Skip to content

Update Wrangler toolchain and remediate dependency advisories - #2

Merged
jongan69 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-644a4c81dc
Aug 9, 2026
Merged

Update Wrangler toolchain and remediate dependency advisories#2
jongan69 merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-644a4c81dc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown

Summary

  • upgrade Wrangler to 4.120.0 and its Miniflare toolchain
  • align @cloudflare/workers-types with Wrangler 4's peer requirement
  • upgrade direct esbuild to 0.28.1
  • regenerate the checked-in Worker bundle
  • remediate the ws, undici, sharp, and esbuild advisory paths

Verification

  • npm ci
  • npm run ci (17 files, 248 tests)
  • npm audit --audit-level=low (0 vulnerabilities)
  • npm audit --omit=dev --audit-level=low (0 vulnerabilities)
  • npx wrangler deploy --dry-run
  • protected CI and dependency review passed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-644a4c81dc branch from 9cfbc7f to 5d02012 Compare August 9, 2026 10:57
@jongan69

jongan69 commented Aug 9, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

Bumps [undici](https://github.com/nodejs/undici) to 7.29.0 and updates ancestor dependency [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler). These dependencies need to be updated together.

Updates `undici` from 5.29.0 to 7.29.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.29.0...v7.29.0)

Updates `wrangler` from 3.114.17 to 4.120.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.120.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.29.0
  dependency-type: indirect
- dependency-name: wrangler
  dependency-version: 4.120.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@jongan69
jongan69 force-pushed the dependabot/npm_and_yarn/multi-644a4c81dc branch from 5d02012 to 6a2855b Compare August 9, 2026 11:03
@jongan69 jongan69 changed the title Bump undici and wrangler Update Wrangler toolchain and remediate dependency advisories Aug 9, 2026
@jongan69
jongan69 merged commit fe7681c into main Aug 9, 2026
2 checks passed
@jongan69
jongan69 deleted the dependabot/npm_and_yarn/multi-644a4c81dc branch August 9, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant