[Snyk] Upgrade undici from 5.20.0 to 5.21.2

[snyk-bot]

Snyk has created this PR to upgrade undici from 5.20.0 to 5.21.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-04-09.

Release notes

Package name: undici

• 5.21.2 - 2023-04-09
  

  What's Changed

  • Content disposition parsing by @ KhafraDev in #2051
  • fix: clear set-cookie headers by @ KhafraDev in #2052

  Full Changelog: v5.21.1...v5.21.2

• 5.21.1 - 2023-04-08
  

  What's Changed

  • Fix typo in kPipelining symbol by @ andrewfecenko in #2005
  • fix(fetch): remove undefined error cause by @ aduh95 in #2006
  • chore(deps-dev): bump tsd from 0.25.0 to 0.27.0 by @ dependabot in #2007
  • build(deps-dev): bump wait-on from 6.0.1 to 7.0.1 by @ dependabot in #1820
  • fix(wpt): set global META_TITLE for the runner by @ panva in #2008
  • fix: issue 2009 by @ KhafraDev in #2013
  • build(deps-dev): bump typescript from 4.9.5 to 5.0.2 by @ dependabot in #2018
  • added descriptive error messages for URL parser by @ RishabhKodes in #2016
  • fix(fetch): remove content-length header on redirect by @ KhafraDev in #2022
  • fix(fetch): remove assertion on request.body.source on redirect (#2027) by @ macno in #2028
  • fix: skip failing test in node >= v19.8 by @ KhafraDev in #2034
  • fetch: treat content-encoding as case-insensitive & remove x-deflate by @ KhafraDev in #2037
  • perf(fetch): use string comparisons for url schemes by @ KhafraDev in #2038
  • util: replace util.toUSVString with String.prototype.toWellFormed by @ KhafraDev in #2036
  • build(deps): bump github/codeql-action from 2.2.4 to 2.2.9 by @ dependabot in #2039
  • build(deps-dev): bump concurrently from 7.6.0 to 8.0.1 by @ dependabot in #2041
  • Small performance improvements by @ anonrig in #2044
  • fix(types): Add missing Blob import by @ dpogue in #2047
  • fix: set window option properly by @ KhafraDev in #2048
  • fetch: fix leak by @ ronag in #2049

  New Contributors

  • @ aduh95 made their first contribution in #2006
  • @ RishabhKodes made their first contribution in #2016
  • @ macno made their first contribution in #2028
  • @ dpogue made their first contribution in #2047

  Full Changelog: v5.21.0...v5.21.1

• 5.21.0 - 2023-03-13
  Read more
• 5.20.0 - 2023-02-18
  

  What's Changed

  • perf: improve cookie parsing performance by @ KhafraDev in #1931
  • fix: disable websocket wpts in ci :( by @ KhafraDev in #1932
  • fix: Allow “undefined“ as value in headers by @ pan93412 in #1929
  • feat: Support autoSelectFamily when connecting. by @ ShogunPanda in #1914
  • fix: copy cookies when cloning haders by @ KhafraDev in #1936
  • test: more logs in wpt runner by @ KhafraDev in #1933
  • feat: change headersTimeout and bodyTimeout to 300s by @ kyrylkov in #1937

  Full Changelog: v5.19.1...v5.20.0

from undici GitHub release notes

Commit messages

Package name: undici

• b20405e 5.21.2
• 0562e9b fix: clear set-cookie headers (Any RequestHandler runs twice sveltejs/kit#2052)
• fb84aac Content disposition parsing ([feat] expose handler to allow use in custom server sveltejs/kit#2051)
• 2d94417 5.21.1
• a1846e5 fetch: fix leak (duplicate title tags being rendered - title not updating when navigating pages sveltejs/kit#2049)
• 816dcaa fix: set window option properly ([feat] allow node adapter to configure listen path sveltejs/kit#2048)
• eceaf9a fix(types): Add missing Blob import ([fix] revert change to rendering options (#2008) sveltejs/kit#2047)
• 5f3b8e1 Small performance improvements (Transition cleanup happens too early if Kit is already running sveltejs/kit#2044)
• 3d21d22 build(deps-dev): bump concurrently from 7.6.0 to 8.0.1 (Fallthrough routes (2 routes with slugs on same level) Regression issue .137 sveltejs/kit#2041)
• a6d1474 build(deps): bump github/codeql-action from 2.2.4 to 2.2.9 (adapter-node package is different than repository sveltejs/kit#2039)
• 549e7ed util: replace util.toUSVString with String.prototype.toWellFormed ([fix] correctly pass Vite options in preview mode sveltejs/kit#2036)
• 7ae1779 perf(fetch): use string comparisons for url schemes (Remove invalid margin-bottom: 0 0 1em 0 sveltejs/kit#2038)
• 9013a23 fetch: treat content-encoding as case-insensitive & remove x-deflate ([docs] update adapter doc examples sveltejs/kit#2037)
• dc8d111 fix: skip failing test in node >= v19.8 (svelte-kit package is not replacing all instances of $lib with the relative path sveltejs/kit#2034)
• a9ef509 fix(fetch): remove assertion on request.body.source on redirect (Read file for SSL (certs and keys) and add pfx support sveltejs/kit#2027) (SSR fetch doesn't work for external requests sveltejs/kit#2028)
• f0271d4 fix(fetch): remove content-length header on redirect (Should allow apps that are in subdirectories sveltejs/kit#2022)
• e6fc80f added descriptive error messages for URL parser (docs: confusing "Fallthrough routes" means sveltejs/kit#2016)
• 7276126 build(deps-dev): bump typescript from 4.9.5 to 5.0.2 ([chore] convert remaining type aliases sveltejs/kit#2018)
• 6fd7477 fix: issue 2009 (What npm reports as the latest version of SvelteKit and adapter-node sveltejs/kit#2013)
• 4e1e0d0 fix(wpt): set global META_TITLE for the runner ([feat] More powerful and configurable rendering options sveltejs/kit#2008)
• 6ec8f4e build(deps-dev): bump wait-on from 6.0.1 to 7.0.1 ([Issue template] Use form instead template. sveltejs/kit#1820)
• ebf0b45 chore(deps-dev): bump tsd from 0.25.0 to 0.27.0 (Change config prerender.force to prerender.onError sveltejs/kit#2007)
• a64eb26 fix(fetch): remove `undefined` error cause ([docs] minor wording improvement in migration guide sveltejs/kit#2006)
• f04f9fa Fix typo in kPipelining symbol (svelte-kit dev doesn't work due to "no such file" error sveltejs/kit#2005)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs