Skip to content

chore(deps-dev): bump wrangler from 4.147.0 to 4.150.0 - #954

Merged
andykenward merged 1 commit into
mainfrom
chore/wrangler-4.150.0
Oct 20, 2026
Merged

andykenward merged 1 commit into
mainfrom
chore/wrangler-4.150.0

Conversation

@andykenward

Copy link
Copy Markdown
Owner

Summary

Bumps wrangler 4.147.0 → 4.150.0, which brings miniflare 5.20261006.2-beta and sharp 0.35.5. Closes Dependabot alert #276 (GHSA-wq5f-xc86-pv6w), the last open one. Supersedes #948, which was red because the default-version sync was never regenerated on its branch.

4.151.x is not taken: it and its workerd builds are inside the repo's 7-day minimumReleaseAge.

Regenerated with pnpm run all: WRANGLER_VERSION_DEFAULT and dist/. The Pages API types had no drift.

Upgrade review (4.147.0 → 4.150.0)

  • sharp 0.35.4 → 0.35.5 (4.149.0): the security fix. Reason to take the bump.
  • Pages deploy command: src/pages/deploy.ts is identical between the two tags. The two commits touching src/pages only add hidden --temporary and tunnel flags for pages dev. Flags the action passes and the pages-deploy-detailed entry are unchanged. Verified in source.
  • Output-file entry types: identical set in both bundles. Verified in bundle.
  • Retry-After on asset uploads (4.149.0): in deploy-helpers for Workers static assets; Pages uploads (pages/upload.ts) are unchanged. Doesn't apply.
  • Source maps by default, cf build guard (4.150.0): wrangler deploy / versions upload / preview only. Doesn't apply.
  • using declarations kept in Pages Functions builds (4.149.0): smaller user bundles, nothing for the action. Doesn't apply.
  • engines.node: >=22.0.0 in both. No README change.

No src/ improvements follow from this range.

Validation

CI covers lint, tsc, tests, dist/ drift and the live deploy. Locally pnpm run all passed (266 tests).

🤖 Generated with Claude Code

Brings miniflare 5.20261006.2-beta and sharp 0.35.5, closing Dependabot
alert 276 (GHSA-wq5f-xc86-pv6w). 4.151.x is still inside the 7-day
minimumReleaseAge. Regenerated with pnpm run all: WRANGLER_VERSION_DEFAULT
and dist/ only; the Pages types had no drift.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown
Contributor

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 99.56% 679 / 682
🔵 Statements 99.56% 692 / 695
🔵 Functions 100% 167 / 167
🔵 Branches 94.51% 293 / 310
File Coverage
File Stmts Branches Functions Lines Uncovered Lines
Changed Files
src/common/inputs.ts 100% 100% 100% 100%
Generated in workflow #2571 for commit 10888a4 by the Vitest Coverage Report Action

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ No Changeset found

Latest commit: 10888a4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@andykenward
andykenward merged commit f18ede9 into main Oct 20, 2026
11 checks passed
@andykenward
andykenward deleted the chore/wrangler-4.150.0 branch October 20, 2026 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant