MockHTTP
← Back to Changelog

v3.0.1

Release
October 28, 2026

@jaredwray/mockhttp@3.0.1 — 2026-10-28

Security patches and Worker fixes. /healthz omits scheme, host, username, and password length.

Bug Fixes

  • start the Worker during isolate startup (#248)

  • report bin store health and keep a failed connect in process (#249)

  • drop every second socket error that has no listener (#250)

  • Add redacted URI diagnostics to /healthz (#254)

  • open one MongoDB client per Worker request to stop 1101s on bins (#255)

  • pin Node 24.22.1 and patched undici (#256)

  • force miniflare's sharp pin to 0.35.5 (#257)

  • bump zod to 4.6.7 for GHSA-mrhx-c7xc-m3w5 (#258)

  • security - markdown-it 15.0.3 (CVE-2026-111758) (#260)

  • omit scheme and URI identity from /healthz (#262)

    {
  "status": "ok",
  "bins": {
    "connected": true,
    "uriPresent": true,
    "uri": {
      "atCount": 1,
      "passwordHasPercent": false
    }
  }
}

Documentation

  • remove the empty vars note from the Cloudflare page (#253)

Internal

  • point worker URI fixtures at example.invalid (#251)
  • declare empty Worker vars in Wrangler (#252)
  • list LICENSE in the published package files (#259)

Contributors

  • @jaredwray (13)
  • @cursoragent (1)

Full List of Changes

  • fix: restore Cloudflare Worker routes after the v3.0.0 startup crash by @jaredwray in #248
  • Add GET /healthz and redact bin store errors by @jaredwray in #249
  • Use example.invalid for worker test URI fixtures by @jaredwray in #251
  • Drop every second socket error that has no listener by @jaredwray in #250
  • Declare empty Worker vars in Wrangler by @jaredwray in #252
  • Remove the empty vars note from the Cloudflare page by @jaredwray in #253
  • Add redacted URI diagnostics to /healthz by @jaredwray in #254
  • fix: open one MongoDB client per Worker request to stop 1101s on bins by @jaredwray in #255
  • security: pin Node 24.22.1 and patched undici by @jaredwray in #256
  • fix: security - upgrade sharp to 0.35.5 (libheif RCE) by @jaredwray in #257
  • fix: security - bump zod to 4.6.7 (GHSA-mrhx-c7xc-m3w5) by @jaredwray in #258
  • chore: list LICENSE in the published package files by @jaredwray in #259
  • fix: security - markdown-it 15.0.3 (CVE-2026-111758) by @jaredwray in #260
  • fix: omit scheme and URI identity from /healthz by @jaredwray in #262

Full diff: https://github.com/jaredwray/mockhttp/compare/v3.0.0...v3.0.1