From a253c73f4dc8f52c82676c05c313287628b44215 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 14:14:29 +0000 Subject: [PATCH] chore(deps): bump undici from 7.25.0 to 7.28.0 Updates transitive dependency undici (via cheerio) from 7.25.0 to 7.28.0 to address multiple CVEs: - GHSA-g8m3-5g58-fq7m / CVE-2026-11525 - GHSA-p88m-4jfj-68fv / CVE-2026-9679 - GHSA-vxpw-j846-p89q / CVE-2026-12151 - GHSA-hm92-r4w5-c3mj / CVE-2026-6734 - GHSA-35p6-xmwp-9g52 / CVE-2026-6733 Fixes Dependabot alerts #283, #284, #285, #286, #287. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 58fe65c9..1a20af03 100644 --- a/package-lock.json +++ b/package-lock.json @@ -27259,9 +27259,9 @@ } }, "node_modules/undici": { - "version": "7.25.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.25.0.tgz", - "integrity": "sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==", + "version": "7.28.0", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz", + "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==", "license": "MIT", "engines": { "node": ">=20.18.1" @@ -52267,9 +52267,9 @@ } }, "undici": { - "version": "7.25.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.25.0.tgz", - "integrity": "sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==" + "version": "7.28.0", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz", + "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==" }, "undici-types": { "version": "5.26.5",