Skip to content

fix(deps): bump the non-major-deps group across 3 directories with 13 updates#17

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/cloudflare/apelsin-api/non-major-deps-e0f435413e
Open

fix(deps): bump the non-major-deps group across 3 directories with 13 updates#17
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/cloudflare/apelsin-api/non-major-deps-e0f435413e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 20, 2026

Bumps the non-major-deps group with 3 updates in the /cloudflare/apelsin-api directory: hono, @types/node and wrangler.
Bumps the non-major-deps group with 10 updates in the /cloudflare/apelsin-fe directory:

Package From To
wrangler 4.80.0 4.83.0
@react-router/node 7.14.0 7.14.1
@react-router/serve 7.14.0 7.14.1
isbot 5.1.36 5.1.39
react 19.2.4 19.2.5
react-dom 19.2.4 19.2.5
react-router 7.14.0 7.14.1
@cloudflare/vite-plugin 1.13.5 1.32.3
@react-router/dev 7.14.0 7.14.1
vite 8.0.3 8.0.9

Bumps the non-major-deps group with 2 updates in the /cloudflare/apelsin-media directory: wrangler and @cloudflare/workers-types.

Updates hono from 4.6.20 to 4.12.14

Release notes

Sourced from hono's releases.

v4.12.14

Security fixes

This release includes fixes for the following security issues:

Improper handling of JSX attribute names in hono/jsx SSR

Affects: hono/jsx. Fixes missing validation of JSX attribute names during server-side rendering, which could allow malformed attribute keys to corrupt the generated HTML output and inject unintended attributes or elements. GHSA-458j-xx4x-4375

Other changes

  • fix(aws-lambda): handle invalid header names in request processing (#4883) fa2c74fe

v4.12.13

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.12...v4.12.13

v4.12.12

Security fixes

This release includes fixes for the following security issues:

Middleware bypass via repeated slashes in serveStatic

Affects: Serve Static middleware. Fixes a path normalization inconsistency where repeated slashes (//) could bypass route-based middleware protections and allow access to protected static files. GHSA-wmmm-f939-6g9c

Path traversal in toSSG() allows writing files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path traversal issue where crafted ssgParams values could write files outside the configured output directory. GHSA-xf4j-xp2r-rqqx

Incorrect IP matching in ipRestriction() for IPv4-mapped IPv6 addresses

Affects: IP Restriction Middleware. Fixes improper handling of IPv4-mapped IPv6 addresses (e.g. ::ffff:127.0.0.1) that could cause allow/deny rules to be bypassed. GHSA-xpcf-pg52-r92g

Missing validation of cookie name on write path in setCookie()

Affects: setCookie(), serialize(), and serializeSigned() from hono/cookie. Fixes missing validation of cookie names on the write path, preventing inconsistent handling between parsing and serialization. GHSA-26pp-8wgv-hjvm

Non-breaking space prefix bypass in cookie name handling in getCookie()

Affects: getCookie() from hono/cookie. Fixes a discrepancy in cookie name handling that could allow attacker-controlled cookies to override legitimate ones and bypass prefix protections. GHSA-r5rp-j6wh-rvv4

... (truncated)

Commits

Updates @types/node from 25.5.2 to 25.6.0

Commits

Updates wrangler from 4.80.0 to 4.83.0

Release notes

Sourced from wrangler's releases.

wrangler@4.83.0

Minor Changes

  • #13391 60565dd Thanks @​mikenomitch! - Mark wrangler containers commands as stable

    This changes the status of the Containers CLI from open beta to stable. Wrangler no longer shows [open beta] labels or beta warning text for wrangler containers commands, so the help output matches the feature's current availability.

  • #13311 6cbcdeb Thanks @​ryanking13! - JS files imported by the Python Workers runtime SDK are now handled as ESM modules.

    This is not a user-facing change, but Python Workers users should update their wrangler version to make sure to get Python workers SDK working properly.

Patch Changes

  • #13450 6f63eaa Thanks @​petebacondarwin! - Fix POST/PUT requests with non-2xx responses throwing "fetch failed"

    Previously, sending a POST or PUT request that received a non-2xx response (e.g. 401, 400, 403) would throw a TypeError: fetch failed error. This was caused by an undici bug where isTraversableNavigable() incorrectly returned true, causing the 401 credential-retry block to execute in Node.js and fail on stream-backed request bodies. This has been fixed upstream in undici v7.24.8, so we've bumped our dependency and removed the previous pnpm patch workaround.

