chore(deps): bump undici from 6.22.0 to 7.16.0 in /app #61

dependabot · 2025-11-03T05:36:09Z

Bumps undici from 6.22.0 to 7.16.0.

Release notes

v7.16.0

What's Changed

Drop npm token, use OIDC instead by @mcollina in nodejs/undici#4447

fetch: instantiate readableStream in extractBody with sync methods by @Uzlopak in nodejs/undici#4350

fix: remove async on [kClose] and [kDestroy], only return Promise by @Uzlopak in nodejs/undici#4450

fetch: make consumeBody sync by @Uzlopak in nodejs/undici#4449

perf: make client.connect() sync by @Uzlopak in nodejs/undici#4455

fetch: remove promise in exported fetch by @Uzlopak in nodejs/undici#4452

fix(#4451): implement http2 cookie support by @metcoder95 in nodejs/undici#4453

test: cache store tests should properly be skipped by @Uzlopak in nodejs/undici#4463

test: fix IPv6 skip check for test/client.js by @Uzlopak in nodejs/undici#4466

test: remove skip check for AbortSignal.timeout, as it exists since node18 by @Uzlopak in nodejs/undici#4464

test: investigate macos failing by @Uzlopak in nodejs/undici#4467

test: remove obsolete < node v18 test case for http2 by @Uzlopak in nodejs/undici#4461

perf: avoid intermediate promise on BodyReadable.dump by @Uzlopak in nodejs/undici#4459

test: remove skip check for long-lived-abort-controller test (was flaky 10 months ago) by @Uzlopak in nodejs/undici#4465

test: remove skip checks for existance of global available Blob and File by @Uzlopak in nodejs/undici#4460

perf (fetch): use less promises for ReadableStream by @Uzlopak in nodejs/undici#4457

fix: catch synchronous errors in request callbacks by @mcollina in nodejs/undici#4443

fix: avoid instanceof MockNotMatchedError by @Uzlopak in nodejs/undici#4474

eventsource: remove promise for #reconnect method by @Uzlopak in nodejs/undici#4469

feat: make UndiciErrors reliable to instanceof by @Uzlopak in nodejs/undici#4472

chore: call super() after type checks by @Uzlopak in nodejs/undici#4475

chore: FixedQueue does not need special constructor by @Uzlopak in nodejs/undici#4476

fix: buildAndValidateMockOptions should always get an object passed and always return an object by @Uzlopak in nodejs/undici#4479

fix: remove unused ResponseStatusCodeError by @Uzlopak in nodejs/undici#4473

chore: pool and dispatcherbase dont need constructor, use no array helper functions by @Uzlopak in nodejs/undici#4477

lint: avoid unintented use of globals in code and tests, improve test for installing/overwriting globals by @Uzlopak in nodejs/undici#4478

test: fix macos flakyness by @Uzlopak in nodejs/undici#4468

fix: 'no-referrer-when-downgrade' in determineRequestsReferrer should return referrerURL by @Uzlopak in nodejs/undici#4482

fix: deflake cache-fastimers-fix.js by @Uzlopak in nodejs/undici#4491

fix: improve validation of IP addresses as trustworthy, correct ipv4 check by @Uzlopak in nodejs/undici#4489

test (pool.js): fix flakyness of clientTtl test by @Uzlopak in nodejs/undici#4494

test (eventsource): refactor tests for eventsource, speed them up by @Uzlopak in nodejs/undici#4493

fix: remove useless catch in client-h1.js by @Uzlopak in nodejs/undici#4481

test: skip flaky encoding test on macos and node20 by @Uzlopak in nodejs/undici#4497

fix: implement proper stale-while-revalidate behavior per RFC 5861 by @mcollina in nodejs/undici#4492

test (websocket): speed up test/websocket/issue-2679.js by @Uzlopak in nodejs/undici#4501

webidl: fix existing and add missing buffer source converters by @Renegade334 in nodejs/undici#4503

use real wpt test server by @KhafraDev in nodejs/undici#4486

test: another try to fix flaky macos and node 20 by @Uzlopak in nodejs/undici#4490

