fix(vite-plugin-cloudflare): deny more credential files in vite dev server

[edmundhung]

Fixes DEVX-2586

---

• Tests
  • Tests included/updated
  • Automated tests not possible - manual testing has been completed as follows:
  • Additional testing not necessary because:
• Public documentation
  • Cloudflare docs PR(s):
  • Documentation not necessary because: bugfix

A picture of a cute animal (not mandatory, but encouraged)

---

[changeset-bot]

🦋 Changeset detected

Latest commit: 15b9c97

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[workers-devprod]

Codeowners approval required for this PR:

• ✅ @cloudflare/wrangler

Show detailed file reviewers

[github-actions]

✅ All changesets look good

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 2 additional findings.

[ask-bonk]

The code change is clean and correct:

• The deny list properly expands *.{crt,pem} to *.{crt,pem,key,pfx,p12,p8,jks} -- all standard certificate/key store formats.
• .npmrc, .yarnrc, and .yarnrc.yml are correctly added as exact-match entries since they can contain registry auth tokens.
• Test fixtures and test cases are present for every new entry, covering both dev (403) and preview (worker response) paths.
• The changeset is properly formatted as a patch.

LGTM

github run

[pkg-pr-new]

create-cloudflare

npm i https://pkg.pr.new/create-cloudflare@13814

@cloudflare/kv-asset-handler

npm i https://pkg.pr.new/@cloudflare/kv-asset-handler@13814

miniflare

npm i https://pkg.pr.new/miniflare@13814

@cloudflare/pages-shared

npm i https://pkg.pr.new/@cloudflare/pages-shared@13814

@cloudflare/unenv-preset

npm i https://pkg.pr.new/@cloudflare/unenv-preset@13814

@cloudflare/vite-plugin

npm i https://pkg.pr.new/@cloudflare/vite-plugin@13814

@cloudflare/vitest-pool-workers

npm i https://pkg.pr.new/@cloudflare/vitest-pool-workers@13814

@cloudflare/workers-editor-shared

npm i https://pkg.pr.new/@cloudflare/workers-editor-shared@13814

@cloudflare/workers-utils

npm i https://pkg.pr.new/@cloudflare/workers-utils@13814

wrangler

npm i https://pkg.pr.new/wrangler@13814

commit: 15b9c97

[workers-devprod]

Codeowners reviews satisfied