cloudflare / workers-sdk

⛅️ Home to Wrangler, the CLI for Cloudflare Workers®
https://developers.cloudflare.com/workers/
Apache License 2.0
2.41k stars 590 forks source link

Update ws@8 everywhere #6127

Closed DaniFoldi closed 3 days ago

DaniFoldi commented 1 week ago

What this PR solves / how to test

https://github.com/advisories/GHSA-3h5v-q93c-6h6q was published a few days ago, and while wrangler doesn't use ws in a production setting, still worth updating to silence the warning. Tests passed locally, here's hope they will in CI.

Fixes #[insert GH or internal issue number(s)].

Author has addressed the following

changeset-bot[bot] commented 1 week ago

🦋 Changeset detected

Latest commit: 3d4524207c39df01d8001673604e9ef940ae172c

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages | Name | Type | | ------------------------------- | ----- | | miniflare | Patch | | wrangler | Patch | | @cloudflare/pages-shared | Patch | | @cloudflare/vitest-pool-workers | Patch |

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

github-actions[bot] commented 1 week ago

A wrangler prerelease is available for testing. You can install this latest build in your project with:

npm install --save-dev https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-wrangler-6127

You can reference the automatically updated head of this PR with:

npm install --save-dev https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/prs/6127/npm-package-wrangler-6127

Or you can use npx with this latest build directly:

npx https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-wrangler-6127 dev path/to/script.js
Additional artifacts: ```sh npx https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-create-cloudflare-6127 --no-auto-update ``` ```sh npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-cloudflare-kv-asset-handler-6127 ``` ```sh npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-miniflare-6127 ``` ```sh npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-cloudflare-pages-shared-6127 ``` ```sh npm install https://prerelease-registry.devprod.cloudflare.dev/workers-sdk/runs/9676170362/npm-package-cloudflare-vitest-pool-workers-6127 ``` Note that these links will no longer work once [the GitHub Actions artifact expires](https://docs.github.com/en/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization).

wrangler@3.62.0 includes the following runtime dependencies:

Package Constraint Resolved
miniflare workspace:* 3.20240620.0
workerd 1.20240620.1 1.20240620.1
workerd --version 1.20240620.1 2024-06-20

Please ensure constraints are pinned, and miniflare/workerd minor versions match.

holopin-bot[bot] commented 3 days ago

Congratulations @DaniFoldi, the maintainer of this repository has issued you a holobyte! Here it is: https://holopin.io/holobyte/clxwym7wj09210cmfi0zfc2jb

This badge can only be claimed by you, so make sure that your GitHub account is linked to your Holopin account. You can manage those preferences here: https://holopin.io/account. Or if you're new to Holopin, you can simply sign up with GitHub, which will do the trick!