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in nodejs/undici#4507

build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3 by @dependabot[bot] in nodejs/undici#4509

fix writing to websocketstream with SharedArrayBuffer/SharedArrayBuff… by @KhafraDev in nodejs/undici#4504

test: use faketimers for test/client-keep-alive, refactor a little by @Uzlopak in nodejs/undici#4499

build(deps): bump github/codeql-action from 3.29.7 to 3.30.0 by @dependabot[bot] in nodejs/undici#4510

build(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 by @dependabot[bot] in nodejs/undici#4508

fix(h2): adjust :scheme on h2 requests by @metcoder95 in nodejs/undici#4454

chore: use lowercase filenames, remove unused verifyVersion.js by @Uzlopak in nodejs/undici#4514

chore: refactor workflows by @Uzlopak in nodejs/undici#4513

... (truncated)

Commits

7392d6f Bumped v7.16.0 (#4532)
415c66d fix: make error symbols non enumerable (#4531)
f182ff1 Disable SIMD for PPC64 architecture, add UNDICI_NO_WASM_SIMD env to facilitat...
95d835c example: use metcoders https-pem for the example (#4436)
7c42918 fix: shell command built from environment values (#4392)
51651a1 fix: wpt should use master branch (#4524)
82ea8fc refactor: parseHttpDate (#4421)
909a584 websocket: always emit error event (#4521)
d7bb09e fetch: process content-encoding header only if relevant (#4496)
e652f03 wpt: properly handle write permissions errors in wpt-runner setup (#4518)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

github-actions · 2025-11-03T05:36:42Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-03T05:37:16Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-03T05:37:20Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-03T05:37:24Z

📊 PR Metrics

| Metric | Value |
|--------|-------|
| Lines Added | 1 |
| Lines Deleted | 1 |
| Files Changed | 1 |
| Commits | 1 |

Thank you for your contribution! 🎉

github-actions · 2025-11-03T05:37:30Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-03T05:37:38Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-08T15:00:48Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-08T15:01:15Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-08T15:01:46Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

Bumps [undici](https://github.com/nodejs/undici) from 6.22.0 to 7.16.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.22.0...v7.16.0) --- updated-dependencies: - dependency-name: undici dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-11-09T00:15:00Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-09T00:16:10Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

github-actions · 2025-11-09T00:16:56Z

📦 Dependency Changes Detected

This PR modifies dependencies. Please ensure:
- [ ] All new dependencies are necessary
- [ ] Licenses are compatible (MIT, Apache-2.0, BSD)
- [ ] No known security vulnerabilities
- [ ] Lock file is updated (`pnpm install`)
- [ ] Changes are documented in PR description

Security scan will run automatically.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 3, 2025

github-actions bot added configuration app size/XS type/chore and removed size/XS labels Nov 3, 2025

github-actions bot added size/XS and removed size/XS labels Nov 3, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/app/undici-7.16.0 branch from f5bb2a4 to 04e3fe5 Compare November 8, 2025 15:00

github-actions bot added size/XS and removed size/XS labels Nov 8, 2025

github-actions bot removed the size/XS label Nov 8, 2025

github-actions bot added the size/XS label Nov 8, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/app/undici-7.16.0 branch from 04e3fe5 to 9497066 Compare November 9, 2025 00:13

github-actions bot added size/XS and removed size/XS labels Nov 9, 2025

chore(deps): bump undici from 6.22.0 to 7.16.0 in /app #61

Are you sure you want to change the base?

chore(deps): bump undici from 6.22.0 to 7.16.0 in /app #61

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.16.0

What's Changed

Uh oh!

github-actions bot commented Nov 3, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 3, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 3, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 3, 2025

📊 PR Metrics

Uh oh!

github-actions bot commented Nov 3, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 3, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 8, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 8, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 8, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 9, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 9, 2025

📦 Dependency Changes Detected

Uh oh!

github-actions bot commented Nov 9, 2025

📦 Dependency Changes Detected

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 3, 2025 •

edited

Loading