Skip to content

chore: pin worker build#44

Merged
alukach merged 5 commits into
mainfrom
fix/pin-worker-build
May 20, 2026
Merged

chore: pin worker build#44
alukach merged 5 commits into
mainfrom
fix/pin-worker-build

Conversation

@alukach
Copy link
Copy Markdown
Member

@alukach alukach commented May 20, 2026

No description provided.

alukach and others added 2 commits May 20, 2026 10:42
worker-build 0.8+ requires worker 0.8+ in Cargo.toml. Since worker is
pinned to 0.7.4 (see Cargo.toml comment), the unpinned `cargo install
worker-build` was pulling 0.8.x and failing with a version mismatch.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
The wrangler [build] command runs at wrangler dev/deploy startup and
re-installs worker-build unconditionally. Without a version pin it
pulls 0.8.x, which (a) errors on our pinned worker = "=0.7.4" and
(b) invalidates the cargo build cache, causing wrangler dev to exceed
the 60s integration-test startup timeout.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Fixes cargo audit failures:
- RUSTSEC-2026-0098: name constraints incorrectly accepted for URI names
- RUSTSEC-2026-0099: name constraints accepted for wildcard names
- RUSTSEC-2026-0104: reachable panic in CRL parsing
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 20, 2026

🚀 Latest commit deployed to https://multistore-proxy-pr-44.development-seed.workers.dev

  • Date: 2026-05-20T18:52:09Z
  • Commit: b1eadff

alukach added 2 commits May 20, 2026 11:55
Fixes cargo audit failures:
- RUSTSEC-2026-0098: name constraints incorrectly accepted for URI names
- RUSTSEC-2026-0099: name constraints accepted for wildcard names
- RUSTSEC-2026-0104: reachable panic in CRL parsing
@alukach alukach merged commit fc883ac into main May 20, 2026
9 of 10 checks passed
@alukach alukach deleted the fix/pin-worker-build branch May 20, 2026 18:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant