From b3b288951a1cc9be83f386c6985b9f68f58f0590 Mon Sep 17 00:00:00 2001 From: O M Date: Mon, 9 Nov 2026 12:27:25 -0500 Subject: [PATCH] Pin undici 8.12.4 so the weekly Snyk scan clears the patched issues. Astro still pulls undici through unifont, and 8.12.3 is inside the high and critical range fixed in 8.12.4. Co-authored-by: Cursor --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index ec81ce0..885da71 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5185,9 +5185,9 @@ "license": "MIT" }, "node_modules/undici": { - "version": "8.12.3", - "resolved": "https://registry.npmjs.org/undici/-/undici-8.12.3.tgz", - "integrity": "sha512-+fdndUTwBP86cVjihTp21hZHo7d6oj1c/47XPA3lL8mM0XHs+C4EkcjmgRsFnFk2f/UONGDy9ItBItmXsLOQHw==", + "version": "8.12.4", + "resolved": "https://registry.npmjs.org/undici/-/undici-8.12.4.tgz", + "integrity": "sha512-8Mx+uNKKER2bA4AdtedkqRbwUCIJFr2nJckXRe5yrDqzePqwLP7VNcctN8/XdmDSbF7mS+jJKIszlL+vbam1VA==", "license": "MIT", "engines": { "node": ">=22.19.0" diff --git a/package.json b/package.json index 9788e09..07afeb1 100644 --- a/package.json +++ b/package.json @@ -35,7 +35,7 @@ "js-yaml": "4.3.2", "esbuild": "0.28.2", "path-to-regexp": "6.3.0", - "undici": "8.12.3", + "undici": "8.12.4", "fast-uri": "3.1.6", "fflate": "0.7.5", "@vercel/analytics": "$@vercel/analytics",