[Snyk] Upgrade @cloudflare/kv-asset-handler from 0.0.12 to 0.1.3 by snyk-bot · Pull Request #1 · MaxMood96/cloudflare-docs

snyk-bot · 2021-07-28T07:37:38Z

Snyk has created this PR to upgrade @cloudflare/kv-asset-handler from 0.0.12 to 0.1.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 4 versions ahead of your current version.
The recommended version was released a month ago, on 2021-06-18.

Release notes

Package name: @cloudflare/kv-asset-handler

0.1.3 - 2021-06-18
- Performance
  - Only parse ASSET_MANIFEST once on startup - Cherry, pull/185
    
    This PR improves performance of the getAssetFromKV function by only parsing the asset manifest once on startup, instead of on each request. This can have a significant improvement in response times for larger sites. An example of the performance improvement with an asset manifest of over 50k files:
    
    Before change:
    100 iterations: Done. Mean kv response time is 16.61
    1000 iterations: Done. Mean kv response time is 17.798
    After change:
    100 iterations: Done. Mean kv response time is 6.62
    1000 iterations: Done. Mean kv response time is 7.296
    
    Initial work and credit to groenlid in pull/143.
- Fixes
  - ESM compatibility: fix crash on missing global environment variables - ttraenkler, pull/188
    
    This PR fixes the library from crashing when global environment variables such as __STATIC_CONTENT and __STATIC_CONTENT_MANIFEST are missing, which is currently the case when using the new ESM module syntax.
    
    Note that whilst this partially resolves the issue discussed in issue/174, it does not provide full ESM compatibility yet. Please see issue/174 for further discussion.
- Maintenance
  - Tweak GitHub Actions Workflow for proper PR testing - Cherry, pull/185
    
    This PR tweaks the GitHub Actions Workflow to test PRs properly, both in terms of linting and the repository tests. It runs prettier to maintain code quality and style, and all unit tests on every PR to ensure no regressions occur.
  - Add test for mapRequestToAsset asset override - Cherry, pull/186
    
    This PR adds a test for the functionality added in pull/159. This tests that when overriding the mapRequestToAsset function in its entirety, this function is always run.
  - Dependabot updates
    
    A number of dependabot patch-level updates have been merged:
    - Bump @ types/node from 15.3.1 to 15.6.0 (pull/183)
    - Bump @ types/node from 15.6.0 to 15.6.1 (pull/184)
    - Bump @ types/node from 15.6.1 to 15.9.0 (pull/189)
    - Bump @ types/node from 15.9.0 to 15.12.0 (pull/190)
    - Bump @ types/node from 15.12.0 to 15.12.1 (pull/191)
    - Bump @ types/node from 15.12.1 to 15.12.2 (pull/193)
    - Bump typescript from 4.2.4 to 4.3.2 (pull/187)
    - Bump prettier from 2.3.0 to 2.3.1 (pull/192)
0.1.2 - 2021-05-24
- Features
  - Support for defaultDocument configuration - boemekeld, pull/161
    
    This PR adds support for customizing the defaultDocument option in getAssetFromKV. In situations where a project does not use index.html as the default document for a path, this can now be customized to values like index.shtm:
```
return getAssetFromKV(event, { 
  defaultDocument: "index.shtm"
})
```
- Fixes
  - Fire mapRequestToAsset for all requests, if explicitly defined - Cherry, pull/159
    
    This PR fixes an issue where a custom mapRequestToAsset handler weren't fired if a matching asset path was found in ASSET_MANIFEST data. By correctly checking for this handler, we can conditionally handle any assets with this handler even if they exist in the ASSET_MANIFEST.
    
    Note that this is a breaking change, as previously, the mapRequestToAsset function was ignored if you set it, and an exact match was found in the ASSET_MANIFEST. That being said, this behavior was a bug, and unexpected behavior, as documented in issue/158.
  - Etag logic refactor - shagamemnon, pull/133
    
    This PR refactors a great deal of the Etag functionality introduced in 0.0.11. kv-asset-handler will now correctly set strong and weak Etags both to the Cloudflare CDN and to client eyeballs, allowing for higher cache percentages with Workers Sites projects.
  - Fix path decoding issue - xiaolanglanglang, pull/142
    
    This PR improves support for non-alphanumeric character paths in kv-asset-handler, for instance, if the path requested is in Chinese.
  - Check HTTP method after mapRequestToAsset - oliverpool, pull/178
    
    This PR fixes an issue where the HTTP method for an asset is checked before the mapRequestToAsset handler is called. This has caused issues for users in the past, where they need to generate a requestKey based on an asset path, even if the request method is not GET. This fixes issue/151.
- Maintenance
  - Add Markdown linting workflow to GitHub Actions - jbampton, pull/135
    
    Our GitHub Actions workflow now includes a linting workflow for Markdown in the project, including the README, this CHANGELOG, and any other .md files in the source code.
  - Dependabot updates
    
    A number of dependabot patch-level updates have been merged since our last release:
    - Bump @ types/node from 15.30.0 to 15.30.1 (pull/180)
    - Bump hosted-git-info from 2.8.8 to 2.8.9 (pull/176)
    - Bump ini from 1.3.5 to 1.3.8 (pull/160)
    - Bump lodash from 4.17.19 to 4.17.21 (pull/175)
    - Bump urijs from 1.19.2 to 1.19.6 (pull/168)
    - Bump y18n from 4.0.0 to 4.0.1 (pull/173)
  - Repository maintenance - Cherry, pull/179
    
    New project maintainer Cherry did a ton of maintenance in this release, improving workflows, code quality, and more. Check out the full list in the PR.
- Documentation
  - Update README.md - signalnerve, pull/177
    
    This PR adds context to our README, with mentions about what this project is, how to use it, and some new things since the last version of this package: namely, Cloudflare Pages and the new Cloudflare Workers Discord server
  - Add instructions for updating version in related repos - caass, [pull/171]
    
    This PR adds instructions for updating the kv-asset-handler version in related repositories, such as our templates, that use kv-asset-handler and are exposed to end-users of Wrangler and Workers.
0.1.1 - 2021-03-15
0.1.1
- Fixes
  - kv-asset-handler can translate 206 responses to 200 - harrishancock, pull/166
    
    Fixes wrangler#1746
0.1.0 - 2020-12-02
0.1.0
0.0.12 - 2020-09-02
- Features
  - Add defaultMimeType option to getAssetFromKV - mgrahamjo, pull/121
    
    Some static website owners prefer not to create all of their web routes as directories containing index.html files. Instead, they prefer to create pages as extensionless HTML files. Providing a defaultMimeType option will allow users to set the Content-Type header for extensionless files to text/html, which will enable this use case.
  - Add defaultMimeType to types - [shagamemnon], pull/132
    
    Adds the newly added defaultMimeType to the exported types for this package.
- Fixes
  - Fix text/ charset - EatonZ, pull/130*
    
    Adds a missing - to the utf-8 charset value in response mime types.
  - Cache handling for HEAD requests - klittlepage, pull/141
    
    This PR skips caching for incoming HEAD requests, as they should not be able to be edge cached.
- Maintenance
  - Markdown linting/typos - jbampton, pull/123, pull/125, pull/126, pull/127, pull/128, pull/129, pull/131, pull/134
    
    These PRs contain various typo fixes and linting of existing Markdown files in our documentation and CHANGELOG.

from @cloudflare/kv-asset-handler GitHub release notes

Commit messages

Package name: @cloudflare/kv-asset-handler

26df926 Merge pull request [pull] production from cloudflare:production #195 from cloudflare/dependabot/npm_and_yarn/typescript-4.3.4
680e29b Merge pull request [pull] production from cloudflare:production #197 from cloudflare/cherry/package-0.1.3
74a274e chore: bump package to 0.1.3
ee111d1 Bump typescript from 4.3.2 to 4.3.4
88f6d4d Merge pull request [pull] production from cloudflare:production #194 from cloudflare/0.1.3
70264f9 0.1.3
367e175 Merge pull request [pull] production from cloudflare:production #193 from cloudflare/dependabot/npm_and_yarn/types/node-15.12.2
553b29e Bump @ types/node from 15.12.1 to 15.12.2
0b12cf4 Merge pull request [pull] production from cloudflare:production #192 from cloudflare/dependabot/npm_and_yarn/prettier-2.3.1
4f3f78c Merge pull request [pull] production from cloudflare:production #191 from cloudflare/dependabot/npm_and_yarn/types/node-15.12.1
898cdd5 Bump prettier from 2.3.0 to 2.3.1
0eb7ca2 Bump @ types/node from 15.12.0 to 15.12.1
9a92bc1 Merge pull request [pull] production from cloudflare:production #190 from cloudflare/dependabot/npm_and_yarn/types/node-15.12.0
07fd89b Bump @ types/node from 15.9.0 to 15.12.0
c5d5de0 Merge pull request [pull] production from cloudflare:production #185 from cloudflare/cherry/asset-manifest-parse
31350af Merge pull request [pull] production from cloudflare:production #189 from cloudflare/dependabot/npm_and_yarn/types/node-15.9.0
324db32 Bump @ types/node from 15.6.1 to 15.9.0
d9f2858 fix: add typeof checks to global vars to prevent crashes with ESM/DO
cf3a956 test: update mocks for added `getAssetFromKV` test
efbf038 perf: only parse `ASSET_MANIFEST` once on startup
f1febcd Merge pull request [pull] production from cloudflare:production #188 from interfacers/master
2eccb84 added undefined checks for env vars
5aae0b0 types __STATIC_CONTENT, __STATIC_CONTENT_MANIFEST
bbaf6a3 declared __STATIC_CONTENT_MANIFEST

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @cloudflare/kv-asset-handler from 0.0.12 to 0.1.3. See this package in npm: https://www.npmjs.com/package/@cloudflare/kv-asset-handler See this project in Snyk: https://app.snyk.io/org/maxmood/project/cff11245-40d7-4097-80e8-1d3e170325c6?utm_source=github&utm_medium=upgrade-pr

github-actions · 2025-11-03T03:01:31Z

Hey there, this pull request has been automatically marked as stale because it has not had recent activity. It will be auto-closed after and additional 10 days of inactivity. If you need it open for longer, add the label stale-exempt.

github-actions · 2026-01-30T20:01:24Z

Hey there, we've closed out this pull request because it's been stale for a while and there's been no additional action on it. If these changes are still relevant, open a new pull request (or flag to us in a GitHub issue).

…shooting (cloudflare#28780) * [Registrar] Rewrite transfer page and add registration limits troubleshooting Restructure the transfer-domain-to-cloudflare page into two clear phases (add domain to Cloudflare, then transfer registration) instead of the previous flat 10-step list. Inline partials, add DNSSEC/nameserver provider links, explain why each step is needed, and add registration limits content with actionable guidance. Add new troubleshooting section for transfers rejected due to registration period limits (10-year max for most TLDs, 5-year for .co). Clarify vague language throughout: specific WHOIS status explanations, concrete 45-day expiration rule, ICANN contact-change lock details. * [Registrar] Simplify transfer timeline language in opening paragraph * [Registrar] Address PR review feedback and restore grace period transfer scenario - Break opening paragraph into scannable bullet list (#1) - Lead with action instead of comparison to other registrars (#2) - Replace IDN jargon with plain language and example (#3) - Lead with actionable advice in Restrictions block (#5) - Cross-link 'active on Cloudflare' to full-setup docs (#6) - Replace inlined DNSSEC links with dnssec-providers partial (#7) - Slim 'Add your domain' section to cross-link full-setup page (#8) - Reorder unlock section to put action before context (#9) - Restore 45-day grace period scenario with concrete date example and ICANN refund entitlement, matching FAQ content (#10) * [Registrar] Simplify transfer page, move details to troubleshooting - Simplify opening: shorter total time bullet, one-line prereq - Move Restrictions block content to troubleshooting page - Move registration limits and 'domain not available' Details blocks to troubleshooting page as standalone sections with full examples - Add 45-day grace period note in Before you begin with FAQ link - Update TLD page to link to troubleshooting instead of removed anchor - Simplify approve-transfer section for non-technical audience - Convert caution to note for Active status requirement - Make authoritative DNS requirement a bullet in Before you begin - Remove redundant 'Go to Transfer Domains page' text (DashButton CTA) * [Registrar] Restore auth code callout in opening note block

