Bump the npm-patching group with 69 updates

[dependabot]

Bumps the npm-patching group with 69 updates:

Package	From	To
@simplewebauthn/server	13.3.2	13.3.3
otplib	13.4.1	13.5.0
pg	8.22.0	8.23.0
@types/pg	8.20.0	8.23.1
@types/node	26.1.2	26.4.0
@vitest/coverage-v8	4.1.10	4.1.11
vitest	4.1.10	4.1.11
wrangler	4.115.0	4.127.1
@cloudflare/workerd-darwin-64	1.20260722.1	1.20260828.1
@cloudflare/workerd-darwin-arm64	1.20260722.1	1.20260828.1
@cloudflare/workerd-linux-64	1.20260722.1	1.20260828.1
@cloudflare/workerd-linux-arm64	1.20260722.1	1.20260828.1
@cloudflare/workerd-windows-64	1.20260722.1	1.20260828.1
@jridgewell/sourcemap-codec	1.5.5	1.6.0
@noble/hashes	2.2.0	2.4.0
@otplib/core	13.4.1	13.5.0
@otplib/hotp	13.4.1	13.5.0
@otplib/plugin-base32-scure	13.4.1	13.5.0
@otplib/plugin-crypto-noble	13.4.1	13.5.0
@otplib/totp	13.4.1	13.5.0
@otplib/uri	13.4.1	13.5.0
@oxc-project/types	0.142.0	0.147.0
@peculiar/asn1-android	2.8.0	2.9.4
@peculiar/asn1-cms	2.8.0	2.9.4
@peculiar/asn1-csr	2.8.0	2.9.4
@peculiar/asn1-ecc	2.8.0	2.9.4
@peculiar/asn1-pfx	2.8.0	2.9.4
@peculiar/asn1-pkcs8	2.8.0	2.9.4
@peculiar/asn1-pkcs9	2.8.0	2.9.4
@peculiar/asn1-rsa	2.8.0	2.9.4
@peculiar/asn1-schema	2.8.0	2.9.4
@peculiar/asn1-x509	2.8.0	2.9.4
@peculiar/asn1-x509-attr	2.8.0	2.9.4
@rolldown/binding-android-arm64	1.2.1	1.2.6
@rolldown/binding-darwin-arm64	1.2.1	1.2.6
@rolldown/binding-darwin-x64	1.2.1	1.2.6
@rolldown/binding-freebsd-x64	1.2.1	1.2.6
@rolldown/binding-linux-arm-gnueabihf	1.2.1	1.2.6
@rolldown/binding-linux-arm64-gnu	1.2.1	1.2.6
@rolldown/binding-linux-arm64-musl	1.2.1	1.2.6
@rolldown/binding-linux-ppc64-gnu	1.2.1	1.2.6
@rolldown/binding-linux-s390x-gnu	1.2.1	1.2.6
@rolldown/binding-linux-x64-gnu	1.2.1	1.2.6
@rolldown/binding-linux-x64-musl	1.2.1	1.2.6
@rolldown/binding-openharmony-arm64	1.2.1	1.2.6
@rolldown/binding-win32-arm64-msvc	1.2.1	1.2.6
@rolldown/binding-win32-x64-msvc	1.2.1	1.2.6
@scure/base	2.2.0	2.4.0
@speed-highlight/core	1.2.17	1.2.24
@vitest/expect	4.1.10	4.1.11
@vitest/mocker	4.1.10	4.1.11
@vitest/pretty-format	4.1.10	4.1.11
@vitest/runner	4.1.10	4.1.11
@vitest/snapshot	4.1.10	4.1.11
@vitest/spy	4.1.10	4.1.11
@vitest/utils	4.1.10	4.1.11
es-module-lexer	2.3.1	2.3.2
magicast	0.5.3	0.5.4
miniflare	4.20260722.1	5.20260828.0-alpha
nanoid	3.3.16	3.3.18
pg-protocol	1.15.0	1.16.0
picomatch	4.0.5	4.0.7
postcss	8.5.25	8.5.26
pvutils	1.1.5	1.2.0
rolldown	1.2.1	1.2.6
tinyexec	1.2.4	1.3.0
undici	7.28.0	7.29.0
vite	8.2.0	8.2.2
workerd	1.20260722.1	1.20260828.1

Updates @simplewebauthn/server from 13.3.2 to 13.3.3

Release notes

Sourced from @​simplewebauthn/server's releases.

v13.3.3

Changes:

• [server] Updated MDS blob signature verification to support more algorithms (#788)
• [server] Updated MetadataService to know about the new FIDO MDS blob trust anchor certificate (#789)

Changelog

Sourced from @​simplewebauthn/server's changelog.

v13.3.3

Changes:

• [server] Updated MDS blob signature verification to support more algorithms (#788)
• [server] Updated MetadataService to know about the new FIDO MDS blob trust anchor certificate (#789)

Commits

• 4b189bd Update server version to 13.3.3
• 05db595 Add GlobalSign Root R46 to FIDO MDS default root certs (#789)
• 9bf80bf Use JWT header alg when verifying MDS blob (#788)
• See full diff in compare view

Updates otplib from 13.4.1 to 13.5.0

Release notes

Sourced from otplib's releases.

v13.5.0

What's Changed

• test: mutation-testing audit — close test gaps, add Stryker tooling + manual CI by @​yeojz in yeojz/otplib#865
• chore(deps-dev): bump vite from 8.0.14 to 8.0.16 by @​dependabot[bot] in yeojz/otplib#864
• chore(deps): bump the github-actions group across 1 directory with 7 updates by @​dependabot[bot] in yeojz/otplib#872
• chore(deps-dev): bump the dev-dependencies-minor group across 1 directory with 10 updates by @​dependabot[bot] in yeojz/otplib#871
• chore(deps): bump commander from 14.0.3 to 15.0.0 by @​dependabot[bot] in yeojz/otplib#866
• fix: reject unknown hash algorithms instead of silently substituting by @​yeojz in yeojz/otplib#874
• test(fuzz): cover scalar HOTP counter tolerance semantics by @​yeojz in yeojz/otplib#876
• chore(deps-dev): bump vite from 8.1.5 to 8.2.0 by @​dependabot[bot] in yeojz/otplib#875
• fix: constrain esbuild for VitePress by @​yeojz in yeojz/otplib#877
• chore(deps-dev): resolve dependabot alerts via pnpm overrides by @​yeojz in yeojz/otplib#878
• chore(deps-dev): migrate to TypeScript 6.0.3 by @​yeojz in yeojz/otplib#879
• docs: collapse API section by default by @​yeojz in yeojz/otplib#880
• release(packages): v13.5.0 by @​github-actions[bot] in yeojz/otplib#881

Full Changelog: yeojz/otplib@v13.4.1...v13.5.0

---

Important behaviour change in this bugfix release.

[!NOTE] This is a bugfix release but has potentially breaking behaviour for library users passing invalid inputs (which is more likely in non-TypeScript or loosely-typed environments).

This release (#874) makes hash algorithm validation consistent and strict across all crypto plugins. Previously, an unrecognised algorithm string was handled differently by each plugin:

input	noble	node	web
'SHA1'	silently computed SHA-512	worked (OpenSSL alias tolerance)	threw a raw TypeError
'totally-bogus'	silently computed SHA-512	threw	threw

All three now reject anything outside sha1/sha256/sha512 (case-insensitive, single-separator aliases like SHA-1 or sha_256 accepted) by throwing the new AlgorithmUnsupportedError, instead of silently substituting a different digest.

A library dependents passing a correctly-spelled algorithm name ('sha1', 'SHA1', 'sha-256', etc.) sees no change other than clearer, stricter errors on genuinely invalid input. In TypeScript-strict environments this is mostly moot as algorithm is typed as 'sha1' | 'sha256' | 'sha512', so a hardcoded typo like 'SHA1' won't compile. It can still surface if the value comes from outside the type system (e.g. JSON.parse, process.env, or an as HashAlgorithm cast).

If you were relying on noble's old silent fallback to SHA-512 for a misspelled or unrecognised algorithm string, tokens generated/verified that way will stop matching after upgrading with no error on the old side, just tokens that quietly stop verifying.

To recover

• Change algorithm to sha512,
• or re-enroll the affected accounts.

See "Existing enrollments stopped verifying after an upgrade" for details.

