fix(deps): update dependency undici to v6 [security] #827
+21
−35
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
f527f3c to
886c895
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
886c895 to
faacc88
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
faacc88 to
6cb5631
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
6cb5631 to
2af6198
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
2af6198 to
0445a49
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
0445a49 to
6265c00
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
6265c00 to
a6c55b3
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
a6c55b3 to
7ac248f
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
7ac248f to
415d28d
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
415d28d to
1278e24
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
1278e24 to
ca1ecc2
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
ca1ecc2 to
ed16cf3
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
ed16cf3 to
057b776
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
057b776 to
95cac83
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
95cac83 to
f77ee7c
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
f77ee7c to
c064e6b
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
c064e6b to
af8ef3f
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
af8ef3f to
1e643a4
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
1e643a4 to
c59794e
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
c59794e to
1963752
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
1963752 to
4e88cc5
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
4e88cc5 to
b6788d1
Compare
renovate
bot
force-pushed
the
renovate/npm-undici-vulnerability
branch
from
b6788d1 to
a599512
Compare
![vercel[bot]](https://avatars.githubusercontent.com/in/8329?s=60&v=4){kind=small}
| specifier: ^5.28.4 | ||
| version: 5.28.4 | ||
| specifier: ^6.0.0 | ||
| version: 6.20.1 |
There was a problem hiding this comment.
The undici upgrade installs version 6.20.1, which is below the required 6.21.1 version needed to fix the security vulnerabilities mentioned in the PR.
View Details
📝 Patch Details
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 12cc5f8..ee17665 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -37,7 +37,7 @@ importers:
version: 0.3.7
ts-jest:
specifier: 29.2.6
- version: 29.2.6(@babel/[email protected])(@jest/[email protected])(@jest/[email protected])([email protected](@babel/[email protected]))([email protected](@types/[email protected])([email protected](@types/[email protected])([email protected])))([email protected])
+ version: 29.2.6(@babel/[email protected])(@jest/[email protected])(@jest/[email protected])([email protected](@babel/[email protected]))([email protected](@types/[email protected])([email protected](@types/[email protected])([email protected])))([email protected])
turbo:
specifier: 2.4.4
version: 2.4.4
@@ -60,8 +60,8 @@ importers:
specifier: ^2.1.0
version: 2.1.0
undici:
- specifier: ^6.0.0
- version: 6.20.1
+ specifier: ^6.21.3
+ version: 6.21.3
devDependencies:
'@edge-runtime/jest-environment':
specifier: 2.3.10
@@ -371,7 +371,7 @@ importers:
version: 2.1.3
next:
specifier: ^15.2.0
- version: 15.2.0(@babel/[email protected])(@opentelemetry/[email protected])(@playwright/[email protected])([email protected]([email protected]))([email protected])
+ version: 15.2.0(@babel/[email protected])(@opentelemetry/[email protected])(@playwright/[email protected])([email protected]([email protected]))([email protected])
postcss:
specifier: ^8.5.3
version: 8.5.3
@@ -5484,6 +5484,10 @@ packages:
resolution: {integrity: sha512-AjQF1QsmqfJys+LXfGTNum+qw4S88CojRInG/6t31W/1fk6G59s92bnAvGz5Cmur+kQv2SURXEvvudLmbrE8QA==}
engines: {node: '>=18.17'}
+ [email protected]:
+ resolution: {integrity: sha512-gBLkYIlEnSp8pFbT64yFgGE6UIB9tAkhukC23PmMDCe5Nd+cRqKxSjw5y54MK2AZMgZfJWMaNE4nYUHgi1XEOw==}
+ engines: {node: '>=18.17'}
+
[email protected]:
resolution: {integrity: sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==}
engines: {node: '>= 4.0.0'}
@@ -5957,6 +5961,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -5968,6 +5978,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -5979,6 +5995,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -5990,6 +6012,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6001,6 +6029,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6017,6 +6051,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6028,6 +6068,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6039,6 +6085,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6050,6 +6102,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6061,6 +6119,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6072,6 +6136,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -6083,6 +6153,12 @@ snapshots:
'@babel/core': 7.23.2
'@babel/helper-plugin-utils': 7.20.2
+ '@babel/[email protected](@babel/[email protected])':
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/helper-plugin-utils': 7.20.2
+ optional: true
+
'@babel/[email protected](@babel/[email protected])':
dependencies:
'@babel/core': 7.26.0
@@ -7245,10 +7321,10 @@ snapshots:
dependencies:
'@types/yargs-parser': 21.0.0
- '@typescript-eslint/[email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])':
+ '@typescript-eslint/[email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])':
dependencies:
'@eslint-community/regexpp': 4.10.0
- '@typescript-eslint/parser': 8.25.0([email protected])([email protected])
+ '@typescript-eslint/parser': 6.21.0([email protected])([email protected])
'@typescript-eslint/scope-manager': 6.21.0
'@typescript-eslint/type-utils': 6.21.0([email protected])([email protected])
'@typescript-eslint/utils': 6.21.0([email protected])([email protected])
@@ -7460,7 +7536,7 @@ snapshots:
'@babel/core': 7.23.9
'@babel/eslint-parser': 7.23.10(@babel/[email protected])([email protected])
'@rushstack/eslint-patch': 1.7.2
- '@typescript-eslint/eslint-plugin': 6.21.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])
+ '@typescript-eslint/eslint-plugin': 6.21.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])
'@typescript-eslint/parser': 6.21.0([email protected])([email protected])
eslint-config-prettier: 9.1.0([email protected])
eslint-import-resolver-alias: 1.1.2([email protected])
@@ -7774,6 +7850,20 @@ snapshots:
transitivePeerDependencies:
- supports-color
+ [email protected](@babel/[email protected]):
+ dependencies:
+ '@babel/core': 7.23.9
+ '@jest/transform': 29.7.0
+ '@types/babel__core': 7.20.0
+ babel-plugin-istanbul: 6.1.1
+ babel-preset-jest: 29.6.3(@babel/[email protected])
+ chalk: 4.1.2
+ graceful-fs: 4.2.11
+ slash: 3.0.0
+ transitivePeerDependencies:
+ - supports-color
+ optional: true
+
[email protected](@babel/[email protected]):
dependencies:
'@babel/core': 7.26.0
@@ -7821,6 +7911,23 @@ snapshots:
'@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/[email protected])
'@babel/plugin-syntax-top-level-await': 7.14.5(@babel/[email protected])
+ [email protected](@babel/[email protected]):
+ dependencies:
+ '@babel/core': 7.23.9
+ '@babel/plugin-syntax-async-generators': 7.8.4(@babel/[email protected])
+ '@babel/plugin-syntax-bigint': 7.8.3(@babel/[email protected])
+ '@babel/plugin-syntax-class-properties': 7.12.13(@babel/[email protected])
+ '@babel/plugin-syntax-import-meta': 7.10.4(@babel/[email protected])
+ '@babel/plugin-syntax-json-strings': 7.8.3(@babel/[email protected])
+ '@babel/plugin-syntax-logical-assignment-operators': 7.10.4(@babel/[email protected])
+ '@babel/plugin-syntax-nullish-coalescing-operator': 7.8.3(@babel/[email protected])
+ '@babel/plugin-syntax-numeric-separator': 7.10.4(@babel/[email protected])
+ '@babel/plugin-syntax-object-rest-spread': 7.8.3(@babel/[email protected])
+ '@babel/plugin-syntax-optional-catch-binding': 7.8.3(@babel/[email protected])
+ '@babel/plugin-syntax-optional-chaining': 7.8.3(@babel/[email protected])
+ '@babel/plugin-syntax-top-level-await': 7.14.5(@babel/[email protected])
+ optional: true
+
[email protected](@babel/[email protected]):
dependencies:
'@babel/core': 7.26.0
@@ -7844,6 +7951,13 @@ snapshots:
babel-plugin-jest-hoist: 29.6.3
babel-preset-current-node-syntax: 1.0.1(@babel/[email protected])
+ [email protected](@babel/[email protected]):
+ dependencies:
+ '@babel/core': 7.23.9
+ babel-plugin-jest-hoist: 29.6.3
+ babel-preset-current-node-syntax: 1.0.1(@babel/[email protected])
+ optional: true
+
[email protected](@babel/[email protected]):
dependencies:
'@babel/core': 7.26.0
@@ -8666,7 +8780,7 @@ snapshots:
debug: 4.3.7
enhanced-resolve: 5.15.0
eslint: 8.56.0
- eslint-module-utils: 2.8.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])([email protected])
+ eslint-module-utils: 2.8.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected]))([email protected])
eslint-plugin-import: 2.29.1(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])
fast-glob: 3.3.2
get-tsconfig: 4.7.2
@@ -8704,7 +8818,7 @@ snapshots:
transitivePeerDependencies:
- supports-color
- [email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])([email protected]):
+ [email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected]))([email protected]):
dependencies:
debug: 3.2.7
optionalDependencies:
@@ -8731,7 +8845,7 @@ snapshots:
doctrine: 2.1.0
eslint: 8.56.0
eslint-import-resolver-node: 0.3.9
- eslint-module-utils: 2.8.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])([email protected])
+ eslint-module-utils: 2.8.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected](@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected]))([email protected])
hasown: 2.0.1
is-core-module: 2.13.1
is-glob: 4.0.3
@@ -8782,7 +8896,7 @@ snapshots:
'@typescript-eslint/utils': 5.62.0([email protected])([email protected])
eslint: 8.56.0
optionalDependencies:
- '@typescript-eslint/eslint-plugin': 6.21.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])
+ '@typescript-eslint/eslint-plugin': 6.21.0(@typescript-eslint/[email protected]([email protected])([email protected]))([email protected])([email protected])
jest: 29.7.0(@types/[email protected])([email protected](@types/[email protected])([email protected]))
transitivePeerDependencies:
- supports-color
@@ -10558,7 +10672,7 @@ snapshots:
[email protected]: {}
- [email protected](@babel/[email protected])(@opentelemetry/[email protected])(@playwright/[email protected])([email protected]([email protected]))([email protected]):
+ [email protected](@babel/[email protected])(@opentelemetry/[email protected])(@playwright/[email protected])([email protected]([email protected]))([email protected]):
dependencies:
'@next/env': 15.2.0
'@swc/counter': 0.1.3
@@ -10568,7 +10682,7 @@ snapshots:
postcss: 8.4.31
react: 19.0.0
react-dom: 19.0.0([email protected])
- styled-jsx: 5.1.6(@babel/[email protected])([email protected])
+ styled-jsx: 5.1.6(@babel/[email protected])([email protected])
optionalDependencies:
'@next/swc-darwin-arm64': 15.2.0
'@next/swc-darwin-x64': 15.2.0
@@ -11547,12 +11661,12 @@ snapshots:
[email protected]: {}
- [email protected](@babel/[email protected])([email protected]):
+ [email protected](@babel/[email protected])([email protected]):
dependencies:
client-only: 0.0.1
react: 19.0.0
optionalDependencies:
- '@babel/core': 7.23.9
+ '@babel/core': 7.26.0
[email protected]:
dependencies:
@@ -11728,6 +11842,25 @@ snapshots:
babel-jest: 29.7.0(@babel/[email protected])
esbuild: 0.25.0
+ [email protected](@babel/[email protected])(@jest/[email protected])(@jest/[email protected])([email protected](@babel/[email protected]))([email protected](@types/[email protected])([email protected](@types/[email protected])([email protected])))([email protected]):
+ dependencies:
+ bs-logger: 0.2.6
+ ejs: 3.1.10
+ fast-json-stable-stringify: 2.1.0
+ jest: 29.7.0(@types/[email protected])([email protected](@types/[email protected])([email protected]))
+ jest-util: 29.7.0
+ json5: 2.2.3
+ lodash.memoize: 4.1.2
+ make-error: 1.3.6
+ semver: 7.7.1
+ typescript: 5.7.3
+ yargs-parser: 21.1.1
+ optionalDependencies:
+ '@babel/core': 7.23.9
+ '@jest/transform': 29.7.0
+ '@jest/types': 29.6.3
+ babel-jest: 29.7.0(@babel/[email protected])
+
[email protected](@babel/[email protected])(@jest/[email protected])(@jest/[email protected])([email protected](@babel/[email protected]))([email protected](@types/[email protected])([email protected](@types/[email protected])([email protected])))([email protected]):
dependencies:
bs-logger: 0.2.6
@@ -11989,6 +12122,8 @@ snapshots:
[email protected]: {}
+ [email protected]: {}
+
[email protected]: {}
[email protected]: {}
Analysis
Security vulnerability in undici 6.20.1 - CVE-2025-22150 and CVE-2025-47279
What fails: Package @vercel/blob uses undici 6.20.1, which contains two security vulnerabilities: CVE-2025-22150 (predictable multipart boundaries using Math.random()) and CVE-2025-47279 (memory leak with invalid certificates).
How to reproduce:
cd packages/blob
pnpm list undici # Shows version 6.20.1 before fixResult: Version 6.20.1 installed despite package.json constraint "undici": "^6.0.0" allowing newer patched versions.
Expected: Should use version 6.21.1 or higher, which contains the security fixes per CVE-2025-22150 advisory. The caret constraint should automatically resolve to the latest compatible version with security patches.
Fixed: Updated pnpm-lock.yaml to use undici 6.21.3, which includes fixes for both CVEs.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot].This notice will be removed on 2025-10-07.
This PR contains the following updates:
^5.28.4->^6.0.0GitHub Vulnerability Alerts
CVE-2025-22150
Impact
Undici
fetch()uses Math.random() to choose the boundary for a multipart/form-data request. It is known that the output of Math.random() can be predicted if several of its generated values are known.If there is a mechanism in an app that sends multipart requests to an attacker-controlled website, they can use this to leak the necessary values. Therefore, An attacker can tamper with the requests going to the backend APIs if certain conditions are met.
Patches
This is fixed in 5.28.5; 6.21.1; 7.2.3.
Workarounds
Do not issue multipart requests to attacker controlled servers.
References
CVE-2025-47279
Impact
Applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, then they can cause a memory leak.
Patches
This has been patched in https://github.com/nodejs/undici/pull/4088.
Workarounds
If a webhook fails, avoid keep calling it repeatedly.
References
Reported as: https://github.com/nodejs/undici/issues/3895
Release Notes
nodejs/undici (undici)
v6.21.2Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v6.21.1...v6.21.2
v6.21.1Compare Source
Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).
What's Changed
183f8e9to v6.x by @ggoodman in #3855Full Changelog: nodejs/undici@v6.21.0...v6.21.1
v6.21.0Compare Source
What's Changed
Full Changelog: nodejs/undici@v6.20.1...v6.21.0
v6.20.1Compare Source
What's Changed
BodyReadable.bytesby @github-actions in #3711Full Changelog: nodejs/undici@v6.20.0...v6.20.1
v6.20.0Compare Source
What's Changed
v6.xbranch) by @eXhumer in #3531Full Changelog: nodejs/undici@v6.19.8...v6.20.0
v6.19.8Compare Source
Full Changelog: nodejs/undici@v6.19.7...v6.19.8
v6.19.7Compare Source
Full Changelog: nodejs/undici@v6.19.6...v6.19.7
v6.19.6Compare Source
Full Changelog: nodejs/undici@v6.19.5...v6.19.6
v6.19.5Compare Source
Full Changelog: nodejs/undici@v6.19.4...v6.19.5
v6.19.4Compare Source
Full Changelog: nodejs/undici@v6.19.3...v6.19.4
v6.19.3Compare Source
Full Changelog: nodejs/undici@v6.19.2...v6.19.3
v6.19.2Compare Source
What's Changed
huskyashusky installis deprecated by @jazelly in #3340Full Changelog: nodejs/undici@v6.19.1...v6.19.2
v6.19.1Compare Source
What's Changed
Full Changelog: nodejs/undici@v6.19.0...v6.19.1
v6.19.0Compare Source
What's Changed
9e8f45ftodd7e693in /build by @dependabot in #3309dd7e693toe6d4495in /build by @dependabot in #3313e6d4495to075a5ccin /build by @dependabot in #3326bodyTimeoutin the request by @jakecastelli in #3324New Contributors
Full Changelog: nodejs/undici@v6.18.2...v6.19.0
v6.18.2Compare Source
What's Changed
Full Changelog: nodejs/undici@v6.18.1...v6.18.2
v6.18.1Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v6.18.0...v6.18.1
v6.18.0Compare Source
What's Changed
Full Changelog: nodejs/undici@v6.17.0...v6.18.0
v6.17.0Compare Source
What's Changed
487dc5dto9e8f45fin /build by @dependabot in #3271New Contributors
Full Changelog: nodejs/undici@v6.16.1...v6.17.0
v6.16.1Compare Source
What's Changed
fire-and-forget.jsby @tsctx in #3229Full Changelog: nodejs/undici@v6.16.0...v6.16.1
v6.16.0Compare Source
What's Changed
9459e24to487dc5din /build by @dependabot in #3195New Contributors
Full Changelog: nodejs/undici@v6.15.0...v6.16.0
v6.15.0Compare Source
What's Changed
6d0f18atodb8772din /build by @dependabot in #3163New Contributors
Full Changelog: nodejs/undici@v6.14.1...v6.15.0
v6.14.1Compare Source
What's Changed
ad255c6to6d0f18ain /build by @dependabot in #3154Full Changelog: nodejs/undici@v6.14.0...v6.14.1
v6.14.0Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v6.13.0...v6.14.0
v6.13.0Compare Source
What's Changed
9696b26toad255c6in /build by @dependabot in #3073ad255c6to6d0f18ain /build by @dependabot in #3096New Contributors
Full Changelog: nodejs/undici@v6.12.0...v6.13.0
v6.12.0Compare Source
What's Changed
577f8ebto87524dfin /build by @dependabot in #305587524dfto9696b26in /build by @dependabot in #3058New Contributors
Full Changelog: nodejs/undici@v6.11.1...v6.12.0
v6.11.1Compare Source
What's Changed
Full Changelog: nodejs/undici@v6.11.0...v6.11.1
v6.11.0Compare Source
What's Changed
Full Changelog: nodejs/undici@v6.10.2...v6.11.0
v6.10.2Compare Source
What's Changed
New Contributors
Full Changelog: nodejs/undici@v6.10.0...v6.10.2
v6.10.1Compare Source
Full Changelog: nodejs/undici@v6.10.0...v6.10.1
v6.10.0Compare Source
What's Changed
4999fa1to577f8ebin /build by @dependabot in #2974New Contributors
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.