  • #13447 aef9825 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260410.1 1.20260413.1

  • #13475 eaaa728 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260413.1 1.20260415.1

  • #13386 5e5bbc1 Thanks @​mksglu! - Make startup network requests non-blocking on slow connections

    Wrangler makes network requests during startup (npm update check, request.cf data fetch) that previously blocked the CLI indefinitely on slow or degraded connections (airplane wifi, trains), causing 10+ second delays.

    • Update check: The banner now races the update check against a 100ms grace period. On a cache hit (most runs) the result resolves in <1ms via the I/O poll phase; on a cache miss the banner prints immediately without blocking. A 3s safety-net timeout caps the update-check library's auth-retry path.
    • request.cf fetch: The fetch to workers.cloudflare.com/cf.json now uses AbortSignal.timeout(3000), falling back to cached/default data on timeout.

  • #13469 07a918c Thanks @​1000hz! - wrangler preview no longer warns on inheritable binding types being missing from previews config.

  • #13463 90aee27 Thanks @​roerohan! - Remove unnecessary flagship:read OAuth scope

    The flagship:read scope is not needed since flagship:write already implies read access. This reduces the OAuth permissions requested during login to only what is required.

  • Updated dependencies [854d66c, 6f63eaa, aef9825, eaaa728, 58292f6, 5e5bbc1, d5ff5a4, 89c7829]:

    • miniflare@4.20260415.0

wrangler@4.82.2

... (truncated)

Commits
  • 4af4d54 Version Packages (#13461)
  • 6cbcdeb Vendor JS files in python workers SDK as esm modules (#13311)
  • eaaa728 Bump the workerd-and-workers-types group with 2 updates (#13475)
  • 07a918c fix(wrangler): wrangler preview no longer warns about missing inheritable b...
  • 60565dd Remove containers "beta" (#13391)
  • aef9825 Bump the workerd-and-workers-types group with 2 updates (#13447)
  • 051db1f Make all properties in previews optional (#13468)
  • 5efac31 [wrangler] Add e2e test to validate default OAuth scopes (#13465)
  • 7d81a83 Revert "[wrangler] fix: prevent remote binding sessions expiring during long ...
  • 90aee27 [wrangler] remove unnecessary flagship:read OAuth scope (#13463)
  • Additional commits viewable in compare view

Updates @types/node from 25.5.2 to 25.6.0

Commits

Updates wrangler from 4.80.0 to 4.83.0

Release notes

Sourced from wrangler's releases.

wrangler@4.83.0

Minor Changes

  • #13391 60565dd Thanks @​mikenomitch! - Mark wrangler containers commands as stable

    This changes the status of the Containers CLI from open beta to stable. Wrangler no longer shows [open beta] labels or beta warning text for wrangler containers commands, so the help output matches the feature's current availability.

  • #13311 6cbcdeb Thanks @​ryanking13! - JS files imported by the Python Workers runtime SDK are now handled as ESM modules.

    This is not a user-facing change, but Python Workers users should update their wrangler version to make sure to get Python workers SDK working properly.

Patch Changes

  • #13450 6f63eaa Thanks @​petebacondarwin! - Fix POST/PUT requests with non-2xx responses throwing "fetch failed"

    Previously, sending a POST or PUT request that received a non-2xx response (e.g. 401, 400, 403) would throw a TypeError: fetch failed error. This was caused by an undici bug where isTraversableNavigable() incorrectly returned true, causing the 401 credential-retry block to execute in Node.js and fail on stream-backed request bodies. This has been fixed upstream in undici v7.24.8, so we've bumped our dependency and removed the previous pnpm patch workaround.

  • #13447 aef9825 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260410.1 1.20260413.1

  • #13475 eaaa728 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260413.1 1.20260415.1

  • #13386 5e5bbc1 Thanks @​mksglu! - Make startup network requests non-blocking on slow connections

    Wrangler makes network requests during startup (npm update check, request.cf data fetch) that previously blocked the CLI indefinitely on slow or degraded connections (airplane wifi, trains), causing 10+ second delays.

    • Update check: The banner now races the update check against a 100ms grace period. On a cache hit (most runs) the result resolves in <1ms via the I/O poll phase; on a cache miss the banner prints immediately without blocking. A 3s safety-net timeout caps the update-check library's auth-retry path.
    • request.cf fetch: The fetch to workers.cloudflare.com/cf.json now uses AbortSignal.timeout(3000), falling back to cached/default data on timeout.

  • #13469 07a918c Thanks @​1000hz! - wrangler preview no longer warns on inheritable binding types being missing from previews config.

