@cloudflare/vite-plugin 1.35.0 → 1.36.0

package/dist/index.mjs

@@ -1503,7 +1503,7 @@ async function assertWranglerVersion() {
 * The default compatibility date to use when the user omits one.
 * This value is injected at build time and remains fixed for each release.
 */
-const DEFAULT_COMPAT_DATE = "2026-04-30";
+const DEFAULT_COMPAT_DATE = "2026-05-05";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@remix-run+node-fetch-server@0.8.0/node_modules/@remix-run/node-fetch-server/dist/node-fetch-server.js
@@ -31264,7 +31264,6 @@ var validateStreamingTailConsumers = /* @__PURE__ */ __name((diagnostics, field,
 function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDispatchNamespace, preserveOriginalMain, envName = "top level", topLevelEnv, useServiceEnvironments, rawConfig) {
 	deprecated(diagnostics, rawEnv, "node_compat", `The "node_compat" field is no longer supported as of Wrangler v4. Instead, use the \`nodejs_compat\` compatibility flag. This includes the functionality from legacy \`node_compat\` polyfills and natively implemented Node.js APIs. See https://developers.cloudflare.com/workers/runtime-apis/nodejs for more information.`, true, "Removed", "error");
 	experimental(diagnostics, rawEnv, "unsafe");
-	experimental(diagnostics, rawEnv, "secrets");
 	const route = normalizeAndValidateRoute(diagnostics, topLevelEnv, rawEnv);
 	const account_id = inheritableInWranglerEnvironments(diagnostics, useServiceEnvironments, topLevelEnv, mutateEmptyStringAccountIDValue(diagnostics, rawEnv), "account_id", isString$2, void 0, void 0);
 	const routes = validateRoutes(diagnostics, topLevelEnv, rawEnv);
@@ -32764,6 +32763,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName) => (diagnostics, f
 		"secrets_store_secrets",
 		"artifacts",
 		"unsafe_hello_world",
+		"flagship",
 		"worker_loaders",
 		"ratelimits",
 		"vpc_services",
@@ -32799,6 +32799,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName) => (diagnostics, f
 	isValid2 = validateBindingArray(envName, validateSecretsStoreSecretBinding)(diagnostics, `${field}.secrets_store_secrets`, previews.secrets_store_secrets, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateArtifactsBinding)(diagnostics, `${field}.artifacts`, previews.artifacts, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateHelloWorldBinding)(diagnostics, `${field}.unsafe_hello_world`, previews.unsafe_hello_world, void 0) && isValid2;
+	isValid2 = validateBindingArray(envName, validateFlagshipBinding)(diagnostics, `${field}.flagship`, previews.flagship, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateWorkerLoaderBinding)(diagnostics, `${field}.worker_loaders`, previews.worker_loaders, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateRateLimitBinding)(diagnostics, `${field}.ratelimits`, previews.ratelimits, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateVpcServiceBinding)(diagnostics, `${field}.vpc_services`, previews.vpc_services, void 0) && isValid2;
@@ -42598,6 +42599,7 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 	const rules = [];
 	const invalid = [];
 	let rule = void 0;
+	let skipUntilNextPath = false;
 	for (let i$1 = 0; i$1 < lines.length; i$1++) {
 		const line = (lines[i$1] || "").trim();
 		if (line.length === 0 || line.startsWith("#")) continue;
@@ -42606,6 +42608,7 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 			continue;
 		}
 		if (LINE_IS_PROBABLY_A_PATH.test(line)) {
+			skipUntilNextPath = false;
 			if (rules.length >= maxRules) {
 				invalid.push({ message: `Maximum number of rules supported is ${maxRules}. Skipping remaining ${lines.length - i$1} lines of file.` });
 				break;
@@ -42628,6 +42631,18 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 					message: pathError
 				});
 				rule = void 0;
+				skipUntilNextPath = true;
+				continue;
+			}
+			const wildcardError = validateNoMultipleWildcards(path$2);
+			if (wildcardError) {
+				invalid.push({
+					line,
+					lineNumber: i$1 + 1,
+					message: wildcardError
+				});
+				rule = void 0;
+				skipUntilNextPath = true;
 				continue;
 			}
 			rule = {
@@ -42638,6 +42653,7 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 			};
 			continue;
 		}
+		if (skipUntilNextPath) continue;
 		if (!line.includes(HEADER_SEPARATOR)) {
 			if (!rule) invalid.push({
 				line,
@@ -42707,6 +42723,18 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 function isValidRule(rule) {
 	return Object.keys(rule.headers).length > 0 || rule.unsetHeaders.length > 0;
 }
+/**
+* At runtime, `*` wildcards are converted to `:splat` placeholders. This means
+* a path with multiple wildcards, or a wildcard combined with an explicit
+* `:splat` placeholder, would result in duplicate `:splat` parameters which is
+* unsupported.
+*/
+function validateNoMultipleWildcards(path$2) {
+	const wildcardCount = (path$2.match(SPLAT_REGEX) ?? []).length;
+	const hasSplatPlaceholder = /:splat(?!\w)/.test(path$2);
+	if (wildcardCount > 1) return `Only one wildcard is allowed per rule. Use a named placeholder (e.g. :project) instead. Skipping ${path$2}.`;
+	if (wildcardCount > 0 && hasSplatPlaceholder) return `Cannot combine a wildcard * with a :splat placeholder because wildcards are converted to :splat at runtime. Skipping ${path$2}.`;
+}
 
 //#endregion
 //#region ../workers-shared/utils/configuration/parseRedirects.ts
@@ -48489,7 +48517,10 @@ const configPlugin = createPlugin("config", (ctx) => {
 					fs: { deny: [...[
 						".env",
 						".env.*",
-						"*.{crt,pem}",
+						".npmrc",
+						".yarnrc",
+						".yarnrc.yml",
+						"*.{crt,pem,key,pfx,p12,p8,jks}",
 						"**/.git/**",
 						".dev.vars",
 						".dev.vars.*",