Skip to content

fix(security): update undici in config resolver - #238

Merged
vanesalbe merged 1 commit into
developfrom
fix/GH-150-151-undici-security
Oct 28, 2026
Merged

vanesalbe merged 1 commit into
developfrom
fix/GH-150-151-undici-security

Conversation

@vanesalbe

Copy link
Copy Markdown
Contributor

Summary

Update the undici runtime dependency used by the config-resolver GitHub Action from 6.29.0 to 6.29.1 to address Dependabot alerts #150 and #151.

The update is applied to the lockfile and the committed dist bundle, which is the code executed by the action. No application Java dependencies or published artifacts are changed.

Validation

  • npm run lint
  • npm audit --omit=dev reports no vulnerabilities
  • Bundled action smoke test resolves YAML defaults and input overrides
  • git diff --check

Signed-off-by: Vanesa López Beade <vanesalbe@ext.inditex.com>
@sonarqubecloud

Copy link
Copy Markdown

@vanesalbe
vanesalbe merged commit 55b0514 into develop Oct 28, 2026
22 checks passed
@vanesalbe
vanesalbe deleted the fix/GH-150-151-undici-security branch October 28, 2026 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants