Skip to content

chore: upgrade wrangler to 4.152.0 - #3346

Open
imolorhe wants to merge 3 commits into
masterfrom
deps/wrangler-4
Open

imolorhe wants to merge 3 commits into
masterfrom
deps/wrangler-4

Conversation

@imolorhe

@imolorhe imolorhe commented Oct 23, 2026 •

Copy link
Copy Markdown
Collaborator

Upgrades the root wrangler devDependency from 2.0.27 to 4.152.0 (removes the vulnerable wrangler 2/3 trees).

  • cloudflare/wrangler-action uses the repo's pre-installed wrangler when no wranglerVersion is given, so this is the version CI deploys with.
  • wrangler 4 requires Node >= 22; the deploy workflows run on Node 24.x (default fallback 22).
  • pages publish is a deprecated hidden alias; switched __deploy-pages.yml to pages deploy (already used in experimental-release.yml). Verified wrangler pages deploy exists in 4.152.0 locally.
  • No wrangler config files exist in the repo, so there are no config migrations.

Cannot be fully verified without Cloudflare credentials; the first master deploy is the real test.

Stacked on #3345/#3344 lockfile changes; rebase after they merge.

Summary by Sourcery

Upgrade deployment tooling to Wrangler 4 and use its supported Pages deployment command.

Bug Fixes:

  • Replace the deprecated Pages publish command with the supported Pages deploy command in the deployment workflow.

Enhancements:

  • Upgrade the repository's Wrangler development dependency to version 4.152.0 and update the related dependency lockfile.
  • Upgrade the Altair API NestJS CLI dependency to version 11.0.24.

Summary by CodeRabbit

  • Chores
    • Updated the tools used for deployment and API development.
    • The deployment workflow now uses a different Pages deployment command while keeping the existing project name and distribution path.
    • No end-user-facing application changes are included in this update.

imolorhe and others added 3 commits October 23, 2026 11:47
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@sourcery-ai

sourcery-ai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR upgrades the root Wrangler devDependency from 2.0.27 to 4.152.0, refreshes the pnpm lockfile to remove vulnerable legacy Wrangler trees, and updates the Pages deployment workflow to use Wrangler 4’s supported pages deploy command. It also includes a NestJS CLI upgrade captured in the dependency refresh; review the large lockfile diff carefully and validate the first authenticated master deployment, since Cloudflare credentials are unavailable in local verification.

Sequence diagram for the Wrangler 4 Pages deployment

sequenceDiagram
    participant GitHubActions
    participant WranglerAction as cloudflare/wrangler-action
    participant Wrangler as Wrangler_4_152_0
    participant Cloudflare
    GitHubActions->>WranglerAction: run(command)
    WranglerAction->>Wrangler: pages deploy(dist_path, project_name)
    Wrangler->>Cloudflare: authenticated Pages deployment
    Cloudflare-->>Wrangler: deployment URL
    Wrangler-->>GitHubActions: deployment result
Loading

File-Level Changes

Change Details Files
Upgrade the repository’s Wrangler tooling and align the Pages deployment command with Wrangler 4.
  • Replace the root Wrangler devDependency with version 4.152.0, removing the older Wrangler dependency trees through the lockfile update.
  • Use the repository-installed Wrangler for the Pages deployment action and switch from the deprecated pages publish alias to pages deploy.
  • Retain Node 22+ compatibility requirements, with deployment workflows running on Node 24.x and a Node 22 fallback.
package.json
pnpm-lock.yaml
.github/workflows/__deploy-pages.yml
Update the Altair API NestJS CLI dependency as part of the lockfile refresh.
  • Bump @nestjs/cli from 10.4.2 to 11.0.24.
packages/altair-api/package.json
pnpm-lock.yaml

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@coderabbitai

coderabbitai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 187ba2d4-c6b4-444d-a26d-56f0fe6dbf09
📥 Commits

Reviewing files that changed from the base of the PR and between 2deae06 and 6a9f2ae.

