wrangler 4.7.2 → 4.8.0

package/config-schema.json

@@ -827,6 +827,34 @@
           "description": "Specifies list of Pipelines bound to this Worker environment\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment.",
           "default": []
         },
+        "secrets_store_secrets": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "binding": {
+                "type": "string",
+                "description": "The binding name used to refer to the bound service."
+              },
+              "store_id": {
+                "type": "string",
+                "description": "Id of the secret store"
+              },
+              "secret_name": {
+                "type": "string",
+                "description": "Name of the secret"
+              }
+            },
+            "required": [
+              "binding",
+              "store_id",
+              "secret_name"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Specifies Secret Store bindings that are bound to this Worker environment.\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment.",
+          "default": []
+        },
         "pages_build_output_dir": {
           "type": "string",
           "description": "The directory of static assets to serve.\n\nThe presence of this field in a Wrangler configuration file indicates a Pages project, and will prompt the handling of the configuration file according to the Pages-specific validation rules."
@@ -1725,6 +1753,34 @@
           },
           "description": "Specifies list of Pipelines bound to this Worker environment\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment.",
           "default": []
+        },
+        "secrets_store_secrets": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "binding": {
+                "type": "string",
+                "description": "The binding name used to refer to the bound service."
+              },
+              "store_id": {
+                "type": "string",
+                "description": "Id of the secret store"
+              },
+              "secret_name": {
+                "type": "string",
+                "description": "Name of the secret"
+              }
+            },
+            "required": [
+              "binding",
+              "store_id",
+              "secret_name"
+            ],
+            "additionalProperties": false
+          },
+          "description": "Specifies Secret Store bindings that are bound to this Worker environment.\n\nNOTE: This field is not automatically inherited from the top level environment, and so must be specified in every named environment.",
+          "default": []
         }
       },
       "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wrangler",
-  "version": "4.7.2",
+  "version": "4.8.0",
   "description": "Command-line interface for all things Cloudflare Workers",
   "keywords": [
     "wrangler",
@@ -55,14 +55,14 @@
     "esbuild": "0.24.2",
     "path-to-regexp": "6.3.0",
     "unenv": "2.0.0-rc.15",
-    "workerd": "1.20250404.0",
+    "workerd": "1.20250405.0",
     "@cloudflare/kv-asset-handler": "0.4.0",
-    "miniflare": "4.20250404.0"
+    "miniflare": "4.20250405.0"
   },
   "devDependencies": {
     "@aws-sdk/client-s3": "^3.721.0",
     "@cloudflare/types": "6.18.4",
-    "@cloudflare/workers-types": "^4.20250404.0",
+    "@cloudflare/workers-types": "^4.20250405.0",
     "@cspotcode/source-map-support": "0.8.1",
     "@iarna/toml": "^3.0.0",
     "@microsoft/api-extractor": "^7.47.0",
@@ -137,12 +137,12 @@
     "yargs": "^17.7.2",
     "@cloudflare/cli": "1.1.1",
     "@cloudflare/eslint-config-worker": "1.1.0",
-    "@cloudflare/pages-shared": "^0.13.22",
+    "@cloudflare/pages-shared": "^0.13.23",
     "@cloudflare/workers-shared": "0.17.1",
     "@cloudflare/workers-tsconfig": "0.0.0"
   },
   "peerDependencies": {
-    "@cloudflare/workers-types": "^4.20250404.0"
+    "@cloudflare/workers-types": "^4.20250405.0"
   },
   "peerDependenciesMeta": {
     "@cloudflare/workers-types": {

package/wrangler-dist/cli.d.ts

@@ -314,6 +314,8 @@ declare type Binding = {
 } & BindingOmit<CfMTlsCertificate>) | ({
     type: "pipeline";
 } & BindingOmit<CfPipeline>) | ({
+    type: "secrets_store_secret";
+} & BindingOmit<CfSecretsStoreSecrets>) | ({
     type: "logfwdr";
 } & NameOmit<CfLogfwdrBinding>) | {
     type: `unsafe_${string}`;
@@ -697,6 +699,12 @@ declare interface CfR2Bucket {
  */
 declare type CfScriptFormat = "modules" | "service-worker";
 
+declare interface CfSecretsStoreSecrets {
+    binding: string;
+    store_id: string;
+    secret_name: string;
+}
+
 /**
  * A binding to send email.
  */
@@ -1152,6 +1160,7 @@ declare function deploy({ directory, accountId, projectName, branch, skipCaching
         build_image_major_version: number;
         kv_namespaces?: any;
         source?: {
+            type: "github" | "gitlab";
             config: {
                 owner: string;
                 repo_name: string;
@@ -1163,7 +1172,6 @@ declare function deploy({ directory, accountId, projectName, branch, skipCaching
                 preview_branch_includes?: string[] | undefined;
                 preview_branch_excludes?: string[] | undefined;
             };
-            type: "github" | "gitlab";
         } | undefined;
         env_vars?: any;
         durable_object_namespaces?: any;
@@ -2264,6 +2272,23 @@ declare interface EnvironmentNonInheritable {
         /** Name of the Pipeline to bind */
         pipeline: string;
     }[];
+    /**
+     * Specifies Secret Store bindings that are bound to this Worker environment.
+     *
+     * NOTE: This field is not automatically inherited from the top level environment,
+     * and so must be specified in every named environment.
+     *
+     * @default []
+     * @nonInheritable
+     */
+    secrets_store_secrets: {
+        /** The binding name used to refer to the bound service. */
+        binding: string;
+        /** Id of the secret store */
+        store_id: string;
+        /** Name of the secret */
+        secret_name: string;
+    }[];
 }
 
 declare type ErrorEvent = BaseErrorEvent<"ConfigController" | "BundlerController" | "LocalRuntimeController" | "RemoteRuntimeController" | "ProxyWorker" | "InspectorProxyWorker" | "MultiworkerRuntimeController"> | BaseErrorEvent<"ProxyController", {