wrangler 4.113.0 → 4.115.0

package/config-schema.json

@@ -678,6 +678,19 @@
                 "type": "boolean",
                 "description": "Whether the R2 bucket should be remote or not in local development",
                 "markdownDescription": "Whether the R2 bucket should be remote or not in local development"
+              },
+              "local_dev": {
+                "type": "object",
+                "properties": {
+                  "experimental_s3_credentials": {
+                    "$ref": "#/definitions/LocalS3Credentials",
+                    "description": "EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible endpoint. When set, the bucket is served at `/cdn-cgi/local/r2/s3/<bucket-name>` during local development. Ignored when the bucket runs remotely.",
+                    "markdownDescription": "EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible\nendpoint. When set, the bucket is served at\n`/cdn-cgi/local/r2/s3/<bucket-name>` during local development.\nIgnored when the bucket runs remotely."
+                  }
+                },
+                "additionalProperties": false,
+                "description": "Settings that only apply to local development",
+                "markdownDescription": "Settings that only apply to local development"
               }
             },
             "required": [
@@ -2420,6 +2433,19 @@
                 "type": "boolean",
                 "description": "Whether the R2 bucket should be remote or not in local development",
                 "markdownDescription": "Whether the R2 bucket should be remote or not in local development"
+              },
+              "local_dev": {
+                "type": "object",
+                "properties": {
+                  "experimental_s3_credentials": {
+                    "$ref": "#/definitions/LocalS3Credentials",
+                    "description": "EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible endpoint. When set, the bucket is served at `/cdn-cgi/local/r2/s3/<bucket-name>` during local development. Ignored when the bucket runs remotely.",
+                    "markdownDescription": "EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible\nendpoint. When set, the bucket is served at\n`/cdn-cgi/local/r2/s3/<bucket-name>` during local development.\nIgnored when the bucket runs remotely."
+                  }
+                },
+                "additionalProperties": false,
+                "description": "Settings that only apply to local development",
+                "markdownDescription": "Settings that only apply to local development"
               }
             },
             "required": [
@@ -3892,16 +3918,16 @@
       "additionalProperties": false,
       "properties": {
         "logpush": {
-          "$ref": "#/definitions/interface-769040647-10591-20713-769040647-0-526802004818536"
+          "$ref": "#/definitions/interface-769040647-10754-20876-769040647-0-532202004818536"
         },
         "observability": {
-          "$ref": "#/definitions/interface-769040647-10591-20713-769040647-0-526802004818536"
+          "$ref": "#/definitions/interface-769040647-10754-20876-769040647-0-532202004818536"
         },
         "limits": {
-          "$ref": "#/definitions/interface-769040647-10591-20713-769040647-0-526802004818536"
+          "$ref": "#/definitions/interface-769040647-10754-20876-769040647-0-532202004818536"
         },
         "cache": {
-          "$ref": "#/definitions/interface-769040647-10591-20713-769040647-0-526802004818536"
+          "$ref": "#/definitions/interface-769040647-10754-20876-769040647-0-532202004818536"
         },
         "define": {
           "type": "object",
@@ -4204,6 +4230,19 @@
                 "type": "boolean",
                 "description": "Whether the R2 bucket should be remote or not in local development",
                 "markdownDescription": "Whether the R2 bucket should be remote or not in local development"
+              },
+              "local_dev": {
+                "type": "object",
+                "properties": {
+                  "experimental_s3_credentials": {
+                    "$ref": "#/definitions/LocalS3Credentials",
+                    "description": "EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible endpoint. When set, the bucket is served at `/cdn-cgi/local/r2/s3/<bucket-name>` during local development. Ignored when the bucket runs remotely.",
+                    "markdownDescription": "EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible\nendpoint. When set, the bucket is served at\n`/cdn-cgi/local/r2/s3/<bucket-name>` during local development.\nIgnored when the bucket runs remotely."