⛔ Files ignored due to path filters: 1
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing: 3
  • .github/workflows/__deploy-pages.yml
  • package.json
  • packages/altair-api/package.json

Included review availability: This review used your included allowance. Your plan provides up to 8 included reviews per hour; 6 remain after this review.

📝 Walkthrough

The deployment workflow now uses Wrangler’s pages deploy command, and the root Wrangler development dependency is upgraded. The Altair API package also upgrades its @nestjs/cli development dependency.

Changes: Cloudflare Pages Deployment

Layer / File(s) Summary
Wrangler Pages command
.github/workflows/__deploy-pages.yml, package.json
The root Wrangler development dependency changes to 4.152.0. The deployment workflow changes from pages publish to pages deploy, with the same distribution path and project name inputs.

Altair API CLI Dependency

Layer / File(s) Summary
NestJS CLI version
packages/altair-api/package.json
The @nestjs/cli development dependency changes from 10.4.2 to 11.0.24.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Possibly related PRs

Merge Risk: ⚪ Minimal · up to 6a9f2

The dependency and deployment-command updates are ready to merge, subject to normal credentialed deployment validation.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title "chore: upgrade wrangler to 4.152.0" matches the main change. The root package.json upgrades the wrangler devDependency from 2.0.27 to 4.152.0, which is the primary objective of the PR. The …
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title "chore: upgrade wrangler to 4.152.0" matches the main change. The root package.json upgrades the wrangler devDependency from 2.0.27 to 4.152.0, which is the primary objective of the PR. The title is short, specific, and states the version. It does not mention the secondary changes, which are the switch from pages publish to pages deploy in __deploy-pages.yml and the @nestjs/cli upgrade in packages/altair-api. Those omissions are acceptable because the title need not cover every detail.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (3 skipped: 3 unsupported.)

✨ Finishing Touches: 💡 1
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
🛠️ Fix failing CI checks: 💡
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've found 1 issue

Fixed security issues:

Prompt for AI Agents
Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="package.json" line_range="46" />
<code_context>
     "@vitest/coverage-v8": "catalog:",
     "web-ext": "^6.8.0",
-    "wrangler": "2.0.27"
+    "wrangler": "4.152.0"
   },
   "engines": {
</code_context>
<issue_to_address>
**Pages deployment fails**

When a caller or manual dispatch selects Node below 22, `__deploy-pages.yml` forwards that version to `setup-node`, which runs Wrangler 4 on an unsupported Node runtime and fails before deployment, so the Pages site is not deployed.

Constrain the selected Node version to 22 or newer before running Wrangler.
</issue_to_address>

Sourcery assessment

Needs a human reviewer. 1 finding to address first, and the updated Wrangler CLI command and version are used to publish Pages deployments, so an incompatibility or changed deploy behavior could put a broken site live. Reverting prevents future runs from using this setup, but does not undo a deployment already published; restoring the previous site would require another deployment.

Blocking findings: package.json:46


Sourcery is free for open source - if you like our reviews please consider sharing them ✨

Comment thread package.json
"@vitest/coverage-v8": "catalog:",
"web-ext": "^6.8.0",
"wrangler": "2.0.27"
"wrangler": "4.152.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Medium · Pages deployment fails

When a caller or manual dispatch selects Node below 22, __deploy-pages.yml forwards that version to setup-node, which runs Wrangler 4 on an unsupported Node runtime and fails before deployment, so the Pages site is not deployed.

Constrain the selected Node version to 22 or newer before running Wrangler.

Prompt for AI agents
In `package.json` at line 46:

**Pages deployment fails**

When a caller or manual dispatch selects Node below 22, `__deploy-pages.yml` forwards that version to `setup-node`, which runs Wrangler 4 on an unsupported Node runtime and fails before deployment, so the Pages site is not deployed.

Constrain the selected Node version to 22 or newer before running Wrangler.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant