Skip to content

Update Wrangler to clear npm audit advisories - #2412

Merged
chubes4 merged 1 commit into
mainfrom
fix/2411-wrangler-audit
Aug 29, 2026
Merged

Update Wrangler to clear npm audit advisories#2412
chubes4 merged 1 commit into
mainfrom
fix/2411-wrangler-audit

Conversation

@chubes4

@chubes4 chubes4 commented Aug 29, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • update Wrangler from ^4.112.0 to ^4.127.1
  • refresh the shrinkwrap dependency graph to fixed Miniflare, Sharp, and Undici releases
  • clear all current npm audit findings

Fixes #2411.

Verification

  • npm ci --ignore-scripts
  • npm audit (0 vulnerabilities)
  • npm run build
  • npm run cloudflare:dry-run
  • npm run cloudflare:dry-run:d1
  • npm run cloudflare:dry-run:control
  • npm run cloudflare:dry-run:public-reader

npm run check completed discovery but was not fully green because existing Playground runtime tests timed out. The worker-rejection test also fails from an untouched origin/main worktree, independently of this dependency update.

AI assistance

OpenAI gpt-5.6-sol in OpenCode traced the npm advisories, implemented the bounded Wrangler/shrinkwrap update, ran verification, and prepared this draft PR under human direction.

@chubes4
chubes4 marked this pull request as ready for review August 29, 2026 19:52
@chubes4
chubes4 merged commit db68937 into main Aug 29, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update Wrangler dependency to clear npm audit advisories

1 participant