Skip to content

build(deps-dev): bump wrangler from 4.43.0 to 4.45.0 in the patch-versions group#339

Merged
hanabi1224 merged 1 commit intomainfrom
dependabot/npm_and_yarn/patch-versions-128ec10278
Oct 27, 2025
Merged

build(deps-dev): bump wrangler from 4.43.0 to 4.45.0 in the patch-versions group#339
hanabi1224 merged 1 commit intomainfrom
dependabot/npm_and_yarn/patch-versions-128ec10278

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 27, 2025

Bumps the patch-versions group with 1 update: wrangler.

Updates wrangler from 4.43.0 to 4.45.0

Release notes

Sourced from wrangler's releases.

wrangler@4.45.0

Minor Changes

  • #11030 1a8088a Thanks @​penalosa! - Enable automatic resource provisioning by default in Wrangler. This is still an experimental feature, but we're turning on the flag by default to make it easier for people to test it and try it out. You can disable the feature using the --no-x-provision flag. It currently works for R2, D1, and KV bindings.

    To use this feature, add a binding to your config file without a resource ID:

    {
    	"kv_namespaces": [{ "binding": "MY_KV" }],
    	"d1_databases": [{ "binding": "MY_DB" }],
    	"r2_buckets": [{ "binding": "MY_R2" }],
    }

    wrangler dev will automatically create these resources for you locally, and when you next run wrangler deploy Wrangler will call the Cloudflare API to create the requested resources and link them to your Worker. They'll stay linked across deploys, and you don't need to add the resource IDs to the config file for future deploys to work. This is especially good for shared templates, which now no longer need to include account-specific resource ID when adding a binding.

Patch Changes

  • #11037 4bd4c29 Thanks @​danielrs! - Better Wrangler subdomain defaults warning.

    Improves the warnings that we show users when either worker_dev or preview_urls are missing.

  • #10927 31e1330 Thanks @​dom96! - Implements python_modules.excludes wrangler config field

    [python_modules]
    excludes = ["**/*.pyc", "**/__pycache__"]
  • #10741 2f57345 Thanks @​penalosa! - Remove obsolete --x-remote-bindings flag

  • Updated dependencies [ca6c010]:

    • miniflare@4.20251011.1

wrangler@4.44.0

Minor Changes

  • #10939 d4b4c90 Thanks @​danielrs! - Config preview_urls defaults to workers_dev value.

    Originally, we were defaulting config.preview_urls to true, but we were accidentally enabling Preview URLs for users that only had config.workers_dev=false.

    Then, we set the default value of config.preview_urls to false, but we were accidentally disabling Preview URLs for users that only had config.workers_dev=true.

    Rather than defaulting config.preview_urls to true or false, we default to the resolved value of config.workers_dev. Should result in a

... (truncated)

Changelog

Sourced from wrangler's changelog.

4.45.0

Minor Changes

  • #11030 1a8088a Thanks @​penalosa! - Enable automatic resource provisioning by default in Wrangler. This is still an experimental feature, but we're turning on the flag by default to make it easier for people to test it and try it out. You can disable the feature using the --no-x-provision flag. It currently works for R2, D1, and KV bindings.

    To use this feature, add a binding to your config file without a resource ID:

    {
    	"kv_namespaces": [{ "binding": "MY_KV" }],
    	"d1_databases": [{ "binding": "MY_DB" }],
    	"r2_buckets": [{ "binding": "MY_R2" }],
    }

    wrangler dev will automatically create these resources for you locally, and when you next run wrangler deploy Wrangler will call the Cloudflare API to create the requested resources and link them to your Worker. They'll stay linked across deploys, and you don't need to add the resource IDs to the config file for future deploys to work. This is especially good for shared templates, which now no longer need to include account-specific resource ID when adding a binding.

Patch Changes

  • #11037 4bd4c29 Thanks @​danielrs! - Better Wrangler subdomain defaults warning.

    Improves the warnings that we show users when either worker_dev or preview_urls are missing.

  • #10927 31e1330 Thanks @​dom96! - Implements python_modules.excludes wrangler config field

    [python_modules]
    excludes = ["**/*.pyc", "**/__pycache__"]
  • #10741 2f57345 Thanks @​penalosa! - Remove obsolete --x-remote-bindings flag

  • Updated dependencies [ca6c010]:

    • miniflare@4.20251011.1

4.44.0

Minor Changes

  • #10939 d4b4c90 Thanks @​danielrs! - Config preview_urls defaults to workers_dev value.

    Originally, we were defaulting config.preview_urls to true, but we were accidentally enabling Preview URLs for users that only had config.workers_dev=false.

    Then, we set the default value of config.preview_urls to false, but we were accidentally disabling Preview URLs for users that only had config.workers_dev=true.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated development dependencies to latest versions for improved stability and compatibility.

Bumps the patch-versions group with 1 update: [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).


Updates `wrangler` from 4.43.0 to 4.45.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.45.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: wrangler
  dependency-version: 4.45.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@dependabot dependabot Bot requested a review from a team as a code owner October 27, 2025 01:23
@dependabot dependabot Bot requested review from elmattic and hanabi1224 October 27, 2025 01:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Oct 27, 2025

Walkthrough

The package.json file's wrangler devDependency is updated from version ^4.43.0 to ^4.45.0. This is a minor version bump. No code changes or functional modifications are introduced; script references remain unchanged.

Changes

Cohort / File(s) Summary
Dependency Update
package.json
Bumped wrangler devDependency from ^4.43.0 to ^4.45.0

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~1 minute

This is a straightforward dependency version bump with no logic changes or code modifications.

Possibly related PRs

Suggested reviewers

  • hanabi1224
  • elmattic
  • akaladarshi

Poem

🐰 A hop, a skip, a version rise,
Wrangler climbs to four-forty-five skies!
No code was changed, just numbers aligned,
A gentle bump for peace of mind! ✨

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. You can run @coderabbitai generate docstrings to improve docstring coverage.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check ✅ Passed The pull request title "build(deps-dev): bump wrangler from 4.43.0 to 4.45.0 in the patch-versions group" is fully related to and accurately summarizes the main change in the changeset. The raw summary confirms this is purely a dependency version bump of wrangler from ^4.43.0 to ^4.45.0, with no other functional changes. The title uses conventional commit format appropriately, is concise and specific, and clearly communicates the primary change without vague terminology or unnecessary noise. A teammate scanning the git history would immediately understand that this PR updates a development dependency.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/patch-versions-128ec10278

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 1020831 and 4eaf862.

⛔ Files ignored due to path filters (1)
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (1)
  • package.json (1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (6)
  • GitHub Check: lint
  • GitHub Check: codedov
  • GitHub Check: E2E Browser Tests
  • GitHub Check: E2E API Tests
  • GitHub Check: E2E Claim Token API CORS Tests
  • GitHub Check: deploy
🔇 Additional comments (1)
package.json (1)

10-10: Wrangler 4.45.0 upgrade is safe for this project.

Verification confirms:

  • The obsolete --x-remote-bindings flag is not used anywhere ✓
  • The project uses only Durable Objects (not R2, D1, or KV bindings), so the new automatic resource provisioning feature does not apply
  • The npm scripts ("build", "dev", "start") will not experience behavioral changes

No action required.


Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.75%. Comparing base (1020831) to head (4eaf862).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #339   +/-   ##
=======================================
  Coverage   38.75%   38.75%           
=======================================
  Files          40       40           
  Lines        2578     2578           
=======================================
  Hits          999      999           
  Misses       1579     1579           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@hanabi1224 hanabi1224 enabled auto-merge October 27, 2025 07:27
@hanabi1224 hanabi1224 added this pull request to the merge queue Oct 27, 2025
Merged via the queue into main with commit e3232cc Oct 27, 2025
7 checks passed
@hanabi1224 hanabi1224 deleted the dependabot/npm_and_yarn/patch-versions-128ec10278 branch October 27, 2025 07:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants