Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps wrangler from 4.61.0 to 4.61.1.

Release notes

Sourced from wrangler's releases.

wrangler@4.61.1

Patch Changes

  • #12189 eb8a415 Thanks @​NuroDev! - Fixed Durable Object missing migrations warning message.

    If a Workers project includes some durable_objects in it but no migrations we show a warning to the user to add migrations to their config. However, this warning recommended new_classes for their migrations, but we instead now recommend all users use new_sqlite_classes instead.

  • #11804 3b06b18 Thanks @​emily-shen! - fix: allow d1 execute, d1 export, and d1 migrations to work locally without database_id in config.

  • #12183 17961bb Thanks @​dependabot! - chore: update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260124.0 1.20260127.0
  • #12196 52fdfe7 Thanks @​dependabot! - chore: update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    workerd 1.20260127.0 1.20260128.0
  • #12199 6d8d9cd Thanks @​petebacondarwin! - Prevent wrangler logout from failing when the Wrangler configuration file is invalid

    Previously, if your wrangler.toml or wrangler.json file contained syntax errors or invalid values, the wrangler logout command would fail. Now, configuration parsing errors are caught and logged at debug level, allowing you to log out regardless of the state of your configuration file.

  • #12153 cb72c11 Thanks @​petebacondarwin! - Sanitize commands and arguments in telemetry to prevent accidentally capturing sensitive information.

    Changes:

    • Renamed telemetry fields from command/args to sanitizedCommand/sanitizedArgs to distinguish from historical fields that may have contained sensitive data in older versions
    • Command names now come from command definitions rather than user input, preventing accidental capture of sensitive data pasted as positional arguments
    • Sentry breadcrumbs now use the safe command name from definitions
    • Argument values are only included if explicitly allowed via COMMAND_ARG_ALLOW_LIST
    • Argument keys (names) are always included since they come from command definitions, not user input
  • Updated dependencies [8a210af, 17961bb, 52fdfe7, 5f060c9]:

    • miniflare@4.20260128.0
    • @​cloudflare/unenv-preset@​2.12.0
Commits
  • 95154f5 Version Packages (#12184)
  • 6d8d9cd fix(wrangler): prevent logout from failing on invalid config (#12199)
  • 8a210af [explorer] add implementation for local KV API (take 2) (#12152)
  • 52fdfe7 chore(deps): bump the workerd-and-workers-types group with 2 updates (#12196)
  • cb72c11 refactor(wrangler): add safe command/args handling for telemetry (#12153)
  • eb8a415 fix(wrangler): Update missing DO migrations message to recommend `new_sqlite_...
  • 5f060c9 feat(unenv-preset): add native node:repl module support (#12007)
  • 3b06b18 fix: allow D1 local commands to work without database_id (#11804)
  • 17961bb chore(deps): bump the workerd-and-workers-types group with 2 updates (#12183)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 30, 2026
Bumps [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) from 4.61.0 to 4.61.1.
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.61.1/packages/wrangler)

---
updated-dependencies:
- dependency-name: wrangler
  dependency-version: 4.61.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/wrangler-4.61.1 branch from aa97361 to 7b1dfe0 Compare January 30, 2026 08:17
@github-actions github-actions bot merged commit fa0cbc0 into Current Jan 30, 2026
8 of 11 checks passed
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/wrangler-4.61.1 branch January 30, 2026 08:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants