chore(deps): bump wrangler from 4.68.1 to 4.70.0

[dependabot]

Bumps wrangler from 4.68.1 to 4.70.0.

Release notes

Sourced from wrangler's releases.

wrangler@4.70.0

Minor Changes

• #11332 6a8aa5f Thanks @​nikitassharma! - Users are now able to configure DockerHub credentials and have containers reference images stored there.

  DockerHub can be configured as follows:

  echo $PAT_TOKEN | npx wrangler@latest containers registries configure docker.io --dockerhub-username=user --secret-name=DockerHub_PAT_Token

  Containers can then specify an image from DockerHub in their wrangler.jsonc as follows:

  "containers": {
    "image": "docker.io/namespace/image:tag",
    ...
  }

• #12649 35b2c56 Thanks @​gabivlj! - Add experimental support for containers to workers communication with interceptOutboundHttp

  This feature is experimental and requires adding the "experimental" compatibility flag to your Wrangler configuration.

• #12701 23a365a Thanks @​jamesopstad! - Add local dev validation for the experimental secrets configuration property

  When the new secrets property is defined, wrangler dev and vite dev now validate secrets declared in secrets.required. When required secrets are missing from .dev.vars or .env/process.env, a warning is logged listing the missing secret names.

  When secrets is defined, only the keys listed in secrets.required are loaded. Additional keys in .dev.vars or .env are excluded. If you are not using .dev.vars, keys listed in secrets.required are loaded from process.env as well as .env. The CLOUDFLARE_INCLUDE_PROCESS_ENV environment variable is therefore not needed when using this feature.

  When secrets is not defined, the existing behavior is unchanged.

  // wrangler.jsonc
  {
  	"secrets": {
  		"required": ["API_KEY", "DB_PASSWORD"],
  	},
  }

• #12695 0769056 Thanks @​jamesopstad! - Add type generation for the experimental secrets configuration property

  When the new secrets property is defined, wrangler types now generates typed bindings from the names listed in secrets.required.

  When secrets is defined at any config level, type generation uses it exclusively and no longer infers secret names from .dev.vars or .env files. This enables running type generation in environments where these files are not present.

  Per-environment secrets are supported. Each named environment produces its own interface, and the aggregated Env marks secrets that only appear in some environments as optional.

  When secrets is not defined, the existing behavior is unchanged.

... (truncated)

Commits

• ea57dfd Version Packages (#12702)
• bf9cb3d feat: add configurable step limits for Workflows (#12622)
• 6a8aa5f Allow users to configure DockerHub for use with containers (#11332)
• d672e2e Fix SolidStart autoconfig for projects using version 2.0.0-alpha or later (#1...
• 35b2c56 containers: Add container and test Containers interceptOutboundHttp (#12649)
• 23a365a Add dev support for experimental secrets property (#12701)
• 150ef7b CC-7056: Add credentials subcommand to containers registries (#12693)
• 0cd55ef Update outdated code comment mentioning findUpSync (#12709)
• 0769056 Add type generation support for experimental secrets property (#12695)
• 596b8a0 [miniflare/wrangler] Revert AI Search RPC workaround (#12691)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	memory-graph-mcp	cb45bed	Mar 04 2026, 09:58 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
🔵 In progress View logs	memory-graph-mcp	cb45bed	Mar 04 2026, 09:57 AM

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@cloudflare/workerd-darwin-64	1.20260301.1	Unknown	Unknown
npm/@cloudflare/workerd-darwin-arm64	1.20260301.1	Unknown	Unknown
npm/@cloudflare/workerd-linux-64	1.20260301.1	Unknown	Unknown
npm/@cloudflare/workerd-linux-arm64	1.20260301.1	Unknown	Unknown
npm/@cloudflare/workerd-windows-64	1.20260301.1	Unknown	Unknown
npm/@img/colour	1.1.0	Unknown	Unknown
npm/miniflare	4.20260301.1	Unknown	Unknown
npm/workerd	1.20260301.1	Unknown	Unknown
npm/wrangler	4.70.0	Unknown	Unknown

Scanned Files

• package-lock.json

[github-actions]

This PR has been inactive for 30 days. It will be closed in 14 days if there is no further activity.

[github-actions]

This PR has been marked as stale because it has had no activity for 45 days. It will be closed in 15 days if no further activity occurs.

[github-actions]

This PR has been marked as stale because it has had no activity for 45 days. It will be closed in 15 days if no further activity occurs.

[github-actions]

This PR has been inactive for 30 days. It will be closed in 14 days if there is no further activity.