@cloudflare/worker-bundler@0.2.4 v0.9.64
Graphify-Labs/graphifySep 18, 2026 → Sep 18, 20260 days between releases
What's New
Enhances cross-file resolution for Rust, Kotlin, and C++ while preserving Terraform attributes and secrets.
Breaking Changes
- Secret-named Terraform attributes are now redacted in output to prevent credential leaks.
- Rust generic impl resolution is now fail-closed for bounded types and traits.
New Features
- Terraform block attributes (AMI, instance_type, cidr_block, tags) are preserved and searchable.
- JavaScript inside PHP `<script>` blocks is indexed as JS with source line mapping.
- Rust `self.method()` calls resolve across files for simple generic impls.
- Kotlin `Receiver.method()` calls resolve across files.
- C++ scope-qualified static calls resolve across translation units.
Improvements
- npm package subpath imports are consolidated to prevent fragmentation.
- Extraction diagnostics now properly distinguish external references from dangling edges.
- JavaScript indexing is enhanced for PHP script blocks.
Bug Fixes
- Fixes for npm dependency fragmentation.
- Fixes for stale sidecar handling.
Upgrade Notes
Secret-named Terraform attributes are now redacted in `graph.json` to prevent credential leaks. Rust, Kotlin, and C++ resolution logic has been updated to be more strict; verify that generic impls and receivers resolve correctly.
The Two Releases
@cloudflare/worker-bundler@0.2.4
Sep 18, 2026· 1 month ago
A security patch update for the Cloudflare Worker Bundler raising the `smol-toml` dependency floor to fix a high-severity denial of service vulnerability.
Full release notesv0.9.64
Sep 18, 2026· 1 month ago
This release enhances cross-file code resolution for Rust, Kotlin, and C++, while improving Terraform attribute preservation and security. It also includes fixes for npm dependency fragmentation and stale sidecar handling.
Full release notes