workerd

What's Changed

• Allow queueMicrotask task to be minor gc'd

• Let the embedder keep V8 code caches for worker code

• Keep bundled Node module sources in one-byte strings

• Document the formatters, linters, and pre-commit hook

• Arm the HTTP completion timeout after receiving headers

• Rust I18N Rewrite

• Enable WebAssembly compact import section encoding

• rust jsg-macros: do not use private module from quote

• Make Rust JSG instance properties native data properties

• Add a compile-test harness for Rust

What's Changed

• Fix lowercase letter in EXPERIMENTAL_ANNOTATION_ID

• Account for pumped bytes in RPC stream EOF bookkeeping

• Fix sanitizer CI annotations and timing-sensitive tests

• Give the wrapper allocation regression a suitable budget

• Give metadata and RPC stream suites a suitable debug budget

• Keep Pyodide's compiled Wasm module alive across isolates

• [o11y] Make sure that exceptions are reported for the right request in actors

• Test and cleanup of reading steps

• Pin three tee() and detach divergences

• Pin where closed settles at a native body's end

• [nfc] Support strip_prefix for git repos in update script

What's Changed

• Add basic instance type to container start options

• Add more granular spans for Python workers bootstrap

• server: Rust server follow-ups (Windows drain, connection reuse, dead code)

• Reject failed server startup readiness with actionable diagnostics

• Give the persistent RPC storage suite a suitable test budget

• Launch Windows wd-tests without an unnecessary PowerShell process

• Collect zlib engines without conservative stack roots

• Streams: lifetime and termination handling fixes, backward error propagation in pipeTo()

• Pin late writes on the elided TransformStream path

• fix new Function("") behaviour

• Fixup streams cancelation regression

• Pin shared-memory writes to IdentityTransformStream

• Implement async trace mechanism

• Pin how stream constructors convert their arguments

• SQC-843 implements hyperdrive js binding

• Copy of #7575

• Stop the fetch cache option from overriding the origin's Cache-Control

What's Changed

• server: replace the C++ server with a Rust server over a C++ factory

• io: scope timer scheduling and clock clamping to input gates

• Add Kitesurf backend to Browser Run types

• Observe the stored alarm deadline before allowing delivery

• Clear not-delivered when marking an actor connect delivered

• Spread later actor call retries across the retry timeout

• Wait for the late write in connect-neuter-test instead of sleeping

• Begin deduplicating code in ts-streams

• Cage Blob payload pointers relative to the JS heap

• Move consumed timer queue head values

• Propagate cache-operation user spans through CacheClient

• Move per-isolate-bootstrap to api

• Pin expectedLength conversion in the streams suites

What's Changed

• Group queries in SRS by a top-level queryId

• Add wasm_esm_integration_builtins compat flag for runtime-compiled Wasm

What's Changed

• Consolidate streams-test.c++ into other tests

• Cleanup after from the startup-snapshot and WrapGlobal changes

• Do not install C++ streams when ts flag is on

• kj-hyper: hyper, rustls and kj's WebSockets behind kj-typed seams

What's Changed

• Treat an undefined TS identity stream chunk as a no-op write

• Use WrapGlobal for the global object

• Use WrapGlobal for the global object

• Accept a bare SharedArrayBuffer chunk in TS TextDecoderStream

• io: prevent parked move-later alarm from desynchronizing scheduled alarm

• STOR-5615: Replace @retryable with retryable()

• Settle a TS compression write or close cut short by a cancel

• Release pipeline on rejected rpc promises

• Jphillips/v8 15.6 compat

• Start a native source pull or sink write before marking it in flight

• Pin C++ IdentityTransformStream truncating a string chunk at NUL

• use Rc for refcounted IoChannels

• Read a TS streams strategy's highWaterMark once

• types: return IteratorResult<T, undefined> in SqlStorageCursor.next

• Internal build for #7549

• Run fetch wpts with TS streams

What's Changed

• Clamp the TS readable queue total at dequeue, as the spec does

• Skip internal build in stacked PRs

• Fix Node global declarations in workers types

• Fix HTTP delivery and structured logging test fixtures

• Handle tee branch close re-entrancy bugs

• Observer hooks for isolate cost attribution and V8 internal histograms

• Remove dead code from the TS readable stream

• Add fetch_setup span with children for in-isolate fetch setup

• [WO-1578] Add spanContext

• Introduce V8 startup-snapshot pipeline

• Dcarney/6908 internal build

• Explain the writable float queue total pin as spec double arithmetic

• Handle multiple algorithm clearance/re-entrancy issues

• Use precise utf8 length sizing

• Close a detached TS native writable and reject its pending writes

What's Changed

• Report wrapper cppgc allocations to V8 outside the no-GC scope

• fix wd_rust_proc_macro.bzl to be used downstream

• Contain exceptions thrown while releasing objects during GC

• Follow the spec's iterator protocol in TS ReadableStream.from

• Mark all streams tests large to give longer timeouts

What's Changed

• types: Support ReadonlyMap and ReadonlySet in RPC types

• Add more spans and tags for Python workers

• add generic Flagship binding types

• type structured Flagship evaluation context

• CFSQL-1814: Support direct D1 JSRPC responses and structured errors

• Add temporary actor retry diagnostics

• upstream patch

• kj-rs-tokio: a Runtime that lets Rust main own the KJ loop

• capnproto update

• remove own-util

What's Changed

• Rust: keep unit tests in <module>-test.rs, outside the production crate

• rust: deny unsafe and panicking code by default in every crate

• tailStreamSession() request size hint

• Tune re-entrancy and microtask resolution timing

• Pin SharedArrayBuffer view rejection across byte-stream entry points

• Align the TS ReadableStream async iterator with WebIDL

What's Changed

• worker: PromisedInterface, into_kj and notSupported for Rust interfaces

• Bump urllib3 from 2.6.3 to 2.8.0 in /src/pyodide/internal/sphinx

What's Changed

• Prepare TLS changes

• Workflows create batch overload

• Restore the C++ exception boundary in console.* decorators

• Accept an explicit onset parent span

• Fix reportQueryEvent fails to cover prepare statements

• internal build for #7585

• remove v8 nightly

What's Changed

• STOR-5615: Add the @retryable Durable Object decorator

• Enable debug for v8's heap.cc

• [nfc] Clarify V8 compatibility audit requirements

• Add Artifacts repository read types

• Centralize TraceContext construction

• Update compat date for durable_object_io_tasks_prevent_eviction

What's Changed

• Defer in-memory alarm task cancellation

• Upstream internal patches (2026-09-27)

• STOR-5615: Count full replay memory for JSRPC calls

• Remove a ton of rolled out autogates

• Run Bonk from ask-bonk main

• Refactor console method decoration for snapshotting

• Add ML-KEM and ML-DSA WebCrypto support

• Set compat date for flag preventing eviction of DO with active I/O tasks.

What's Changed

• handle exceptions thrown in TCP connect() handler

• update capnp-cpp and use kj::StaticArrayPtr for static tables

• Settle a TransformStream cancel from the writable's state

• STOR-5615: Apply retry policy to JSRPC calls

• Add jsg support for shared-ownership module sources

• Linting: reject more use-after-moves

• Release the transformer once a TransformStream finishes

• [Workers AI] Update model reasoning types

• ts streams identity write settlement

• Read detached and out-of-bounds DataView chunks as empty

What's Changed

• Close a native stream at the handoff of its data

• Lock a closed or errored native stream on tee()

• Validate a writable chunk's size only when it is enqueued

• STOR-5615: Add configurable Durable Object retries

• Add runtime support for running same-worker Workflows

• Adopt kj::StickyFlag to simplify basic promise and fulfiller use.

• Sqlite: support adding specific error context to internal exceptions

What's Changed

• Make workerd's entry point Rust

• Document and pin slowest-branch tee backpressure

• bump reviewer to opus 5.5

• Take queued bytes whole on auto-allocate default reads

• Increase the SQLite row limit to 8 MiB

• Keep a byobRequest held across tee() working

• Queue the chunk before filling reads with released bytes

• Add actor wait-until task lifetime tracking hook

• add some deserialization diagnostics

• Only run internal build for necessary paths

• STOR-5489: Retry Durable Object RPC calls

• Pin that a pipe waits for an erroring destination's in-flight write

• Observe the pipe's AbortSignal through an abort algorithm

• Claim DO retry tokens after actor construction

• [WO-1581] Enable span status and renaming

• Release the pipe source when validation fails after locking

What's Changed

• Allow tee() of a native body with an abandoned read in flight

• Pull local system images before create

• Use fresh isolate groups when available.

