wrangler 4.145.0 → 4.146.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.145.0",
+  "version": "4.146.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "assembly",
@@ -71,17 +71,17 @@
     "esbuild": "0.28.1",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.24",
-    "workerd": "1.20260930.2",
+    "workerd": "1.20261001.1",
     "@cloudflare/kv-asset-handler": "0.5.0",
     "@cloudflare/unenv-preset": "2.16.2",
-    "miniflare": "5.20260930.0-alpha"
+    "miniflare": "5.20261001.0-alpha"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
     "@aws-sdk/s3-request-presigner": "^3.721.0",
     "@bomb.sh/tab": "^0.0.12",
     "@cloudflare/types": "6.18.4",
-    "@cloudflare/workers-types": "^5.20260930.2",
+    "@cloudflare/workers-types": "^5.20261001.1",
     "@cspotcode/source-map-support": "0.8.1",
     "@netlify/build-info": "10.5.1",
     "@sentry/node": "^7.86.0",
@@ -161,25 +161,25 @@
     "yaml": "^2.8.1",
     "yargs": "^17.7.2",
     "zod": "4.4.3",
-    "@cloudflare/autoconfig": "0.7.3",
+    "@cloudflare/autoconfig": "0.7.4",
     "@cloudflare/build-output-utils": "0.8.4",
-    "@cloudflare/cli-shared-helpers": "0.2.1",
+    "@cloudflare/cli-shared-helpers": "0.2.2",
     "@cloudflare/config": "0.22.0",
-    "@cloudflare/containers-shared": "0.21.1",
-    "@cloudflare/deploy-helpers": "0.19.0",
-    "@cloudflare/pages-shared": "^0.13.192",
-    "@cloudflare/remote-bindings": "0.0.40",
-    "@cloudflare/runtime-types": "0.1.6",
+    "@cloudflare/containers-shared": "0.21.2",
+    "@cloudflare/deploy-helpers": "0.19.1",
     "@cloudflare/pages-functions": "0.1.0",
+    "@cloudflare/pages-shared": "^0.13.193",
+    "@cloudflare/remote-bindings": "0.0.42",
+    "@cloudflare/runtime-types": "0.1.7",
     "@cloudflare/shared-ast-primitives": "1.1.0",
-    "@cloudflare/workers-auth": "0.10.0",
+    "@cloudflare/workers-auth": "0.11.1",
     "@cloudflare/workers-shared": "0.20.0",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.45.0",
+    "@cloudflare/workers-utils": "0.45.1",
     "@cloudflare/workflows-shared": "0.15.0"
   },
   "peerDependencies": {
-    "@cloudflare/workers-types": "^5.20260930.2"
+    "@cloudflare/workers-types": "^5.20261001.1"
   },
   "peerDependenciesMeta": {
     "@cloudflare/workers-types": {

package/wrangler-dist/cli.js

@@ -27412,7 +27412,7 @@ var DEFAULT_COMPAT_DATE;
 var init_default_compat_date = __esm({
   "../workers-utils/src/default-compat-date.ts"() {
     init_import_meta_url();
-    DEFAULT_COMPAT_DATE = "2026-09-30";
+    DEFAULT_COMPAT_DATE = "2026-10-01";
   }
 });
 
@@ -57511,13 +57511,16 @@ You can try:
 }
 function redactCloudflaredArgsForLogging(args) {
   const redacted = [...args];
+  const sensitiveArgs = ["--token", "--allowed-mail"];
   for (let i8 = 0; i8 < redacted.length; i8++) {
     const arg = redacted[i8];
-    if (arg === "--token" && i8 + 1 < redacted.length) {
-      redacted[i8 + 1] = "[REDACTED]";
-    }
-    if (arg.startsWith("--token=")) {
-      redacted[i8] = "--token=[REDACTED]";
+    for (const sensitiveArg of sensitiveArgs) {
+      if (arg === sensitiveArg && i8 + 1 < redacted.length) {
+        redacted[i8 + 1] = "[REDACTED]";
+      }
+      if (arg.startsWith(`${sensitiveArg}=`)) {
+        redacted[i8] = `${sensitiveArg}=[REDACTED]`;
+      }
     }
   }
   return redacted;
@@ -57786,6 +57789,27 @@ async function spawnCloudflared(args, options) {
     confirmDownload: options?.confirmDownload,
     logger: logger7
   });
+  if (args.some(
+    (arg) => arg === "--allowed-mail" || arg.startsWith("--allowed-mail=")
+  )) {
+    const minimumVersion = "2026.9.2";
+    const installedVersion = getInstalledVersion(binPath);
+    if (!installedVersion || isVersionOutdated(installedVersion, minimumVersion)) {
+      throw new UserError(
+        `[cloudflared] --allowed-mail requires cloudflared ${minimumVersion} or later.
+
+` + (installedVersion ? `The selected binary (${binPath}) is version ${installedVersion}.
+
+` : `Could not determine the version of the selected binary (${binPath}).
+
+`) + `Update cloudflared in your PATH or set CLOUDFLARED_PATH to a compatible binary.
+Download instructions: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/downloads/`,
+        {
+          telemetryMessage: "tunnel cloudflared allowed mail unsupported version"
+        }
+      );
+    }
+  }
   logger7?.debug(
     `Spawning cloudflared: ${binPath} ${redactCloudflaredArgsForLogging(args).join(" ")}`
   );
@@ -63047,7 +63071,7 @@ var name, version2;
 var init_package = __esm({
   "package.json"() {
     name = "wrangler";
-    version2 = "4.145.0";
+    version2 = "4.146.0";
   }
 });
 
