UI5 / webcomponents-react / 36870317986

86%

push

github

chore(deps): bump undici from 6.28.0 to 6.29.0 (#9012)

Bumps [undici](https://github.com/nodejs/undici) from 6.28.0 to 6.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v6.29.0</h2>
<h2>What's Changed</h2>
<ul>
<li>[v6.x] fix(retry): settle exposed body on terminal failure by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/5778">nodejs/undici#5778</a></li>
<li>Backport upgrade diagnostics lifecycle fixes to v6.x by <a
href="https://github.com/BridgeAR"><code>@​BridgeAR</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/5833">nodejs/undici#5833</a></li>
<li>test: synchronize the issue-3356 body timeout by <a
href="https://github.com/BridgeAR"><code>@​BridgeAR</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/5834">nodejs/undici#5834</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.28.1...v6.29.0">https://github.com/nodejs/undici/compare/v6.28.1...v6.29.0</a></p>
<h2>v6.28.1</h2>
<h2>⚠️ Security fixes</h2>
<h3>High severity</h3>
<ul>
<li><a
href="https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5">GHSA-rfgv-xxqx-mfg5</a>:
a WebSocket server could select a subprotocol when none was requested,
causing an uncaught <code>TypeError</code> that could terminate the
process. Undici now rejects the handshake with protocol error 1002.
Fixed by <a
href="https://github.com/nodejs/undici/commit/2af0faf88">2af0faf8</a>.</li>
</ul>
<h3>Medium severity</h3>
<ul>
<li><a
href="https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v">GHSA-3wwx-pv8p-q78v</a>:
a malformed permessage-deflate payload exceeding the configured
decompression limit could emit an unhandled zlib error and terminate the
process. Undici now de... (continued)

4132 of 5168 branches covered (79.95%)

Branch coverage included in aggregate %.

7218 of 8066 relevant lines covered (89.49%)

544357.53 hits per line