build(deps-dev): bump miniflare from 3.20230807.0 to 3.20231030.0

[dependabot]

Bumps miniflare from 3.20230807.0 to 3.20231030.0.

Release notes

Sourced from miniflare's releases.

miniflare@3.20231030.0

Minor Changes

• #4324 16cc2e92 Thanks @​penalosa! - Update to latest workerd@1.20231030.0

• #4322 8a25b7fb Thanks @​dario-piotrowicz! - add unsafeEvalBinding option

  Add option to leverage the newly introduced UnsafeEval workerd binding API, such API is used to evaluate javascript code at runtime via the provided eval and newFunction methods.

  The API, for security reasons (as per the workers docs), is not to be use in production but it is intended for local purposes only such as local testing.

  To use the binding you need to specify a string value for the unsafeEvalBinding, such will be the name of the UnsafeEval bindings that will be made available in the workerd runtime.

  For example the following code shows how to set the binding with the UNSAFE_EVAL name and evaluate the 1+1 string:

  const mf = new Miniflare({
  	log,
  	modules: true,
  	script: `
        export default {
            fetch(req, env, ctx) {
                const two = env.UNSAFE_EVAL.eval('1+1');
                return new Response('two = ' + two); // returns 'two = 2'
            }
        }
    `,
  	unsafeEvalBinding: "UNSAFE_EVAL",
  });

Patch Changes

• #4397 4f8b3420 Thanks @​mrbbot! - fix: reject Miniflare#ready promise if Miniflare#dispose() called while waiting

• #4428 3637d97a Thanks @​mrbbot! - fix: add miniflare bin entry

  Miniflare 3 doesn't include a CLI anymore, but should log a useful error stating this when running npx miniflare. We had a script for this, but it wasn't correctly hooked up. 🤦 This change makes sure the required bin entry exists.

• #4321 29a59d4e Thanks @​mrbbot! - fix: ensure Mutex doesn't report itself as drained if locked

  Previously, Miniflare's Mutex implementation would report itself as drained if there were no waiters, regardless of the locked state. This bug meant that if you called but didn't await Miniflare#setOptions(), future calls to Miniflare#dispatchFetch() (or any other asynchronous Miniflare method) wouldn't wait for the options update to apply and the runtime to restart before

... (truncated)

Changelog

Sourced from miniflare's changelog.

3.20231030.0

Minor Changes

• #4324 16cc2e92 Thanks @​penalosa! - Update to latest workerd@1.20231030.0

• #4322 8a25b7fb Thanks @​dario-piotrowicz! - add unsafeEvalBinding option

  Add option to leverage the newly introduced UnsafeEval workerd binding API, such API is used to evaluate javascript code at runtime via the provided eval and newFunction methods.

  The API, for security reasons (as per the workers docs), is not to be use in production but it is intended for local purposes only such as local testing.

  To use the binding you need to specify a string value for the unsafeEvalBinding, such will be the name of the UnsafeEval bindings that will be made available in the workerd runtime.

  For example the following code shows how to set the binding with the UNSAFE_EVAL name and evaluate the 1+1 string:

  const mf = new Miniflare({
  	log,
  	modules: true,
  	script: `
        export default {
            fetch(req, env, ctx) {
                const two = env.UNSAFE_EVAL.eval('1+1');
                return new Response('two = ' + two); // returns 'two = 2'
            }
        }
    `,
  	unsafeEvalBinding: "UNSAFE_EVAL",
  });

Patch Changes

• #4397 4f8b3420 Thanks @​mrbbot! - fix: reject Miniflare#ready promise if Miniflare#dispose() called while waiting

• #4428 3637d97a Thanks @​mrbbot! - fix: add miniflare bin entry

  Miniflare 3 doesn't include a CLI anymore, but should log a useful error stating this when running npx miniflare. We had a script for this, but it wasn't correctly hooked up. 🤦 This change makes sure the required bin entry exists.

• #4321 29a59d4e Thanks @​mrbbot! - fix: ensure Mutex doesn't report itself as drained if locked

  Previously, Miniflare's Mutex implementation would report itself as drained if there were no waiters, regardless of the locked state. This bug meant that if you called but didn't await Miniflare#setOptions(), future calls to Miniflare#dispatchFetch() (or any other asynchronous Miniflare method) wouldn't wait for the options update to apply and the runtime to restart before sending requests. This change ensures we wait until the mutex is unlocked before reporting it as drained.

... (truncated)

Commits

• 08615aa Version Packages (#4291)
• 3637d97 fix: add miniflare bin entry (#4428)
• 7fbe193 Change default ip for dev server from 0.0.0.0 to * (#4307)
• 9bc52cf Improve Testing (#4325)
• 7678786 fix: cleanup temporary directory after shutting down workerd (#4400)
• 4f8b342 fix: reject Miniflare#ready promise if dispose()ed while waiting (#4397)
• 16cc2e9 Bump workerd (#4324)
• 8a25b7f Add support for unsafe eval bindings to miniflare (#4322)
• 29a59d4 [miniflare] fix: ensure Mutex doesn't report itself as drained if locked (#...
• d80e945 Bump Miniflare Durable Object eviction test timeout (#4320)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like miniflare is up-to-date now, so this is no longer needed.