From 8193954ddcca9caccf7bd00a1d3645a1a33f5a37 Mon Sep 17 00:00:00 2001
From: Seongho Bae <seongho@kw.ac.kr>
Date: Tue, 4 Aug 2026 13:29:46 +0900
Subject: [PATCH] fix(security): bump undici 7.28.0 -> 7.29.0 to clear
 high-severity advisories

Lockfile-only update of the transitive undici dependency (via jsdom) to
resolve GHSA-8xcm-r25x-g524, GHSA-4cwx-7wf7-3272, GHSA-m8rv-5g2x-5cg5,
GHSA-jr45-8vmc-qm54, and GHSA-v3r7-h72x-cjcm, which fail the required
security-audit check on every PR.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index cf1c991c1..d18d6deeb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7179,9 +7179,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
-      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
+      "version": "7.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
+      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
       "dev": true,
       "license": "MIT",
       "engines": {