Skip to content

chore(deps): resolve undici to 7.30.1 - #215

Merged
bpapillon merged 1 commit into
mainfrom
orbit-security-2026-10-27-root
Oct 27, 2026
Merged

bpapillon merged 1 commit into
mainfrom
orbit-security-2026-10-27-root

Conversation

@schematic-orbit

Copy link
Copy Markdown
Contributor

Raises the undici resolution in package.json from 7.29.1 to 7.30.1, moving the copy miniflare pulls in out of the vulnerable range. package.json is Fern-generated, so SchematicHQ/schematic-fern-config#539 makes the same change in the generator config to keep a regeneration from reverting it.

GHSA package severity resolved how
GHSA-xjj6-f33q-929c undici high 7.29.1 → 7.30.1 resolution
GHSA-4qv8-2p9j-2685 undici medium 7.29.1 → 7.30.1 resolution
GHSA-f72v-6w45-q472 undici medium 7.29.1 → 7.30.1 resolution

@bpapillon
bpapillon marked this pull request as ready for review October 27, 2026 16:15
@bpapillon
bpapillon requested a review from a team as a code owner October 27, 2026 16:15
@bpapillon
bpapillon merged commit 1bce95b into main Oct 27, 2026
7 checks passed
@bpapillon
bpapillon deleted the orbit-security-2026-10-27-root branch October 27, 2026 18:31
cbrady pushed a commit that referenced this pull request Nov 2, 2026
* [fern-generated] Update SDK

Generated by Fern
CLI Version: unknown
Generators:
  - fernapi/fern-typescript-node-sdk: 3.108.6

* [fern-replay] Applied customizations

Patches applied (4):
  - patch-7a37bae5: chore(deps): resolve dependabot security alerts (#156)
  - patch-f33b87ac: chore(deps): resolve sharp to 0.35.4 (#177)
  - patch-24c0d148: chore(deps): resolve undici 7.29.1 (#206)
  - patch-1bce95ba: chore(deps): resolve undici to 7.30.1 (#215)

---------

Co-authored-by: fern-api[bot] <115122769+fern-api[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants