Skip to content

chore(deps): upgrade and unpin undici #11860

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Feb 16, 2024
Merged

chore(deps): upgrade and unpin undici #11860

merged 1 commit into from
Feb 16, 2024

Conversation

benmccann
Copy link
Member

@benmccann benmccann commented Feb 16, 2024

This is against the version-1 branch. It will stop users still on v1 from getting pinged by security audit tools. See GHSA-3787-6prv-h9w3

SvelteKit v2 is unaffected as it does not depend on undici directly. Instead users should make sure they're using a patched version of Node.js.

Copy link

changeset-bot bot commented Feb 16, 2024

🦋 Changeset detected

Latest commit: f41e131

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@sveltejs/kit Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@benmccann benmccann merged commit 9b8e731 into version-1 Feb 16, 2024
@benmccann benmccann deleted the undici-1 branch February 16, 2024 20:36
@github-actions github-actions bot mentioned this pull request Feb 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants