agents@0.24.0 @cloudflare/worker-bundler@0.2.4

low risk

NodePassProject/AnywhereSep 18, 2026 → Sep 18, 20260 days between releases

What's New

Updates @cloudflare/worker-bundler to v0.2.4, fixing a high-severity TOML parsing denial of service vulnerability.

Improvements

  • Updates smol-toml floor to ^1.7.2 to fix a high-severity DoS vulnerability in TOML parsing.

Bug Fixes

  • Fixes a high-severity denial of service vulnerability via malformed TOML.

Upgrade Notes

Update @cloudflare/worker-bundler to version 0.2.4. No configuration changes are required.

The Two Releases

agents@0.24.0

agents@0.24.0

Sep 18, 2026· 1 month ago

A major feature update introducing the `Queue` and `State` Lifecycle capabilities, enhancing WebSockets with a new Cap'n Web transport, and restructuring how lifecycle capabilities claim traffic.

Full release notes
@cloudflare/worker-bundler@0.2.4

@cloudflare/worker-bundler@0.2.4

Sep 18, 2026· 1 month ago

A patch release focusing on security by updating the TOML parsing dependency to fix a high-severity denial of service vulnerability.

Full release notes