Commits

• 97069d8 release(packages): v13.5.0 (#881)
• 44d0dfc chore(deps-dev): migrate to TypeScript 6.0.3 (#879)
• 6b991f5 fix: reject unknown hash algorithms instead of silently substituting (#874)
• See full diff in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

• Add support for query pipelineing.

Commits

• df274d1 Publish
• eb19d0f Add opt-in query pipelining (#3652)
• See full diff in compare view

Updates @types/pg from 8.20.0 to 8.23.1

Commits

• See full diff in compare view

Updates @types/node from 26.1.2 to 26.4.0

Commits

• See full diff in compare view

Updates @types/pg from 8.20.0 to 8.23.1

Commits

• See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• See full diff in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates wrangler from 4.115.0 to 4.127.1

Release notes

Sourced from wrangler's releases.

wrangler@4.127.1

Patch Changes

• #15383 eb01850 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260826.1	^5.20260827.1
  workerd	1.20260826.1	1.20260827.1

• #15393 e1df91a Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260827.1	^5.20260828.1
  workerd	1.20260827.1	1.20260828.1

• Updated dependencies [eb01850, e1df91a, b23de74, 015550a, 015550a, 015550a, 3650d29, b23de74]:

  • miniflare@5.20260828.0-alpha

wrangler@4.127.0

Minor Changes

• #15356 fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

  The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

  {
    "workflows": [
      {
        "binding": "MY_WORKFLOW",
        "name": "my-workflow",
        "class_name": "MyWorkflow",
        "concurrency": { "limit": 10 }
      }
    ]
  }

Patch Changes

• #15367 412c79e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

... (truncated)

Commits

• f808554 Version Packages (#15385)
• b903a09 Pin @netlify/build-info to 10.5.1 and update pnpm patch (#14808)
• 3650d29 Rename Worker target fields from workerName to worker (#15373)
• a831498 Version Packages (#15372)
• fe265f8 [wrangler] Add per-workflow concurrency limit config (#15356)
• 92874f6 WC-5857 [wrangler] Upload preview deployments as multipart form data (#15375)
• e9df120 Support multiple named Workers in the build output (#15371)
• 5377aae Version Packages (#15354)
• e56d2e6 Revert "Version Packages" (#15355)
• d765e10 Version Packages (#15291)
• Additional commits viewable in compare view

Updates @cloudflare/workerd-darwin-64 from 1.20260722.1 to 1.20260828.1

Release notes

Sourced from @​cloudflare/workerd-darwin-64's releases.

v1.20260828.1

What's Changed

• IMAGES-2451: Fix negative text input check to allow streamable data by @​deven96 in cloudflare/workerd#7079
• Internal build for !7079 by @​ketanhwr in cloudflare/workerd#7117
• Implement memory cache V2 in safe Rust by @​danlapid in cloudflare/workerd#7110
• Add missing Workers AI model types by @​kflansburg in cloudflare/workerd#7135
• Consolidated IdentityTransformStream/FixedLengthStream Test Suite by @​jasnell in cloudflare/workerd#7133

Full Changelog: cloudflare/workerd@v1.20260827.1...v1.20260828.1

v1.20260827.1

What's Changed

• Add zlib-rs as an autogated backend for node:zlib by @​guybedford in cloudflare/workerd#7109
• fix(container-test): refcounted usage by @​git-bruh in cloudflare/workerd#7118
• Accept span completion after request teardown by @​apeacock1991 in cloudflare/workerd#7016
• Tag post-delivery exceptions to distinguish runtime failures by @​apeacock1991 in cloudflare/workerd#7116
• Update Pyodide version to 314.0.6 by @​ryanking13 in cloudflare/workerd#7115
• trivial tsan fixes by @​mikea in cloudflare/workerd#7122
• Restrict internal functions to nested parse by @​joshthoward in cloudflare/workerd#7128
• Fail script creation if TS-streams on with per-isolate autogate off by @​jasnell in cloudflare/workerd#7121
• Fix off-by-one and macro impls for TypedArray by @​LordGoatius in cloudflare/workerd#7107
• Route all zlib consumers through an autogated router by @​guybedford in cloudflare/workerd#7132
• Skip writable abort task if no current request by @​jasnell in cloudflare/workerd#7102
• capnp-mock.h: Clean up unused local KJ_LOG_AT(), etc. definitions by @​jclee in cloudflare/workerd#7134

