Bump undici to 5.28.3 to fix CVE-2024-24758 (#758)

vavsab · web-flow · commit c2ed3afdc1fe · 2024-03-11T10:33:17.000Z
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/cache/package.json b/packages/cache/package.json
@@ -38,7 +38,7 @@
     "@miniflare/core": "2.14.2",
     "@miniflare/shared": "2.14.2",
     "http-cache-semantics": "^4.1.0",
-    "undici": "5.28.2"
+    "undici": "5.28.3"
   },
   "devDependencies": {
     "@miniflare/shared-test": "2.14.2",
diff --git a/packages/core/package.json b/packages/core/package.json
@@ -46,7 +46,7 @@
     "dotenv": "^10.0.0",
     "kleur": "^4.1.4",
     "set-cookie-parser": "^2.4.8",
-    "undici": "5.28.2",
+    "undici": "5.28.3",
     "urlpattern-polyfill": "^4.0.3"
   },
   "devDependencies": {
diff --git a/packages/durable-objects/package.json b/packages/durable-objects/package.json
@@ -38,7 +38,7 @@
     "@miniflare/core": "2.14.2",
     "@miniflare/shared": "2.14.2",
     "@miniflare/storage-memory": "2.14.2",
-    "undici": "5.28.2"
+    "undici": "5.28.3"
   },
   "devDependencies": {
     "@miniflare/cache": "2.14.2",
diff --git a/packages/html-rewriter/package.json b/packages/html-rewriter/package.json
@@ -38,7 +38,7 @@
     "@miniflare/core": "2.14.2",
     "@miniflare/shared": "2.14.2",
     "html-rewriter-wasm": "^0.4.1",
-    "undici": "5.28.2"
+    "undici": "5.28.3"
   },
   "devDependencies": {
     "@miniflare/shared-test": "2.14.2"
diff --git a/packages/http-server/package.json b/packages/http-server/package.json
@@ -40,7 +40,7 @@
     "@miniflare/web-sockets": "2.14.2",
     "kleur": "^4.1.4",
     "selfsigned": "^2.0.0",
-    "undici": "5.28.2",
+    "undici": "5.28.3",
     "ws": "^8.2.2",
     "youch": "^2.2.2"
   },
diff --git a/packages/miniflare/package.json b/packages/miniflare/package.json
@@ -66,7 +66,7 @@
     "kleur": "^4.1.4",
     "semiver": "^1.1.0",
     "source-map-support": "^0.5.20",
-    "undici": "5.28.2"
+    "undici": "5.28.3"
   },
   "devDependencies": {
     "@miniflare/shared-test": "2.14.2",
diff --git a/packages/r2/package.json b/packages/r2/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@miniflare/core": "2.14.2",
     "@miniflare/shared": "2.14.2",
-    "undici": "5.28.2"
+    "undici": "5.28.3"
   },
   "devDependencies": {
     "@miniflare/shared-test": "2.14.2"
diff --git a/packages/vitest-environment-miniflare/package.json b/packages/vitest-environment-miniflare/package.json
@@ -41,7 +41,7 @@
     "@miniflare/queues": "2.14.2",
     "@miniflare/shared": "2.14.2",
     "@miniflare/shared-test-environment": "2.14.2",
-    "undici": "5.28.2"
+    "undici": "5.28.3"
   },
   "peerDependencies": {
     "vitest": ">=0.23.0"
diff --git a/packages/web-sockets/package.json b/packages/web-sockets/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@miniflare/core": "2.14.2",
     "@miniflare/shared": "2.14.2",
-    "undici": "5.28.2",
+    "undici": "5.28.3",
     "ws": "^8.2.2"
   },
   "devDependencies": {
