape regex char in entity name

update strnum to 2.1.2

add missing exports in CJS typings

5.3.4 / 2026-01-30

fix: handle HTML numeric and hex entities when out of range

5.3.3 / 2025-12-12

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

5.3.2 / 2025-11-14

fix for import statement for v6

5.3.1 / 2025-11-03

... (truncated)

Commits

4e7ca80 update release info
36023b4 fix (#785) unpairedTag node should not have tag content
b366026 separate builder
6f333a8 update release info
c3ffbab support strictReservedNames
c692040 update release info
107e34c avoid {} to create an empty object
60835a4 support maxNestedTags
f55657c avoid direct call to hasOwnProperty
c13a961 handle non-array input for XML builder when preserveOrder is true
Additional commits viewable in compare view

Updates minimatch from 3.1.2 to 3.1.5

Commits

7bba978 3.1.5
bd25942 docs: add warning about ReDoS
1a9c27c fix partial matching of globstar patterns
1a2e084 3.1.4
ae24656 update lockfile
b100374 limit recursion for **, improve perf considerably
26ffeaa lockfile update
9eca892 lock node version to 14
00c323b 3.1.3
30486b2 update CI matrix and actions
Additional commits viewable in compare view

Updates qs from 6.14.0 to 6.15.0

Changelog

Sourced from qs's changelog.

6.15.0

[New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)

[Fix] duplicates option should not apply to bracket notation keys (#514)

6.14.2

[Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)

[Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue

[Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)

[Fix] parse: enforce arrayLimit on comma-parsed values

[Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)

[Robustness] avoid .push, use void

[readme] document that addQueryPrefix does not add ? to empty output (#418)

[readme] clarify parseArrays and arrayLimit documentation (#543)

[readme] replace runkit CI badge with shields.io check-runs badge

[meta] fix changelog typo (arrayLength → arrayLimit)

[actions] fix rebase workflow permissions

6.14.1

[Fix] ensure arrayLimit applies to [] notation as well

[Fix] parse: when a custom decoder returns null for a key, ignore that key

[Refactor] parse: extract key segment splitting helper

[meta] add threat model

[actions] add workflow permissions

[Tests] stringify: increase coverage

[Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

Commits

d9b4c66 v6.15.0
cb41a54 [New] parse: add strictMerge option to wrap object/primitive conflicts in...
88e1563 [Fix] duplicates option should not apply to bracket notation keys
9d441d2 Merge backport release tags v6.0.6–v6.13.3 into main
85cc8ca v6.12.5
ffc12aa v6.11.4
0506b11 [actions] update reusable workflows
6a37faf [actions] update reusable workflows
8e8df5a [Fix] fix regressions from robustness refactor
d60bab3 v6.10.7
Additional commits viewable in compare view

Updates rollup from 4.53.3 to 4.59.0

Release notes

Sourced from rollup's releases.

v4.59.0

4.59.0

2026-02-22

Features

Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

#6275: Validate bundle stays within output dir (@lukastaegert)

v4.58.0

4.58.0

2026-02-20

Features

Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

#6256: docs: document PreRenderedChunk properties including isDynamicEntry and isImplicitEntry (@njg7194, @lukastaegert)

#6259: docs: Correct typo and improve sentence structure in docs for output.experimentalMinChunkSize (@millerick, @lukastaegert)

#6260: fix(deps): update rust crate swc_compiler_base to v47 (@renovate[bot], @lukastaegert)

#6261: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6262: Avoid unnecessary cloning of the code string (@lukastaegert)

#6263: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6265: chore(deps): lock file maintenance (@renovate[bot])

#6267: fix(deps): update minor/patch updates (@renovate[bot])

#6268: chore(deps): update dependency eslint-plugin-unicorn to v63 (@renovate[bot], @lukastaegert)

#6269: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6270: chore(deps): lock file maintenance (@renovate[bot])

#6272: forward NO_SIDE_EFFECTS annotations to function expressions in variable declarations (@lukastaegert)

v4.57.1

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

... (truncated)

Changelog

Sourced from rollup's changelog.

4.59.0

2026-02-22

Features

Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

#6275: Validate bundle stays within output dir (@lukastaegert)

4.58.0

2026-02-20

Features

Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

#6256: docs: document PreRenderedChunk properties including isDynamicEntry and isImplicitEntry (@njg7194, @lukastaegert)

#6259: docs: Correct typo and improve sentence structure in docs for output.experimentalMinChunkSize (@millerick, @lukastaegert)

#6260: fix(deps): update rust crate swc_compiler_base to v47 (@renovate[bot], @lukastaegert)

#6261: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6262: Avoid unnecessary cloning of the code string (@lukastaegert)

#6263: fix(deps): update minor/patch updates (@renovate[bot], @lukastaegert)

#6265: chore(deps): lock file maintenance (@renovate[bot])

#6267: fix(deps): update minor/patch updates (@renovate[bot])

#6268: chore(deps): update dependency eslint-plugin-unicorn to v63 (@renovate[bot], @lukastaegert)