+                  }
+                },
+                "additionalProperties": false,
+                "description": "Settings that only apply to local development",
+                "markdownDescription": "Settings that only apply to local development"
               }
             },
             "required": [
@@ -5160,7 +5199,7 @@
       "description": "Configuration for Worker Previews.\n\nThis defines the settings used when creating Preview deployments. Previews are branches of your Worker's main instance used to test features during feature development outside of production.\n\nThe `previews` block contains any intentionally divergent configuration intended solely for Previews, including:\n- All non-inheritable properties (environment variables and bindings like KV, D1, R2, etc.)\n- Select inheritable properties: `logpush`, `observability`, `limits`, `cache`",
       "markdownDescription": "Configuration for Worker Previews.\n\nThis defines the settings used when creating Preview deployments.\nPreviews are branches of your Worker's main instance used to test features\nduring feature development outside of production.\n\nThe `previews` block contains any intentionally divergent configuration intended solely for Previews, including:\n- All non-inheritable properties (environment variables and bindings like KV, D1, R2, etc.)\n- Select inheritable properties: `logpush`, `observability`, `limits`, `cache`"
     },
-    "interface-769040647-10591-20713-769040647-0-526802004818536": {
+    "interface-769040647-10754-20876-769040647-0-532202004818536": {
       "type": "object",
       "properties": {
         "name": {
@@ -5932,6 +5971,24 @@
       "description": "Configuration for a container application",
       "markdownDescription": "Configuration for a container application"
     },
+    "LocalS3Credentials": {
+      "type": "object",
+      "properties": {
+        "accessKeyId": {
+          "type": "string"
+        },
+        "secretAccessKey": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "accessKeyId",
+        "secretAccessKey"
+      ],
+      "additionalProperties": false,
+      "description": "AWS SigV4 credentials for miniflare's local S3-compatible endpoint",
+      "markdownDescription": "AWS SigV4 credentials for miniflare's local S3-compatible endpoint"
+    },
     "TailConsumer": {
       "type": "object",
       "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.113.0",
+  "version": "4.115.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "assembly",
@@ -66,16 +66,17 @@
     "esbuild": "0.28.1",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.24",
-    "workerd": "1.20260721.1",
-    "@cloudflare/unenv-preset": "2.16.1",
+    "workerd": "1.20260722.1",
     "@cloudflare/kv-asset-handler": "0.5.0",
-    "miniflare": "4.20260721.0"
+    "@cloudflare/unenv-preset": "2.16.1",
+    "miniflare": "4.20260722.1"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
+    "@aws-sdk/s3-request-presigner": "^3.721.0",
     "@bomb.sh/tab": "^0.0.12",
     "@cloudflare/types": "6.18.4",
-    "@cloudflare/workers-types": "^5.20260721.1",
+    "@cloudflare/workers-types": "^5.20260722.1",
     "@cspotcode/source-map-support": "0.8.1",
     "@netlify/build-info": "^10.5.1",
     "@sentry/node": "^7.86.0",
@@ -155,23 +156,23 @@
     "yaml": "^2.8.1",
     "yargs": "^17.7.2",
     "zod": "4.4.3",
-    "@cloudflare/autoconfig": "0.2.0",
-    "@cloudflare/cli-shared-helpers": "0.1.16",
+    "@cloudflare/autoconfig": "0.2.1",
+    "@cloudflare/cli-shared-helpers": "0.1.17",
     "@cloudflare/codemod": "1.1.0",
     "@cloudflare/config": "0.3.0",
     "@cloudflare/containers-shared": "0.16.0",
-    "@cloudflare/deploy-helpers": "0.6.0",
-    "@cloudflare/runtime-types": "0.0.4",
-    "@cloudflare/pages-shared": "^0.13.159",
-    "@cloudflare/remote-bindings": "0.0.1",
-    "@cloudflare/workers-auth": "0.5.1",
+    "@cloudflare/deploy-helpers": "0.6.2",
+    "@cloudflare/pages-shared": "^0.13.161",
+    "@cloudflare/remote-bindings": "0.0.3",
+    "@cloudflare/runtime-types": "0.0.6",
+    "@cloudflare/workers-auth": "0.5.3",
     "@cloudflare/workers-shared": "0.19.9",
-    "@cloudflare/workers-utils": "0.28.0",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workflows-shared": "0.12.1"
+    "@cloudflare/workers-utils": "0.29.0",
+    "@cloudflare/workflows-shared": "0.12.2"
   },
   "peerDependencies": {
-    "@cloudflare/workers-types": "^5.20260721.1"
+    "@cloudflare/workers-types": "^5.20260722.1"
   },
   "peerDependenciesMeta": {
     "@cloudflare/workers-types": {

