[pull] main from cloudflare:main

.changeset/brave-mails-take.md

@@ -0,0 +1,5 @@
+---
+"@cloudflare/local-explorer-ui": patch
+---
+
+Fix local explorer's sidebar header link to point to the correct `/cdn-cgi/explorer/` path rather than `/`.

.changeset/c3-frameworks-update-12805.md

@@ -0,0 +1,11 @@
+---
+"create-cloudflare": patch
+---
+
+Update dependencies of "create-cloudflare"
+
+The following dependency versions have been updated:
+
+| Dependency      | From   | To     |
+| --------------- | ------ | ------ |
+| @angular/create | 21.2.0 | 21.2.1 |

.changeset/c3-frameworks-update-12806.md

@@ -0,0 +1,11 @@
+---
+"create-cloudflare": patch
+---
+
+Update dependencies of "create-cloudflare"
+
+The following dependency versions have been updated:
+
+| Dependency  | From    | To      |
+| ----------- | ------- | ------- |
+| create-vike | 0.0.591 | 0.0.592 |

.changeset/dependabot-update-12861.md

@@ -0,0 +1,12 @@
+---
+"miniflare": patch
+"wrangler": patch
+---
+
+Update dependencies of "miniflare", "wrangler"
+
+The following dependency versions have been updated:
+
+| Dependency | From         | To           |
+| ---------- | ------------ | ------------ |
+| workerd    | 1.20260310.1 | 1.20260312.1 |

.changeset/rude-steaks-kick.md

@@ -0,0 +1,12 @@
+---
+"miniflare": patch
+---
+
+Fix local explorer route matching to be more precise
+
+Previously, the route matching used `startsWith("/cdn-cgi/explorer")` which would incorrectly match paths like `/cdn-cgi/explorerfoo` or `/cdn-cgi/explorereeeeee`, causing unexpected behavior. The route matching has been improved to only match:
+
+- `/cdn-cgi/explorer` (exact match)
+- `/cdn-cgi/explorer/` and any sub-paths (e.g., `/cdn-cgi/explorer/api/*`)
+
+Paths that merely start with `/cdn-cgi/explorer` but aren't actually the explorer (like `/cdn-cgi/explorerfoo`) will now correctly fall through to the user worker.

packages/create-cloudflare/src/frameworks/package.json

@@ -7,7 +7,7 @@
 	"dependencies": {
 		"create-astro": "4.13.2",
 		"create-analog": "2.3.1",
-		"@angular/create": "21.2.0",
+		"@angular/create": "21.2.1",
 		"create-docusaurus": "3.9.2",
 		"create-hono": "0.19.4",
 		"create-next-app": "15.5.6",
@@ -16,7 +16,7 @@
 		"create-rwsdk": "3.1.3",
 		"create-react-router": "7.13.1",
 		"create-solid": "0.6.13",
-		"create-vike": "0.0.591",
+		"create-vike": "0.0.592",
 		"create-vue": "3.22.0",
 		"create-waku": "0.12.5-1.0.0-alpha.5-0",
 		"@tanstack/create-start": "0.59.8",

packages/local-explorer-ui/src/components/Sidebar.tsx

@@ -107,7 +107,7 @@ export function Sidebar({
 		<aside className="flex w-sidebar flex-col border-r border-border bg-bg-secondary">
 			<a
 				className="box-border flex min-h-16.75 items-center gap-2.5 p-4"
-				href="/"
+				href="/cdn-cgi/explorer/"
 			>
 				<CloudflareLogo className="shrink-0 text-primary" />
 				<div className="flex flex-col gap-px">

packages/miniflare/package.json

@@ -50,7 +50,7 @@
 		"@cspotcode/source-map-support": "0.8.1",
 		"sharp": "^0.34.5",
 		"undici": "catalog:default",
-		"workerd": "1.20260310.1",
+		"workerd": "1.20260312.1",
 		"ws": "catalog:default",
 		"youch": "4.1.0-beta.10"
 	},

packages/miniflare/src/workers/core/entry.worker.ts

@@ -411,7 +411,10 @@ export default <ExportedHandler<Env>>{
 
 		try {
 			if (env[CoreBindings.SERVICE_LOCAL_EXPLORER]) {
-				if (url.pathname.startsWith(LOCAL_EXPLORER_BASE_PATH)) {
+				if (
+					url.pathname === LOCAL_EXPLORER_BASE_PATH ||
+					url.pathname.startsWith(`${LOCAL_EXPLORER_BASE_PATH}/`)
+				) {
 					return await env[CoreBindings.SERVICE_LOCAL_EXPLORER].fetch(request);
 				}
 			}

packages/miniflare/test/plugins/local-explorer/index.spec.ts

@@ -245,4 +245,33 @@ describe("Local Explorer API validation", () => {
 		});
 		expect(status).toBe(403);
 	});
+
+	describe("routing", () => {
+		test("serves explorer UI at /cdn-cgi/explorer", async ({ expect }) => {
+			const res = await mf.dispatchFetch("http://localhost/cdn-cgi/explorer");
+			expect(res.status).toBe(200);
+			expect(res.headers.get("Content-Type")).toContain("text/html");
+
+			await res.arrayBuffer(); // Drain
+		});
+
+		test("serves explorer UI at /cdn-cgi/explorer/", async ({ expect }) => {
+			const res = await mf.dispatchFetch("http://localhost/cdn-cgi/explorer/");
+			expect(res.status).toBe(200);
+			expect(res.headers.get("Content-Type")).toContain("text/html");
+
+			await res.arrayBuffer(); // Drain
+		});
+
+		test("does not match paths that start with /cdn-cgi/explorer but are not the explorer", async ({
+			expect,
+		}) => {
+			// This should fall through to the user worker, not match the explorer
+			const res = await mf.dispatchFetch(
+				"http://localhost/cdn-cgi/explorerfoo"
+			);
+			expect(res.status).toBe(200);
+			expect(await res.text()).toBe("user worker");
+		});
+	});
 });

packages/wrangler/package.json

@@ -73,7 +73,7 @@
 		"miniflare": "workspace:*",
 		"path-to-regexp": "6.3.0",
 		"unenv": "2.0.0-rc.24",
-		"workerd": "1.20260310.1"
+		"workerd": "1.20260312.1"
 	},
 	"devDependencies": {
 		"@aws-sdk/client-s3": "^3.721.0",