Full Changelog: cloudflare/workerd@v1.20260826.1...v1.20260827.1

v1.20260826.1

What's Changed

• Fix node:fs cp to handle symlinks when copying into subdirectories by @​ryanking13 in cloudflare/workerd#7098
• Provide agent guidance on JSG_TRY vs. js.tryCatch by @​jasnell in cloudflare/workerd#7067
• Add ioContext.createObject by @​jasnell in cloudflare/workerd#7086
• Opencode agent/skill surgery by @​jasnell in cloudflare/workerd#7095
• 08-24-26 Build maintenance by @​fhanau in cloudflare/workerd#7104
• always copy websocket tags by @​mikea in cloudflare/workerd#7088
• BRAPI-1553: Add response metadata to Browser Run types by @​BernardoPe in cloudflare/workerd#7002
• Implement TS DigestStream by @​jasnell in cloudflare/workerd#7119

New Contributors

• @​BernardoPe made their first contribution in cloudflare/workerd#7002

Full Changelog: cloudflare/workerd@v1.20260825.1...v1.20260826.1

v1.20260825.1

What's Changed

• STOR-5552: Preserve in-flight WebSocket auto-responses (with fix) by @​apeacock1991 in cloudflare/workerd#7083
• cleanup and simplify compile-test.sh. by @​KirillTim in cloudflare/workerd#7101
• use Arc to create dynamic strings from, use it in modules-new by @​mikea in cloudflare/workerd#7090

... (truncated)

Commits

• 8ea6349 Release 2026-08-28
• 97fa7e1 Merge pull request #7133 from cloudflare/jasnell/streams-test-consolidation
• ff6cbe5 Merge pull request #7135 from kflansburg/fix/workers-ai-model-types-6698
• 2c003d7 Remove unreachable invalid-chunk fallback in identity byteSize
• fd17dd0 Expand identity suite per review: reason types, strategy size pin
• b016556 Restore non-identity stream tests pending readable/body suites
• 8d50557 Fixup issue in TS ITS and expand tests
• 41df2bd Use a single module list for ITS
• a008aae Complete the test audit and move to new test suite
• 8a055d5 Expand test coverage
• Additional commits viewable in compare view

Updates @cloudflare/workerd-darwin-arm64 from 1.20260722.1 to 1.20260828.1

Release notes

Sourced from @​cloudflare/workerd-darwin-arm64's releases.

v1.20260828.1

What's Changed

• IMAGES-2451: Fix negative text input check to allow streamable data by @​deven96 in cloudflare/workerd#7079
• Internal build for !7079 by @​ketanhwr in cloudflare/workerd#7117
• Implement memory cache V2 in safe Rust by @​danlapid in cloudflare/workerd#7110
• Add missing Workers AI model types by @​kflansburg in cloudflare/workerd#7135
• Consolidated IdentityTransformStream/FixedLengthStream Test Suite by @​jasnell in cloudflare/workerd#7133

Full Changelog: cloudflare/workerd@v1.20260827.1...v1.20260828.1

v1.20260827.1

What's Changed

• Add zlib-rs as an autogated backend for node:zlib by @​guybedford in cloudflare/workerd#7109
• fix(container-test): refcounted usage by @​git-bruh in cloudflare/workerd#7118
• Accept span completion after request teardown by @​apeacock1991 in cloudflare/workerd#7016
• Tag post-delivery exceptions to distinguish runtime failures by @​apeacock1991 in cloudflare/workerd#7116
• Update Pyodide version to 314.0.6 by @​ryanking13 in cloudflare/workerd#7115
• trivial tsan fixes by @​mikea in cloudflare/workerd#7122
• Restrict internal functions to nested parse by @​joshthoward in cloudflare/workerd#7128
• Fail script creation if TS-streams on with per-isolate autogate off by @​jasnell in cloudflare/workerd#7121
• Fix off-by-one and macro impls for TypedArray by @​LordGoatius in cloudflare/workerd#7107
• Route all zlib consumers through an autogated router by @​guybedford in cloudflare/workerd#7132
• Skip writable abort task if no current request by @​jasnell in cloudflare/workerd#7102
• capnp-mock.h: Clean up unused local KJ_LOG_AT(), etc. definitions by @​jclee in cloudflare/workerd#7134

Full Changelog: cloudflare/workerd@v1.20260826.1...v1.20260827.1

v1.20260826.1

What's Changed

• Fix node:fs cp to handle symlinks when copying into subdirectories by @​ryanking13 in cloudflare/workerd#7098
• Provide agent guidance on JSG_TRY vs. js.tryCatch by @​jasnell in cloudflare/workerd#7067
• Add ioContext.createObject by @​jasnell in cloudflare/workerd#7086
• Opencode agent/skill surgery by @​jasnell in cloudflare/workerd#7095
• 08-24-26 Build maintenance by @​fhanau in cloudflare/workerd#7104
• always copy websocket tags by @​mikea in cloudflare/workerd#7088
• BRAPI-1553: Add response metadata to Browser Run types by @​BernardoPe in cloudflare/workerd#7002
• Implement TS DigestStream by @​jasnell in cloudflare/workerd#7119

New Contributors

• @​BernardoPe made their first contribution in cloudflare/workerd#7002

Full Changelog: cloudflare/workerd@v1.20260825.1...v1.20260826.1

v1.20260825.1

What's Changed

• STOR-5552: Preserve in-flight WebSocket auto-responses (with fix) by @​apeacock1991 in cloudflare/workerd#7083
• cleanup and simplify compile-test.sh. by @​KirillTim in cloudflare/workerd#7101
• use Arc to create dynamic strings from, use it in modules-new by @​mikea in cloudflare/workerd#7090

... (truncated)

Commits

• 8ea6349 Release 2026-08-28
• 97fa7e1 Merge pull request #7133 from cloudflare/jasnell/streams-test-consolidation
• ff6cbe5 Merge pull request #7135 from kflansburg/fix/workers-ai-model-types-6698
• 2c003d7 Remove unreachable invalid-chunk fallback in identity byteSize
• fd17dd0 Expand identity suite per review: reason types, strategy size pin
• b016556 Restore non-identity stream tests pending readable/body suites
• 8d50557 Fixup issue in TS ITS and expand tests
• 41df2bd Use a single module list for ITS
• a008aae Complete the test audit and move to new test suite
• 8a055d5 Expand test coverage
• Additional commits viewable in compare view

Updates @cloudflare/workerd-linux-64 from 1.20260722.1 to 1.20260828.1

Release notes

Sourced from @​cloudflare/workerd-linux-64's releases.

v1.20260828.1

What's Changed

• IMAGES-2451: Fix negative text input check to allow streamable data by @​deven96 in cloudflare/workerd#7079
• Internal build for !7079 by @​ketanhwr in cloudflare/workerd#7117
• Implement memory cache V2 in safe Rust by @​danlapid in cloudflare/workerd#7110
• Add missing Workers AI model types by @​kflansburg in cloudflare/workerd#7135
• Consolidated IdentityTransformStream/FixedLengthStream Test Suite by @​jasnell in cloudflare/workerd#7133

Full Changelog: cloudflare/workerd@v1.20260827.1...v1.20260828.1

v1.20260827.1

What's Changed

• Add zlib-rs as an autogated backend for node:zlib by @​guybedford in cloudflare/workerd#7109
• fix(container-test): refcounted usage by @​git-bruh in cloudflare/workerd#7118
• Accept span completion after request teardown by @​apeacock1991 in cloudflare/workerd#7016
• Tag post-delivery exceptions to distinguish runtime failures by @​apeacock1991 in cloudflare/workerd#7116
• Update Pyodide version to 314.0.6 by @​ryanking13 in cloudflare/workerd#7115
• trivial tsan fixes by @​mikea in cloudflare/workerd#7122
• Restrict internal functions to nested parse by @​joshthoward in cloudflare/workerd#7128
• Fail script creation if TS-streams on with per-isolate autogate off by @​jasnell in cloudflare/workerd#7121
• Fix off-by-one and macro impls for TypedArray by @​LordGoatius in cloudflare/workerd#7107
• Route all zlib consumers through an autogated router by @​guybedford in cloudflare/workerd#7132
• Skip writable abort task if no current request by @​jasnell in cloudflare/workerd#7102
• capnp-mock.h: Clean up unused local KJ_LOG_AT(), etc. definitions by @​jclee in cloudflare/workerd#7134

Full Changelog: cloudflare/workerd@v1.20260826.1...v1.20260827.1

v1.20260826.1

What's Changed

• Fix node:fs cp to handle symlinks when copying into subdirectories by @​ryanking13 in cloudflare/workerd#7098
• Provide agent guidance on JSG_TRY vs. js.tryCatch by @​jasnell in cloudflare/workerd#7067
• Add ioContext.createObject by @​jasnell in cloudflare/workerd#7086
• Opencode agent/skill surgery by @​jasnell in cloudflare/workerd#7095
• 08-24-26 Build maintenance by @​fhanau in cloudflare/workerd#7104
• always copy websocket tags by @​mikea in cloudflare/workerd#7088
• BRAPI-1553: Add response metadata to Browser Run types by @​BernardoPe in cloudflare/workerd#7002
• Implement TS DigestStream by @​jasnell in cloudflare/workerd#7119

New Contributors

• @​BernardoPe made their first contribution in cloudflare/workerd#7002

Full Changelog: cloudflare/workerd@v1.20260825.1...v1.20260826.1

v1.20260825.1

What's Changed

• STOR-5552: Preserve in-flight WebSocket auto-responses (with fix) by @​apeacock1991 in cloudflare/workerd#7083
• cleanup and simplify compile-test.sh. by @​KirillTim in cloudflare/workerd#7101
• use Arc to create dynamic strings from, use it in modules-new by @​mikea in cloudflare/workerd#7090

... (truncated)

Commits

• 8ea6349 Release 2026-08-28
• 97fa7e1 Merge pull request #7133 from cloudflare/jasnell/streams-test-consolidation
• ff6cbe5 Merge pull request #7135 from kflansburg/fix/workers-ai-model-types-6698
• 2c003d7 Remove unreachable invalid-chunk fallback in identity byteSize
• fd17dd0 Expand identity suite per review: reason types, strategy size pin
• b016556 Restore non-identity stream tests pending readable/body suites
• 8d50557 Fixup issue in TS ITS and expand tests
• 41df2bd Use a single module list for ITS
• a008aae Complete the test audit and move to new test suite
• 8a055d5 Expand test coverage
• Additional commits viewable in compare view

Updates @cloudflare/workerd-linux-arm64 from 1.20260722.1 to 1.20260828.1

Release notes

Sourced from @​cloudflare/workerd-linux-arm64's releases.

v1.20260828.1

What's Changed

• IMAGES-2451: Fix negative text input check to allow streamable data by @​deven96 in cloudflare/workerd#7079
• Internal build for !7079 by @​ketanhwr in cloudflare/workerd#7117
• Implement memory cache V2 in safe Rust by @​danlapid in cloudflare/workerd#7110
• Add missing Workers AI model types by @​kflansburg in cloudflare/workerd#7135
• Consolidated IdentityTransformStream/FixedLengthStream Test Suite by @​jasnell in cloudflare/workerd#7133

Full Changelog: cloudflare/workerd@v1.20260827.1...v1.20260828.1

v1.20260827.1

What's Changed

• Add zlib-rs as an autogated backend for node:zlib by @​guybedford in cloudflare/workerd#7109
• fix(container-test): refcounted usage by @​git-bruh in cloudflare/workerd#7118
• Accept span completion after request teardown by @​apeacock1991 in cloudflare/workerd#7016
• Tag post-delivery exceptions to distinguish runtime failures by @​apeacock1991 in cloudflare/workerd#7116
• Update Pyodide version to 314.0.6 by @​ryanking13 in cloudflare/workerd#7115
• trivial tsan fixes by @​mikea in cloudflare/workerd#7122
• Restrict internal functions to nested parse by @​joshthoward in cloudflare/workerd#7128
• Fail script creation if TS-streams on with per-isolate autogate off by @​jasnell in cloudflare/workerd#7121
• Fix off-by-one and macro impls for TypedArray by @​LordGoatius in cloudflare/workerd#7107
• Route all zlib consumers through an autogated router by @​guybedford in cloudflare/workerd#7132
• Skip writable abort task if no current request by @​jasnell in cloudflare/workerd#7102
• capnp-mock.h: Clean up unused local KJ_LOG_AT(), etc. definitions by @​jclee in cloudflare/workerd#7134

Full Changelog: cloudflare/workerd@v1.20260826.1...v1.20260827.1

v1...

Description has been truncated