  • #13463 90aee27 Thanks @​roerohan! - Remove unnecessary flagship:read OAuth scope

    The flagship:read scope is not needed since flagship:write already implies read access. This reduces the OAuth permissions requested during login to only what is required.

  • Updated dependencies [854d66c, 6f63eaa, aef9825, eaaa728, 58292f6, 5e5bbc1, d5ff5a4, 89c7829]:

    • miniflare@4.20260415.0

wrangler@4.82.2

... (truncated)

Commits
  • 4af4d54 Version Packages (#13461)
  • 6cbcdeb Vendor JS files in python workers SDK as esm modules (#13311)
  • eaaa728 Bump the workerd-and-workers-types group with 2 updates (#13475)
  • 07a918c fix(wrangler): wrangler preview no longer warns about missing inheritable b...
  • 60565dd Remove containers "beta" (#13391)
  • aef9825 Bump the workerd-and-workers-types group with 2 updates (#13447)
  • 051db1f Make all properties in previews optional (#13468)
  • 5efac31 [wrangler] Add e2e test to validate default OAuth scopes (#13465)
  • 7d81a83 Revert "[wrangler] fix: prevent remote binding sessions expiring during long ...
  • 90aee27 [wrangler] remove unnecessary flagship:read OAuth scope (#13463)
  • Additional commits viewable in compare view

Updates wrangler from 4.80.0 to 4.83.0

Release notes

Sourced from wrangler's releases.

wrangler@4.83.0

Minor Changes

  • #13391 60565dd Thanks @​mikenomitch! - Mark wrangler containers commands as stable

    This changes the status of the Containers CLI from open beta to stable. Wrangler no longer shows [open beta] labels or beta warning text for wrangler containers commands, so the help output matches the feature's current availability.

  • #13311 6cbcdeb Thanks @​ryanking13! - JS files imported by the Python Workers runtime SDK are now handled as ESM modules.

    This is not a user-facing change, but Python Workers users should update their wrangler version to make sure to get Python workers SDK working properly.

Patch Changes

  • #13450 6f63eaa Thanks @​petebacondarwin! - Fix POST/PUT requests with non-2xx responses throwing "fetch failed"

    Previously, sending a POST or PUT request that received a non-2xx response (e.g. 401, 400, 403) would throw a TypeError: fetch failed error. This was caused by an undici bug where isTraversableNavigable() incorrectly returned true, causing the 401 credential-retry block to execute in Node.js and fail on stream-backed request bodies. This has been fixed upstream in undici v7.24.8, so we've bumped our dependency and removed the previous pnpm patch workaround.

  • #13447 aef9825 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260410.1 1.20260413.1

  • #13475 eaaa728 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260413.1 1.20260415.1

  • #13386 5e5bbc1 Thanks @​mksglu! - Make startup network requests non-blocking on slow connections

    Wrangler makes network requests during startup (npm update check, request.cf data fetch) that previously blocked the CLI indefinitely on slow or degraded connections (airplane wifi, trains), causing 10+ second delays.

    • Update check: The banner now races the update check against a 100ms grace period. On a cache hit (most runs) the result resolves in <1ms via the I/O poll phase; on a cache miss the banner prints immediately without blocking. A 3s safety-net timeout caps the update-check library's auth-retry path.
    • request.cf fetch: The fetch to workers.cloudflare.com/cf.json now uses AbortSignal.timeout(3000), falling back to cached/default data on timeout.

  • #13469 07a918c Thanks @​1000hz! - wrangler preview no longer warns on inheritable binding types being missing from previews config.

  • #13463 90aee27 Thanks @​roerohan! - Remove unnecessary flagship:read OAuth scope

    The flagship:read scope is not needed since flagship:write already implies read access. This reduces the OAuth permissions requested during login to only what is required.

  • Updated dependencies [854d66c, 6f63eaa, aef9825, eaaa728, 58292f6, 5e5bbc1, d5ff5a4, 89c7829]:

    • miniflare@4.20260415.0

wrangler@4.82.2

... (truncated)

Commits
  • 4af4d54 Version Packages (#13461)
  • 6cbcdeb Vendor JS files in python workers SDK as esm modules (#13311)
  • eaaa728 Bump the workerd-and-workers-types group with 2 updates (#13475)
  • 07a918c fix(wrangler): wrangler preview no longer warns about missing inheritable b...
  • 60565dd Remove containers "beta" (#13391)
  • aef9825 Bump the workerd-and-workers-types group with 2 updates (#13447)
  • 051db1f Make all properties in previews optional (#13468)
  • 5efac31 [wrangler] Add e2e test to validate default OAuth scopes (#13465)
  • 7d81a83 Revert "[wrangler] fix: prevent remote binding sessions expiring during long ...
  • 90aee27 [wrangler] remove unnecessary flagship:read OAuth scope (#13463)
  • Additional commits viewable in compare view