* [Registrar] Rewrite transfer page and add registration limits troubleshooting Restructure the transfer-domain-to-cloudflare page into two clear phases (add domain to Cloudflare, then transfer registration) instead of the previous flat 10-step list. Inline partials, add DNSSEC/nameserver provider links, explain why each step is needed, and add registration limits content with actionable guidance. Add new troubleshooting section for transfers rejected due to registration period limits (10-year max for most TLDs, 5-year for .co). Clarify vague language throughout: specific WHOIS status explanations, concrete 45-day expiration rule, ICANN contact-change lock details. * [Registrar] Simplify transfer timeline language in opening paragraph * [Registrar] Address PR review feedback and restore grace period transfer scenario - Break opening paragraph into scannable bullet list (#1) - Lead with action instead of comparison to other registrars (#2) - Replace IDN jargon with plain language and example (#3) - Lead with actionable advice in Restrictions block (#5) - Cross-link 'active on Cloudflare' to full-setup docs (#6) - Replace inlined DNSSEC links with dnssec-providers partial (#7) - Slim 'Add your domain' section to cross-link full-setup page (#8) - Reorder unlock section to put action before context (#9) - Restore 45-day grace period scenario with concrete date example and ICANN refund entitlement, matching FAQ content (#10) * [Registrar] Simplify transfer page, move details to troubleshooting - Simplify opening: shorter total time bullet, one-line prereq - Move Restrictions block content to troubleshooting page - Move registration limits and 'domain not available' Details blocks to troubleshooting page as standalone sections with full examples - Add 45-day grace period note in Before you begin with FAQ link - Update TLD page to link to troubleshooting instead of removed anchor - Simplify approve-transfer section for non-technical audience - Convert caution to note for Active status requirement - Make authoritative DNS requirement a bullet in Before you begin - Remove redundant 'Go to Transfer Domains page' text (DashButton CTA) * [Registrar] Restore auth code callout in opening note block * [Registrar] Address review feedback on auth codes, GoDaddy proxy, and ccTLD transfer pricing * [Registrar] Replace unverified GoDaddy domain forwarding claim with accurate transfer guidance * [Registrar] Simplify 45-day transfer registration language and move detail to FAQ * [Registrar] Address review feedback: restore notes and add email verification section

github-actions Bot added the Stale label Nov 3, 2025

github-actions Bot added the closed-as-stale label Jan 30, 2026

github-actions Bot closed this Jan 30, 2026

github-actions Bot deleted the snyk-upgrade-fc8566074c6b7974a4027e44fa183f8c branch March 20, 2026 13:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @cloudflare/kv-asset-handler from 0.0.12 to 0.1.3#1

[Snyk] Upgrade @cloudflare/kv-asset-handler from 0.0.12 to 0.1.3#1
snyk-bot wants to merge 1 commit into
productionfrom
snyk-upgrade-fc8566074c6b7974a4027e44fa183f8c

snyk-bot commented Jul 28, 2021

Performance

Fixes

Maintenance

Features

Fixes

Maintenance

Documentation

0.1.1

Fixes

Features

Fixes

Maintenance

Uh oh!

github-actions Bot commented Nov 3, 2025

Uh oh!

github-actions Bot commented Jan 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

snyk-bot commented Jul 28, 2021

Snyk has created this PR to upgrade @cloudflare/kv-asset-handler from 0.0.12 to 0.1.3.

Performance

Fixes

Maintenance

Features

Fixes

Maintenance

Documentation

0.1.1

Fixes

Features

Fixes

Maintenance

Uh oh!

github-actions Bot commented Nov 3, 2025

Uh oh!

github-actions Bot commented Jan 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant