Bump undici and wrangler by dependabot[bot] · Pull Request #11 · cloudflare/images.pages.dev

dependabot · 2023-04-23T01:54:45Z

Bumps undici to 5.20.0 and updates ancestor dependency wrangler. These dependencies need to be updated together.

Updates undici from 4.10.0 to 5.20.0

Release notes

v5.20.0

What's Changed

perf: improve cookie parsing performance by @KhafraDev in nodejs/undici#1931

fix: disable websocket wpts in ci :( by @KhafraDev in nodejs/undici#1932

fix: Allow “undefined“ as value in headers by @pan93412 in nodejs/undici#1929

feat: Support autoSelectFamily when connecting. by @ShogunPanda in nodejs/undici#1914

fix: copy cookies when cloning haders by @KhafraDev in nodejs/undici#1936

test: more logs in wpt runner by @KhafraDev in nodejs/undici#1933

feat: change headersTimeout and bodyTimeout to 300s by @kyrylkov in nodejs/undici#1937

Full Changelog: nodejs/undici@v5.19.1...v5.20.0

v5.19.1

⚠️ Security Release ⚠️

Regular Expression Denial of Service in Headers with CVE-2023-24807

CRLF Injection in Nodejs ‘undici’ via host with CVE-2023-23936

This release is part of the Node.js security release train: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/

v5.19.0

What's Changed

fix(fetch): raise AbortSignal max event listeners by @KhafraDev in nodejs/undici#1910

fix: content-disposition header parsing by @climba03003 in nodejs/undici#1911

fix: remove test by @KhafraDev in nodejs/undici#1916

feat: add Headers.prototype.getSetCookie by @KhafraDev in nodejs/undici#1915

fix(headers): clone getSetCookie list & add getSetCookie type by @KhafraDev in nodejs/undici#1917

doc(mock): update out-of-date reply documentation by @p9f in nodejs/undici#1913

fix(types): add missing keepAlive params by @SkeLLLa in nodejs/undici#1918

Make the fetch() abort test pass locally, on Linux and Mac, Node 18/19. by @mcollina in nodejs/undici#1927

New Contributors

@climba03003 made their first contribution in nodejs/undici#1911

@p9f made their first contribution in nodejs/undici#1913

Full Changelog: nodejs/undici@v5.18.0...v5.19.0

v5.18.0

What's Changed

Add ability to set TCP keepalive by @xconverge in nodejs/undici#1904

use faster timers by @ronag in nodejs/undici#1908

fix: ensure header value is a string by @ronag in nodejs/undici#1899

Full Changelog: nodejs/undici@v5.17.1...v5.18.0

v5.17.1

What's Changed

fix: bad buffer slice (nodejs/undici@d2be675)

... (truncated)

Commits

28b9dea Bumped v5.20.0
30dafe3 feat: change headersTimeout and bodyTimeout to 300s (#1937)
eaf4dc9 test: more logs in wpt runner (#1933)
8b8bfa7 fix: copy cookies when cloning haders (#1936)
eae6807 feat: Support autoSelectFamily when connecting. (#1914)
c2387e8 fix: Allow “undefined“ as value in headers (#1929)
f73ec63 fix: disable websocket wpts in ci :( (#1932)
2971280 perf: improve cookie parsing performance (#1931)
984d53b Bumped v5.19.1
6c32c0f lint fixes
Additional commits viewable in compare view

Updates wrangler from 0.0.0-602af8a to 2.16.0

Release notes

Sourced from wrangler's releases.

wrangler@2.16.0

Minor Changes

#3058 1bd50f56 Thanks @mrbbot! - chore: upgrade miniflare@3 to 3.0.0-next.13

Notably, this adds native support for Windows to wrangler dev --experimental-local, logging for incoming requests, and support for a bunch of newer R2 features.

Patch Changes

#3058 1bd50f56 Thanks @mrbbot! - fix: disable persistence without --persist in --experimental-local

This ensures --experimental-local doesn't persist data on the file-system, unless the --persist flag is set. Data is still always persisted between reloads.

#3055 5f48c405 Thanks @rozenmd! - fix: Teach D1 commands to read auth configuration from wrangler.toml

This PR fixes a bug in how D1 handles a user's accounts. We've updated the D1 commands to read from config (typically via wrangler.toml) before trying to run commands. This means if an account_id is defined in config, we'll use that instead of erroring out when there are multiple accounts to pick from.

