drive-desktop Bump undici from 5.5.1 to 5.10.0

trafficstars

Bumps undici from 5.5.1 to 5.10.0.

Release notes

v5.10.0

What's Changed

fix(fetch): allow custom implementation of AbortSignal by @SukkaW in nodejs/undici#1608

fix: make mock intercept agnostic to query key ordering by @James1x0 in nodejs/undici#1607

fix: support ArrayBufferView and ArrayBuffer as body by @LiviaMedeiros in nodejs/undici#1584

fix: allow third party AbortControllers by @KhafraDev in nodejs/undici#1609

feat(fetch): implement spec compliant integrity checks by @KhafraDev in nodejs/undici#1613

avoid body reordering on really fast lines by @mcollina in nodejs/undici#1615

fix: use FinalizationRegistry compat if global is missing by @Kikobeats in nodejs/undici#1545

New Contributors

@SukkaW made their first contribution in nodejs/undici#1608

@James1x0 made their first contribution in nodejs/undici#1607

Full Changelog: https://github.com/nodejs/undici/compare/v5.9.1...v5.10.0

v5.9.1

What's Changed

fix: don't timeout while waiting for client to send request (#1604)

Fix array headers by @mateonunez in nodejs/undici#1598

fix(fetch): implement fully read body algorithm by @KhafraDev in nodejs/undici#1597

fix: add support for integrity option to Fetch by @jelmervdl in nodejs/undici#1596

fix(File): respect typed array byteOffset and byteLength by @mrbbot in nodejs/undici#1601

New Contributors

@mateonunez made their first contribution in nodejs/undici#1598

@jelmervdl made their first contribution in nodejs/undici#1596

@mrbbot made their first contribution in nodejs/undici#1601

Full Changelog: https://github.com/nodejs/undici/compare/v5.8.2...v5.9.1

v5.8.2

⚠️ Security Release ⚠️

CRLF Injection in Nodejs ‘undici’ via Content-Type GHSA-f772-66g8-q5h3 CVE-2022-35948

undici.request vulnerable to SSRF using absolute URL on pathname GHSA-8qr4-xgw6-wmr3 CVE-2022-35949

What's Changed

docs: mock different endpoints in a single file by @ritvik130 in nodejs/undici#1589

feat(webidl): better error message for ByteString converter by @KhafraDev in nodejs/undici#1591

New Contributors

@ritvik130 made their first contribution in nodejs/undici#1589

Full Changelog: https://github.com/nodejs/undici/compare/v5.8.1...v5.8.2

v5.8.1

What's Changed

Do not decode the body while we are following a redirect by @mcollina in nodejs/undici#1554

docs: Fix spelling/grammar in "Mocking Request" by @meyfa in nodejs/undici#1555

... (truncated)

Commits

6a87bfb Bumped v5.10.0
b0f0f31 fix: use FinalizationRegistry compat if global is missing (#1545)
5cb0bac avoid body reordering on really fast lines (#1615)
21fdda5 feat(fetch): implement spec compliant integrity checks (#1613)
417e7ab fix: allow third party AbortControllers (#1609)
8549a94 fix: support ArrayBufferView and ArrayBuffer as body (#1584)
e46d8bf Add query key ordering fix (#1607)
d83c1e2 fix(fetch): allow custom implementation of AbortSignal (#1608)
5890e16 5.9.1
ecae314 fix: don't timeout while waiting for client to send request (#1604)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language