Skip to content

Pin undici 8.12.4 - #56

Open
om986 wants to merge 1 commit into
mainfrom
chore/bump-undici-8.12.4
Open

om986 wants to merge 1 commit into
mainfrom
chore/bump-undici-8.12.4

Conversation

@om986

@om986 om986 commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Summary

  • The weekly Snyk run failed on five high and critical issues in undici@8.12.3, pulled in by Astro through unifont.
  • The npm override now pins undici@8.12.4, which is the patched release and has no known high or critical issues.

Test plan

  • npm ci installs the updated lockfile
  • npm run test:dates and npm run test:removed-blog pass
  • Snyk workflow on this pull request reports no high or critical issues

Made with Cursor

Astro still pulls undici through unifont, and 8.12.3 is inside the high and critical range fixed in 8.12.4.

Co-authored-by: Cursor <cursoragent@cursor.com>
@vercel

vercel Bot commented Nov 9, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
website Ready Ready Preview Nov 9, 2026 5:28pm UTC

@coderabbitai

coderabbitai Bot commented Nov 9, 2026

Copy link
Copy Markdown

Important

  • Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 881f328a-3bac-4403-a86d-c2140a59a83f
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

This branch was successfully deployed

1 active deployment
Preview — b3b28895 Deployed Nov 9, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant