Bump wrangler from 4.115.0 to 4.121.0

[dependabot]

Bumps wrangler from 4.115.0 to 4.121.0.

Release notes

Sourced from wrangler's releases.

wrangler@4.121.0

Minor Changes

• #15079 15cad03 Thanks @​podonnell-dev! - Add Preview base config secret commands

  Wrangler now manages Worker Preview base config secrets with wrangler preview base-config secret put, delete, list, and bulk. These commands update the Worker's previews_base_config.env, keeping shared defaults scoped to all of that Worker's Previews. wrangler preview base-config secret list reads from the Worker's Preview base config and prints secret names with values masked. wrangler preview base-config secret bulk deletes a secret when its value is null, matching wrangler secret bulk.

• #15000 731b33a Thanks @​edmundhung! - Allow Wrangler projects to build a Worker once and reuse it in createTestHarness()

  Build the Worker once:

  wrangler deploy --dry-run --outdir ./worker-output

  Then reuse the emitted Worker during test harness startup and reset:

  const server = createTestHarness({
    workers: [
      {
        configPath: "./wrangler.jsonc",
        prebuiltWorkerDir: "./worker-output",
      },
    ],
  });

• #14737 e1b5b4b Thanks @​ttoino! - Add email.sending as an event subscription source for queues

  wrangler queues subscription create now accepts --source email.sending alongside two new flags, --zone-id and --domain, which identify the zone and the sending domain (zone apex or a verified subdomain) to subscribe to. Both flags are required for this source. The subscription's resource is displayed as the sending domain in wrangler queues subscription get.

• #15073 d669088 Thanks @​FlorentCollin! - Add US jurisdiction support to wrangler d1 create

  You can now create a D1 database in the US jurisdiction with wrangler d1 create <name> --jurisdiction us. The new jurisdiction is also listed in the command's help output.

• #15079 15cad03 Thanks @​podonnell-dev! - Use Preview deployment PATCH APIs for Preview secret commands

  Wrangler now updates Worker Preview secrets by patching the named Preview's latest deployment instead of patching the Worker's Previews settings. This keeps secret changes scoped to one Preview, avoids affecting production or other Previews, and creates a new Preview deployment that goes live at 100% immediately. wrangler preview secret list now reads from the named Preview's latest deployment and prints secret names with values masked. wrangler preview secret bulk now deletes a secret when its value is null, matching wrangler secret bulk.

• #14924 0aa8fa5 Thanks @​ariesclark! - Honor DO_NOT_TRACK=1 as a telemetry opt-out

  Wrangler now disables telemetry when DO_NOT_TRACK=1 is set, regardless of other telemetry settings.

Patch Changes

• #15081 026e058 Thanks @​podonnell-dev! - Compact wrangler preview deployment success output

  wrangler preview now prints a concise success summary with the Preview name, Preview URL, deployment ID, and Deployment URL instead of the previous box-art settings summary.

... (truncated)

Commits

• 15fc568 Version Packages (#15118)
• 5b1b930 Fetch script metadata directly instead of listing all scripts (#15132)
• 0aa8fa5 Support DO_NOT_TRACK=1 (#14924)
• 731b33a [wrangler] Allow test harness to reuse dry-run output (#15000)
• e1b5b4b feat(wrangler): add email.sending event subscription source (#14737)
• 6e7d37d [wrangler] Fix modules-watch-stub injection when bundle:false (fixes … (#15032)
• 026e058 WC-5699 adjust preview deploy output (#15081)
• 15cad03 WC-5618 add preview base-config secret commands (#15079)
• d669088 [wrangler]: Add support for D1 "us" jurisdiction (#15073)
• d2f377e Version Packages (#15111)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

[devin-ai-integration]

Devin Review found 1 potential issue.

[devin-ai-integration]

🔍 Two wrangler versions remain installed after the bump

The top-level dependency moves to 4.121.0 (package-lock.json root entry at package-lock.json:11804-11806), but @cloudflare/vite-plugin still pins wrangler 4.115.0 as a nested install (package-lock.json:436, package-lock.json:447-449), which also pulls a second copy of miniflare/workerd binaries. Local dev/build via the vite plugin will therefore still run the older wrangler while CLI invocations (wrangler deploy --dry-run, etc.) use 4.121.0; worth confirming the two versions' miniflare/workerd behavior stays consistent, and note the extra install size.

---

Was this helpful? React with 👍 or 👎 to provide feedback.