[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
cf (source)	1.0.0-beta.23 → 1.0.0-beta.26

---

Release Notes

cloudflare/cf (cf)

v1.0.0-beta.26

Compare Source

Minor Changes

• 45e01e0: Rank cf deploy first for static site and Pages deploy searches

  cf cli search now leaves out commands hidden from help, and hand-written commands can add search keywords or be excluded from results through their metadata. cf deploy gains keywords for static sites, Pages projects, and full-stack applications, and its description now says it deploys all three. The advisory cf pages deploy command, which only points to cf deploy, no longer appears in search results.

• 8f8a0ce: Update the generated command surface for Forge OpenAPI release
  e2d50301c8e4b04ebc02f6632c3a317d4960819d.

Patch Changes

• 0569848: Update dependencies published from the Workers SDK repository:

  • @cloudflare/autoconfig: 0.8.2 → 0.8.3
  • @cloudflare/cli-shared-helpers: 0.2.10 → 0.3.0
  • @cloudflare/containers-shared: 0.23.4 → 0.23.5
  • @cloudflare/deploy-helpers: 0.24.2 → 0.24.3
  • @cloudflare/runtime-types: 0.1.18 → 0.1.19
  • @cloudflare/workers-auth: 0.15.2 → 0.15.3
  • @cloudflare/workers-utils: 0.50.0 → 0.50.1
  • miniflare: 5.20261023.2-beta → 5.20261023.3-beta

v1.0.0-beta.25

Compare Source

Minor Changes

• 24e9142: Group OAuth scopes by product

  cf auth login now summarizes granted scopes instead of hinting at the full list, and the new cf auth scopes command shows them in the product categories of Cloudflare's OAuth scope catalogue, which it caches for a day. Scopes the catalogue does not categorize are listed under Uncategorized. Pass a product name, --all, or --filter <term> to list the permissions, with non-read access highlighted and non-default scopes marked as custom. cf auth whoami is unchanged.

• d11af6b: Update the generated command surface for Forge OpenAPI release
  c4fbef6545cc3ae3ef7724398dc12e1fecbd9183.

• b53a8be: Update the generated command surface for Forge OpenAPI release
  d35bb4402f3864b83e802be14ca7f58eb920528b.

Patch Changes

• cc21ffb: Preserve arrays in generated query parameter flags

  Accept multiple values after a query array flag, such as --ids first second,
  while retaining support for repeated flags. Parse single values as arrays and
  preserve each operation's repeated-key or comma-separated query serialization.

• 5db5ab3: Update dependencies published from the Workers SDK repository:

  • @cloudflare/autoconfig: 0.8.1 → 0.8.2
  • @cloudflare/build-output-utils: 0.9.5 → 0.9.6
  • @cloudflare/cli-shared-helpers: 0.2.9 → 0.2.10
  • @cloudflare/codemods: 0.6.1 → 0.7.0
  • @cloudflare/config: 0.28.1 → 0.29.0
  • @cloudflare/containers-shared: 0.23.3 → 0.23.4
  • @cloudflare/deploy-helpers: 0.24.1 → 0.24.2
  • @cloudflare/runtime-types: 0.1.17 → 0.1.18
  • @cloudflare/workers-auth: 0.15.1 → 0.15.2
  • @cloudflare/workers-utils: 0.49.0 → 0.50.0
  • miniflare: 5.20261023.1-beta → 5.20261023.2-beta

• 119b2a4: Update dependencies published from the Workers SDK repository:

  • @cloudflare/deploy-helpers: 0.24.0 → 0.24.1
  • @cloudflare/runtime-types: 0.1.16 → 0.1.17

v1.0.0-beta.24

Compare Source

Minor Changes

• 014eadd: Delegate development registry resolution to Miniflare

  During the cf beta, stop overriding registry paths for cf dev and --local.
  Miniflare v5 owns the default <Cloudflare config directory>/dev-registry/v5
  and the CLOUDFLARE_DEV_REGISTRY_PATH override. cf no longer interprets
  CLOUDFLARE_REGISTRY_PATH or translates registry settings for child processes;
  exported environment variables reach the selected project tooling unchanged.

  Wrangler retains its own default registry for compatibility. Set the same
  CLOUDFLARE_DEV_REGISTRY_PATH for cf and compatible Wrangler/Vite processes when
  they need to share development resources.

• 6b19d0c: Upload every binary multipart field from a file

  Generated multipart commands now add a flag for each format: binary
  form field besides the payload that --file fills. For example,
  cf pages deployments create accepts --worker-js, --routes-json,
  --redirects, --worker-bundle, and
  --functions-filepath-routing-config-json, so a Pages Direct Upload can
  include an advanced-mode _worker.js with --worker-js @./_worker.js.
  These flags accept literal content or @path/to/file, matching other body
  flags while preserving uploaded file bytes and filenames. Both forms upload
  as file parts; inline content uses the original form field name as its filename.
  Before this change, --file only reached _headers and the other files
  could not be sent.

• 16a20a5: Update the generated command surface for Forge OpenAPI release
  e2b8c60b0222e9df2db7db83fdbf465f099a5189.

• ab93021: Update the generated command surface for Forge OpenAPI release
  fd89c869d0cfca05d431fa56fdec63ebe96e7c37.

• 2f2745f: Update the generated command surface for Forge OpenAPI release
  fdc1aa8a39e2e515f26c2fc6109d7e93050e811c.

Patch Changes

• 2e6c118: Explain dotenv variable expansion in --secrets-file help

  Document how dotenv secrets files passed to cf deploy and cf workers versions create expand $VAR and ${VAR} using process values and earlier file values. Process values override matching file keys, including explicitly empty values. Only keys declared in the secrets file are uploaded.

  Explain how to escape literal dollar signs with a backslash (PASSWORD=pa\$word), or use JSON to preserve values exactly. Only use trusted dotenv secrets files, since references can read and upload any process environment value. JSON secrets files and API bulk-secret commands retain their existing behavior.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.