From ee5e810cbc0b9128bf07142a5f6f0d18594e606b Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 5 Nov 2026 12:53:15 +0000 Subject: [PATCH] Version Packages (beta) --- .changeset/pre.json | 15 +++++ packages/cli/CHANGELOG.md | 119 ++++++++++++++++++++++++++++++++++++++ packages/cli/package.json | 2 +- 3 files changed, 135 insertions(+), 1 deletion(-) diff --git a/.changeset/pre.json b/.changeset/pre.json index 3280e5a59..6c702e5b6 100644 --- a/.changeset/pre.json +++ b/.changeset/pre.json @@ -28,7 +28,9 @@ "cli-search-ranking", "cli-telemetry-namespace", "command-metadata-defaults", + "complete-destructive-force", "completions-hint-once", + "confirmed-operation-labels", "cuddly-rivers-shine", "d1-migration-name-reserved-chars", "dependencies-instrumentation-env", @@ -44,6 +46,8 @@ "first-public-beta", "fix-composed-body-flags", "fix-enum-file-choices", + "fix-multipart-file-arrays", + "fix-option-metadata-names", "fix-query-array-flags", "forge-wasm-plugin", "global-boolean-values", @@ -67,6 +71,7 @@ "noninteractive-abort-exit", "pages-deploy-guidance", "path-parameter-overrides", + "plain-text-body-metadata", "plain-version-output", "pnpm-init-build-approvals", "prebuilt-mode-validation", @@ -78,6 +83,7 @@ "python-vendored-module-names", "quick-tunnels-allowed-mail", "quiet-delegation-environment", + "quiet-help-unknown-commands", "quiet-login-scopes", "quiet-workers-local", "raw-response-headers", @@ -86,9 +92,11 @@ "refresh-project-after-setup", "registrar-domain-check", "rename-colliding-api-flags", + "renovate-workers-sdk-1a2851b425be", "renovate-workers-sdk-1b53b55dda14", "renovate-workers-sdk-2a564b65b09b", "renovate-workers-sdk-5677efb87bb6", + "renovate-workers-sdk-7b9e82b14ea8", "renovate-workers-sdk-83342ab9935f", "renovate-workers-sdk-86b7fdd7e599", "renovate-workers-sdk-ab7ff531736d", @@ -96,8 +104,11 @@ "renovate-workers-sdk-b7f26685a496", "renovate-workers-sdk-d09769c8965e", "renovate-workers-sdk-dce4c81e5ce3", + "renovate-workers-sdk-e61134ecd389", + "require-raw-request-bodies", "scope-nested-body-validation", "search-telemetry", + "show-pagination-info", "skip-api-project-config", "telemetry-delegation-versions", "temporary-accounts", @@ -125,6 +136,7 @@ "update-openapi-2d3b9ab6825d", "update-openapi-319dc756af2a", "update-openapi-536d02b4bd56", + "update-openapi-57b5196b0cb6", "update-openapi-59bd82aa6c34", "update-openapi-5de500b2959b", "update-openapi-67c5887b849f", @@ -151,6 +163,9 @@ "update-openapi-fdc1aa8a39e2", "update-setup-migration-deps", "update-workers-auth", + "validate-array-body-limits", + "validate-body-before-confirmation", + "verify-whoami-token-status", "vinext-vite-commands", "vite-plugin-v2-beta", "windows-node-delegates", diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md index 8239e53b3..af8236fd3 100644 --- a/packages/cli/CHANGELOG.md +++ b/packages/cli/CHANGELOG.md @@ -1,5 +1,124 @@ # cf +## 1.0.0-beta.28 + +### Minor Changes + +- ab9613a: Update the generated command surface for Forge OpenAPI release + `57b5196b0cb64ae395bebc71f9a933eeda99bf64`. +- 7ef1a2e: Validate array body limits instead of batching requests + + Reject JSON array bodies that exceed the API schema's `maxItems`, including inline + input, files, and dry runs. Remove automatic request batching for every HTTP method + so array limits cannot silently change an operation's meaning or lose results. + +### Patch Changes + +- 775a37f: Include destructive confirmation flags in command metadata + + Expose `--force` and its `-f` alias in shell completions and other metadata consumers for generated DELETE commands and operations that require confirmation. + +- b5c5756: Correct action labels for commands that require confirmation + + Show Updating/Updated for confirmed PUT and PATCH operations and neutral + Processing/Done labels for confirmed POST actions. Keep their operation-specific + warnings and `--force` behavior, and reject missing required `--body` input before + asking for confirmation. + +- a0eed39: Upload binary multipart arrays as file parts + + Fix `cf ai to-markdown --file path` to upload under the API's `files` field. + Accept multiple files with `--files @first.html @second.pdf` or repeated + `--files` flags, preserving each file's bytes and filename. + +- 7619cbd: Normalize generated option names in command metadata + + Use the command builder's kebab-case normalization for option metadata so + completions and tools advertise the flags accepted by existing commands. + +- 707e9ac: Describe plain-text `--body` correctly in command metadata + + For commands that send `--body` as `text/plain`, command metadata used by + `cf tools` now gives the same description as `--help` instead of asking for + raw JSON. This includes media types with parameters such as + `text/plain;charset=UTF-8`. When no description is provided, both metadata + and `--help` use plain-text wording. + +- 5b21733: Keep CLI usage errors concise + + Exit with an error for unknown top-level and nested command names followed by `--help` or `-h`. Show concise errors and italic hints to the relevant help command. Unknown global flags also list the available global flags. + +- f1e1d11: Update dependencies published from the Workers SDK repository: + + - `@cloudflare/autoconfig`: `0.9.2` → `0.9.3` + - `@cloudflare/build-output-utils`: `0.9.9` → `0.9.10` + - `@cloudflare/cli-shared-helpers`: `0.3.3` → `0.3.4` + - `@cloudflare/codemods`: `0.7.3` → `0.7.4` + - `@cloudflare/config`: `0.30.1` → `0.30.2` + - `@cloudflare/containers-shared`: `0.23.8` → `0.23.9` + - `@cloudflare/deploy-helpers`: `0.25.0` → `0.26.0` + - `@cloudflare/runtime-types`: `0.1.22` → `0.1.23` + - `@cloudflare/workers-auth`: `0.15.6` → `0.16.0` + - `@cloudflare/workers-utils`: `0.51.1` → `0.52.0` + - `miniflare`: `5.20261103.0-beta` → `5.20261104.0-beta` + +- 3f3a6af: Update dependencies published from the Workers SDK repository: + + - `@cloudflare/autoconfig`: `0.9.1` → `0.9.2` + - `@cloudflare/build-output-utils`: `0.9.8` → `0.9.9` + - `@cloudflare/cli-shared-helpers`: `0.3.2` → `0.3.3` + - `@cloudflare/codemods`: `0.7.2` → `0.7.3` + - `@cloudflare/config`: `0.30.0` → `0.30.1` + - `@cloudflare/containers-shared`: `0.23.7` → `0.23.8` + - `@cloudflare/deploy-helpers`: `0.24.5` → `0.25.0` + - `@cloudflare/runtime-types`: `0.1.21` → `0.1.22` + - `@cloudflare/workers-auth`: `0.15.5` → `0.15.6` + - `@cloudflare/workers-utils`: `0.51.0` → `0.51.1` + - `miniflare`: `5.20261102.0-beta` → `5.20261103.0-beta` + +- 5953756: Update dependencies published from the Workers SDK repository: + + - `@cloudflare/autoconfig`: `0.9.0` → `0.9.1` + - `@cloudflare/build-output-utils`: `0.9.7` → `0.9.8` + - `@cloudflare/cli-shared-helpers`: `0.3.1` → `0.3.2` + - `@cloudflare/codemods`: `0.7.1` → `0.7.2` + - `@cloudflare/config`: `0.29.1` → `0.30.0` + - `@cloudflare/containers-shared`: `0.23.6` → `0.23.7` + - `@cloudflare/deploy-helpers`: `0.24.4` → `0.24.5` + - `@cloudflare/runtime-types`: `0.1.20` → `0.1.21` + - `@cloudflare/workers-auth`: `0.15.4` → `0.15.5` + - `@cloudflare/workers-utils`: `0.50.2` → `0.51.0` + - `miniflare`: `5.20261101.0-beta` → `5.20261102.0-beta` + +- 12fddf0: Require input for mandatory plain-text request bodies + + Reject commands that omit a required plain-text body before authentication or API requests. Accept either `--body` or `--file`, preserve explicitly supplied empty raw bodies, and mention both input options in upload validation errors. Reject explicitly supplied empty file paths for raw and multipart uploads. + +- f3ebc1e: Expose pagination metadata on stderr + + Print the API's `result_info`, including cursors and page counts, on stderr so + list results can be paged with `--cursor` or the endpoint's page flags. Keep + stdout payloads unchanged for scripts, preserve metadata for object results + and passthrough requests, and suppress the notice with `--quiet`. + +- 1de7b1b: Validate `--body` before authenticating or confirming + + Commands now parse `--body`, and enforce its item limit, before + authenticating or showing a confirmation prompt. A malformed body or an + unreadable `@file` therefore fails straight away, without a login or account + lookup first and without asking you to confirm a destructive action. On JSON + endpoints, an empty `--body ""` is now rejected as invalid JSON instead of + being ignored, and `--dry-run` shows the `--file` path for raw-body uploads. + Multipart flags still keep `--body` literal, and `--file` still takes + precedence over `--body`; early validation only parses a body the command + will send. + +- 16cd290: Fix scoped API token validity reporting in `cf auth whoami` + + Check the token verification status so restricted user and account detail + endpoints do not make an active token appear invalid. Report unknown validity + when none of the available checks can establish the token's status. + ## 1.0.0-beta.27 ### Minor Changes diff --git a/packages/cli/package.json b/packages/cli/package.json index ab3bf1a0b..411ed0921 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -1,6 +1,6 @@ { "name": "cf", - "version": "1.0.0-beta.27", + "version": "1.0.0-beta.28", "description": "The Cloudflare CLI", "keywords": [ "ai",