From 7d84e3776096f56e49959f78ceda714b179efcb8 Mon Sep 17 00:00:00 2001 From: Clay Good Date: Sat, 3 Oct 2026 12:12:03 -0500 Subject: [PATCH] fix(deps): bump jsdom's undici from 8.10.0 to 8.11.2 Closes the seven open Dependabot alerts against undici 8.x (three high: TLS validation bypass in BalancedPool, cross-origin cache poisoning, plus cookie disclosure, retry-handler DoS and response-splitting). undici is a dev-only dependency pulled in by jsdom (^8.9.0), so this is an in-range lockfile update. Receipts for the three scenarios that pin package-lock.json are refreshed; no source file changed. Co-Authored-By: Claude Opus 5.5 --- package-lock.json | 6 +++--- scripts/quality-dependencies.json | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 21e28727..cec28d39 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5830,9 +5830,9 @@ } }, "node_modules/undici": { - "version": "8.10.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-8.10.0.tgz", - "integrity": "sha512-HvltHd7avK13QIw/oLe4qoOLyoVSoafqJ2jYOrtMRBkbYT31eiBQ8O0ehRKZiEZCMEyLFQNIADpgCWC5fALvYQ==", + "version": "8.11.2", + "resolved": "https://registry.npmjs.org/undici/-/undici-8.11.2.tgz", + "integrity": "sha512-u4UB2/IrKdU6lFxumHmmo1a3fCQO5tzQllRorfoRS63txhrB7xTpSn1PftwC4qEHkOaqP95fCWW4lJzwErwzhQ==", "dev": true, "license": "MIT", "engines": { diff --git a/scripts/quality-dependencies.json b/scripts/quality-dependencies.json index 1fa5e87b..60aa531b 100644 --- a/scripts/quality-dependencies.json +++ b/scripts/quality-dependencies.json @@ -12,7 +12,7 @@ }, { "path": "package-lock.json", - "sha256": "7d86d646fca9950594b3f56992e3f34d0a31a88c4d90ceab45e5aab61814ae50" + "sha256": "ff842b09500ea416f43f836bf6b0485eee52d2c539cfa748e8587ee9ee93422f" }, { "path": "src/modules/anesthesia/catalog/scenario-completion.ts", @@ -221,7 +221,7 @@ }, { "path": "package-lock.json", - "sha256": "7d86d646fca9950594b3f56992e3f34d0a31a88c4d90ceab45e5aab61814ae50" + "sha256": "ff842b09500ea416f43f836bf6b0485eee52d2c539cfa748e8587ee9ee93422f" }, { "path": "src/modules/anesthesia/catalog/scenario-completion.ts", @@ -486,7 +486,7 @@ }, { "path": "package-lock.json", - "sha256": "7d86d646fca9950594b3f56992e3f34d0a31a88c4d90ceab45e5aab61814ae50" + "sha256": "ff842b09500ea416f43f836bf6b0485eee52d2c539cfa748e8587ee9ee93422f" }, { "path": "src/modules/anesthesia/catalog/scenario-completion.ts",