wrangler 4.148.0 → 4.149.0

package/config-schema.json

@@ -1858,8 +1858,8 @@
           "items": {
             "type": "string"
           },
-          "description": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`) or a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an Email Routing rule whose action routes mail to this Worker.\n\nThis field is top-level only and applies to every environment of the Worker; it cannot be set under `env.*`.",
-          "markdownDescription": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`)\nor a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an\nEmail Routing rule whose action routes mail to this Worker.\n\nThis field is top-level only and applies to every environment of the\nWorker; it cannot be set under `env.*`."
+          "description": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`) or a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an Email Routing rule whose action routes mail to this Worker.\n\nA `*@domain` catch-all must use the zone apex (e.g. `\"*@example.com\"`, not `\"*@mail.example.com\"`). The zone catch-all also receives mail for every subdomain in the zone that has no literal rule.\n\nThis field is top-level only and applies to every environment of the Worker; it cannot be set under `env.*`.",
+          "markdownDescription": "The inbound email addresses handled by the Worker being deployed.\n\nEach entry is a literal recipient address (e.g. `\"support@example.com\"`)\nor a `*@domain` catch-all (e.g. `\"*@example.com\"`). Every entry creates an\nEmail Routing rule whose action routes mail to this Worker.\n\nA `*@domain` catch-all must use the zone apex (e.g. `\"*@example.com\"`,\nnot `\"*@mail.example.com\"`). The zone catch-all also receives mail for\nevery subdomain in the zone that has no literal rule.\n\nThis field is top-level only and applies to every environment of the\nWorker; it cannot be set under `env.*`."
         }
       }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.148.0",
+  "version": "4.149.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "assembly",
@@ -68,13 +68,13 @@
   },
   "dependencies": {
     "blake3-wasm": "2.1.5",
-    "esbuild": "0.28.1",
+    "esbuild": "0.28.2",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.24",
     "workerd": "1.20261006.1",
+    "@cloudflare/unenv-preset": "2.16.2",
     "@cloudflare/kv-asset-handler": "0.5.0",
-    "miniflare": "5.20261006.0-alpha",
-    "@cloudflare/unenv-preset": "2.16.2"
+    "miniflare": "5.20261006.1-alpha"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
@@ -160,23 +160,23 @@
     "xxhash-wasm": "^1.0.1",
     "yaml": "^2.8.1",
     "yargs": "^17.7.2",
-    "zod": "4.4.3",
-    "@cloudflare/autoconfig": "0.7.6",
-    "@cloudflare/build-output-utils": "0.8.6",
-    "@cloudflare/cli-shared-helpers": "0.2.4",
-    "@cloudflare/config": "0.24.0",
-    "@cloudflare/containers-shared": "0.21.4",
-    "@cloudflare/pages-functions": "0.1.0",
-    "@cloudflare/deploy-helpers": "0.20.0",
-    "@cloudflare/pages-shared": "^0.13.194",
-    "@cloudflare/remote-bindings": "0.0.44",
-    "@cloudflare/runtime-types": "0.1.8",
+    "zod": "4.6.5",
+    "@cloudflare/autoconfig": "0.7.7",
+    "@cloudflare/cli-shared-helpers": "0.2.5",
+    "@cloudflare/build-output-utils": "0.9.0",
+    "@cloudflare/config": "0.24.1",
+    "@cloudflare/containers-shared": "0.21.5",
+    "@cloudflare/pages-functions": "0.1.1",
+    "@cloudflare/remote-bindings": "0.0.45",
+    "@cloudflare/runtime-types": "0.1.9",
+    "@cloudflare/deploy-helpers": "0.20.1",
     "@cloudflare/shared-ast-primitives": "1.1.0",
-    "@cloudflare/workers-auth": "0.13.0",
-    "@cloudflare/workers-shared": "0.20.0",
+    "@cloudflare/pages-shared": "^0.13.195",
+    "@cloudflare/workers-auth": "0.13.1",
+    "@cloudflare/workers-shared": "0.20.1",
+    "@cloudflare/workers-utils": "0.47.1",
     "@cloudflare/workers-tsconfig": "0.0.0",
-    "@cloudflare/workers-utils": "0.47.0",
-    "@cloudflare/workflows-shared": "0.15.0"
+    "@cloudflare/workflows-shared": "0.15.1"
   },
   "peerDependencies": {
     "@cloudflare/workers-types": "^5.20261006.1"

package/wrangler-dist/cli.d.ts

@@ -3234,6 +3234,10 @@ interface ConfigFields<Dev extends RawDevConfig> {
      * or a `*@domain` catch-all (e.g. `"*@example.com"`). Every entry creates an
      * Email Routing rule whose action routes mail to this Worker.
      *
+     * A `*@domain` catch-all must use the zone apex (e.g. `"*@example.com"`,
+     * not `"*@mail.example.com"`). The zone catch-all also receives mail for
+     * every subdomain in the zone that has no literal rule.
+     *
      * This field is top-level only and applies to every environment of the
      * Worker; it cannot be set under `env.*`.
      *
@@ -3838,9 +3842,11 @@ type CommandDefinition<NamedArgDefs extends NamedArgDefinitions = NamedArgDefini
         suggestSkillsAfterHandler?: boolean | ((args: HandlerArgs<NamedArgDefs>) => boolean);
         /**
          * Whether this command can authenticate with a temporary preview account
-         * (via the hidden `--temporary` flag) when no real credentials are available.
-         * Only enable this for commands whose API calls are covered by the temporary
-         * preview-account deploy token (Workers, KV, D1, Hyperdrive, Queues, SSL/Certs).
+         * (via the hidden `--temporary` and `--event-code` flags) when no real
+         * credentials are available. Only enable this for commands whose API calls
+         * are covered by the temporary preview-account deploy token (Workers, KV,
+         * D1, Hyperdrive, Queues, SSL/Certs). R2 and Containers commands are also
+         * enabled, but only work on event accounts created with `--event-code`.
          * @default false
          */
         supportTemporary?: boolean;