Updates wrangler from 4.80.0 to 4.83.0

Release notes

Sourced from wrangler's releases.

wrangler@4.83.0

Minor Changes

  • #13391 60565dd Thanks @​mikenomitch! - Mark wrangler containers commands as stable

    This changes the status of the Containers CLI from open beta to stable. Wrangler no longer shows [open beta] labels or beta warning text for wrangler containers commands, so the help output matches the feature's current availability.

  • #13311 6cbcdeb Thanks @​ryanking13! - JS files imported by the Python Workers runtime SDK are now handled as ESM modules.

    This is not a user-facing change, but Python Workers users should update their wrangler version to make sure to get Python workers SDK working properly.

Patch Changes

  • #13450 6f63eaa Thanks @​petebacondarwin! - Fix POST/PUT requests with non-2xx responses throwing "fetch failed"

    Previously, sending a POST or PUT request that received a non-2xx response (e.g. 401, 400, 403) would throw a TypeError: fetch failed error. This was caused by an undici bug where isTraversableNavigable() incorrectly returned true, causing the 401 credential-retry block to execute in Node.js and fail on stream-backed request bodies. This has been fixed upstream in undici v7.24.8, so we've bumped our dependency and removed the previous pnpm patch workaround.

  • #13447 aef9825 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260410.1 1.20260413.1

  • #13475 eaaa728 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260413.1 1.20260415.1

  • #13386 5e5bbc1 Thanks @​mksglu! - Make startup network requests non-blocking on slow connections

    Wrangler makes network requests during startup (npm update check, request.cf data fetch) that previously blocked the CLI indefinitely on slow or degraded connections (airplane wifi, trains), causing 10+ second delays.

    • Update check: The banner now races the update check against a 100ms grace period. On a cache hit (most runs) the result resolves in <1ms via the I/O poll phase; on a cache miss the banner prints immediately without blocking. A 3s safety-net timeout caps the update-check library's auth-retry path.
    • request.cf fetch: The fetch to workers.cloudflare.com/cf.json now uses AbortSignal.timeout(3000), falling back to cached/default data on timeout.

  • #13469 07a918c Thanks @​1000hz! - wrangler preview no longer warns on inheritable binding types being missing from previews config.

  • #13463 90aee27 Thanks @​roerohan! - Remove unnecessary flagship:read OAuth scope

    The flagship:read scope is not needed since flagship:write already implies read access. This reduces the OAuth permissions requested during login to only what is required.

  • Updated dependencies [854d66c, 6f63eaa, aef9825, eaaa728, 58292f6, 5e5bbc1, d5ff5a4, 89c7829]:

    • miniflare@4.20260415.0

wrangler@4.82.2

... (truncated)

Commits
  • 4af4d54 Version Packages (#13461)
  • 6cbcdeb Vendor JS files in python workers SDK as esm modules (#13311)
  • eaaa728 Bump the workerd-and-workers-types group with 2 updates (#13475)
  • 07a918c fix(wrangler): wrangler preview no longer warns about missing inheritable b...
  • 60565dd Remove containers "beta" (#13391)
  • aef9825 Bump the workerd-and-workers-types group with 2 updates (#13447)
  • 051db1f Make all properties in previews optional (#13468)
  • 5efac31 [wrangler] Add e2e test to validate default OAuth scopes (#13465)
  • 7d81a83 Revert "[wrangler] fix: prevent remote binding sessions expiring during long ...
  • 90aee27 [wrangler] remove unnecessary flagship:read OAuth scope (#13463)
  • Additional commits viewable in compare view

Updates @react-router/node from 7.14.0 to 7.14.1

Release notes

Sourced from @​react-router/node's releases.

v7.14.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141

Changelog

Sourced from @​react-router/node's changelog.

v7.14.1

Patch Changes

Commits

Updates @react-router/serve from 7.14.0 to 7.14.1

Release notes

Sourced from @​react-router/serve's releases.

v7.14.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141

Changelog

Sourced from @​react-router/serve's changelog.

v7.14.1

Patch Changes

Commits

Updates isbot from 5.1.36 to 5.1.39

Changelog

Sourced from isbot's changelog.

