Cloudflare workerd

TypeScript ReadableStream.from now follows the spec's iterator protocol, and exceptions thrown while releasing objects during GC are contained. Also reports wrapper cppgc allocations to V8 outside the no-GC scope.

Generic Flagship binding types and typed structured Flagship evaluation context are now available, and D1 now supports direct JSRPC responses with structured errors. RPC types also support ReadonlyMap and ReadonlySet, plus more spans and tags for Python workers.

Workerd tuning includes re-entrancy and microtask resolution timing changes and SharedArrayBuffer view rejection pinned across byte-stream entry points. Also aligned the TypeScript ReadableStream async iterator with WebIDL and added a request size hint to tailStreamSession().

Rust interfaces gain PromisedInterface along with into_kj and notSupported support. Dependency bumps for next and urllib3 accompany the release.

Cloudflare workerd exposes new Durable Object snapshot APIs.

Adds a ctx.cache.invalidate() method to the Cache API for programmatically invalidating cached entries. Also wraps non-coercible values in JSG bindings and expands unit-test coverage of JSRPC retry paths.

Restored the C++ exception boundary in console.* decorators and added a Workflows create batch overload. Also fixed reportQueryEvent failing to cover prepare statements.

What's Changed

• [build] 09-30-26 update deps by @fhanau in https://github.com/cloudflare/workerd/pull/7591

Full Changelog: https://github.com/cloudflare/workerd/compare/v1.20260930.2...v1.20261001.1

Fixed spurious unhandled rejections emitted by Durable Object fetch retries, and reverted the compat date update for durable_object_io_tasks_prevent_eviction.

Adds a @retryable Durable Object decorator and Artifacts repository read types, updates to V8 15.5.35.7, and bumps the compat date for durable_object_io_tasks_prevent_eviction. Also centralizes TraceContext construction and enables debug for V8's heap.cc.

WebCrypto now supports the ML-KEM and ML-DSA post-quantum algorithms. Also set a compat date for the flag preventing eviction of Durable Objects with active I/O tasks, and deferred in-memory alarm task cancellation.

The C++ implementation of the memory-cache and the MEMORY_CACHE_V2 autogate have been removed.

What's Changed

• kj-rs: drop a KjOwn through kj::Own's own destructor by @danlapid in https://github.com/cloudflare/workerd/pull/7491
• Make Bonk reviews reliable and context-aware by @danlapid in https://github.com/cloudflare/workerd/pull/7551
• Make Bonk reviews…

Fixes exceptions thrown in TCP connect handlers, settles TransformStream cancels from the writable's state, reads detached or out-of-bounds DataView chunks as empty, and updates Workers AI model reasoning types.

Durable Object retries are now configurable, and the runtime supports running same-worker Workflows. Also fixed several native stream issues: streams now close at data handoff, closed or errored streams lock on tee(), and writable chunk size is validated only when enqueued.

The SQLite row limit is increased to 8 MiB, and Durable Object RPC calls now retry, with retry tokens claimed after actor construction. Also includes stream/pipe backpressure fixes across tee, readable byte streams, and abort handling.

Workerd introduces env.AI.websearch and forwards REST caller context to downstream AI Gateway. Byte-stream handling is tightened: tee branches and detached streams now error on a fractional fill at close, tee() works on a native body with an abandoned read in flight, and byte-stream buffers are transferred to fixed length. Also fixed a duplicate UDP connect tracer initialization and preserved VFS exceptions during SQLite open.

Implemented proper JavaScript RPC stream cancel propagation and fixed multi-byte BYOB reads to deliver whole elements, plus a cancelled byte stream now returns an empty view from read(view). Also observes Durable Object RPC call attempts and replay memory, and copies R2 put bodies out of the sandbox for MPK.

Inbound UDP connect() events now support RPC, Durable Object RPC calls are claimed before dispatch, and body bytes are copied out as they arrive with the source cancelled on consumption. The C++ I/O backend (--//:io_backend=cxx) was removed, and the build moved to LLVM 22 and V8 15.5.

Full Changelog: https://github.com/cloudflare/workerd/compare/v1.20260920.1...v1.20260921.1