Skip to content

chore(deps,middleware)(deps): bump undici from 8.9.0 to 8.10.0 in /middleware - #655

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/middleware/undici-8.10.0
Closed

chore(deps,middleware)(deps): bump undici from 8.9.0 to 8.10.0 in /middleware#655
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/middleware/undici-8.10.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps undici from 8.9.0 to 8.10.0.

Release notes

Sourced from undici's releases.

v8.10.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

Commits
  • c8d80e6 Bumped v8.10.0 (#5644)
  • 66923b4 fix: preserve DNS origin hostname on sockets (#5577)
  • 3926499 fix: retry refused HTTP/2 streams (#5598)
  • 73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
  • b111adb fix(mock): emit request body lifecycle hooks (#5367)
  • ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
  • ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
  • 2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
  • b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
  • a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
  • Additional commits viewable in compare view


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

@dependabot dependabot Bot added deps Dependency updates (Dependabot) middleware middleware/ workspace labels Aug 10, 2026
Bumps [undici](https://github.com/nodejs/undici) from 8.9.0 to 8.10.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v8.9.0...v8.10.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 8.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/middleware/undici-8.10.0 branch from 9f8f2c6 to e358e25 Compare August 11, 2026 06:23
@Weegy

Weegy commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

Superseded by #658, which consolidates this run into a single verified change — all required checks green (Node 22.22.3, CI job order: npm ci → build → lint → typecheck → test; 6094 pass / 0 fail / 4 skipped; npm audit 0 high / 0 critical).

Closing so the batch is reviewed once instead of four times. Reopen if #658 is dropped.

@Weegy Weegy closed this Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/middleware/undici-8.10.0 branch August 11, 2026 06:37
Weegy added a commit that referenced this pull request Aug 11, 2026
Consolidates the Dependabot PRs raised against main after #638 and #615
merged, superseding #651, #653, #654 and #655. All five PRs in this run
target /middleware only; web-ui is untouched.

openai 6.46.0 -> 7.4.0, @types/node 26.1.1 -> 26.2.0 (dev),
@aws-sdk/client-s3 3.1075.0 -> 3.1107.0, undici 8.5.0 -> 8.10.0.

@types/node is also raised from ^25.9.3 to ^26.2.0 in packages/canvas-core,
packages/conductor-core and packages/dev-runner-shim, and @aws-sdk/client-s3
is mirrored in packages/harness-diagrams, so the workspace manifests stop
skewing from the root. @types/node and @aws-sdk/client-s3 take the current
resolution rather than the bot's, which had already gone stale.

openai 7.0.0's only breaking change is that it requires Node.js 22 — there
are no API changes. That is already satisfied: engines is ">=22.13.0 <23",
.nvmrc is 22.22.3, every CI job pins node 22, and all Dockerfiles are on
node:22.23.2. The import surface is three source locations plus two tests,
deliberately funnelled through llm-adapter-openai's openaiClient.ts.

Excludes #652 (cookie 0.7.2 -> 2.0.1): v2 removed the deprecated `parse`
export in favour of `parseCookie` and went ESM-only, and we import exactly
that removed symbol in src/auth/operatorAuthAccessor.ts. It also sits in the
session-verification path, so it is handled as its own reviewable PR.

Verified on Node 22.22.3 in CI job order: build, lint (0 errors), typecheck
and 6094 pass / 0 fail / 4 skipped, with npm audit reporting 0 high /
0 critical.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates (Dependabot) middleware middleware/ workspace

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant