@depup/cloudflare__workers-types 5.20260928.1-depup.0 → 5.20260930.1-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/cloudflare__workers-types
 
 | Field | Value |
 |-------|-------|
-| Original | [@cloudflare/workers-types](https://www.npmjs.com/package/@cloudflare/workers-types) @ 5.20260928.1 |
-| Processed | 2026-09-28 |
+| Original | [@cloudflare/workers-types](https://www.npmjs.com/package/@cloudflare/workers-types) @ 5.20260930.1 |
+| Processed | 2026-09-30 |
 | Smoke test | failed |
 | Deps updated | 0 |
 

package/changes.json

@@ -1,5 +1,5 @@
 {
   "bumped": {},
-  "timestamp": "2026-09-28T08:18:29.405Z",
+  "timestamp": "2026-09-30T08:12:32.784Z",
   "totalUpdated": 0
 }

package/experimental/index.d.ts

@@ -1456,6 +1456,55 @@ declare abstract class SubtleCrypto {
     extractable: boolean,
     keyUsages: string[],
   ): Promise<CryptoKey>;
+  static supports(
+    operation: string,
+    algorithm:
+      | string
+      | SubtleCryptoGenerateKeyAlgorithm
+      | SubtleCryptoImportKeyAlgorithm
+      | SubtleCryptoDeriveKeyAlgorithm
+      | SubtleCryptoHashAlgorithm
+      | SubtleCryptoEncryptAlgorithm
+      | SubtleCryptoSignAlgorithm,
+    length?: number | null,
+  ): boolean;
+  static supports(
+    operation: string,
+    algorithm:
+      | string
+      | SubtleCryptoGenerateKeyAlgorithm
+      | SubtleCryptoImportKeyAlgorithm
+      | SubtleCryptoDeriveKeyAlgorithm
+      | SubtleCryptoHashAlgorithm
+      | SubtleCryptoEncryptAlgorithm
+      | SubtleCryptoSignAlgorithm,
+    additionalAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+  ): boolean;
+  encapsulateKey(
+    encapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    encapsulationKey: CryptoKey,
+    sharedKeyAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    extractable: boolean,
+    keyUsages: string[],
+  ): Promise<SubtleCryptoEncapsulatedKey>;
+  encapsulateBits(
+    encapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    encapsulationKey: CryptoKey,
+  ): Promise<SubtleCryptoEncapsulatedBits>;
+  decapsulateKey(
+    decapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    decapsulationKey: CryptoKey,
+    ciphertext: ArrayBuffer | ArrayBufferView,
+    sharedKeyAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    extractable: boolean,
+    keyUsages: string[],
+  ): Promise<CryptoKey>;
+  decapsulateBits(
+    decapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    decapsulationKey: CryptoKey,
+    ciphertext: ArrayBuffer | ArrayBufferView,
+  ): Promise<ArrayBuffer>;
+  getPublicKey(key: CryptoKey, keyUsages: string[]): Promise<CryptoKey>;
   timingSafeEqual(
     a: ArrayBuffer | ArrayBufferView,
     b: ArrayBuffer | ArrayBufferView,
@@ -1522,12 +1571,22 @@ interface JsonWebKey {
   qi?: string;
   oth?: RsaOtherPrimesInfo[];
   k?: string;
+  pub?: string;
+  priv?: string;
 }
 interface RsaOtherPrimesInfo {
   r?: string;
   d?: string;
   t?: string;
 }
+interface SubtleCryptoEncapsulatedBits {
+  sharedKey: ArrayBuffer;
+  ciphertext: ArrayBuffer;
+}
+interface SubtleCryptoEncapsulatedKey {
+  sharedKey: CryptoKey;
+  ciphertext: ArrayBuffer;
+}
 interface SubtleCryptoDeriveKeyAlgorithm {
   name: string;
   salt?: ArrayBuffer | ArrayBufferView;
@@ -1568,6 +1627,7 @@ interface SubtleCryptoSignAlgorithm {
   hash?: string | SubtleCryptoHashAlgorithm;
   dataLength?: number;
   saltLength?: number;
+  context?: ArrayBuffer | ArrayBufferView;
 }
 interface CryptoKeyKeyAlgorithm {
   name: string;
@@ -12754,8 +12814,6 @@ interface ArtifactsCreateRepoResult {
   remote: string;
   /** Plaintext access token (only returned at creation time). */
   token: string;
-  /** ISO 8601 token expiry timestamp. */
-  tokenExpiresAt: string;
 }
 /** Paginated list of repositories. */
 interface ArtifactsRepoListResult {
@@ -12798,11 +12856,62 @@ interface ArtifactsTokenListResult {
   total: number;
 }
 /**
- * Handle for a single repository. Returned by Artifacts.get().
+ * Classification of a Git tree entry derived from its mode.
+ *
+ * `tree` is a directory, `blob` is a regular file, `symlink` is a symbolic link,
+ * `gitlink` is a submodule reference, and `exec` is an executable file.
