wrangler 4.69.0 → 4.70.0

package/README.md

@@ -54,24 +54,10 @@ For more detailed information about configuration, refer to the [documentation](
 
 ## Commands
 
-### Workers
+The `wrangler` CLI offers various commands, the most popular being:
 
-#### `wrangler dev`
+- `wrangler dev` to start a local development server, with live reloading and devtools.
 
-Start a local development server, with live reloading and devtools.
+- `wrangler deploy` to deploy a Worker to the Cloudflare's global network.
 
-#### `wrangler deploy`
-
-Publish the given script to Cloudflare's global network.
-
-For more commands and options, refer to the [documentation](https://developers.cloudflare.com/workers/wrangler/commands/).
-
-### Pages
-
-#### `wrangler pages dev [directory]`
-
-Serves a static build asset directory.
-
-Builds and runs functions from a `./functions` directory or uses a `_worker.js` file inside the static build asset directory.
-
-For more commands and options, refer to the [documentation](https://developers.cloudflare.com/pages/platform/functions#develop-and-preview-locally) or run `wrangler pages dev --help`.
+There are many more commands and options available, for a full list refer to the [official Cloudflare documentation](https://developers.cloudflare.com/workers/wrangler/commands/).

package/config-schema.json

@@ -353,12 +353,11 @@
               "items": {
                 "type": "string"
               },
-              "description": "List of secret names that are required by your Worker. When defined, this property:\n- Replaces .dev.vars/.env inference for type generation\n- Enables deploy-time validation to ensure secrets are configured\n- Enables local dev validation with warnings for missing secrets"
+              "description": "List of secret names that are required by your Worker. When defined, this property:\n- Replaces .dev.vars/.env/process.env inference for type generation\n- Enables local dev validation with warnings for missing secrets"
             }
           },
           "additionalProperties": false,
-          "description": "Secrets configuration.\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment.",
-          "default": "undefined"
+          "description": "Secrets configuration (experimental).\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment."
         },
         "durable_objects": {
           "type": "object",
@@ -1617,12 +1616,11 @@
               "items": {
                 "type": "string"
               },
-              "description": "List of secret names that are required by your Worker. When defined, this property:\n- Replaces .dev.vars/.env inference for type generation\n- Enables deploy-time validation to ensure secrets are configured\n- Enables local dev validation with warnings for missing secrets"
+              "description": "List of secret names that are required by your Worker. When defined, this property:\n- Replaces .dev.vars/.env/process.env inference for type generation\n- Enables local dev validation with warnings for missing secrets"
             }
           },
           "additionalProperties": false,
-          "description": "Secrets configuration.\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment.",
-          "default": "undefined"
+          "description": "Secrets configuration (experimental).\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment."
         },
         "durable_objects": {
           "type": "object",
@@ -2831,6 +2829,17 @@
         "remote": {
           "type": "boolean",
           "description": "Whether the Workflow should be remote or not in local development"
+        },
+        "limits": {
+          "type": "object",
+          "properties": {
+            "steps": {
+              "type": "number",
+              "description": "Maximum number of steps a Workflow instance can execute"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Optional limits for the Workflow"
         }
       },
       "required": [
@@ -3197,6 +3206,10 @@
         "socketPath": {
           "type": "string",
           "description": "Socket used by miniflare to communicate with Docker"
+        },
+        "containerEgressInterceptorImage": {
+          "type": "string",
+          "description": "Docker image name for the container egress interceptor sidecar"
         }
       },
       "required": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.69.0",
+  "version": "4.70.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "wrangler",
@@ -54,16 +54,16 @@
     "esbuild": "0.27.3",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.24",
-    "workerd": "1.20260305.0",
+    "workerd": "1.20260301.1",
     "@cloudflare/kv-asset-handler": "0.4.2",
-    "miniflare": "4.20260305.0",
-    "@cloudflare/unenv-preset": "2.14.0"
+    "@cloudflare/unenv-preset": "2.14.0",
+    "miniflare": "4.20260301.1"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
     "@bomb.sh/tab": "^0.0.12",
     "@cloudflare/types": "6.18.4",
-    "@cloudflare/workers-types": "^4.20260305.0",
+    "@cloudflare/workers-types": "^4.20260226.1",
     "@cspotcode/source-map-support": "0.8.1",
     "@netlify/build-info": "^10.2.0",
     "@sentry/node": "^7.86.0",
@@ -148,16 +148,16 @@
     "yaml": "^2.8.1",
     "yargs": "^17.7.2",
     "@cloudflare/cli": "1.2.1",
-    "@cloudflare/containers-shared": "0.9.0",
+    "@cloudflare/containers-shared": "0.10.0",
     "@cloudflare/eslint-config-shared": "1.2.1",
-    "@cloudflare/pages-shared": "^0.13.111",
+    "@cloudflare/pages-shared": "^0.13.112",
+    "@cloudflare/workers-shared": "0.19.0",
     "@cloudflare/workers-tsconfig": "0.0.0",
     "@cloudflare/workers-utils": "0.12.0",
-    "@cloudflare/workers-shared": "0.19.0",
-    "@cloudflare/workflows-shared": "0.4.0"
+    "@cloudflare/workflows-shared": "0.5.0"
   },
   "peerDependencies": {
-    "@cloudflare/workers-types": "^4.20260305.0"
+    "@cloudflare/workers-types": "^4.20260226.1"
   },
   "peerDependenciesMeta": {
     "@cloudflare/workers-types": {

package/templates/remoteBindings/ProxyServerWorker.ts

@@ -3,18 +3,6 @@ import { EmailMessage } from "cloudflare:email";
 
 interface Env extends Record<string, unknown> {}
 
-/**
- * List of RPC methods exposed by the raw AI binding that need proxying
- * through a plain-object wrapper. The raw AI binding (deployed with raw:true)
- * has a non-standard prototype that capnweb's typeForRpc() doesn't recognise,
- * causing "RPC stub points at a non-serializable type". By wrapping only the
- * allowed RPC methods in a plain object we give capnweb an Object.prototype
- * target it can navigate.
- *
- * Add new AI RPC method names here as they are introduced.
- */
-const AI_RPC_METHODS = ["aiSearch"] as const;
-
 class BindingNotFoundError extends Error {
 	constructor(name?: string) {
 		super(`Binding ${name ? `"${name}"` : ""} not found`);
@@ -33,11 +21,6 @@ class BindingNotFoundError extends Error {
  *    can't emulate that over an async boundary, we mock it locally and _actually_
  *    perform the .get() remotely at the first appropriate async point. See
  *    packages/miniflare/src/workers/dispatch-namespace/dispatch-namespace.worker.ts
- *  - AI bindings (raw:true / minimal_mode) have a workerd-internal prototype
- *    that capnweb's typeForRpc() classifies as "unsupported", causing
- *    "RPC stub points at a non-serializable type". We wrap the binding in a
- *    plain object that delegates only the allowed RPC methods (AI_RPC_METHODS)
- *    so capnweb gets an Object.prototype target it can navigate.
  *
  * getExposedJSRPCBinding() and getExposedFetcher() perform the logic for figuring out
  * which binding is being accessed, dependending on the request. Note: Both have logic
@@ -77,19 +60,6 @@ function getExposedJSRPCBinding(request: Request, env: Env) {
 		};
 	}
 
-	if (url.searchParams.get("MF-Binding-Type") === "ai") {
-		const wrapper: Record<string, (...args: unknown[]) => unknown> = {};
-		for (const method of AI_RPC_METHODS) {
-			if (typeof (targetBinding as any)[method] === "function") {
-				wrapper[method] = (...args: unknown[]) =>
-					(targetBinding as any)[method](...args);
-			}
-		}
-		if (Object.keys(wrapper).length > 0) {
-			return wrapper;
-		}
-	}
-
 	if (url.searchParams.has("MF-Dispatch-Namespace-Options")) {
 		const { name, args, options } = JSON.parse(
 			url.searchParams.get("MF-Dispatch-Namespace-Options")!

package/wrangler-dist/ProxyServerWorker.js

@@ -3214,7 +3214,6 @@ async function newWorkersRpcResponse(request, localMain) {
 
 // templates/remoteBindings/ProxyServerWorker.ts
 import { EmailMessage } from "cloudflare:email";
-var AI_RPC_METHODS = ["aiSearch"];
 var BindingNotFoundError = class extends Error {
   constructor(name) {
     super(`Binding ${name ? `"${name}"` : ""} not found`);
@@ -3246,17 +3245,6 @@ function getExposedJSRPCBinding(request, env) {
       }
     };
   }
-  if (url.searchParams.get("MF-Binding-Type") === "ai") {
-    const wrapper = {};
-    for (const method of AI_RPC_METHODS) {
-      if (typeof targetBinding[method] === "function") {
-        wrapper[method] = (...args) => targetBinding[method](...args);
-      }
-    }
-    if (Object.keys(wrapper).length > 0) {
-      return wrapper;
-    }
-  }
   if (url.searchParams.has("MF-Dispatch-Namespace-Options")) {
     const { name, args, options } = JSON.parse(
       url.searchParams.get("MF-Dispatch-Namespace-Options")

package/wrangler-dist/cli.d.ts

@@ -1415,6 +1415,11 @@ type WorkflowBinding = {
     script_name?: string;
     /** Whether the Workflow should be remote or not in local development */
     remote?: boolean;
+    /** Optional limits for the Workflow */
+    limits?: {
+        /** Maximum number of steps a Workflow instance can execute */
+        steps?: number;
+    };
 };
 /**
  * The `EnvironmentNonInheritable` interface declares all the configuration fields for an environment
@@ -1447,20 +1452,18 @@ interface EnvironmentNonInheritable {
      */
     vars: Record<string, string | Json>;
     /**
-     * Secrets configuration.
+     * Secrets configuration (experimental).
      *
      * NOTE: This field is not automatically inherited from the top level environment,
      * and so must be specified in every named environment.
      *
-     * @default undefined
      * @nonInheritable
      */
     secrets?: {
         /**
          * List of secret names that are required by your Worker.
          * When defined, this property:
-         * - Replaces .dev.vars/.env inference for type generation
-         * - Enables deploy-time validation to ensure secrets are configured
+         * - Replaces .dev.vars/.env/process.env inference for type generation
          * - Enables local dev validation with warnings for missing secrets
          */
         required?: string[];
@@ -2121,6 +2124,8 @@ interface CacheOptions {
 type DockerConfiguration = {
     /** Socket used by miniflare to communicate with Docker */
     socketPath: string;
+    /** Docker image name for the container egress interceptor sidecar */
+    containerEgressInterceptorImage?: string;
 };
 type ContainerEngine = {
     localDocker: DockerConfiguration;
@@ -2397,15 +2402,20 @@ type VarBinding = Extract<Binding, {
  * Any values in these files (all formatted like `.env` files) will add to or override `vars`
  * bindings provided in the Wrangler configuration file.
  *
+ * When `secrets` is defined in the config, only the declared secret keys are loaded from
+ * `.dev.vars`/`.env`/`process.env`. All other keys in those files are excluded. A warning
+ * is emitted for any required secrets that are missing.
+ *
  * @param configPath - The path to the Wrangler configuration file, if defined.
  * @param envFiles - An array of paths to .env files to load; if `undefined` the default .env files will be used (see `getDefaultEnvFiles()`).
  * The `envFiles` paths are resolved against the directory of the Wrangler configuration file, if there is one, otherwise against the current working directory.
  * @param vars - The existing `vars` bindings from the Wrangler configuration.
  * @param env - The specific environment name (e.g., "staging") or `undefined` if no specific environment is set.
  * @param silent - If true, will not log any messages about the loaded .dev.vars files or .env files.
+ * @param secrets - If defined, only the declared secret keys are loaded from `.dev.vars` or `.env`/`process.env`.
  * @returns The merged `vars` as typed bindings. Config vars are `plain_text`/`json`, while `.dev.vars`/`.env` vars are `secret_text`.
  */
-declare function getVarsForDev(configPath: string | undefined, envFiles: string[] | undefined, vars: Config$1["vars"], env: string | undefined, silent?: boolean): Record<string, VarBinding>;
+declare function getVarsForDev(configPath: string | undefined, envFiles: string[] | undefined, vars: Config$1["vars"], env: string | undefined, silent?: boolean, secrets?: Config$1["secrets"]): Record<string, VarBinding>;
 
 interface PackageManager {
     type: "npm" | "yarn" | "pnpm" | "bun";