wrangler 4.147.0 → 4.149.0

package/bin/cf-wrangler.js

@@ -125,6 +125,7 @@ function createDevOptions(parsedArgs) {
 		containerEngine: undefined,
 		tunnel: undefined,
 		tunnelName: undefined,
+		tunnelAllowedMail: undefined,
 		envFile: undefined,
 		onReady: undefined,
 	};

package/config-schema.json

@@ -1858,8 +1858,8 @@
           "items": {
             "type": "string"
           },
-          "description": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`) or a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an Email Routing rule whose action routes mail to this Worker.\n\nThis field is top-level only and applies to every environment of the Worker; it cannot be set under `env.*`.",
-          "markdownDescription": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`)\nor a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an\nEmail Routing rule whose action routes mail to this Worker.\n\nThis field is top-level only and applies to every environment of the\nWorker; it cannot be set under `env.*`."
+          "description": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`) or a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an Email Routing rule whose action routes mail to this Worker.\n\nA `*@domain` catch-all must use the zone apex (e.g. `\"*@example.com\"`, not `\"*@mail.example.com\"`). The zone catch-all also receives mail for every subdomain in the zone that has no literal rule.\n\nThis field is top-level only and applies to every environment of the Worker; it cannot be set under `env.*`.",
+          "markdownDescription": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`)\nor a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an\nEmail Routing rule whose action routes mail to this Worker.\n\nA `*@domain` catch-all must use the zone apex (e.g. `\"*@example.com\"`,\nnot `\"*@mail.example.com\"`). The zone catch-all also receives mail for\nevery subdomain in the zone that has no literal rule.\n\nThis field is top-level only and applies to every environment of the\nWorker; it cannot be set under `env.*`."
         }
       }
     },
@@ -4237,6 +4237,11 @@
           "description": "How to handle requests that do not match an asset.",
           "markdownDescription": "How to handle requests that do not match an asset."
         },
+        "base_path": {
+          "type": "string",
+          "description": "The public URL prefix under which the application is served, e.g. `/subpath/`.",
+          "markdownDescription": "The public URL prefix under which the application is served, e.g. `/subpath/`."
+        },
         "run_worker_first": {
           "anyOf": [
             {
@@ -4404,19 +4409,19 @@
       "type": "object",
       "properties": {
         "logpush": {
-          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-614072004818536"
+          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-615212004818536"
         },
         "observability": {
-          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-614072004818536"
+          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-615212004818536"
         },
         "limits": {
-          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-614072004818536"
+          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-615212004818536"
         },
         "placement": {
-          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-614072004818536"
+          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-615212004818536"
         },
         "cache": {
-          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-614072004818536"
+          "$ref": "#/definitions/interface-769040647-14867-25229-769040647-0-615212004818536"
         },
         "define": {
           "type": "object",
@@ -5781,7 +5786,7 @@
       "description": "Configuration for Worker Previews.\n\nThis defines the settings used when creating Preview deployments. Previews are branches of your Worker's main instance used to test features during feature development outside of production.\n\nThe `previews` block contains any intentionally divergent configuration intended solely for Previews, including:\n- All non-inheritable properties (environment variables and bindings like KV, D1, R2, etc.)\n- Select inheritable properties: `logpush`, `observability`, `limits`, `placement`, `cache`",
       "markdownDescription": "Configuration for Worker Previews.\n\nThis defines the settings used when creating Preview deployments.\nPreviews are branches of your Worker's main instance used to test features\nduring feature development outside of production.\n\nThe `previews` block contains any intentionally divergent configuration intended solely for Previews, including:\n- All non-inheritable properties (environment variables and bindings like KV, D1, R2, etc.)\n- Select inheritable properties: `logpush`, `observability`, `limits`, `placement`, `cache`"
     },
-    "interface-769040647-14867-25229-769040647-0-614072004818536": {
+    "interface-769040647-14867-25229-769040647-0-615212004818536": {
       "type": "object",
       "properties": {
         "name": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.147.0",
+  "version": "4.149.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "assembly",
@@ -68,20 +68,20 @@
   },
   "dependencies": {
     "blake3-wasm": "2.1.5",
-    "esbuild": "0.28.1",
+    "esbuild": "0.28.2",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.24",
-    "workerd": "1.20261001.1",
-    "@cloudflare/kv-asset-handler": "0.5.0",
+    "workerd": "1.20261006.1",
     "@cloudflare/unenv-preset": "2.16.2",
-    "miniflare": "5.20261001.0-alpha"
+    "@cloudflare/kv-asset-handler": "0.5.0",
+    "miniflare": "5.20261006.1-alpha"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
     "@aws-sdk/s3-request-presigner": "^3.721.0",
     "@bomb.sh/tab": "^0.0.12",
     "@cloudflare/types": "6.18.4",
-    "@cloudflare/workers-types": "^5.20261001.1",
+    "@cloudflare/workers-types": "^5.20261006.1",
     "@cspotcode/source-map-support": "0.8.1",
     "@netlify/build-info": "10.5.1",
     "@sentry/node": "^7.86.0",
@@ -160,26 +160,26 @@
     "xxhash-wasm": "^1.0.1",
     "yaml": "^2.8.1",
     "yargs": "^17.7.2",
-    "zod": "4.4.3",
-    "@cloudflare/build-output-utils": "0.8.5",
-    "@cloudflare/autoconfig": "0.7.5",
-    "@cloudflare/cli-shared-helpers": "0.2.3",
-    "@cloudflare/config": "0.23.0",
-    "@cloudflare/containers-shared": "0.21.3",
-    "@cloudflare/deploy-helpers": "0.19.2",
-    "@cloudflare/pages-functions": "0.1.0",
-    "@cloudflare/pages-shared": "^0.13.193",
-    "@cloudflare/remote-bindings": "0.0.43",
-    "@cloudflare/runtime-types": "0.1.7",
+    "zod": "4.6.5",
+    "@cloudflare/autoconfig": "0.7.7",
+    "@cloudflare/cli-shared-helpers": "0.2.5",
+    "@cloudflare/build-output-utils": "0.9.0",
+    "@cloudflare/config": "0.24.1",
+    "@cloudflare/containers-shared": "0.21.5",
+    "@cloudflare/pages-functions": "0.1.1",
+    "@cloudflare/remote-bindings": "0.0.45",
+    "@cloudflare/runtime-types": "0.1.9",
+    "@cloudflare/deploy-helpers": "0.20.1",
     "@cloudflare/shared-ast-primitives": "1.1.0",
-    "@cloudflare/workers-auth": "0.12.0",
-    "@cloudflare/workers-shared": "0.20.0",
+    "@cloudflare/pages-shared": "^0.13.195",
+    "@cloudflare/workers-auth": "0.13.1",
+    "@cloudflare/workers-shared": "0.20.1",
+    "@cloudflare/workers-utils": "0.47.1",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.46.0",
-    "@cloudflare/workflows-shared": "0.15.0"
+    "@cloudflare/workflows-shared": "0.15.1"
   },
   "peerDependencies": {
-    "@cloudflare/workers-types": "^5.20261001.1"
+    "@cloudflare/workers-types": "^5.20261006.1"
   },
   "peerDependenciesMeta": {
     "@cloudflare/workers-types": {

