[Snyk] Security upgrade miniflare from 2.11.0 to 2.12.1

[ankurdotb]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	623/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 4.6	CRLF Injection SNYK-JS-UNDICI-3323844	No	Proof of Concept
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-UNDICI-3323845	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: miniflare

The new version differs by 43 commits.

• 3dfd60b Bump versions to `2.12.1`, update `CHANGELOG.md` (feat: Stop testing until testnet migration #514)
• 9c13559 Copy known-length when `tee()` `ReadableStream`s, closes [Snyk] Security upgrade express from 4.18.2 to 4.19.2 #506 (fix: Fix did:vda validator #512)
• c9acef1 Bump undici (feat: Add API key endpoints [DEV-3793] #510)
• 1b8b855 chore: fix linting on windows (build: Move to 4.x.y family for did-provider-cheqd and sdk [DEV-3799] #509)
• 4867c1e resumeMultipartUpload of R2Bucket should not be async (chore(deps): Bump the npm_and_yarn group across 1 directory with 4 updates #505)
• 6a0b370 Shared Durable Object instances across mounts, closes fix: Fix error handling on tracking operations [DEV-3527] #461 (chore(deps): Bump the npm_and_yarn group across 1 directories with 3 updates #503)
• f671590 Bump versions to `2.12.0`, update `CHANGELOG.md` and docs (chore(deps-dev): Bump @playwright/test from 1.41.2 to 1.42.1 #502)
• e285955 Add `node:{assert,buffer,events,util}` behind `nodejs_compat` flag (chore(deps-dev): Bump eslint from 8.56.0 to 8.57.0 #498)
• 7174947 Implement R2 multipart upload bindings (feat: Add event tracker [DEV-3530] #486)
• 547fda9 Move `Range` header handling to `@ miniflare/core` (chore(deps): Bump multiformats from 13.0.1 to 13.1.0 #499)
• e5e314c Extract out test environment global types, closes chore(deps-dev): Bump miniflare from 2.10.0 to 2.11.0 #94 (chore(deps): Bump the npm_and_yarn group across 1 directories with 1 update #494)
• b04ea7e Add support for D1 `meta.{last_row_id,changes}` (feat: Add base endpoints for Stripe integration [DEV-3671] #500)
• 6dd9220 Run API extractor on PRs and fix `@ internal` WebSocket methods (chore(deps): Bump the npm_and_yarn group across 1 directories with 2 updates #497)
• ae47758 Pass through WebSocket abnormal closure code, closes chore(deps): Bump @verida/account-node from 2.3.9 to 3.0.1 #465 (chore(deps): Bump the npm_and_yarn group across 1 directories with 1 update #495)
• 25a3ef9 Throw an error for KV expirations above the maximum 32-bit signed integer (chore(deps): Bump @cheqd/did-provider-cheqd from 3.7.0 to 4.0.0 #487)
• 2d0fbc6 Implement `D1Database` using D1JS and D1 API (chore(deps-dev): Bump semantic-release from 22.0.12 to 23.0.0 #480)
• 24916c6 Implement `export_commonjs_default`/`export_commonjs_namespace` flags (feat: Add M2MTokenUserInfoFetcher [DEV-3516] #468)
• 0cb151e nodejs_compat flag (chore(deps): Bump @veramo/credential-ld from 5.5.3 to 5.6.0 #478)
• a9d4565 Fix .raw() not executing statement in D1 (build(deps): Bump nodeJS to v20 #474)
• 5f04d4f Assorted R2 fixes (fix: Update email to username in account/create #470)
• 1cd651c Implement `DurableObjectStorage#sync()` (Add explicit flush to Durable Object storage interface cloudflare/workerd#87) (chore(deps): Bump @verida/client-ts from 2.3.9 to 3.0.2 #467)
• bb5c8b2 Implement `WebSocket` constructor (chore(deps): Bump @verida/vda-did-resolver from 2.3.9 to 3.0.1 #466)
• 6026a29 add comment about the family property no longer being numeric (build(deps): Bump @cheqd/sdk, @cheqd/did-provider-cheqd, and @cheqd/ts-proto #463)
• 80046ce Set default-on date for streams compatibility flags to `2022-11-30`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 CRLF Injection
🦉 Regular Expression Denial of Service (ReDoS)