+ */
+type ArtifactsTreeEntryType = "tree" | "blob" | "symlink" | "gitlink" | "exec";
+/** An immediate child of a Git tree returned by {@link ArtifactsRepo.readTree}. */
+interface ArtifactsTreeEntry {
+  /** Name relative to the tree being read. */
+  name: string;
+  /** Canonical Git mode, such as `100644` for a file or `40000` for a tree. */
+  mode: string;
+  /** Lowercase, 40-character SHA-1 object ID. */
+  hash: string;
+  /** Classification derived from `mode`. */
+  type: ArtifactsTreeEntryType;
+}
+/** Decoded metadata returned by {@link ArtifactsRepo.readCommit} and {@link ArtifactsRepo.log}. */
+interface ArtifactsCommitMetadata {
+  /** Lowercase, 40-character SHA-1 commit ID. */
+  hash: string;
+  /** Lowercase, 40-character SHA-1 ID of the commit's root tree. */
+  treeHash: string;
+  /** Commit message with one trailing newline removed, if present. */
+  message: string;
+  /** Author identity from the commit. */
+  author: {
+    /** Author name. */
+    name: string;
+    /** Author email address. */
+    email: string;
+  };
+  /** Committer identity from the commit. */
+  committer: {
+    /** Committer name. */
+    name: string;
+    /** Committer email address. */
+    email: string;
+  };
+  /** Parent commit IDs in Git order; empty for a root commit. */
+  parents: string[];
+  /** Author timestamp in Unix seconds. */
+  authoredAt: number;
+  /** Committer timestamp in Unix seconds. */
+  committedAt: number;
+}
+/**
+ * Repository capability returned by {@link Artifacts.get}.
  *
+ * Metadata is available through {@link info}, not as properties on the capability.
  * Methods may throw `ArtifactsError` with code `INTERNAL_ERROR` if an unexpected service error occurs.
+ *
+ * The capability is an RPC stub. Dispose of it when finished, for example with
+ * `using repo = await env.ARTIFACTS.get(name);`, to release it before the request ends.
  */
-interface ArtifactsRepo extends ArtifactsRepoInfo {
+interface ArtifactsRepo extends Disposable {
   /**
    * Create an access token for this repo.
    * @param scope Token scope: "write" (default) or "read".
@@ -12822,6 +12931,66 @@ interface ArtifactsRepo extends ArtifactsRepoInfo {
    * @throws {ArtifactsError} with code `INVALID_INPUT` if tokenOrId is empty.
    */
   revokeToken(tokenOrId: string): Promise<boolean>;
+  /**
+   * Retrieve current repository metadata. Each call performs a fresh lookup.
+   * @returns Current public repository metadata.
+   * @throws {ArtifactsError} `NOT_FOUND` if the repository was deleted, or `INTERNAL_ERROR` on
+   * an unexpected lookup failure.
+   */
+  info(): Promise<ArtifactsRepoInfo>;
+  /**
+   * Read the raw bytes of a Git blob by object ID.
+   * @param hash Lowercase, 40-character SHA-1 object ID.
+   * @returns An untyped {@link Blob}, or `null` if the object is missing or is not a Git blob.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, `MEMORY_LIMIT` if the object
+   * cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   * @see {@link ArtifactsRepo.readFile} to resolve a file by ref and path.
+   */
+  readBlob(hash: string): Promise<Blob | null>;
+  /**
+   * Read the immediate children of a Git tree by object ID.
+   * @param hash Lowercase, 40-character SHA-1 tree ID.
+   * @returns Tree entries, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid tree or the read fails unexpectedly.
+   * @see {@link ArtifactsTreeEntry}
+   */
+  readTree(hash: string): Promise<ArtifactsTreeEntry[] | null>;
+  /**
+   * Decode a Git commit by object ID.
+   * @param hash Lowercase, 40-character SHA-1 commit ID.
+   * @returns Commit metadata, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid commit or the read fails unexpectedly.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  readCommit(hash: string): Promise<ArtifactsCommitMetadata | null>;
+  /**
+   * Resolve a file from a branch, tag, or commit ID and return its bytes with a browser-safe
+   * content type in {@link Blob.type}.
+   * @param args File lookup options.
+   * @param args.ref Branch, tag, or commit ID to resolve.
+   * @param args.path Non-empty repository-relative path.
+   * @returns A MIME-typed {@link Blob}, or `null` if the ref or path cannot resolve to a file.
+   * @throws {ArtifactsError} `INVALID_INPUT` if either argument is empty, `MEMORY_LIMIT` if the
+   * file cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   */
+  readFile(args: { ref: string; path: string }): Promise<Blob | null>;
+  /**
+   * List commits along the first-parent chain, newest first.
+   * @param opts History options. All fields are optional.
+   * @param opts.ref Branch, tag, or commit ID; defaults to `HEAD`.
+   * @param opts.limit Maximum results; defaults to `50` and is capped at `1000`.
+   * @param opts.offset Number of matching commits to skip; defaults to `0`.
+   * @returns Commit metadata, or an empty array if the ref cannot be resolved.
+   * @throws {ArtifactsError} `INTERNAL_ERROR` on an unexpected traversal failure.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  log(opts?: {
+    ref?: string;
+    limit?: number;
+    offset?: number;
+  }): Promise<ArtifactsCommitMetadata[]>;
   // ── Fork ──
   /**
    * Fork this repo to a new repo.