• Preserve VFS exceptions during SQLite open

• Introduce env.AI.websearch to WorkerD

• avoid initializing the UDP connect tracer twice

• [tsan] increase tsan history

• Accept a null source in MessageEventInit

• Internal build for #7470

• [o11y] Add undefined to tailStream return types

• STOR-5489: Account for RPC serializer capacity

• capnproto update

• Use weak self captures for refcounted continuations

• Forward REST caller context to downstream AI Gateway

• Error a tee branch or detached byte stream on a fractional fill at close

• Skip building an unobservable XThreadWaitList rejection

• Transfer byte-stream buffers to fixed length

• Pin async iterator interleavings that follow WebIDL

What's Changed

• [STOR-5489] Observe Durable Object RPC call attempts

• r2-rpc.c++: Copy put bodies out of the sandbox for MPK

• STOR-5489: Measure Durable Object RPC replay memory

• Make skill reference links portable

• Implement proper js rpc stream cancel propagation

• Walk the queued stream's cursors by index and skip the pinned cursor

• Linting: improve coroutine-hostile-raii test to check declaration nodes too

• Settle the head read first when respond() leaves a remainder

• Pin where closed settles relative to the below-min tail read

• Return an empty view from read(view) on a cancelled byte stream

• Deliver whole elements from native BYOB reads with multi-byte views

What's Changed

• Add a bazel option to disable remote python snapshot when testing

• [STOR-5489] Claim Durable Object RPC calls before dispatch

• Deflake connect-handler tests

• Use 2 isolates for tests to exercise cross-isolate

• implement RPC support for inbound UDP connect() event

• Support V8 15.5 API and test changes

• Copy body bytes out as they arrive and cancel the source when consump…

• Make snapshotContainer options optional

• Remove the C++ I/O backend (--//:io_backend=cxx)

• Buffer the compression stage's output in blocks released as they are …

What's Changed

• Transform a parked TransformStream write after one backpressure wait

• Python: Hot fix for stack switching gc crash (upstream pyodide#6466)

• Add Analytics SQL binding types

• Split actor retry exhaustion outcomes and increase backoff

• Document coroutine cleanup patterns

• [nfc] Fix compiler warnings based on KJ_HEADER_WARNINGS

What's Changed

• Keep native pipes from consuming a destination with pending writes

• Stop identity stream aborts from waiting for a read

• Wire the Rust I/O backend into workerd: --//:io_backend, on by default

• Fix container startup flags after cancellation

• Add a ring buffer for the streams' internal queues

• Clean up containers on graceful shutdown

• Move retry claim before actor construction

• Add just format <files>, just format-head

• Abstract CrossThreadWaitList into SyncWaitList and introduce XThreadWaitList

• update capnproto

• Improve TS stream primordial safety

• fix compile_flags.txt

• update capnproto

• Implement inbound UDP handler

• Add coroutine-hostile-raii lint for UnwindDetector, and add fixes

What's Changed

• kj-rs-tokio: timer test allows for the loop's cached time

• Update WPT to wpt-b875b21fd

• Expose hibernatable WebSocket count

• .bazelrc: add native_arm64 no-op

• Restrict GCs at inopportune moments.

• container client: Add support for cloudflare/debian-trixie

• types: add Browser Run binding methods

• node:fs: open without O_CREAT is ENOENT for a missing path

• node:fs: rename and copyFile replace an existing destination

• Handful of TS streams byob and tee fixes

• make actor maps own their keys

• Fix handling of pipe draining backpressure

What's Changed

• Add node:stream web-interop suite

• server: facet channel UaF after alarm timeout

• Disable retries for ineligible actor namespaces

• Report whether an actor fetch target supports retries

• Support web streams in stream.pipeline()

• CC-8364 Allow containers without imageName

• Expand js-rpc streams test coverage

• [STOR-5621] Prepare JS RPC call plans for retries

• node:fs: fix offset/length bounds validation for buffer read/write

• Add node:net suite

• Add scheduling time to alarm storage spans

• node:http server test suite

• node:fs: honour O_TRUNC in open

• Fix kj-rs waker result race during joined readiness

• Python: More minor improvements to patch_pyodide_asm

• Add clang-tidy check for stream creation

• Add node:http client suite

• thread-safe LOG_PERIODICALLY

• kj-rs: arm the poll event directly on a same-thread stored-waker wake

• Fix ScriptCompiler usage

• kj-rs-io: KJ async I/O interfaces backed by tokio

• [JSG] replace some recursive templates with auto deduce this

• More node:streams tests and fixes

• update capnp

• Support web streams in stream.compose()

• Destroy Readable.fromWeb on a chunk it cannot push

What's Changed

• Python workers: Replace string Pyodide patches with ast patches

• disable profiler tests under tsan

• expose client IP and port as remoteAddress in TCP connect() handler

• Update Cargo.toml dependencies and export Cargo.toml in BUILD.bazel

• node: make the isolate the port namespace for http and net servers

• Pin error() during a pending close in the readable stream suites

• Fix memory snapshots with Python 3.14

What's Changed

• Build cleanups

• Improve error message when top-level randomness is used in Python workers

• Refactor Durable Object Retries to be fetch-agnostic

• fix identity transform stream resolve/state change order

• node:net: add net.BoundSocket

• Python: Patch workers.wait_until as well as ctx.waitUntil

What's Changed

• Move Existing SQLite Sentry routing to exception details

• Update capnp-cpp to v2 head (Executor::isCurrent + setRunnable ordering)

• Upstream patches

• Additional streams test consolidation gaps

• Expose compatibility-date.capnp and add AGENTS.md guidance for new APIs

• Remove experimental tag from auto_grpc_convert

• web-socket: only log internal errors in abort task

• cleanup: migrating cxx to wd_ rules

• [tsan] fix rust std/tsan compatibility

• [tsan] run all tests under tsan

• Address multiple TS-streams defects / clarifications

What's Changed

• Fix internal build for forks of org members

What's Changed

• tsan: support macOS arm64 hosts alongside Linux x86_64

• Preserve predecessor rejection delivery state

• Instrument LOG_EXCEPTION to observe a new Sentry disposition exception detail

• tsan ci build

• Tag SQLite errors with SENTRY_DO

• Revert "Move wrapper handle to shim"

• WO-1582 Add tracing getActiveSpan

• Add cache, htmlrewriter, and formdata streams suites

• Store references for internal and user span parents on call argument …

• CC-8364 Expose configured container images to Durable Objects

• Enable perfetto in workerd v8 build

What's Changed

• workflows: add experimental subscribe support

• Mark jsg::{Async}Generator visitable

• Fix memory-cache/lib.rs to use try_update instead of fetch_update.

• Update capnp-cpp to pick up Executor::isCurrent()

• Next large chunk of streams consolidation tests and fixes

• Make cppgc sweeping synchronous

• Fix validator internal error when getters throw

• Internal build for !7224

• STOR-5489: Observe Durable Object fetch retry activity

• More streams test consolidation and gap filling

• Revert "Merge pull request #7231 from cloudflare/erikcorry/cppgc-eager-sweeping"

• tsan c++ and rust configurations

• Revert WebAssembly memory.discard support

What's Changed

• Switch pythonWorkers314 from compatEnableDate to impliedByAfterDate

• STOR:5489: Retry replica actor fetches

• STOR-5489: Count retried actor fetches once

• Upstream four patches

• Call authorizer in default column expressions

• tests lifetime fixes

• WO-1582 Refactor tracing span implementations

• WO-1582 Add span.recordException

What's Changed

• Automatically inject python_workers flags for python entrypoints

• Implement tryReadSync/tryWriteSync support

• Python: Development flag should always win over other Python flags

• STOR-5552: Serialize WebSocket writes across hibernation

• STOR-5489: Implement retry loop for actor fetch requests

• removed

  Remove experimental flag from container.inspect()

• STOR-5489: Propagate actor retry gate state

• update capnp

• Put snapshotDirectory API behind experimental flag

• Ensure hibernated websockets handle code updates gracefully

• Own legacy hibernation tag map keys

• Materialize borrowed values before invalidating storage

• Order owned storage before non-owning views

• Own actor cache keys queued for erasure

• switch SpanObserver to kj::Rc

• Keep TLS option storage alive with its context

• Update WPT

• Add digest streams suite; migrate existing DigestStream tests

• Add queuing strategies suite; migrate strategy tests

• Fix dynamic library loading into base snapshot for Pyodide 3.14.x

What's Changed

• Catch leaked SQLite handles during init failure

• Implement FileSystemWritableFileStream in TypeScript

• Add encoding streams suite; migrate existing TES/TDS tests

• Add compression streams suite; migrate existing CS/DS tests

What's Changed

• Update deps

• Use dynamic_cast to avoid type confusion

• Fix UaF of in-flight buffers in internal.c++

• Retain hibernatable WebSockets during active pumps

• Use shims to find wrappables

• streams: Cancel internal stream pumps before releasing their source

• Fix EventSource use-after-free

• Implements resource name arg in jsg-test's eval

• SQC-900 create dynamic hyperdrive types

• Increase timeouts for slow integration tests

• add kitesurf option to browser run quick action

• Create a WPT triage skill + bump WPT