build(deps): bump undici from 7.28.0 to 8.7.0#653
Conversation
Bumps [undici](https://github.com/nodejs/undici) from 7.28.0 to 8.7.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.28.0...v8.7.0) --- updated-dependencies: - dependency-name: undici dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #653 +/- ##
=======================================
Coverage 99.86% 99.86%
=======================================
Files 8 8
Lines 731 731
=======================================
Hits 730 730
Misses 1 1 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
zimeg
left a comment
zimeg
left a comment
There was a problem hiding this comment.
@dependabot LGTM! Thanks for keeping all things current!
| "js-yaml": "^4.2.0", | ||
| "markup-js": "^1.5.21", | ||
| "undici": "^7.28.0" | ||
| "undici": "^8.7.0" |
There was a problem hiding this comment.
🔍 note: This is the foremost update!
| "node_modules/undici": { | ||
| "version": "7.28.0", | ||
| "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz", | ||
| "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==", | ||
| "version": "8.7.0", | ||
| "resolved": "https://registry.npmjs.org/undici/-/undici-8.7.0.tgz", | ||
| "integrity": "sha512-N7iQtfyLhIMOFgQubvmLV26svHpO0bqKnAiWotTQCVKCmWrcGbBotPuW1x+xwYZ2VHdSTVUfPQQnlEt1/LouTQ==", | ||
| "license": "MIT", | ||
| "engines": { | ||
| "node": ">=20.18.1" | ||
| "node": ">=22.19.0" | ||
| } | ||
| }, | ||
| "node_modules/undici-types": { | ||
| "version": "7.28.0", | ||
| "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.28.0.tgz", | ||
| "integrity": "sha512-LJAfY+2w6HGeT8d8J1wNQsUGUEGio6NWWpwdwurQe4f6oojzCFuGLizl1KSve4irsTxyLly1QhEeE6iapdaIvQ==", | ||
| "version": "8.7.0", | ||
| "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.7.0.tgz", | ||
| "integrity": "sha512-gbsS+hAjHg9iV+T8XWdFqnOZEk4f5xrrX3eb9Y1GDe+B5u9H68P6SzYXXUw/rkRvJHRgKIdNfAcrcVj/JvayVA==", | ||
| "license": "MIT" | ||
| }, |
There was a problem hiding this comment.
🐜 note: And both undici packages are collected with this update!
1 participant
Bumps undici from 7.28.0 to 8.7.0.
Release notes
Sourced from undici's releases.
... (truncated)
Commits
cb4c2f1Bumped v8.7.0 (#5501)a8d1a95fix: auto-detect HTTP proxy tunneling (#5116)cb30e58fix: add static buildDispatch method to RedirectHandler type definition (#5442)0c08579fix(h2): requeue request on GOAWAY'd session instead of crashing (#5453)e5b3364fix(h2): guard onResponse against a 'response' event delivered after completi...c0007f4docs: add reproduction guide and update bug report template (#5451)e529cabfix: ignore an unparseable Set-Cookie Expires attribute (#5488)754742cfix(h2): destroy the stream on abort instead of relying on close() (#5462)db34f5ffix(readable): ignore late consume chunks (#5375)4ea05a8fix: reject non-ascii octets in validateCookiePath (#5452)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)