[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm:cf (source)	1.0.0-beta.23 → 1.0.0-beta.25

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cloudflare/cf (npm:cf)

v1.0.0-beta.25

Compare Source

Minor Changes

• 24e9142: Group OAuth scopes by product

  cf auth login now summarizes granted scopes instead of hinting at the full list, and the new cf auth scopes command shows them in the product categories of Cloudflare's OAuth scope catalogue, which it caches for a day. Scopes the catalogue does not categorize are listed under Uncategorized. Pass a product name, --all, or --filter <term> to list the permissions, with non-read access highlighted and non-default scopes marked as custom. cf auth whoami is unchanged.

• d11af6b: Update the generated command surface for Forge OpenAPI release
  c4fbef6545cc3ae3ef7724398dc12e1fecbd9183.

• b53a8be: Update the generated command surface for Forge OpenAPI release
  d35bb4402f3864b83e802be14ca7f58eb920528b.

Patch Changes

• cc21ffb: Preserve arrays in generated query parameter flags

  Accept multiple values after a query array flag, such as --ids first second,
  while retaining support for repeated flags. Parse single values as arrays and
  preserve each operation's repeated-key or comma-separated query serialization.

• 5db5ab3: Update dependencies published from the Workers SDK repository:

  • @cloudflare/autoconfig: 0.8.1 → 0.8.2
  • @cloudflare/build-output-utils: 0.9.5 → 0.9.6
  • @cloudflare/cli-shared-helpers: 0.2.9 → 0.2.10
  • @cloudflare/codemods: 0.6.1 → 0.7.0
  • @cloudflare/config: 0.28.1 → 0.29.0
  • @cloudflare/containers-shared: 0.23.3 → 0.23.4
  • @cloudflare/deploy-helpers: 0.24.1 → 0.24.2
  • @cloudflare/runtime-types: 0.1.17 → 0.1.18
  • @cloudflare/workers-auth: 0.15.1 → 0.15.2
  • @cloudflare/workers-utils: 0.49.0 → 0.50.0
  • miniflare: 5.20261023.1-beta → 5.20261023.2-beta

• 119b2a4: Update dependencies published from the Workers SDK repository:

  • @cloudflare/deploy-helpers: 0.24.0 → 0.24.1
  • @cloudflare/runtime-types: 0.1.16 → 0.1.17

v1.0.0-beta.24

Compare Source

Minor Changes

• 014eadd: Delegate development registry resolution to Miniflare

  During the cf beta, stop overriding registry paths for cf dev and --local.
  Miniflare v5 owns the default <Cloudflare config directory>/dev-registry/v5
  and the CLOUDFLARE_DEV_REGISTRY_PATH override. cf no longer interprets
  CLOUDFLARE_REGISTRY_PATH or translates registry settings for child processes;
  exported environment variables reach the selected project tooling unchanged.

  Wrangler retains its own default registry for compatibility. Set the same
  CLOUDFLARE_DEV_REGISTRY_PATH for cf and compatible Wrangler/Vite processes when
  they need to share development resources.

• 6b19d0c: Upload every binary multipart field from a file

  Generated multipart commands now add a flag for each format: binary
  form field besides the payload that --file fills. For example,
  cf pages deployments create accepts --worker-js, --routes-json,
  --redirects, --worker-bundle, and
  --functions-filepath-routing-config-json, so a Pages Direct Upload can
  include an advanced-mode _worker.js with --worker-js @./_worker.js.
  These flags accept literal content or @path/to/file, matching other body
  flags while preserving uploaded file bytes and filenames. Both forms upload
  as file parts; inline content uses the original form field name as its filename.
  Before this change, --file only reached _headers and the other files
  could not be sent.

• 16a20a5: Update the generated command surface for Forge OpenAPI release
  e2b8c60b0222e9df2db7db83fdbf465f099a5189.

• ab93021: Update the generated command surface for Forge OpenAPI release
  fd89c869d0cfca05d431fa56fdec63ebe96e7c37.

• 2f2745f: Update the generated command surface for Forge OpenAPI release
  fdc1aa8a39e2e515f26c2fc6109d7e93050e811c.

Patch Changes

• 2e6c118: Explain dotenv variable expansion in --secrets-file help

  Document how dotenv secrets files passed to cf deploy and cf workers versions create expand $VAR and ${VAR} using process values and earlier file values. Process values override matching file keys, including explicitly empty values. Only keys declared in the secrets file are uploaded.

  Explain how to escape literal dollar signs with a backslash (PASSWORD=pa\$word), or use JSON to preserve values exactly. Only use trusted dotenv secrets files, since references can read and upload any process environment value. JSON secrets files and API bulk-secret commands retain their existing behavior.

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • Between 05:00 AM and 08:59 AM (* 5-8 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.