Bump wrangler from 3.114.0 to 4.0.0

[dependabot]

Bumps wrangler from 3.114.0 to 4.0.0.

Release notes

Sourced from wrangler's releases.

[email protected]

We've released the next major version of Wrangler — [email protected]. Wrangler v4 is a major release focused on updates to underlying systems and dependencies, along with improvements to keep Wrangler commands consistent and clear.

You can run the following command to install it in your projects:

Unlike previous major versions of Wrangler, which were foundational rewrites and rearchitectures — Version 4 of Wrangler includes a much smaller set of changes. If you use Wrangler today, your workflow is very unlikely to change.

A detailed migration guide is available and if you find a bug or hit a roadblock when upgrading to Wrangler v4, open an issue on the cloudflare/workers-sdk repository on GitHub.

Going forward, we'll continue supporting Wrangler v3 with bug fixes and security updates until Q1 2026, and with critical security updates until Q1 2027, at which point it will be out of support.

The full changelog is available at https://github.com/cloudflare/workers-sdk/blob/main/packages/wrangler/CHANGELOG.md#400

[email protected]

Patch Changes

• #8383 8d6d722 Thanks @​matthewdavidrodgers! - Make kv bulk put --local respect base64:true

  The bulk put api has an optional "base64" boolean property for each key. Before storing the key, the value should be decoded from base64.

  For real (remote) kv, this is handled by the rest api. For local kv, it seems the base64 field was ignored, meaning encoded base64 content was stored locally rather than the raw values.

  To fix, we need to decode each value before putting to the local miniflare namespace when base64 is true.

• #8273 e3efd68 Thanks @​penalosa! - Support AI, Vectorize, and Images bindings when using @cloudflare/vite-plugin

• #8427 a352798 Thanks @​vicb! - update unenv-preset dependency to fix bug with Performance global

  Fixes #8407 Fixes #8409 Fixes #8411

• #8390 53e6323 Thanks @​GregBrimble! - Parse and apply metafiles (_headers and _redirects) in wrangler dev for Workers Assets

• #8392 4d9d9e6 Thanks @​jahands! - fix: retry zone and route lookup API calls

  In rare cases, looking up Zone or Route API calls may fail due to transient errors. This change improves the reliability of wrangler deploy when these errors occur.

  Also fixes a rare issue where concurrent API requests may fail without correctly throwing an error which may cause a deployment to incorrectly appear successful.

• Updated dependencies [8242e07, 53e6323]:

  • [email protected]

Changelog

Sourced from wrangler's changelog.

4.0.0

Major Changes

• #7334 869ec7b Thanks @​penalosa! - Use --local by default for wrangler kv key and wrangler r2 object commands

• #7334 869ec7b Thanks @​dario-piotrowicz! - chore: remove deprecated getBindingsProxy

  remove the deprecated getBindingsProxy utility which has been replaced with getPlatformProxy

• #7334 869ec7b Thanks @​penalosa! - Remove the deprecated --format argument on wrangler deploy and wrangler dev.

  Remove deprecated config fields:

  • type
  • webpack_config
  • miniflare
  • build.upload
  • zone_id
  • usage_model
  • experimental_services
  • kv-namespaces

• #7334 869ec7b Thanks @​rozenmd! - Remove wrangler d1 backups

  This change removes wrangler d1 backups, a set of alpha-only commands that would allow folks to interact with backups of their D1 alpha DBs.

  For production D1 DBs, you can restore previous versions of your database with wrangler d1 time-travel and export it at any time with wrangler d1 export.

  Closes #7470

• #7334 869ec7b Thanks @​rozenmd! - Remove --batch-size as an option for wrangler d1 execute and wrangler d1 migrations apply

  This change removes the deprecated --batch-size flag, as it is no longer necessary to decrease the number of queries wrangler sends to D1.

  Closes #7470

• #7334 869ec7b Thanks @​rozenmd! - Remove alpha support from wrangler d1 migrations apply

  This change removes code that would take a backup of D1 alpha databases before proceeding with applying a migration.

  We can remove this code as alpha DBs have not accepted queries in months.

  Closes #7470

• #7334 869ec7b Thanks @​penalosa! - Remove the deprecated wrangler generate command. Instead, use the C3 CLI to create new projects: https://developers.cloudflare.com/pages/get-started/c3/

• #7334 869ec7b Thanks @​penalosa! - Remove the deprecated wrangler init --no-delegate-c3 command. wrangler init is still available, but will always delegate to C3.

• #7334 869ec7b Thanks @​penalosa! - Remove support for legacy assets.

... (truncated)

Commits

• 8419288 Version Packages (#8446)
• 869ec7b Wrangler v4 (#7334)
• 5109fdd Version Packages (#8386)
• 785c391 Try and make unstable dev dev registry more stable (#8429)
• 8242e07 chore(deps): bump the workerd-and-workers-types group with 2 updates (#8423)
• a352798 Bump @​cloudflare@​unenv-preset to 2.0.2 (#8427)
• 8d6d722 Make kv bulk put --local respect base64:true (#8383)
• 4d9d9e6 fix: retry zone and route lookup API calls (#8392)
• 53e6323 Workers Assets metafiles in wrangler dev (#8390)
• 2044893 Add Assets JSRPC test cases (#8347)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)