package/templates/startDevWorker/ProxyWorker.ts

@@ -1,6 +1,7 @@
 import {
 	createDeferred,
 	type DeferredPromise,
+	isSameUserWorkerOrigin,
 	rewriteUrlInHeaderValue,
 	urlFromParts,
 } from "../../src/api/startDevWorker/utils";
@@ -182,12 +183,13 @@ export class ProxyWorker implements DurableObject {
 					// we have crossed an async boundary, so proxyData may have changed
 					// if proxyData.userWorkerUrl has changed, it means there is a new downstream UserWorker
 					// and that this error is stale since it was for a request to the old UserWorker
-					// so here we construct a newUserWorkerUrl so we can compare it to the (old) userWorkerUrl
-					const newUserWorkerUrl =
-						this.proxyData && urlFromParts(this.proxyData.userWorkerUrl);
-
-					// only report errors if the downstream proxy has NOT changed
-					if (userWorkerUrl.href === newUserWorkerUrl?.href) {
+					// only report the error if the request still targets the current
+					// UserWorker. isSameUserWorkerOrigin compares origin (not href) so a
+					// genuine error on a non-root path isn't misread as a reload — see
+					// its docs.
+					if (
+						isSameUserWorkerOrigin(userWorkerUrl, this.proxyData?.userWorkerUrl)
+					) {
 						void sendMessageToProxyController(this.env, {
 							type: "error",
 							error: {

package/wrangler-dist/ProxyWorker.js

@@ -38,6 +38,10 @@ function rewriteUrlInHeaderValue(value, from, to) {
     }
   );
 }
+function isSameUserWorkerOrigin(requestUrl, parts) {
+  const currentUserWorkerUrl = parts && urlFromParts(parts);
+  return requestUrl.origin === currentUserWorkerUrl?.origin;
+}
 
 // templates/startDevWorker/ProxyWorker.ts
 var LIVE_RELOAD_PROTOCOL = "WRANGLER_PROXYWORKER_LIVE_RELOAD_PROTOCOL";
@@ -145,8 +149,7 @@ var ProxyWorker = class {
         }
         deferredResponse.resolve(res);
       }).catch((error) => {
-        const newUserWorkerUrl = this.proxyData && urlFromParts(this.proxyData.userWorkerUrl);
-        if (userWorkerUrl.href === newUserWorkerUrl?.href) {
+        if (isSameUserWorkerOrigin(userWorkerUrl, this.proxyData?.userWorkerUrl)) {
           void sendMessageToProxyController(this.env, {
             type: "error",
             error: {

package/wrangler-dist/cli.d.ts

@@ -1168,6 +1168,11 @@ type AssetsOptions = {
 interface Environment extends EnvironmentInheritable, EnvironmentNonInheritable {
 }
 type SimpleRoute = string;
+/** AWS SigV4 credentials for miniflare's local S3-compatible endpoint */
+interface LocalS3Credentials {
+    accessKeyId: string;
+    secretAccessKey: string;
+}
 type ZoneIdRoute = {
     pattern: string;
     zone_id: string;
@@ -2090,6 +2095,16 @@ interface EnvironmentNonInheritable {
         jurisdiction?: string;
         /** Whether the R2 bucket should be remote or not in local development */
         remote?: boolean;
+        /** Settings that only apply to local development */
+        local_dev?: {
+            /**
+             * EXPERIMENTAL: AWS SigV4 credentials for the local S3-compatible
+             * endpoint. When set, the bucket is served at
+             * `/cdn-cgi/local/r2/s3/<bucket-name>` during local development.
+             * Ignored when the bucket runs remotely.
+             */
+            experimental_s3_credentials?: LocalS3Credentials;
+        };
     }[];
     /**
      * Specifies D1 databases that are bound to this Worker environment.