Skip to content

chore(deps): unpin undici and move to patched range#121

Merged
gaojude merged 1 commit intomainfrom
codex/fix-undici-range-120
Feb 9, 2026
Merged

chore(deps): unpin undici and move to patched range#121
gaojude merged 1 commit intomainfrom
codex/fix-undici-range-120

Conversation

@gaojude
Copy link
Contributor

@gaojude gaojude commented Feb 9, 2026

Summary

Closes #120 by removing the hard pin on undici and upgrading to a patched semver range.

Changes

  • package.json
    • undici: 7.16.0 -> ^7.18.2
  • pnpm-lock.yaml
    • importer specifier updated to ^7.18.2
    • resolved version now 7.21.0

Validation

  • pnpm test (38 passing)
  • pnpm typecheck

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedundici@​7.16.0 ⏵ 7.21.096100 +2100 +198100

View full report

@gaojude gaojude merged commit c225c8f into main Feb 9, 2026
3 checks passed
@gaojude gaojude deleted the codex/fix-undici-range-120 branch February 9, 2026 21:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security: next-devtools-mcp pins vulnerable undici (GHSA-g9mf-h72j-4rw9)

1 participant

Comments