5.1.39

  • Pattern updates

5.1.38

  • Pattern updates

5.1.37

  • Better checking for non empty strings in the interface functions
  • [Internal] Build with tsup
Commits

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Commits

Updates react-router from 7.14.0 to 7.14.1

Release notes

Sourced from react-router's releases.

v7.14.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7141

Changelog

Sourced from react-router's changelog.

v7.14.1

Patch Changes

  • Fix a potential race condition that can occur when rendering a HydrateFallback and initial loaders land before the router.subscribe call happens in the RouterProvider layout effect
  • Normalize double-slashes in redirect paths
Commits

Updates @cloudflare/vite-plugin from 1.13.5 to 1.32.3

Release notes

Sourced from @​cloudflare/vite-plugin's releases.

@​cloudflare/vite-plugin@​1.32.3

Patch Changes

@​cloudflare/vite-plugin@​1.32.2

Patch Changes

  • Updated dependencies [9b2b6ba]:
    • wrangler@4.82.2

@​cloudflare/vite-plugin@​1.32.1

Patch Changes

@​cloudflare/vite-plugin@​1.32.0

Minor Changes

  • #13137 1313275 Thanks @​emily-shen! - Add e hotkey to open local explorer during dev

    Press e during vite dev to open the local explorer UI at /cdn-cgi/explorer, which allows you to inspect the state of your D1, R2, KV, DO and Workflow bindings.

Patch Changes

@​cloudflare/vite-plugin@​1.31.2

Patch Changes

@​cloudflare/vite-plugin@​1.31.1

Patch Changes

    Description has been truncated

@dependabot
fix(deps): bump the non-major-deps group across 3 directories with 13…
247b5a5 
… updates

Bumps the non-major-deps group with 3 updates in the /cloudflare/apelsin-api directory: [hono](https://github.com/honojs/hono), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).
Bumps the non-major-deps group with 10 updates in the /cloudflare/apelsin-fe directory:

| Package | From | To |
| --- | --- | --- |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.80.0` | `4.83.0` |
| [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) | `7.14.0` | `7.14.1` |
| [@react-router/serve](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve) | `7.14.0` | `7.14.1` |
| [isbot](https://github.com/omrilotan/isbot) | `5.1.36` | `5.1.39` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` |
| [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) | `7.14.0` | `7.14.1` |
| [@cloudflare/vite-plugin](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/vite-plugin-cloudflare) | `1.13.5` | `1.32.3` |
| [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev) | `7.14.0` | `7.14.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.3` | `8.0.9` |

Bumps the non-major-deps group with 2 updates in the /cloudflare/apelsin-media directory: [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) and [@cloudflare/workers-types](https://github.com/cloudflare/workerd).


Updates `hono` from 4.6.20 to 4.12.14
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.6.20...v4.12.14)

Updates `@types/node` from 25.5.2 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `@types/node` from 25.5.2 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `@react-router/node` from 7.14.0 to 7.14.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@7.14.1/packages/react-router-node)

Updates `@react-router/serve` from 7.14.0 to 7.14.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-serve/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/serve@7.14.1/packages/react-router-serve)

Updates `isbot` from 5.1.36 to 5.1.39
- [Changelog](https://github.com/omrilotan/isbot/blob/main/CHANGELOG.md)
- [Commits](omrilotan/isbot@v5.1.36...v5.1.39)

Updates `react` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react)

Updates `react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `react-router` from 7.14.0 to 7.14.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.14.1/packages/react-router)

Updates `@cloudflare/vite-plugin` from 1.13.5 to 1.32.3
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/vite-plugin-cloudflare/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/@cloudflare/vite-plugin@1.32.3/packages/vite-plugin-cloudflare)

Updates `@react-router/dev` from 7.14.0 to 7.14.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@7.14.1/packages/react-router-dev)

Updates `vite` from 8.0.3 to 8.0.9
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.9/packages/vite)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

Updates `@cloudflare/workers-types` from 4.20260418.1 to 4.20260420.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

Updates `wrangler` from 4.80.0 to 4.83.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.83.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: "@react-router/node"
  dependency-version: 7.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: "@react-router/serve"
  dependency-version: 7.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: isbot
  dependency-version: 5.1.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: react
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: react-router
  dependency-version: 7.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: "@cloudflare/vite-plugin"
  dependency-version: 1.32.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: "@react-router/dev"
  dependency-version: 7.14.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: vite
  dependency-version: 8.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 4.20260420.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
- dependency-name: wrangler
  dependency-version: 4.83.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: non-major-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants