From fb2c91d172f80698ce7d3aaefd6c75ca220b67ca Mon Sep 17 00:00:00 2001 From: Farhan Yahaya Date: Fri, 3 Jul 2026 17:01:16 +0000 Subject: [PATCH 1/2] feat: downgrade undici --- packages/cli/package.json | 4 ++-- pnpm-lock.yaml | 16 ++++++++-------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/packages/cli/package.json b/packages/cli/package.json index 6883d9186..5eafd0b34 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -66,7 +66,7 @@ "json-diff": "^1.0.6", "rimraf": "^6.1.3", "treeify": "^1.1.0", - "undici": "8.5.0", + "undici": "^6.27.0", "ws": "^8.19.0", "yargs": "^17.7.2" }, @@ -74,4 +74,4 @@ "dist", "README.md" ] -} +} \ No newline at end of file diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index bc758721a..b6c50d0ee 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -210,8 +210,8 @@ importers: specifier: ^1.1.0 version: 1.1.0 undici: - specifier: 8.5.0 - version: 8.5.0 + specifier: ^6.27.0 + version: 6.27.0 ws: specifier: ^8.19.0 version: 8.19.0 @@ -4235,6 +4235,10 @@ packages: resolution: {integrity: sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==} engines: {node: '>=14.0'} + undici@6.27.0: + resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==} + engines: {node: '>=18.17'} + undici@7.24.4: resolution: {integrity: sha512-BM/JzwwaRXxrLdElV2Uo6cTLEjhSb3WXboncJamZ15NgUURmvlXvxa6xkwIOILIjPNo9i8ku136ZvWV0Uly8+w==} engines: {node: '>=20.18.1'} @@ -4243,10 +4247,6 @@ packages: resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==} engines: {node: '>=20.18.1'} - undici@8.5.0: - resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==} - engines: {node: '>=22.19.0'} - universalify@0.1.2: resolution: {integrity: sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==} engines: {node: '>= 4.0.0'} @@ -7923,12 +7923,12 @@ snapshots: dependencies: '@fastify/busboy': 2.1.1 + undici@6.27.0: {} + undici@7.24.4: {} undici@7.28.0: {} - undici@8.5.0: {} - universalify@0.1.2: {} unpipe@1.0.0: {} From f51b08a4096a0686bad9ac9631b32ee15af73aad Mon Sep 17 00:00:00 2001 From: Farhan Yahaya Date: Fri, 3 Jul 2026 17:05:10 +0000 Subject: [PATCH 2/2] chore: add changelog --- .changeset/silver-breads-invite.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/silver-breads-invite.md diff --git a/.changeset/silver-breads-invite.md b/.changeset/silver-breads-invite.md new file mode 100644 index 000000000..19f9dcf2d --- /dev/null +++ b/.changeset/silver-breads-invite.md @@ -0,0 +1,5 @@ +--- +'@openfn/cli': major +--- + +Downgrade undici to 6.27.0 with security patches