package/wrangler-dist/cli.d.ts

@@ -688,6 +688,7 @@ declare const dev: {
         types: boolean | undefined;
         tunnel: boolean | undefined;
         tunnelName: string | undefined;
+        tunnelAllowedMail: string[] | undefined;
         experimentalNewConfig: boolean;
         _: (string | number)[];
         $0: string;
@@ -2948,6 +2949,10 @@ type Assets = {
     html_handling?: "auto-trailing-slash" | "force-trailing-slash" | "drop-trailing-slash" | "none";
     /** How to handle requests that do not match an asset. */
     not_found_handling?: "single-page-application" | "404-page" | "none";
+    /**
+     * The public URL prefix under which the application is served, e.g. `/subpath/`.
+     */
+    base_path?: string;
     /**
      * Matches will be routed to the User Worker, and matches to negative rules will go to the Asset Worker.
      *
@@ -3229,6 +3234,10 @@ interface ConfigFields<Dev extends RawDevConfig> {
      * or a `*@domain` catch-all (e.g. `"*@example.com"`). Every entry creates an
      * Email Routing rule whose action routes mail to this Worker.
      *
+     * A `*@domain` catch-all must use the zone apex (e.g. `"*@example.com"`,
+     * not `"*@mail.example.com"`). The zone catch-all also receives mail for
+     * every subdomain in the zone that has no literal rule.
+     *
      * This field is top-level only and applies to every environment of the
      * Worker; it cannot be set under `env.*`.
      *
@@ -3833,9 +3842,11 @@ type CommandDefinition<NamedArgDefs extends NamedArgDefinitions = NamedArgDefini
         suggestSkillsAfterHandler?: boolean | ((args: HandlerArgs<NamedArgDefs>) => boolean);
         /**
          * Whether this command can authenticate with a temporary preview account
-         * (via the hidden `--temporary` flag) when no real credentials are available.
-         * Only enable this for commands whose API calls are covered by the temporary
-         * preview-account deploy token (Workers, KV, D1, Hyperdrive, Queues, SSL/Certs).
+         * (via the hidden `--temporary` and `--event-code` flags) when no real
+         * credentials are available. Only enable this for commands whose API calls
+         * are covered by the temporary preview-account deploy token (Workers, KV,
+         * D1, Hyperdrive, Queues, SSL/Certs). R2 and Containers commands are also
+         * enabled, but only work on event accounts created with `--event-code`.
          * @default false
          */
         supportTemporary?: boolean;