@@ -12849,6 +13018,7 @@ interface ArtifactsRepo extends ArtifactsRepoInfo {
 type ArtifactsErrorCode =
   | "ALREADY_EXISTS"
   | "NOT_FOUND"
+  | "CREATE_IN_PROGRESS"
   | "IMPORT_IN_PROGRESS"
   | "FORK_IN_PROGRESS"
   | "INVALID_INPUT"
@@ -12901,6 +13071,7 @@ interface Artifacts {
    * @param name Repository name.
    * @returns Repo handle.
    * @throws {ArtifactsError} with code `NOT_FOUND` if the repo does not exist.
+   * @throws {ArtifactsError} with code `CREATE_IN_PROGRESS` if the repo is still being created.
    * @throws {ArtifactsError} with code `IMPORT_IN_PROGRESS` if the repo is still importing.
    * @throws {ArtifactsError} with code `FORK_IN_PROGRESS` if the repo is still forking.
    */
@@ -15246,6 +15417,29 @@ declare abstract class D1PreparedStatement {
 // TypeScript's interface merging will ensure our empty interface is effectively
 // ignored when `Disposable` is included in the standard lib.
 interface Disposable {}
+declare module "cloudflare:durable-objects" {
+  /**
+   * Marks a Durable Object method as safe to run more than once. The runtime may then retry calls
+   * to it after a disconnect that might have happened after the method started. It does not
+   * enable retries or change how many are made.
+   *
+   * Each attempt creates its own return value, so if the method returns an `RpcTarget`, its
+   * `[Symbol.dispose]()` may run once per attempt.
+   *
+   * Only public instance methods can be decorated. When composing decorators, apply `@retryable`
+   * outermost (first in source order) so it marks the method that is finally installed.
+   * Otherwise `@retryable` has no effect, and constructing the object logs a warning.
+   * Requires standard (not `experimentalDecorators`) decorators and a bundler that transforms
+   * them, such as Wrangler.
+   */
+  export function retryable<This, Args extends unknown[], Return>(
+    value: (this: This, ...args: Args) => Return,
+    context: ClassMethodDecoratorContext<
+      This,
+      (this: This, ...args: Args) => Return
+    >,
+  ): (this: This, ...args: Args) => Return;
+}
 /**
  * The returned data after sending an email
  */

package/experimental/index.ts

@@ -1460,6 +1460,55 @@ export declare abstract class SubtleCrypto {
     extractable: boolean,
     keyUsages: string[],
   ): Promise<CryptoKey>;
+  static supports(
+    operation: string,
+    algorithm:
+      | string
+      | SubtleCryptoGenerateKeyAlgorithm
+      | SubtleCryptoImportKeyAlgorithm
+      | SubtleCryptoDeriveKeyAlgorithm
+      | SubtleCryptoHashAlgorithm
+      | SubtleCryptoEncryptAlgorithm
+      | SubtleCryptoSignAlgorithm,
+    length?: number | null,
+  ): boolean;
+  static supports(
+    operation: string,
+    algorithm:
+      | string
+      | SubtleCryptoGenerateKeyAlgorithm
+      | SubtleCryptoImportKeyAlgorithm
+      | SubtleCryptoDeriveKeyAlgorithm
+      | SubtleCryptoHashAlgorithm
+      | SubtleCryptoEncryptAlgorithm
+      | SubtleCryptoSignAlgorithm,
+    additionalAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+  ): boolean;
+  encapsulateKey(
+    encapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    encapsulationKey: CryptoKey,
+    sharedKeyAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    extractable: boolean,
+    keyUsages: string[],
+  ): Promise<SubtleCryptoEncapsulatedKey>;
+  encapsulateBits(
+    encapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    encapsulationKey: CryptoKey,
+  ): Promise<SubtleCryptoEncapsulatedBits>;
+  decapsulateKey(
+    decapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    decapsulationKey: CryptoKey,
+    ciphertext: ArrayBuffer | ArrayBufferView,
+    sharedKeyAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    extractable: boolean,
+    keyUsages: string[],
+  ): Promise<CryptoKey>;
+  decapsulateBits(
+    decapsulationAlgorithm: string | SubtleCryptoImportKeyAlgorithm,
+    decapsulationKey: CryptoKey,
+    ciphertext: ArrayBuffer | ArrayBufferView,
+  ): Promise<ArrayBuffer>;
+  getPublicKey(key: CryptoKey, keyUsages: string[]): Promise<CryptoKey>;
   timingSafeEqual(
     a: ArrayBuffer | ArrayBufferView,
     b: ArrayBuffer | ArrayBufferView,
@@ -1526,12 +1575,22 @@ export interface JsonWebKey {
   qi?: string;
   oth?: RsaOtherPrimesInfo[];
   k?: string;
+  pub?: string;
+  priv?: string;
 }
 export interface RsaOtherPrimesInfo {
   r?: string;
   d?: string;
   t?: string;
 }
+export interface SubtleCryptoEncapsulatedBits {
+  sharedKey: ArrayBuffer;
+  ciphertext: ArrayBuffer;
+}
+export interface SubtleCryptoEncapsulatedKey {
+  sharedKey: CryptoKey;
+  ciphertext: ArrayBuffer;
+}
 export interface SubtleCryptoDeriveKeyAlgorithm {
   name: string;
   salt?: ArrayBuffer | ArrayBufferView;
@@ -1572,6 +1631,7 @@ export interface SubtleCryptoSignAlgorithm {
   hash?: string | SubtleCryptoHashAlgorithm;
   dataLength?: number;
   saltLength?: number;
+  context?: ArrayBuffer | ArrayBufferView;
 }
 export interface CryptoKeyKeyAlgorithm {
   name: string;
@@ -12768,8 +12828,6 @@ export interface ArtifactsCreateRepoResult {
   remote: string;
   /** Plaintext access token (only returned at creation time). */
   token: string;
-  /** ISO 8601 token expiry timestamp. */
-  tokenExpiresAt: string;
 }
 /** Paginated list of repositories. */
 export interface ArtifactsRepoListResult {
@@ -12812,11 +12870,63 @@ export interface ArtifactsTokenListResult {
   total: number;
 }
 /**
- * Handle for a single repository. Returned by Artifacts.get().
+ * Classification of a Git tree entry derived from its mode.
  *
+ * `tree` is a directory, `blob` is a regular file, `symlink` is a symbolic link,
+ * `gitlink` is a submodule reference, and `exec` is an executable file.
+ */
+export type ArtifactsTreeEntryType =
+  "tree" | "blob" | "symlink" | "gitlink" | "exec";
+/** An immediate child of a Git tree returned by {@link ArtifactsRepo.readTree}. */
+export interface ArtifactsTreeEntry {
+  /** Name relative to the tree being read. */
+  name: string;
+  /** Canonical Git mode, such as `100644` for a file or `40000` for a tree. */
+  mode: string;
+  /** Lowercase, 40-character SHA-1 object ID. */
+  hash: string;
+  /** Classification derived from `mode`. */
+  type: ArtifactsTreeEntryType;
+}
+/** Decoded metadata returned by {@link ArtifactsRepo.readCommit} and {@link ArtifactsRepo.log}. */
+export interface ArtifactsCommitMetadata {
+  /** Lowercase, 40-character SHA-1 commit ID. */
+  hash: string;
+  /** Lowercase, 40-character SHA-1 ID of the commit's root tree. */
+  treeHash: string;
+  /** Commit message with one trailing newline removed, if present. */
+  message: string;
+  /** Author identity from the commit. */
+  author: {
+    /** Author name. */
+    name: string;
+    /** Author email address. */
+    email: string;
+  };
+  /** Committer identity from the commit. */
+  committer: {
+    /** Committer name. */
+    name: string;
+    /** Committer email address. */
+    email: string;
+  };
+  /** Parent commit IDs in Git order; empty for a root commit. */
+  parents: string[];
+  /** Author timestamp in Unix seconds. */
+  authoredAt: number;
+  /** Committer timestamp in Unix seconds. */
+  committedAt: number;
+}
+/**
+ * Repository capability returned by {@link Artifacts.get}.
+ *
+ * Metadata is available through {@link info}, not as properties on the capability.
  * Methods may throw `ArtifactsError` with code `INTERNAL_ERROR` if an unexpected service error occurs.
+ *
+ * The capability is an RPC stub. Dispose of it when finished, for example with
+ * `using repo = await env.ARTIFACTS.get(name);`, to release it before the request ends.
  */
-export interface ArtifactsRepo extends ArtifactsRepoInfo {
+export interface ArtifactsRepo extends Disposable {
   /**
    * Create an access token for this repo.
    * @param scope Token scope: "write" (default) or "read".
@@ -12836,6 +12946,66 @@ export interface ArtifactsRepo extends ArtifactsRepoInfo {
    * @throws {ArtifactsError} with code `INVALID_INPUT` if tokenOrId is empty.
    */
   revokeToken(tokenOrId: string): Promise<boolean>;
+  /**
+   * Retrieve current repository metadata. Each call performs a fresh lookup.
+   * @returns Current public repository metadata.
+   * @throws {ArtifactsError} `NOT_FOUND` if the repository was deleted, or `INTERNAL_ERROR` on
+   * an unexpected lookup failure.
+   */
+  info(): Promise<ArtifactsRepoInfo>;
+  /**
+   * Read the raw bytes of a Git blob by object ID.
+   * @param hash Lowercase, 40-character SHA-1 object ID.
+   * @returns An untyped {@link Blob}, or `null` if the object is missing or is not a Git blob.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, `MEMORY_LIMIT` if the object
+   * cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   * @see {@link ArtifactsRepo.readFile} to resolve a file by ref and path.
+   */
+  readBlob(hash: string): Promise<Blob | null>;
+  /**
+   * Read the immediate children of a Git tree by object ID.
+   * @param hash Lowercase, 40-character SHA-1 tree ID.
+   * @returns Tree entries, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid tree or the read fails unexpectedly.
+   * @see {@link ArtifactsTreeEntry}
+   */
+  readTree(hash: string): Promise<ArtifactsTreeEntry[] | null>;
+  /**
+   * Decode a Git commit by object ID.
+   * @param hash Lowercase, 40-character SHA-1 commit ID.
+   * @returns Commit metadata, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid commit or the read fails unexpectedly.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  readCommit(hash: string): Promise<ArtifactsCommitMetadata | null>;
+  /**
+   * Resolve a file from a branch, tag, or commit ID and return its bytes with a browser-safe
+   * content type in {@link Blob.type}.
+   * @param args File lookup options.
+   * @param args.ref Branch, tag, or commit ID to resolve.
+   * @param args.path Non-empty repository-relative path.
+   * @returns A MIME-typed {@link Blob}, or `null` if the ref or path cannot resolve to a file.
+   * @throws {ArtifactsError} `INVALID_INPUT` if either argument is empty, `MEMORY_LIMIT` if the
+   * file cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   */
+  readFile(args: { ref: string; path: string }): Promise<Blob | null>;
+  /**
+   * List commits along the first-parent chain, newest first.
+   * @param opts History options. All fields are optional.
+   * @param opts.ref Branch, tag, or commit ID; defaults to `HEAD`.
+   * @param opts.limit Maximum results; defaults to `50` and is capped at `1000`.
+   * @param opts.offset Number of matching commits to skip; defaults to `0`.
+   * @returns Commit metadata, or an empty array if the ref cannot be resolved.
+   * @throws {ArtifactsError} `INTERNAL_ERROR` on an unexpected traversal failure.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  log(opts?: {
+    ref?: string;
+    limit?: number;
+    offset?: number;
+  }): Promise<ArtifactsCommitMetadata[]>;
   // ── Fork ──
   /**
    * Fork this repo to a new repo.
@@ -12863,6 +13033,7 @@ export interface ArtifactsRepo extends ArtifactsRepoInfo {
 export type ArtifactsErrorCode =
   | "ALREADY_EXISTS"
   | "NOT_FOUND"
+  | "CREATE_IN_PROGRESS"
   | "IMPORT_IN_PROGRESS"
   | "FORK_IN_PROGRESS"
   | "INVALID_INPUT"
@@ -12915,6 +13086,7 @@ export interface Artifacts {
    * @param name Repository name.
    * @returns Repo handle.
    * @throws {ArtifactsError} with code `NOT_FOUND` if the repo does not exist.
+   * @throws {ArtifactsError} with code `CREATE_IN_PROGRESS` if the repo is still being created.
    * @throws {ArtifactsError} with code `IMPORT_IN_PROGRESS` if the repo is still importing.
    * @throws {ArtifactsError} with code `FORK_IN_PROGRESS` if the repo is still forking.
    */

package/index.d.ts

@@ -1496,6 +1496,8 @@ interface JsonWebKey {
   qi?: string;
   oth?: RsaOtherPrimesInfo[];
   k?: string;
+  pub?: string;
+  priv?: string;
 }
 interface RsaOtherPrimesInfo {
   r?: string;
@@ -1542,6 +1544,7 @@ interface SubtleCryptoSignAlgorithm {
   hash?: string | SubtleCryptoHashAlgorithm;
   dataLength?: number;
   saltLength?: number;
+  context?: ArrayBuffer | ArrayBufferView;
 }
 interface CryptoKeyKeyAlgorithm {
   name: string;
@@ -12471,8 +12474,6 @@ interface ArtifactsCreateRepoResult {
   remote: string;
   /** Plaintext access token (only returned at creation time). */
   token: string;
-  /** ISO 8601 token expiry timestamp. */
-  tokenExpiresAt: string;
 }
 /** Paginated list of repositories. */
 interface ArtifactsRepoListResult {
@@ -12515,11 +12516,62 @@ interface ArtifactsTokenListResult {
   total: number;
 }
 /**
- * Handle for a single repository. Returned by Artifacts.get().
+ * Classification of a Git tree entry derived from its mode.
  *
+ * `tree` is a directory, `blob` is a regular file, `symlink` is a symbolic link,
+ * `gitlink` is a submodule reference, and `exec` is an executable file.
+ */
+type ArtifactsTreeEntryType = "tree" | "blob" | "symlink" | "gitlink" | "exec";
+/** An immediate child of a Git tree returned by {@link ArtifactsRepo.readTree}. */
+interface ArtifactsTreeEntry {
+  /** Name relative to the tree being read. */
+  name: string;
+  /** Canonical Git mode, such as `100644` for a file or `40000` for a tree. */
+  mode: string;
+  /** Lowercase, 40-character SHA-1 object ID. */
+  hash: string;
+  /** Classification derived from `mode`. */
+  type: ArtifactsTreeEntryType;
+}
+/** Decoded metadata returned by {@link ArtifactsRepo.readCommit} and {@link ArtifactsRepo.log}. */
+interface ArtifactsCommitMetadata {
+  /** Lowercase, 40-character SHA-1 commit ID. */
+  hash: string;
+  /** Lowercase, 40-character SHA-1 ID of the commit's root tree. */
+  treeHash: string;
+  /** Commit message with one trailing newline removed, if present. */
+  message: string;
+  /** Author identity from the commit. */
+  author: {
+    /** Author name. */
+    name: string;
+    /** Author email address. */
+    email: string;
+  };
+  /** Committer identity from the commit. */
+  committer: {
+    /** Committer name. */
+    name: string;
+    /** Committer email address. */
+    email: string;
+  };
+  /** Parent commit IDs in Git order; empty for a root commit. */
+  parents: string[];
+  /** Author timestamp in Unix seconds. */
+  authoredAt: number;
+  /** Committer timestamp in Unix seconds. */
+  committedAt: number;
+}
+/**
+ * Repository capability returned by {@link Artifacts.get}.
+ *
+ * Metadata is available through {@link info}, not as properties on the capability.
  * Methods may throw `ArtifactsError` with code `INTERNAL_ERROR` if an unexpected service error occurs.
+ *
+ * The capability is an RPC stub. Dispose of it when finished, for example with
+ * `using repo = await env.ARTIFACTS.get(name);`, to release it before the request ends.
  */
-interface ArtifactsRepo extends ArtifactsRepoInfo {
+interface ArtifactsRepo extends Disposable {
   /**
    * Create an access token for this repo.
    * @param scope Token scope: "write" (default) or "read".
@@ -12539,6 +12591,66 @@ interface ArtifactsRepo extends ArtifactsRepoInfo {
    * @throws {ArtifactsError} with code `INVALID_INPUT` if tokenOrId is empty.
    */
   revokeToken(tokenOrId: string): Promise<boolean>;
+  /**
+   * Retrieve current repository metadata. Each call performs a fresh lookup.
+   * @returns Current public repository metadata.
+   * @throws {ArtifactsError} `NOT_FOUND` if the repository was deleted, or `INTERNAL_ERROR` on
+   * an unexpected lookup failure.
+   */
+  info(): Promise<ArtifactsRepoInfo>;
+  /**
+   * Read the raw bytes of a Git blob by object ID.
+   * @param hash Lowercase, 40-character SHA-1 object ID.
+   * @returns An untyped {@link Blob}, or `null` if the object is missing or is not a Git blob.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, `MEMORY_LIMIT` if the object
+   * cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   * @see {@link ArtifactsRepo.readFile} to resolve a file by ref and path.
+   */
+  readBlob(hash: string): Promise<Blob | null>;
+  /**
+   * Read the immediate children of a Git tree by object ID.
+   * @param hash Lowercase, 40-character SHA-1 tree ID.
+   * @returns Tree entries, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid tree or the read fails unexpectedly.
+   * @see {@link ArtifactsTreeEntry}
+   */
+  readTree(hash: string): Promise<ArtifactsTreeEntry[] | null>;
+  /**
+   * Decode a Git commit by object ID.
+   * @param hash Lowercase, 40-character SHA-1 commit ID.
+   * @returns Commit metadata, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid commit or the read fails unexpectedly.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  readCommit(hash: string): Promise<ArtifactsCommitMetadata | null>;
+  /**
+   * Resolve a file from a branch, tag, or commit ID and return its bytes with a browser-safe
+   * content type in {@link Blob.type}.
+   * @param args File lookup options.
+   * @param args.ref Branch, tag, or commit ID to resolve.
+   * @param args.path Non-empty repository-relative path.
+   * @returns A MIME-typed {@link Blob}, or `null` if the ref or path cannot resolve to a file.
+   * @throws {ArtifactsError} `INVALID_INPUT` if either argument is empty, `MEMORY_LIMIT` if the
+   * file cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   */
+  readFile(args: { ref: string; path: string }): Promise<Blob | null>;
+  /**
+   * List commits along the first-parent chain, newest first.
+   * @param opts History options. All fields are optional.
+   * @param opts.ref Branch, tag, or commit ID; defaults to `HEAD`.
+   * @param opts.limit Maximum results; defaults to `50` and is capped at `1000`.
+   * @param opts.offset Number of matching commits to skip; defaults to `0`.
+   * @returns Commit metadata, or an empty array if the ref cannot be resolved.
+   * @throws {ArtifactsError} `INTERNAL_ERROR` on an unexpected traversal failure.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  log(opts?: {
+    ref?: string;
+    limit?: number;
+    offset?: number;
+  }): Promise<ArtifactsCommitMetadata[]>;
   // ── Fork ──
   /**
    * Fork this repo to a new repo.
@@ -12566,6 +12678,7 @@ interface ArtifactsRepo extends ArtifactsRepoInfo {
 type ArtifactsErrorCode =
   | "ALREADY_EXISTS"
   | "NOT_FOUND"
+  | "CREATE_IN_PROGRESS"
   | "IMPORT_IN_PROGRESS"
   | "FORK_IN_PROGRESS"
   | "INVALID_INPUT"
@@ -12618,6 +12731,7 @@ interface Artifacts {
    * @param name Repository name.
    * @returns Repo handle.
    * @throws {ArtifactsError} with code `NOT_FOUND` if the repo does not exist.
+   * @throws {ArtifactsError} with code `CREATE_IN_PROGRESS` if the repo is still being created.
    * @throws {ArtifactsError} with code `IMPORT_IN_PROGRESS` if the repo is still importing.
    * @throws {ArtifactsError} with code `FORK_IN_PROGRESS` if the repo is still forking.
    */
@@ -14963,6 +15077,29 @@ declare abstract class D1PreparedStatement {
 // TypeScript's interface merging will ensure our empty interface is effectively
 // ignored when `Disposable` is included in the standard lib.
 interface Disposable {}
+declare module "cloudflare:durable-objects" {
+  /**
+   * Marks a Durable Object method as safe to run more than once. The runtime may then retry calls
+   * to it after a disconnect that might have happened after the method started. It does not
+   * enable retries or change how many are made.
+   *
+   * Each attempt creates its own return value, so if the method returns an `RpcTarget`, its
+   * `[Symbol.dispose]()` may run once per attempt.
+   *
+   * Only public instance methods can be decorated. When composing decorators, apply `@retryable`
+   * outermost (first in source order) so it marks the method that is finally installed.
+   * Otherwise `@retryable` has no effect, and constructing the object logs a warning.
+   * Requires standard (not `experimentalDecorators`) decorators and a bundler that transforms
+   * them, such as Wrangler.
+   */
+  export function retryable<This, Args extends unknown[], Return>(
+    value: (this: This, ...args: Args) => Return,
+    context: ClassMethodDecoratorContext<
+      This,
+      (this: This, ...args: Args) => Return
+    >,
+  ): (this: This, ...args: Args) => Return;
+}
 /**
  * The returned data after sending an email
  */

package/index.ts

@@ -1500,6 +1500,8 @@ export interface JsonWebKey {
   qi?: string;
   oth?: RsaOtherPrimesInfo[];
   k?: string;
+  pub?: string;
+  priv?: string;
 }
 export interface RsaOtherPrimesInfo {
   r?: string;
@@ -1546,6 +1548,7 @@ export interface SubtleCryptoSignAlgorithm {
   hash?: string | SubtleCryptoHashAlgorithm;
   dataLength?: number;
   saltLength?: number;
+  context?: ArrayBuffer | ArrayBufferView;
 }
 export interface CryptoKeyKeyAlgorithm {
   name: string;
@@ -12485,8 +12488,6 @@ export interface ArtifactsCreateRepoResult {
   remote: string;
   /** Plaintext access token (only returned at creation time). */
   token: string;
-  /** ISO 8601 token expiry timestamp. */
-  tokenExpiresAt: string;
 }
 /** Paginated list of repositories. */
 export interface ArtifactsRepoListResult {
@@ -12529,11 +12530,63 @@ export interface ArtifactsTokenListResult {
   total: number;
 }
 /**
- * Handle for a single repository. Returned by Artifacts.get().
+ * Classification of a Git tree entry derived from its mode.
+ *
+ * `tree` is a directory, `blob` is a regular file, `symlink` is a symbolic link,
+ * `gitlink` is a submodule reference, and `exec` is an executable file.
+ */
+export type ArtifactsTreeEntryType =
+  "tree" | "blob" | "symlink" | "gitlink" | "exec";
+/** An immediate child of a Git tree returned by {@link ArtifactsRepo.readTree}. */
+export interface ArtifactsTreeEntry {
+  /** Name relative to the tree being read. */
+  name: string;
+  /** Canonical Git mode, such as `100644` for a file or `40000` for a tree. */
+  mode: string;
+  /** Lowercase, 40-character SHA-1 object ID. */
+  hash: string;
+  /** Classification derived from `mode`. */
+  type: ArtifactsTreeEntryType;
+}
+/** Decoded metadata returned by {@link ArtifactsRepo.readCommit} and {@link ArtifactsRepo.log}. */
+export interface ArtifactsCommitMetadata {
+  /** Lowercase, 40-character SHA-1 commit ID. */
+  hash: string;
+  /** Lowercase, 40-character SHA-1 ID of the commit's root tree. */
+  treeHash: string;
+  /** Commit message with one trailing newline removed, if present. */
+  message: string;
+  /** Author identity from the commit. */
+  author: {
+    /** Author name. */
+    name: string;
+    /** Author email address. */
+    email: string;
+  };
+  /** Committer identity from the commit. */
+  committer: {
+    /** Committer name. */
+    name: string;
+    /** Committer email address. */
+    email: string;
+  };
+  /** Parent commit IDs in Git order; empty for a root commit. */
+  parents: string[];
+  /** Author timestamp in Unix seconds. */
+  authoredAt: number;
+  /** Committer timestamp in Unix seconds. */
+  committedAt: number;
+}
+/**
+ * Repository capability returned by {@link Artifacts.get}.
  *
+ * Metadata is available through {@link info}, not as properties on the capability.
  * Methods may throw `ArtifactsError` with code `INTERNAL_ERROR` if an unexpected service error occurs.
+ *
+ * The capability is an RPC stub. Dispose of it when finished, for example with
+ * `using repo = await env.ARTIFACTS.get(name);`, to release it before the request ends.
  */
-export interface ArtifactsRepo extends ArtifactsRepoInfo {
+export interface ArtifactsRepo extends Disposable {
   /**
    * Create an access token for this repo.
    * @param scope Token scope: "write" (default) or "read".
@@ -12553,6 +12606,66 @@ export interface ArtifactsRepo extends ArtifactsRepoInfo {
    * @throws {ArtifactsError} with code `INVALID_INPUT` if tokenOrId is empty.
    */
   revokeToken(tokenOrId: string): Promise<boolean>;
+  /**
+   * Retrieve current repository metadata. Each call performs a fresh lookup.
+   * @returns Current public repository metadata.
+   * @throws {ArtifactsError} `NOT_FOUND` if the repository was deleted, or `INTERNAL_ERROR` on
+   * an unexpected lookup failure.
+   */
+  info(): Promise<ArtifactsRepoInfo>;
+  /**
+   * Read the raw bytes of a Git blob by object ID.
+   * @param hash Lowercase, 40-character SHA-1 object ID.
+   * @returns An untyped {@link Blob}, or `null` if the object is missing or is not a Git blob.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, `MEMORY_LIMIT` if the object
+   * cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   * @see {@link ArtifactsRepo.readFile} to resolve a file by ref and path.
+   */
+  readBlob(hash: string): Promise<Blob | null>;
+  /**
+   * Read the immediate children of a Git tree by object ID.
+   * @param hash Lowercase, 40-character SHA-1 tree ID.
+   * @returns Tree entries, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid tree or the read fails unexpectedly.
+   * @see {@link ArtifactsTreeEntry}
+   */
+  readTree(hash: string): Promise<ArtifactsTreeEntry[] | null>;
+  /**
+   * Decode a Git commit by object ID.
+   * @param hash Lowercase, 40-character SHA-1 commit ID.
+   * @returns Commit metadata, or `null` if the object is missing.
+   * @throws {ArtifactsError} `INVALID_INPUT` for a malformed hash, or `INTERNAL_ERROR` if the
+   * object is not a valid commit or the read fails unexpectedly.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  readCommit(hash: string): Promise<ArtifactsCommitMetadata | null>;
+  /**
+   * Resolve a file from a branch, tag, or commit ID and return its bytes with a browser-safe
+   * content type in {@link Blob.type}.
+   * @param args File lookup options.
+   * @param args.ref Branch, tag, or commit ID to resolve.
+   * @param args.path Non-empty repository-relative path.
+   * @returns A MIME-typed {@link Blob}, or `null` if the ref or path cannot resolve to a file.
+   * @throws {ArtifactsError} `INVALID_INPUT` if either argument is empty, `MEMORY_LIMIT` if the
+   * file cannot be buffered safely, or `INTERNAL_ERROR` on an unexpected read failure.
+   */
+  readFile(args: { ref: string; path: string }): Promise<Blob | null>;
+  /**
+   * List commits along the first-parent chain, newest first.
+   * @param opts History options. All fields are optional.
+   * @param opts.ref Branch, tag, or commit ID; defaults to `HEAD`.
+   * @param opts.limit Maximum results; defaults to `50` and is capped at `1000`.
+   * @param opts.offset Number of matching commits to skip; defaults to `0`.
+   * @returns Commit metadata, or an empty array if the ref cannot be resolved.
+   * @throws {ArtifactsError} `INTERNAL_ERROR` on an unexpected traversal failure.
+   * @see {@link ArtifactsCommitMetadata}
+   */
+  log(opts?: {
+    ref?: string;
+    limit?: number;
+    offset?: number;
+  }): Promise<ArtifactsCommitMetadata[]>;
   // ── Fork ──
   /**
    * Fork this repo to a new repo.
@@ -12580,6 +12693,7 @@ export interface ArtifactsRepo extends ArtifactsRepoInfo {
 export type ArtifactsErrorCode =
   | "ALREADY_EXISTS"
   | "NOT_FOUND"
+  | "CREATE_IN_PROGRESS"
   | "IMPORT_IN_PROGRESS"
   | "FORK_IN_PROGRESS"
   | "INVALID_INPUT"
@@ -12632,6 +12746,7 @@ export interface Artifacts {
    * @param name Repository name.
    * @returns Repo handle.
    * @throws {ArtifactsError} with code `NOT_FOUND` if the repo does not exist.
+   * @throws {ArtifactsError} with code `CREATE_IN_PROGRESS` if the repo is still being created.
    * @throws {ArtifactsError} with code `IMPORT_IN_PROGRESS` if the repo is still importing.
    * @throws {ArtifactsError} with code `FORK_IN_PROGRESS` if the repo is still forking.
    */

package/package.json

@@ -7,7 +7,7 @@
   },
   "author": "Cloudflare Workers DevProd Team <workers-devprod@cloudflare.com> (https://workers.cloudflare.com)",
   "license": "MIT OR Apache-2.0",
-  "version": "5.20260928.1-depup.0",
+  "version": "5.20260930.1-depup.0",
   "keywords": [
     "@cloudflare/workers-types",
     "depup",
@@ -20,8 +20,8 @@
     "changes": {},
     "depsUpdated": 0,
     "originalPackage": "@cloudflare/workers-types",
-    "originalVersion": "5.20260928.1",
-    "processedAt": "2026-09-28T08:18:30.431Z",
+    "originalVersion": "5.20260930.1",
+    "processedAt": "2026-09-30T08:12:33.802Z",
     "smokeTest": "failed"
   }
 }