#6269: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6270: chore(deps): lock file maintenance (@renovate[bot])

#6272: forward NO_SIDE_EFFECTS annotations to function expressions in variable declarations (@lukastaegert)

4.57.1

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)

Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)

#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])

#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6254: Fully include dynamic imports in a try-catch (@lukastaegert)

... (truncated)

Commits

ae84695 4.59.0
b39616e Update audit-resolve
c60770d Validate bundle stays within output dir (#6275)
33f39c1 4.58.0
b61c408 forward NO_SIDE_EFFECTS annotations to function expressions in variable decla...
7f00689 Extend agent instructions
e7b2b85 chore(deps): lock file maintenance (#6270)
2aa5da9 fix(deps): update minor/patch updates (#6267)
4319837 chore(deps): update dependency lru-cache to v11 (#6269)
c3b6b4b chore(deps): update dependency eslint-plugin-unicorn to v63 (#6268)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…dates Bumps the npm_and_yarn group with 4 updates in the / directory: [next](https://github.com/vercel/next.js), [@opennextjs/cloudflare](https://github.com/opennextjs/opennextjs-cloudflare/tree/HEAD/packages/cloudflare), [minimatch](https://github.com/isaacs/minimatch) and [rollup](https://github.com/rollup/rollup). Updates `next` from 15.5.9 to 15.5.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.5.9...v15.5.12) Updates `@opennextjs/cloudflare` from 1.14.3 to 1.17.1 - [Release notes](https://github.com/opennextjs/opennextjs-cloudflare/releases) - [Changelog](https://github.com/opennextjs/opennextjs-cloudflare/blob/main/packages/cloudflare/CHANGELOG.md) - [Commits](https://github.com/opennextjs/opennextjs-cloudflare/commits/@opennextjs/cloudflare@1.17.1/packages/cloudflare) Updates `wrangler` from 4.52.1 to 4.71.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.71.0/packages/wrangler) Updates `@smithy/config-resolver` from 2.2.0 to 4.4.10 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.10/packages/config-resolver) Updates `fast-xml-parser` from 4.2.5 to 5.4.1 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.2.5...v5.4.1) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `qs` from 6.14.0 to 6.15.0 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.15.0) Updates `rollup` from 4.53.3 to 4.59.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.53.3...v4.59.0) --- updated-dependencies: - dependency-name: next dependency-version: 15.5.12 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@opennextjs/cloudflare" dependency-version: 1.17.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: wrangler dependency-version: 4.71.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.10 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.4.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.59.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-03-08T10:42:07Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	ghostpaste	`db5b4bb`	Mar 08 2026, 10:42 AM

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates#150

build(deps): bump the npm_and_yarn group across 1 directory with 8 updates#150
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm_and_yarn-a538334cfe

dependabot bot commented on behalf of github Mar 8, 2026

Uh oh!

cloudflare-workers-and-pages bot commented Mar 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 8, 2026

v15.5.12

v15.5.11

Core Changes

Credits

v15.5.10

@​opennextjs/cloudflare@​1.17.1

Patch Changes

@​opennextjs/cloudflare@​1.17.0

Minor Changes

@​opennextjs/cloudflare@​1.16.6

Patch Changes

@​opennextjs/cloudflare@​1.16.5

Patch Changes

@​opennextjs/cloudflare@​1.16.4

Patch Changes

@​opennextjs/cloudflare@​1.16.3

Patch Changes

1.17.1

Patch Changes

1.17.0

Minor Changes

1.16.6

Patch Changes

1.16.5

Patch Changes

1.16.4

Patch Changes

1.16.3

wrangler@4.71.0

Minor Changes

Patch Changes

wrangler@4.70.0

Minor Changes

@​smithy/config-resolver@​4.4.10

Patch Changes

4.4.10

Patch Changes

4.4.9

Patch Changes

4.4.8

Patch Changes

4.4.7

Patch Changes

4.4.6

Patch Changes

Separate Builder

Migration

support strictReservedNames

handle non-array input for XML builder && support maxNestedTags

CJS typing fix

What's Changed

New Contributors

Entity security and performance

v5.3.5

What's Changed

6.15.0

6.14.2

6.14.1

v4.59.0

4.59.0

Features

Pull Requests

v4.58.0

4.58.0

Features

Pull Requests

v4.57.1

4.57.1

Bug Fixes

Pull Requests

4.59.0

Features

Pull Requests

4.58.0

Features

Pull Requests

4.57.1

Bug Fixes

`@opennextjs/cloudflare@1`.17.1

`@opennextjs/cloudflare@1`.17.0

`@opennextjs/cloudflare@1`.16.6

`@opennextjs/cloudflare@1`.16.5

`@opennextjs/cloudflare@1`.16.4

`@opennextjs/cloudflare@1`.16.3

`@smithy/config-resolver@4`.4.10

cloudflare-workers-and-pages bot commented Mar 8, 2026 •

edited

Loading