diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
new file mode 100644
index 00000000..a5e10ad5
--- /dev/null
+++ b/.github/workflows/deploy.yml
@@ -0,0 +1,25 @@
+name: deploy
+on:
+  push:
+    branches:
+      - trunk
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: github-proxy-prod
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - uses: actions/cache@v4
+        id: cache-packages
+        with:
+          path: |
+            ~/.bun/install/cache
+          key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lockb') }}
+
+      - run: bun install --frozen-lockfile
+      - run: bun run deploy
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
diff --git a/bun.lockb b/bun.lockb
index 6f99b694..9de68f71 100755
Binary files a/bun.lockb and b/bun.lockb differ
diff --git a/package.json b/package.json
index 29a23840..4fe3bec7 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "size-limit": "11.2.0",
     "svgo": "3.3.2",
     "typescript": "5.8.2",
-    "wrangler": "3.114.3"
+    "wrangler": "4.6.0"
   },
   "@parcel/transformer-css": {
     "drafts": {
diff --git a/wrangler.toml b/wrangler.toml
index f09df9c5..de4143df 100644
--- a/wrangler.toml
+++ b/wrangler.toml
@@ -1,2 +1,4 @@
-[build]
-command = "parcel build"
+name = "github-proxy"
+pages_build_output_dir = "./dist"
+compatibility_date = "2025-04-01"
+compatibility_flags = [ "nodejs_compat" ]