From 27a657622b7c2f3abeb970f762561896f3ad1bbb Mon Sep 17 00:00:00 2001 From: Chirag Aggarwal Date: Tue, 6 Oct 2026 16:13:07 +0100 Subject: [PATCH] fix: bump undici to 6.28.1 for GHSA-3wwx-pv8p-q78v, GHSA-r53p-7pc4-xj5r and GHSA-rfgv-xxqx-mfg5 npm audit --audit-level=high fails on undici <=6.28.0, so the 29.1.0 publish stopped before npm publish. --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index dec85fe..48aa474 100644 --- a/package-lock.json +++ b/package-lock.json @@ -10,7 +10,7 @@ "license": "BSD-3-Clause", "dependencies": { "json-bigint": "1.0.0", - "undici": "^6.27.0" + "undici": "^6.28.1" }, "devDependencies": { "@eslint/js": "10.0.1", @@ -6485,9 +6485,9 @@ "license": "MIT" }, "node_modules/undici": { - "version": "6.28.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-6.28.0.tgz", - "integrity": "sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==", + "version": "6.28.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-6.28.1.tgz", + "integrity": "sha512-zWpdTVD54H48CIybL0rWQ3ukpb9d23wM7eH5RtfdmeP70cWHNjtfo7P4vZX+5CoDcO53J4Pu5uXp7lNfjc6DRA==", "license": "MIT", "engines": { "node": ">=18.17" diff --git a/package.json b/package.json index f8580da..fbef7a2 100644 --- a/package.json +++ b/package.json @@ -62,7 +62,7 @@ }, "dependencies": { "json-bigint": "1.0.0", - "undici": "^6.27.0" + "undici": "^6.28.1" }, "overrides": { "esbuild": "^0.28.1",