sdk
sdk copied to clipboard
Bump undici from 6.19.7 to 6.21.1
Bumps undici from 6.19.7 to 6.21.1.
Release notes
Sourced from undici's releases.
v6.21.1
⚠️ Security Release ⚠️
Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).
What's Changed
- fix(#3736): back-port 183f8e9 to v6.x by
@ggoodmanin nodejs/undici#3855- fix(#3817): send servername for SNI on TLS (#3821) [backport] by
@metcoder95in nodejs/undici#3864- fix: sending formdata bodies with http2 (#3863) [backport] by
@metcoder95in nodejs/undici#3866- [Backport v6.x] fix: Fixed the issue that there is no running request when http2 goaway by
@github-actionsin nodejs/undici#3877- types: [backport] Update return type of RetryCallback (#3851) by
@metcoder95in nodejs/undici#3876Full Changelog: https://github.com/nodejs/undici/compare/v6.21.0...v6.21.1
v6.21.0
What's Changed
- [Backport v6.x] web: mark as uncloneable when possible (#3709) by
@jazellyin nodejs/undici#3744- [Backport v6.x] fetch: fix content-encoding order by
@github-actionsin nodejs/undici#3764- [Backport v6.x] fix: handle undefined deref() of WeakRef(socket) by
@github-actionsin nodejs/undici#3822- [Backport v6.x] fix: range end is zero-indexed by
@github-actionsin nodejs/undici#3827Full Changelog: https://github.com/nodejs/undici/compare/v6.20.1...v6.21.0
v6.20.1
What's Changed
- [Backport v6.x] jsdoc: add jsdoc to lib/web/fetch/constants.js by
@github-actionsin nodejs/undici#3710- [Backport v6.x] feat: implement
BodyReadable.bytesby@github-actionsin nodejs/undici#3711- fix: add more expectsPayload methods by
@ronagin nodejs/undici#3715- [Backport v6.x] chore(H2): onboard H2 into Undici queueing system (#3707) by
@Uzlopakin nodejs/undici#3724- [Backport v6.x] fix: PoolBase kClose and kDestroy should await and not return the Promise by
@github-actionsin nodejs/undici#3723- [Backport v6.x] fix: extract noop everywhere by
@Uzlopakin nodejs/undici#3727Full Changelog: https://github.com/nodejs/undici/compare/v6.20.0...v6.20.1
v6.20.0
What's Changed
- Remove patched dom types (
v6.xbranch) by@eXhumerin nodejs/undici#3531- docs(Backport v6.x): Fix signature of RetryHandler by
@github-actionsin nodejs/undici#3594- deps(dev): update
@types/nodeby@metcoder95in nodejs/undici#3618- fix: throw on retry when payload is consume by downstream by
@github-actionsin nodejs/undici#3596- feat(Backport v6.x): move throwOnError to interceptor by
@github-actionsin nodejs/undici#3595- [Backport v6.x] fix: reduce memory usage in client-h1 by
@github-actionsin nodejs/undici#3672- [Backport v6.x] fix: refactor fast timers, fix UND_ERR_CONNECT_TIMEOUT on event loop blocking by
@github-actionsin nodejs/undici#3673- [Backport v6.x] fix: run asserts first if possible by
@github-actionsin nodejs/undici#3674- [Backport v6.x] fix: use fasttimers for all connection timeouts by
@github-actionsin nodejs/undici#3675- [Backport v6.x] ci: less flaky test/request-timeout.js test by
@github-actionsin nodejs/undici#3678- [Backport v6.x] test: less flaky timers acceptance test, rework fast timer tests to pass them faster by
@github-actionsin nodejs/undici#3679
... (truncated)
Commits
e260e7bBumped v6.21.1c3acc60Merge commit from fork2414bc9Update return type of RetryCallback (#3851) (#3876)be8cd0a[Backport v6.x] fix: Fixed the issue that there is no running request when ht...ee6176cfix: sending formdata bodies with http2 (#3863) [backport] (#3866)a0220f1fix(#3817): send servername for SNI on TLS (#3821) [backport] (#3864)353ab63fix(#3736): back-port 183f8e9 to v6.x (#3855)61ec353Bumped v6.21.011e31a4fix: range end is zero-indexed (#3826) (#3827)98d1b1bfix: handle undefined deref() of WeakRef(socket) (#3751) (#3822)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.