Fixes #3046

#3058 1bd50f56 Thanks @mrbbot! - fix: disable route validation when using --experimental-local

This ensures wrangler dev --experimental-local doesn't require a login or an internet connection if a route is configured.

wrangler@2.15.1

Patch Changes

#2783 4c55baf9 Thanks @GregBrimble! - feat: Add **/*.wasm?module as default module rule (alias of **/*.wasm)

#2989 86e942bb Thanks @GregBrimble! - fix: Durable Object proxying websockets over local dev registry

wrangler@2.15.0

Minor Changes
#2769 0a779904 Thanks @penalosa! - feature: Support modules with --no-bundle

When the --no-bundle flag is set, Wrangler now has support for uploading additional modules alongside the entrypoint. This will allow modules to be imported at runtime on Cloudflare's Edge. This respects Wrangler's module rules configuration, which means that only imports of non-JS modules will trigger an upload by default. For instance, the following code will now work with --no-bundle (assuming the example.wasm file exists at the correct path):
// index.js
import wasm from './example.wasm'
export default {
async fetch() {
await WebAssembly.instantiate(wasm, ...)
...
}

... (truncated)

Changelog

Sourced from wrangler's changelog.

2.16.0

Minor Changes

#3058 1bd50f56 Thanks @mrbbot! - chore: upgrade miniflare@3 to 3.0.0-next.13

Notably, this adds native support for Windows to wrangler dev --experimental-local, logging for incoming requests, and support for a bunch of newer R2 features.

Patch Changes

#3058 1bd50f56 Thanks @mrbbot! - fix: disable persistence without --persist in --experimental-local

This ensures --experimental-local doesn't persist data on the file-system, unless the --persist flag is set. Data is still always persisted between reloads.

#3055 5f48c405 Thanks @rozenmd! - fix: Teach D1 commands to read auth configuration from wrangler.toml

This PR fixes a bug in how D1 handles a user's accounts. We've updated the D1 commands to read from config (typically via wrangler.toml) before trying to run commands. This means if an account_id is defined in config, we'll use that instead of erroring out when there are multiple accounts to pick from.

Fixes #3046

#3058 1bd50f56 Thanks @mrbbot! - fix: disable route validation when using --experimental-local

This ensures wrangler dev --experimental-local doesn't require a login or an internet connection if a route is configured.

2.15.1

Patch Changes

#2783 4c55baf9 Thanks @GregBrimble! - feat: Add **/*.wasm?module as default module rule (alias of **/*.wasm)

#2989 86e942bb Thanks @GregBrimble! - fix: Durable Object proxying websockets over local dev registry

2.15.0

Minor Changes
#2769 0a779904 Thanks @penalosa! - feature: Support modules with --no-bundle

When the --no-bundle flag is set, Wrangler now has support for uploading additional modules alongside the entrypoint. This will allow modules to be imported at runtime on Cloudflare's Edge. This respects Wrangler's module rules configuration, which means that only imports of non-JS modules will trigger an upload by default. For instance, the following code will now work with --no-bundle (assuming the example.wasm file exists at the correct path):
// index.js
import wasm from './example.wasm'
export default {
async fetch() {
await WebAssembly.instantiate(wasm, ...)
...
}

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by wrangler-publisher, a new releaser for wrangler since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [undici](https://github.com/nodejs/undici) to 5.20.0 and updates ancestor dependency [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler). These dependencies need to be updated together. Updates `undici` from 4.10.0 to 5.20.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v4.10.0...v5.20.0) Updates `wrangler` from 0.0.0-602af8a to 2.16.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Changelog](https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@2.16.0/packages/wrangler) --- updated-dependencies: - dependency-name: undici dependency-type: indirect - dependency-name: wrangler dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2023-04-23T01:54:48Z

Deploying with Cloudflare Pages

Latest commit:	`3eb6354`
Status:	✅ Deploy successful!
Preview URL:	https://0b073495.images.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-undi.images.pages.dev

View logs

dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 23, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump undici and wrangler#11

Bump undici and wrangler#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/undici-and-wrangler-5.20.0

dependabot Bot commented on behalf of github Apr 23, 2023

Uh oh!

cloudflare-workers-and-pages Bot commented Apr 23, 2023 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 23, 2023

v5.20.0

What's Changed

v5.19.1

⚠️ Security Release ⚠️

v5.19.0

What's Changed

New Contributors

v5.18.0

What's Changed

v5.17.1

What's Changed

wrangler@2.16.0

Minor Changes

Patch Changes

wrangler@2.15.1

Patch Changes

wrangler@2.15.0

Minor Changes

2.16.0

Minor Changes

Patch Changes

2.15.1

Patch Changes

2.15.0

Minor Changes

Uh oh!

cloudflare-workers-and-pages Bot commented Apr 23, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

cloudflare-workers-and-pages Bot commented Apr 23, 2023 •

edited

Loading