chore(deps,middleware)(deps): bump undici from 8.9.0 to 8.10.0 in /middleware - #655
chore(deps,middleware)(deps): bump undici from 8.9.0 to 8.10.0 in /middleware#655dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [undici](https://github.com/nodejs/undici) from 8.9.0 to 8.10.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.9.0...v8.10.0) --- updated-dependencies: - dependency-name: undici dependency-version: 8.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
9f8f2c6 to
e358e25
Compare
|
Superseded by #658, which consolidates this run into a single verified change — all required checks green (Node 22.22.3, CI job order: Closing so the batch is reviewed once instead of four times. Reopen if #658 is dropped. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Consolidates the Dependabot PRs raised against main after #638 and #615 merged, superseding #651, #653, #654 and #655. All five PRs in this run target /middleware only; web-ui is untouched. openai 6.46.0 -> 7.4.0, @types/node 26.1.1 -> 26.2.0 (dev), @aws-sdk/client-s3 3.1075.0 -> 3.1107.0, undici 8.5.0 -> 8.10.0. @types/node is also raised from ^25.9.3 to ^26.2.0 in packages/canvas-core, packages/conductor-core and packages/dev-runner-shim, and @aws-sdk/client-s3 is mirrored in packages/harness-diagrams, so the workspace manifests stop skewing from the root. @types/node and @aws-sdk/client-s3 take the current resolution rather than the bot's, which had already gone stale. openai 7.0.0's only breaking change is that it requires Node.js 22 — there are no API changes. That is already satisfied: engines is ">=22.13.0 <23", .nvmrc is 22.22.3, every CI job pins node 22, and all Dockerfiles are on node:22.23.2. The import surface is three source locations plus two tests, deliberately funnelled through llm-adapter-openai's openaiClient.ts. Excludes #652 (cookie 0.7.2 -> 2.0.1): v2 removed the deprecated `parse` export in favour of `parseCookie` and went ESM-only, and we import exactly that removed symbol in src/auth/operatorAuthAccessor.ts. It also sits in the session-verification path, so it is handled as its own reviewable PR. Verified on Node 22.22.3 in CI job order: build, lint (0 errors), typecheck and 6094 pass / 0 fail / 4 skipped, with npm audit reporting 0 high / 0 critical.
Bumps undici from 8.9.0 to 8.10.0.
Release notes
Sourced from undici's releases.
Commits
c8d80e6Bumped v8.10.0 (#5644)66923b4fix: preserve DNS origin hostname on sockets (#5577)3926499fix: retry refused HTTP/2 streams (#5598)73d6e9efix(h2): detach upgrade close handler after GOAWAY (#5641)b111adbfix(mock): emit request body lifecycle hooks (#5367)ae4a3e3build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)ec3fbf1build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)2151720build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)b96a116fix(interceptors): allow interceptors without opts.origin (#5628)a18ef2dfix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.