cloudflare/workers-sdk @cloudflare/vite-plugin@1.69.0

on GitHub

Minor Changes

• #16757 110539e Thanks @petebacondarwin! - Support auth profile selection for experimental cf-authenticated remote bindings

  Remote binding sessions can select an authentication profile with CLOUDFLARE_AUTH_PROFILE. Experimental cf authentication keeps account choices within the session instead of persisting them across invocations. Wrangler authentication retains its existing account persistence.

• #16801 a1f9218 Thanks @petebacondarwin! - Support custom Cloudflare API headers in Vite development

  Use CLOUDFLARE_API_HEADERS to supply additional headers for remote-binding preview uploads, experimental authentication, and Container API requests. Upgrade Wrangler and the shared API helpers together; request diagnostics redact sensitive headers even when log sanitization is disabled.

• #16730 9792d4f Thanks @petebacondarwin! - Support local Artifacts bindings in Vite plugin v1

  Set remote: false on an Artifacts binding in Wrangler configuration to use local repositories. With remoteBindings: false, Artifacts also uses the local simulator. Omitted remote continues to use deployed repositories when remote bindings are enabled. Local Artifacts requires Git 2.32 or newer.

Patch Changes

• #16730 9792d4f Thanks @petebacondarwin! - Preserve the server origin when constructing Worker request URLs

  HTTP requests, WebSocket upgrades, and static routing now consistently treat incoming paths as paths on the selected server origin in dev and preview. Encoded paths and query strings are preserved, and non-origin-form request targets are rejected.

• #16801 a1f9218 Thanks @petebacondarwin! - Update Miniflare to protect local Browser Rendering and Artifacts credentials

  Local Browser Rendering receives browser configuration and a usable home directory without unrelated host credentials. Local Artifacts Git forwarding also strips X-Auth-Key before passing requests to the repository.

• #16817 cdde2c8 Thanks @petebacondarwin! - Complete v1 builds without rebuilding environments or relying on Vite manifests

  Preserve assets imported by entry, child, and prerender Workers when framework plugins build environments first or delete their Vite manifests. Keep the Vite 6 builder callback and Wrangler output configuration used by v1.

• #16770 7bb9993 Thanks @petebacondarwin! - Delegate local Container cleanup to Miniflare

  Local development and preview now let Miniflare remove application containers, networking sidecars and snapshot clone volumes. Dispose the runtime when a dev-server restart removes the Cloudflare plugin, including overlapping restarts.

• #16704 73e4659 Thanks @petebacondarwin! - Update the v1 local runtime and remote binding authentication

  Use the November 4 runtime and default compatibility date. Local D1 reads outside sessions no longer write bookmarks, local static assets are read-only during preview, and local Secrets Store persistence is restricted to its owner. Remote binding Access login redirects produce an actionable authentication error while responses returned by bindings are preserved. New opt-in cf OAuth logins request the corrected PlanetScale setup scope.

• #16757 110539e Thanks @petebacondarwin! - Update the local development runtime to the November 9 release

  Update Miniflare and the coupled Wrangler and shared dependencies, keeping the Workers types aligned with the runtime. Remote binding preview uploads avoid materializing unused multipart request bodies, reducing memory use during session creation.

  The runtime includes session-scoped cleanup of local Container resources and security fixes for bundled dependencies. Node.js 22.12.0 or later is required by the updated runtime.