From 48cd4dce3b60cb8ed3f2d44c2f5e7a74358b07a8 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 31 Jul 2026 15:23:03 +0000 Subject: [PATCH 1/3] chore(deps): update dependency undici to v8.9.0 --- pnpm-lock.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2f8dbc2d..0ab3f4f1 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -38,7 +38,7 @@ importers: version: 4.41.0 undici: specifier: ^8.4.1 - version: 8.5.0 + version: 8.9.0 ylru: specifier: ^2.0.0 version: 2.0.0 @@ -1775,8 +1775,8 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@8.5.0: - resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==} + undici@8.9.0: + resolution: {integrity: sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==} engines: {node: '>=22.19.0'} unicode-emoji-modifier-base@1.0.0: @@ -3226,7 +3226,7 @@ snapshots: undici-types@6.21.0: {} - undici@8.5.0: {} + undici@8.9.0: {} unicode-emoji-modifier-base@1.0.0: {} From cff755c54ce893837de8ca5bde9ee3ac50e17b0f Mon Sep 17 00:00:00 2001 From: MK Date: Mon, 3 Aug 2026 23:14:14 +0800 Subject: [PATCH 2/3] chore(deps): update undici to v8.10.0 undici 8.10.0 reverts the idle socket validation regression (nodejs/undici#5600) that could deadlock keepalive requests in 8.8.0-8.9.0, so no urllib-side workaround is needed. Raise the range to ^8.10.0 so installs cannot resolve the affected versions. --- package.json | 2 +- pnpm-lock.yaml | 10 +++++----- pnpm-workspace.yaml | 1 + 3 files changed, 7 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 56865d92..3cbf8491 100644 --- a/package.json +++ b/package.json @@ -75,7 +75,7 @@ "mime-types": "^2.1.35", "qs": "^6.15.0", "type-fest": "^4.41.0", - "undici": "^8.4.1", + "undici": "^8.10.0", "ylru": "^2.0.0" }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 0ab3f4f1..84c7f6b7 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -37,8 +37,8 @@ importers: specifier: ^4.41.0 version: 4.41.0 undici: - specifier: ^8.4.1 - version: 8.9.0 + specifier: ^8.10.0 + version: 8.10.0 ylru: specifier: ^2.0.0 version: 2.0.0 @@ -1775,8 +1775,8 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@8.9.0: - resolution: {integrity: sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==} + undici@8.10.0: + resolution: {integrity: sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ==} engines: {node: '>=22.19.0'} unicode-emoji-modifier-base@1.0.0: @@ -3226,7 +3226,7 @@ snapshots: undici-types@6.21.0: {} - undici@8.9.0: {} + undici@8.10.0: {} unicode-emoji-modifier-base@1.0.0: {} diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index d244499a..cd77c594 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -2,6 +2,7 @@ minimumReleaseAgeExclude: - '@voidzero-dev/*' - vite-plus - '@vitest/*' + - undici@8.10.0 overrides: vite: 'catalog:' vitest: 'catalog:' From 9b8450c937d110e2ff74b9c69b4cb61941b387bb Mon Sep 17 00:00:00 2001 From: MK Date: Mon, 3 Aug 2026 23:35:34 +0800 Subject: [PATCH 3/3] chore: exclude undici from minimumReleaseAge without version pin --- pnpm-workspace.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index cd77c594..b847fcba 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -2,7 +2,7 @@ minimumReleaseAgeExclude: - '@voidzero-dev/*' - vite-plus - '@vitest/*' - - undici@8.10.0 + - undici overrides: vite: 'catalog:' vitest: 'catalog:'