@@ -179899,6 +179923,10 @@ var init_cf = __esm({
       "ip-prefix-bgp-on-demand.write",
       "ip-prefix.read",
       "ip-prefix.write",
+      "k2.consume",
+      "k2.produce",
+      "k2.read",
+      "k2.write",
       "l4-ddos-managed-ruleset.read",
       "l4-ddos-managed-ruleset.write",
       "load-balancers-account.read",
@@ -180572,7 +180600,7 @@ var init_dist14 = __esm({
     init_wrapper();
     init_create_worker_upload_form();
     import_undici13 = __toESM(require_undici(), 1);
-    version3 = "0.0.40";
+    version3 = "0.0.42";
     NoDefaultValueProvided2 = class extends UserError {
       static {
         __name(this, "NoDefaultValueProvided");
@@ -211792,7 +211820,7 @@ var init_namespaces4 = __esm({
     artifactsNamespacesNamespace = createNamespace({
       metadata: {
         description: "Manage Artifacts namespaces",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       }
     });
@@ -211801,7 +211829,7 @@ var init_namespaces4 = __esm({
     artifactsNamespacesListCommand = createCommand({
       metadata: {
         description: "List Artifacts namespaces",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -211833,7 +211861,7 @@ var init_namespaces4 = __esm({
     artifactsNamespacesGetCommand = createCommand({
       metadata: {
         description: "Get an Artifacts namespace",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -211933,7 +211961,7 @@ var init_repos = __esm({
     artifactsReposNamespace = createNamespace({
       metadata: {
         description: "Manage Artifacts repositories",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       }
     });
@@ -211944,7 +211972,7 @@ var init_repos = __esm({
     artifactsReposCreateCommand = createCommand({
       metadata: {
         description: "Create an Artifacts repository",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -211991,7 +212019,7 @@ var init_repos = __esm({
     artifactsReposListCommand = createCommand({
       metadata: {
         description: "List Artifacts repositories in a namespace",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -212025,7 +212053,7 @@ var init_repos = __esm({
     artifactsReposGetCommand = createCommand({
       metadata: {
         description: "Get an Artifacts repository",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -212049,7 +212077,7 @@ var init_repos = __esm({
     artifactsReposDeleteCommand = createCommand({
       metadata: {
         description: "Delete an Artifacts repository",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -212086,7 +212114,7 @@ var init_repos = __esm({
     artifactsReposIssueTokenCommand = createCommand({
       metadata: {
         description: "Issue a repo-scoped Artifacts token",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts"
       },
       behaviour: {
@@ -212148,7 +212176,7 @@ var init_artifacts = __esm({
     artifactsNamespace = createNamespace({
       metadata: {
         description: "\u{1F9F1} Manage Artifacts namespaces and repos",
-        status: "private beta",
+        status: "open beta",
         owner: "Product: Artifacts",
         category: "Storage & databases"
       }
@@ -303115,11 +303143,14 @@ function parseMethod(method) {
   return { method };
 }
 function parseHeader(header) {
-  const [headerKey, headerQuery] = header.split(":", 2);
+  const separatorIndex = header.indexOf(":");
+  if (separatorIndex === -1) {
+    return { header: { key: header.trim() } };
+  }
   return {
     header: {
-      key: headerKey.trim(),
-      query: headerQuery?.trim()
+      key: header.slice(0, separatorIndex).trim(),
+      query: header.slice(separatorIndex + 1).trim()
     }
   };
 }
@@ -350364,6 +350395,12 @@ var init_quick_start = __esm({
           demandOption: true,
           description: "The local URL to expose (e.g., http://localhost:3000)"
         },
+        "allowed-mail": {
+          type: "string",
+          array: true,
+          nargs: 1,
+          description: "Require email authentication (cloudflared 2026.9.2 or later). Accepts an exact address or domain wildcard such as user@example.com or *@example.org. May be repeated or comma-separated."
+        },
         "log-level": {
           type: "string",
           default: "info",
@@ -350381,7 +350418,11 @@ var init_quick_start = __esm({
           "--url",
           args.url,
           "--loglevel",
-          args.logLevel || "info"
+          args.logLevel || "info",
+          ...(args.allowedMail ?? []).flatMap((allowedMail) => [
+            "--allowed-mail",
+            allowedMail
+          ])
         ];
         logger7.log(`
 Starting cloudflared...`);