Skip to content

Bump wrangler from 4.151.2 to 4.154.0 - #182

Merged
shigahi merged 1 commit into
masterfrom
bump-wrangler-4.154.0
Oct 28, 2026
Merged

shigahi merged 1 commit into
masterfrom
bump-wrangler-4.154.0

Conversation

@shigahi

@shigahi shigahi commented Oct 28, 2026

Copy link
Copy Markdown
Collaborator

wrangler 4.151.2 pins undici 7.29.1 through miniflare 5.20261019.0-beta. wrangler 4.154.0 uses miniflare 5.20261023.1-beta, which depends on undici 7.30.1 and resolves these open Dependabot alerts (development, transitive):

Only wrangler, miniflare, undici and workerd change in the lockfile.

Verified locally: npm audit reports 0 vulnerabilities, npm test passes (8/8), npm run build and wrangler deploy --dry-run succeed.

Pulls in undici 7.30.1 via miniflare to resolve Dependabot alerts
GHSA-4w7w-5xrc-9h26, GHSA-2m5v-pch6-74hx, GHSA-qrxm-fqhp-jwvm,
GHSA-9fm3-97px-rjf6 and GHSA-xjj6-f33q-929c.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@shigahi
shigahi merged commit feeef32 into master Oct 28, 2026
5 checks passed
@shigahi
shigahi deleted the bump-wrangler-4.154.0 branch October 28, 2026 08:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant