Postulo/postulo-chromium
Postulo/postulo-chromium
Watch
2
0
Fork
You've already forked postulo-chromium
 0
Code Issues 9 Pull requests Projects Releases Packages Wiki Activity Actions

Move undici to 8.12.3, past GHSA-xjj6-f33q-929c #48

Merged
tiagoagueda merged 1 commit from undici-8.12.3 into main 2026-10-24 11:21:37 +00:00
Conversation 0 Commits 1 Files changed 1 +3 -3
tiagoagueda commented 2026-10-24 10:58:49 +00:00
Owner

The dev-chain audit (scripts/audit.mjs) fails every pull request on GHSA-xjj6-f33q-929c, a high advisory in undici (denial of service via an unhandled error on excessive content-encodings), fixed in 8.12.2. undici comes in through jsdom, which only the tests use. This updates the lock to undici 8.12.3 and nothing else.

node scripts/audit.mjs passes (only the already-allowed node-forge entry is reported), and npm test passes 184/184.

🤖 Generated with Claude Code

The dev-chain audit (`scripts/audit.mjs`) fails every pull request on GHSA-xjj6-f33q-929c, a high advisory in undici (denial of service via an unhandled error on excessive content-encodings), fixed in 8.12.2. undici comes in through jsdom, which only the tests use. This updates the lock to undici 8.12.3 and nothing else. `node scripts/audit.mjs` passes (only the already-allowed node-forge entry is reported), and `npm test` passes 184/184. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Move undici to 8.12.3, past GHSA-xjj6-f33q-929c
All checks were successful
CI / check (pull_request) Successful in 57s
Details
efffa9a594
 
jsdom pulls undici 8.10.2, which has a high advisory (denial of service
on excessive content-encodings) fixed in 8.12.2; the dev-chain audit
refuses every pull request until it moves. Test tooling only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
tiagoagueda deleted branch undici-8.12.3 2026-10-24 11:21:37 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug
Something does not do what it says it does

  
documentation
The README, or the words a person reads

  
enhancement
An improvement or a new capability

  
performance
Uses fewer resources, or is more reliable, with no loss of features or accessibility

  
security
Credentials, personal data, or what this may reach

No labels
bug
documentation
enhancement
performance
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Postulo/postulo-chromium!48
No description provided.