[security](deps-dev): bump @cloudflare/vite-plugin from 1.23.0 to 1.30.0#129
[security](deps-dev): bump @cloudflare/vite-plugin from 1.23.0 to 1.30.0#129dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) from 1.23.0 to 1.30.0. - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.30.0/packages/vite-plugin-cloudflare) --- updated-dependencies: - dependency-name: "@cloudflare/vite-plugin" dependency-version: 1.30.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
Required keyword not found in PR title or description. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f681f07f6d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| specifier: ^1.23.0 | ||
| version: 1.23.0(vite@7.3.1(@types/node@25.2.0)(jiti@2.6.1)(lightningcss@1.30.2)(tsx@4.21.0)(yaml@2.8.2))(workerd@1.20260131.0)(wrangler@4.62.0(@cloudflare/workers-types@4.20260203.0)) | ||
| specifier: ^1.30.0 | ||
| version: 1.30.0(vite@7.3.1(@types/node@25.2.0)(jiti@2.6.1)(lightningcss@1.30.2)(tsx@4.21.0)(yaml@2.8.2))(workerd@1.20260131.0)(wrangler@4.62.0(@cloudflare/workers-types@4.20260203.0)) |
There was a problem hiding this comment.
@cloudflare/vite-plugin@1.30.0 now requires wrangler: ^4.76.0 (pnpm-lock.yaml:1264-1268), but this change still resolves the template against wrangler@4.62.0 (packages/cloudflare-template/package.json:30, pnpm-lock.yaml:197). Because this package's dev, cf-typegen, deploy, and check scripts all invoke Wrangler, anyone using the checked-in lockfile gets an unsupported plugin/CLI combination in the main Cloudflare workflows instead of the version range the plugin is built against.
Useful? React with 👍 / 👎.
| }, | ||
| "devDependencies": { | ||
| "@cloudflare/vite-plugin": "^1.23.0", | ||
| "@cloudflare/vite-plugin": "^1.30.0", |
There was a problem hiding this comment.
/workspace/Design-System/AGENTS.md:19-39 calls it a “Hard rule” that any commit changing tooling must update FORJAMIE.md in the same change-set. This dependency bump changes the Cloudflare template toolchain, but FORJAMIE.md still reports Last updated: 2026-03-10 and its Recent Changes stop at 2026-03-15, so the required project map is already stale for this commit.
Useful? React with 👍 / 👎.
|
Closing: failing CI checks. Dependabot will regenerate if needed. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
jscraik
deleted the
dependabot/npm_and_yarn/cloudflare/vite-plugin-1.30.0
branch
1 participant
Bumps @cloudflare/vite-plugin from 1.23.0 to 1.30.0.
Release notes
Sourced from
@cloudflare/vite-plugin's releases.... (truncated)
Changelog
Sourced from
@cloudflare/vite-plugin's changelog.... (truncated)
Commits
7d2661bVersion Packages (#12945)4f7fd79Avoid splicing into the middleware stack for Vite versions other than v6 (#12...aa26784Convert from ESLint to oxlint, Prettier to oxfmt (#12930)a671740Version Packages (#12923)e25bd0eUpdate prettier to 3.8.1 (#12939)cff91ffUse Vite 8 for building the plugin and as the default for running tests (#12936)af20d06Add support for TanStack Start in@cloudflare/vite-pluginREADME (#11537)2e6b4abVersion Packages (#12876)876108a[vite-plugin] Fix crash when plugins send HMR events before runner initializa...12505c9feat(vite-plugin-cloudflare): add Vite 8 to the supported peer dependency ran...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)