This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [undici](https://undici.nodejs.org) ([source](https://redirect.github.com/nodejs/undici)) | [`7.16.0` → `7.18.2`](https://renovatebot.com/diffs/npm/undici/7.16.0/7.18.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/undici/7.18.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/7.16.0/7.18.2?slim=true) | --- ### Release Notes <details> <summary>nodejs/undici (undici)</summary> ### [`v7.18.2`](https://redirect.github.com/nodejs/undici/releases/tag/v7.18.2) [Compare Source](https://redirect.github.com/nodejs/undici/compare/v7.18.1...v7.18.2) #### What's Changed - fix(decompress): limit Content-Encoding chain to 5 to prevent resourc… by [@mcollina](https://redirect.github.com/mcollina) in [#4729](https://redirect.github.com/nodejs/undici/pull/4729) **Full Changelog**: <nodejs/undici@v7.18.1...v7.18.2> ### [`v7.18.1`](https://redirect.github.com/nodejs/undici/compare/v7.18.0...2bcb77bbc27f966ac86e31154161792a4a8dadf5) [Compare Source](https://redirect.github.com/nodejs/undici/compare/v7.18.0...v7.18.1) ### [`v7.18.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.18.0) [Compare Source](https://redirect.github.com/nodejs/undici/compare/v7.17.0...v7.18.0) #### What's Changed **Full Changelog**: <nodejs/undici@v7.17.0...v7.18.0> ### [`v7.17.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.17.0) [Compare Source](https://redirect.github.com/nodejs/undici/compare/v7.16.0...v7.17.0) #### What's Changed - chore: extract infra and encoding methods by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4523](https://redirect.github.com/nodejs/undici/pull/4523) - ci: remove h2 by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4534](https://redirect.github.com/nodejs/undici/pull/4534) - ci: make nodejs-shared wf reusable, install binaryen for wasm-opt, test on node-nightly by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4535](https://redirect.github.com/nodejs/undici/pull/4535) - ci: fix nightly shared library case by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4543](https://redirect.github.com/nodejs/undici/pull/4543) - test: consume bodies of fetch responses to fix failing macos 20 ci by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4528](https://redirect.github.com/nodejs/undici/pull/4528) - docs: add Cache Interceptor example to README by [@tawseefnabi](https://redirect.github.com/tawseefnabi) in [#4393](https://redirect.github.com/nodejs/undici/pull/4393) - test: remove node20 version check by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4544](https://redirect.github.com/nodejs/undici/pull/4544) - types: use MessagePort instance type in MessageEvent by [@Renegade334](https://redirect.github.com/Renegade334) in [#4546](https://redirect.github.com/nodejs/undici/pull/4546) - ci: set write permissions on job level by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4537](https://redirect.github.com/nodejs/undici/pull/4537) - lint: activate n/no-process-exit by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4548](https://redirect.github.com/nodejs/undici/pull/4548) - ci: run benchmarks on pull\_requests and by pushing on specific branches only by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4536](https://redirect.github.com/nodejs/undici/pull/4536) - chore: activate n/prefer-node-protocol to enforce `'node:'` prefix for requiring node built-ins by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4547](https://redirect.github.com/nodejs/undici/pull/4547) - feat(H2): correct CONNECT behaviour by [@metcoder95](https://redirect.github.com/metcoder95) in [#4541](https://redirect.github.com/nodejs/undici/pull/4541) - test: fix plans by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4550](https://redirect.github.com/nodejs/undici/pull/4550) - feat: add runtime feature "detection" by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4545](https://redirect.github.com/nodejs/undici/pull/4545) - perf: use less promises in extractBody by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4458](https://redirect.github.com/nodejs/undici/pull/4458) - fix(proxy-agent): add missing return after callback-call by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4553](https://redirect.github.com/nodejs/undici/pull/4553) - fix: remove redundant line in retry-handler by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4554](https://redirect.github.com/nodejs/undici/pull/4554) - ci: add no-wasm-simd option by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4533](https://redirect.github.com/nodejs/undici/pull/4533) - fix: use lazyloaders for runtime feature detection by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4557](https://redirect.github.com/nodejs/undici/pull/4557) - fix: minor changes in dispatcher-base.js and types for Dispatcher by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4556](https://redirect.github.com/nodejs/undici/pull/4556) - http2: refactor and split tests of http2.js into multiple files by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4561](https://redirect.github.com/nodejs/undici/pull/4561) - fix: dns-interceptor test should await plan to complete by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4560](https://redirect.github.com/nodejs/undici/pull/4560) - chore: remove istanbul instructions by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4559](https://redirect.github.com/nodejs/undici/pull/4559) - fix: keep promise chains intact by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4558](https://redirect.github.com/nodejs/undici/pull/4558) - build(deps): bump wait-on from 8.0.5 to 9.0.1 in /benchmarks by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4567](https://redirect.github.com/nodejs/undici/pull/4567) - chore: remove tspl from eventsource by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4569](https://redirect.github.com/nodejs/undici/pull/4569) - chore: remove tspl from fetch by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4570](https://redirect.github.com/nodejs/undici/pull/4570) - feat: add getUpstream() method to BalancedPool by [@mcollina](https://redirect.github.com/mcollina) in [#4586](https://redirect.github.com/nodejs/undici/pull/4586) - fetch: handle invalid priority values properly by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4522](https://redirect.github.com/nodejs/undici/pull/4522) - ci: fix test coverage for codecov by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4520](https://redirect.github.com/nodejs/undici/pull/4520) - types: optional `status` in `Response.redirect` by [@gineika](https://redirect.github.com/gineika) in [#4591](https://redirect.github.com/nodejs/undici/pull/4591) - docs: unix socket add-on by [@FelixVaughan](https://redirect.github.com/FelixVaughan) in [#4587](https://redirect.github.com/nodejs/undici/pull/4587) - build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4601](https://redirect.github.com/nodejs/undici/pull/4601) - build(deps): bump hendrikmuhs/ccache-action from 1.2.18 to 1.2.19 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4600](https://redirect.github.com/nodejs/undici/pull/4600) - build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4603](https://redirect.github.com/nodejs/undici/pull/4603) - build(deps): bump actions/setup-node from 4.0.2 to 5.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4604](https://redirect.github.com/nodejs/undici/pull/4604) - build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4602](https://redirect.github.com/nodejs/undici/pull/4602) - build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4598](https://redirect.github.com/nodejs/undici/pull/4598) - build(deps): bump github/codeql-action from 3.30.0 to 3.30.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4599](https://redirect.github.com/nodejs/undici/pull/4599) - build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4597](https://redirect.github.com/nodejs/undici/pull/4597) - fix: cacheStores types and usage in README by [@lucalooz](https://redirect.github.com/lucalooz) in [#4605](https://redirect.github.com/nodejs/undici/pull/4605) - Feat dns interceptor storage by [@SuperOleg39](https://redirect.github.com/SuperOleg39) in [#4589](https://redirect.github.com/nodejs/undici/pull/4589) - docs: add crawling best practices by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4590](https://redirect.github.com/nodejs/undici/pull/4590) - fix: `304 not modified` reply upon revalidation did not update cache. by [@daan944](https://redirect.github.com/daan944) in [#4617](https://redirect.github.com/nodejs/undici/pull/4617) - chore: use testcontext for test:infra by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4579](https://redirect.github.com/nodejs/undici/pull/4579) - fetch: improve regexes in data-uri.js by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4483](https://redirect.github.com/nodejs/undici/pull/4483) - perf: optimize validate http token by [@PandaWorker](https://redirect.github.com/PandaWorker) in [#4608](https://redirect.github.com/nodejs/undici/pull/4608) - test: improve long-lived-abort-controller test by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4621](https://redirect.github.com/nodejs/undici/pull/4621) - ci: add node.js 25 to test matrix by [@shivarm](https://redirect.github.com/shivarm) in [#4626](https://redirect.github.com/nodejs/undici/pull/4626) - chore: use testcontext for test/utils tests by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4577](https://redirect.github.com/nodejs/undici/pull/4577) - chore: remove tspl from websocket by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4568](https://redirect.github.com/nodejs/undici/pull/4568) - fix(ws) onSocketClose being called multiple times by [@KhafraDev](https://redirect.github.com/KhafraDev) in [#4632](https://redirect.github.com/nodejs/undici/pull/4632) - fix: prevent duplicate debug logs when multiple undici instances exist by [@mcollina](https://redirect.github.com/mcollina) in [#4630](https://redirect.github.com/nodejs/undici/pull/4630) - chore: use testcontext for busboy tests by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4572](https://redirect.github.com/nodejs/undici/pull/4572) - test: fix flaky http2-dispatcher test by [@mcollina](https://redirect.github.com/mcollina) in [#4633](https://redirect.github.com/nodejs/undici/pull/4633) - build(deps): bump uWebSockets.js from v20.52.0 to v20.54.0 in /benchmarks by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4635](https://redirect.github.com/nodejs/undici/pull/4635) - Run the gc() in long-lived-abort-controller test by [@mcollina](https://redirect.github.com/mcollina) in [#4638](https://redirect.github.com/nodejs/undici/pull/4638) - Do not destroy the HTTP2 stream twice in tests by [@mcollina](https://redirect.github.com/mcollina) in [#4637](https://redirect.github.com/nodejs/undici/pull/4637) - Fix http2-dispatcher test by [@mcollina](https://redirect.github.com/mcollina) in [#4640](https://redirect.github.com/nodejs/undici/pull/4640) - fix: fetch blob with range off-by-one error by [@platypii](https://redirect.github.com/platypii) in [#4643](https://redirect.github.com/nodejs/undici/pull/4643) - fix: ensure HTTP/2 sends Content-Length for empty POST requests by [@mcollina](https://redirect.github.com/mcollina) in [#4613](https://redirect.github.com/nodejs/undici/pull/4613) - build(deps): bump uWebSockets.js from v20.54.0 to v20.55.0 in /benchmarks by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4645](https://redirect.github.com/nodejs/undici/pull/4645) - feat([#2458](https://redirect.github.com/nodejs/undici/issues/2458)): WebSocket through HTTP/2 by [@metcoder95](https://redirect.github.com/metcoder95) in [#4540](https://redirect.github.com/nodejs/undici/pull/4540) - docs(README): correct the example code for the consumption of respons… by [@tenkirin](https://redirect.github.com/tenkirin) in [#4658](https://redirect.github.com/nodejs/undici/pull/4658) - build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4653](https://redirect.github.com/nodejs/undici/pull/4653) - build(deps): bump fastify/github-action-merge-dependabot from 3.11.1 to 3.11.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4655](https://redirect.github.com/nodejs/undici/pull/4655) - build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4652](https://redirect.github.com/nodejs/undici/pull/4652) - build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4651](https://redirect.github.com/nodejs/undici/pull/4651) - build(deps): bump actions/dependency-review-action from 4.8.0 to 4.8.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4654](https://redirect.github.com/nodejs/undici/pull/4654) - don't freeze urlList for opaque filtered responses by [@KhafraDev](https://redirect.github.com/KhafraDev) in [#4656](https://redirect.github.com/nodejs/undici/pull/4656) - fix fd parsing unquoted attribute values by [@KhafraDev](https://redirect.github.com/KhafraDev) in [#4662](https://redirect.github.com/nodejs/undici/pull/4662) - build(deps): bump uWebSockets.js from v20.55.0 to v20.56.0 in /benchmarks by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4665](https://redirect.github.com/nodejs/undici/pull/4665) - feat(dispatcher/proxy-agent): new diagnostics event 'undici:proxy:connected' by [@SuperOleg39](https://redirect.github.com/SuperOleg39) in [#4659](https://redirect.github.com/nodejs/undici/pull/4659) - Feat/round robin pool by [@FelixVaughan](https://redirect.github.com/FelixVaughan) in [#4650](https://redirect.github.com/nodejs/undici/pull/4650) - Formdata ignore epilogue preamble by [@KhafraDev](https://redirect.github.com/KhafraDev) in [#4672](https://redirect.github.com/nodejs/undici/pull/4672) - build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4682](https://redirect.github.com/nodejs/undici/pull/4682) - fix: snapshot url exclusion by [@FelixVaughan](https://redirect.github.com/FelixVaughan) in [#4670](https://redirect.github.com/nodejs/undici/pull/4670) - feat: support h2c over unix domain sockets by [@chrros95](https://redirect.github.com/chrros95) in [#4690](https://redirect.github.com/nodejs/undici/pull/4690) - fix(docs): remove unused TypeScript example code block by [@kerolloz](https://redirect.github.com/kerolloz) in [#4701](https://redirect.github.com/nodejs/undici/pull/4701) - feat: add deduplicate interceptor for request deduplication by [@mcollina](https://redirect.github.com/mcollina) in [#4679](https://redirect.github.com/nodejs/undici/pull/4679) - chore: use testcontext for mock tests by [@Uzlopak](https://redirect.github.com/Uzlopak) in [#4582](https://redirect.github.com/nodejs/undici/pull/4582) - fix(test): remove hardcoded folder name in client-error-stack-trace test by [@mcollina](https://redirect.github.com/mcollina) in [#4707](https://redirect.github.com/nodejs/undici/pull/4707) #### New Contributors - [@gineika](https://redirect.github.com/gineika) made their first contribution in [#4591](https://redirect.github.com/nodejs/undici/pull/4591) - [@lucalooz](https://redirect.github.com/lucalooz) made their first contribution in [#4605](https://redirect.github.com/nodejs/undici/pull/4605) - [@SuperOleg39](https://redirect.github.com/SuperOleg39) made their first contribution in [#4589](https://redirect.github.com/nodejs/undici/pull/4589) - [@daan944](https://redirect.github.com/daan944) made their first contribution in [#4617](https://redirect.github.com/nodejs/undici/pull/4617) - [@PandaWorker](https://redirect.github.com/PandaWorker) made their first contribution in [#4608](https://redirect.github.com/nodejs/undici/pull/4608) - [@platypii](https://redirect.github.com/platypii) made their first contribution in [#4643](https://redirect.github.com/nodejs/undici/pull/4643) - [@tenkirin](https://redirect.github.com/tenkirin) made their first contribution in [#4658](https://redirect.github.com/nodejs/undici/pull/4658) - [@kerolloz](https://redirect.github.com/kerolloz) made their first contribution in [#4701](https://redirect.github.com/nodejs/undici/pull/4701) **Full Changelog**: <nodejs/undici@v7.16.0...v7.17.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/node-modules/urllib).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>