Repository navigation
build(deps-dev): bump undici from 7.29.0 to 7.30.0 - #90
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [undici](https://github.com/nodejs/undici) from 7.29.0 to 7.30.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.29.0...v7.30.0) --- updated-dependencies: - dependency-name: undici dependency-version: 7.30.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
ECC Tools / Security EvidenceCommit: Security evidence gate passed (success) No security-sensitive scanner-evidence gap detected. Mode: enforce Scanned 1 changed file(s). No missing scanner-evidence signal was detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / PR Risk TaxonomyCommit: PR taxonomy review recommended (neutral) Detected 2 PR taxonomy bucket(s): Install Manifest Integrity, CI/CD Recommendation. Scanned 1 changed file(s). Roadmap taxonomy buckets: Install Manifest IntegrityInstall manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance. Signals:
Paths:
CI/CD RecommendationCI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work. Signals:
Paths:
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Reference Set ReadinessCommit: Reference set readiness gaps detected (neutral) Reference evidence present for 0/7 areas (0%) across 1 changed file(s). This check is based on files changed in this PR. Repository-level readiness is still reported by
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Hosted Promotion ReadinessCommit: Hosted promotion readiness passed (success) No hosted promotion evidence gaps detected across 1 changed file(s); 0 corpus scenarios had matching evidence. This check compares PR file changes against the evaluator/RAG promotion corpus in No evaluator corpus scenarios matched this PR. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Bumps undici from 7.29.0 to 7.30.0.
Release notes
Sourced from undici's releases.
Commits
6741f66Bumped v7.30.0 (#5887)8d2f2f0test(fetch): make pull-dont-push exceed any socket buffer (#5889)fad98aefix: close rejected HTTP/2 WebSocket streams on v7.x (#5876)369058efix: honor backpressure in decompression interceptor (#5829) (#5837)a7914e5Backport upgrade diagnostics lifecycle fixes to v7.x (#5783)48367affix: selectively re-enable SIMD for ppc64 (#5776) (#5794)d39a83eBumped v7.29.1 (#5772)0d88464fix(test): remove unused EventEmitter importf57411bperf(h1): drop idle-socket timer floor with a ref'd setImmediate (#5707) (#5769)3c67265fix(retry): settle exposed body on terminal failureDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
High-level PR Summary
This PR updates the
undicipackage from version 7.29.0 to 7.30.0. The new release includes several bug fixes related to HTTP/2 WebSocket streams, backpressure handling in decompression, and SIMD support for ppc64. Version 7.29.1 (which lies between the old and new versions) also addressed multiple security vulnerabilities including high-severity issues withBalancedPoolcertificate validation and WebSocket subprotocol handling.⏱️ Estimated Review Time: 15-30 minutes
💡 Review Order Suggestion
package-lock.jsonpackage-lock.jsondev: trueto either removed ordevOptional: truefor packages like @alloc/quick-lru, @types/react, autoprefixer, tailwindcss, and others. These changes appear unrelated to the undici version bump and suggest a package-lock regeneration or npm configuration change.