@cloudflare/vite-plugin 1.35.0 → 1.36.1

package/dist/index.mjs

@@ -1503,7 +1503,7 @@ async function assertWranglerVersion() {
 * The default compatibility date to use when the user omits one.
 * This value is injected at build time and remains fixed for each release.
 */
-const DEFAULT_COMPAT_DATE = "2026-04-30";
+const DEFAULT_COMPAT_DATE = "2026-05-07";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@remix-run+node-fetch-server@0.8.0/node_modules/@remix-run/node-fetch-server/dist/node-fetch-server.js
@@ -31264,7 +31264,6 @@ var validateStreamingTailConsumers = /* @__PURE__ */ __name((diagnostics, field,
 function normalizeAndValidateEnvironment(diagnostics, configPath, rawEnv, isDispatchNamespace, preserveOriginalMain, envName = "top level", topLevelEnv, useServiceEnvironments, rawConfig) {
 	deprecated(diagnostics, rawEnv, "node_compat", `The "node_compat" field is no longer supported as of Wrangler v4. Instead, use the \`nodejs_compat\` compatibility flag. This includes the functionality from legacy \`node_compat\` polyfills and natively implemented Node.js APIs. See https://developers.cloudflare.com/workers/runtime-apis/nodejs for more information.`, true, "Removed", "error");
 	experimental(diagnostics, rawEnv, "unsafe");
-	experimental(diagnostics, rawEnv, "secrets");
 	const route = normalizeAndValidateRoute(diagnostics, topLevelEnv, rawEnv);
 	const account_id = inheritableInWranglerEnvironments(diagnostics, useServiceEnvironments, topLevelEnv, mutateEmptyStringAccountIDValue(diagnostics, rawEnv), "account_id", isString$2, void 0, void 0);
 	const routes = validateRoutes(diagnostics, topLevelEnv, rawEnv);
@@ -32764,13 +32763,15 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName) => (diagnostics, f
 		"secrets_store_secrets",
 		"artifacts",
 		"unsafe_hello_world",
+		"flagship",
 		"worker_loaders",
 		"ratelimits",
 		"vpc_services",
 		"version_metadata",
 		"logpush",
 		"observability",
-		"limits"
+		"limits",
+		"cache"
 	]) && isValid2;
 	isValid2 = validateVars(envName)(diagnostics, `${field}.vars`, previews.vars, void 0) && isValid2;
 	isValid2 = validateDefines(envName)(diagnostics, `${field}.define`, previews.define, void 0) && isValid2;
@@ -32799,6 +32800,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName) => (diagnostics, f
 	isValid2 = validateBindingArray(envName, validateSecretsStoreSecretBinding)(diagnostics, `${field}.secrets_store_secrets`, previews.secrets_store_secrets, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateArtifactsBinding)(diagnostics, `${field}.artifacts`, previews.artifacts, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateHelloWorldBinding)(diagnostics, `${field}.unsafe_hello_world`, previews.unsafe_hello_world, void 0) && isValid2;
+	isValid2 = validateBindingArray(envName, validateFlagshipBinding)(diagnostics, `${field}.flagship`, previews.flagship, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateWorkerLoaderBinding)(diagnostics, `${field}.worker_loaders`, previews.worker_loaders, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateRateLimitBinding)(diagnostics, `${field}.ratelimits`, previews.ratelimits, void 0) && isValid2;
 	isValid2 = validateBindingArray(envName, validateVpcServiceBinding)(diagnostics, `${field}.vpc_services`, previews.vpc_services, void 0) && isValid2;
@@ -32809,6 +32811,7 @@ var validatePreviewsConfig = /* @__PURE__ */ __name((envName) => (diagnostics, f
 		isValid2 = validateOptionalProperty(diagnostics, `${field}.limits`, "cpu_ms", previews.limits.cpu_ms, "number") && isValid2;
 		isValid2 = validateOptionalProperty(diagnostics, `${field}.limits`, "subrequests", previews.limits.subrequests, "number") && isValid2;
 	}
+	isValid2 = validateCache(diagnostics, `${field}.cache`, previews.cache, void 0) && isValid2;
 	return isValid2;
 }, "validatePreviewsConfig");
 var validateMigrations = /* @__PURE__ */ __name((diagnostics, field, value) => {
@@ -42598,6 +42601,7 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 	const rules = [];
 	const invalid = [];
 	let rule = void 0;
+	let skipUntilNextPath = false;
 	for (let i$1 = 0; i$1 < lines.length; i$1++) {
 		const line = (lines[i$1] || "").trim();
 		if (line.length === 0 || line.startsWith("#")) continue;
@@ -42606,6 +42610,7 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 			continue;
 		}
 		if (LINE_IS_PROBABLY_A_PATH.test(line)) {
+			skipUntilNextPath = false;
 			if (rules.length >= maxRules) {
 				invalid.push({ message: `Maximum number of rules supported is ${maxRules}. Skipping remaining ${lines.length - i$1} lines of file.` });
 				break;
@@ -42628,6 +42633,18 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 					message: pathError
 				});
 				rule = void 0;
+				skipUntilNextPath = true;
+				continue;
+			}
+			const wildcardError = validateNoMultipleWildcards(path$2);
+			if (wildcardError) {
+				invalid.push({
+					line,
+					lineNumber: i$1 + 1,
+					message: wildcardError
+				});
+				rule = void 0;
+				skipUntilNextPath = true;
 				continue;
 			}
 			rule = {
@@ -42638,6 +42655,7 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 			};
 			continue;
 		}
+		if (skipUntilNextPath) continue;
 		if (!line.includes(HEADER_SEPARATOR)) {
 			if (!rule) invalid.push({
 				line,
@@ -42707,6 +42725,18 @@ function parseHeaders(input, { maxRules = MAX_HEADER_RULES, maxLineLength = MAX_
 function isValidRule(rule) {
 	return Object.keys(rule.headers).length > 0 || rule.unsetHeaders.length > 0;
 }
+/**
+* At runtime, `*` wildcards are converted to `:splat` placeholders. This means
+* a path with multiple wildcards, or a wildcard combined with an explicit
+* `:splat` placeholder, would result in duplicate `:splat` parameters which is
+* unsupported.
+*/
+function validateNoMultipleWildcards(path$2) {
+	const wildcardCount = (path$2.match(SPLAT_REGEX) ?? []).length;
+	const hasSplatPlaceholder = /:splat(?!\w)/.test(path$2);
+	if (wildcardCount > 1) return `Only one wildcard is allowed per rule. Use a named placeholder (e.g. :project) instead. Skipping ${path$2}.`;
+	if (wildcardCount > 0 && hasSplatPlaceholder) return `Cannot combine a wildcard * with a :splat placeholder because wildcards are converted to :splat at runtime. Skipping ${path$2}.`;
+}
 
 //#endregion
 //#region ../workers-shared/utils/configuration/parseRedirects.ts
@@ -48427,10 +48457,26 @@ function getLocalDevVarsForPreview(config, cloudflareEnv) {
 	const dotDevDotVars = wrangler.unstable_getVarsForDev(config.configPath, void 0, {}, cloudflareEnv, false, config.secrets);
 	const dotDevDotVarsEntries = Array.from(Object.entries(dotDevDotVars));
 	if (dotDevDotVarsEntries.length > 0) return dotDevDotVarsEntries.map(([key, { value }]) => {
-		return `${key} = "${value?.toString().replaceAll(`"`, `\\"`)}"\n`;
+		return `${key}=${quoteForDotenv(value?.toString() ?? "")}\n`;
 	}).join("");
 }
 /**
+* Quote a value so that wrangler reads it back unchanged when it parses
+* `dist/<env>/.dev.vars` at preview time.
+*
+* Strategy: To quote the string pick the first quote character that does not
+* appear in the value (single → backtick → double). Throw if a value cannot
+* be losslessly serialized rather than silently corrupting it.
+*
+* @internal exported for tests
+*/
+function quoteForDotenv(value) {
+	if (!value.includes("'")) return `'${value}'`;
+	if (!value.includes("`")) return `\`${value}\``;
+	if (!value.includes("\"") && !/[\\\n\r]/.test(value)) return `"${value}"`;
+	throw new Error("Unable to serialize value to .dev.vars: contains every supported quote character or unsafe escape sequence.");
+}
+/**
 * Returns `true` if the `changedFile` matches a `.dev.vars` or `.env` file.
 */
 function hasLocalDevVarsFileChanged({ configPaths, cloudflareEnv }, changedFilePath) {
@@ -48489,7 +48535,10 @@ const configPlugin = createPlugin("config", (ctx) => {
 					fs: { deny: [...[
 						".env",
 						".env.*",
-						"*.{crt,pem}",
+						".npmrc",
+						".yarnrc",
+						".yarnrc.yml",
+						"*.{crt,pem,key,pfx,p12,p8,jks}",
 						"**/.git/**",
 						".dev.vars",
 						".dev.vars.*",