From 73495a8a68a3e1a82d59ea52c6855cba82a99e29 Mon Sep 17 00:00:00 2001 From: Charly Gomez Date: Tue, 17 Mar 2026 16:10:02 +0100 Subject: [PATCH] fix(deps): bump undici 6.23.0 to 6.24.1 to fix multiple CVEs Fixes Dependabot alerts #1156, #1158, #1159, #1160, #1161. CVEs: CVE-2026-2229, CVE-2026-1525, CVE-2026-1526, CVE-2026-1527, CVE-2026-1528 Co-Authored-By: Claude Sonnet 4.6 --- yarn.lock | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/yarn.lock b/yarn.lock index 8b037c404496..0518e5215117 100644 --- a/yarn.lock +++ b/yarn.lock @@ -28307,7 +28307,6 @@ stylus@0.59.0, stylus@^0.59.0: sucrase@^3.27.0, sucrase@^3.35.0, sucrase@getsentry/sucrase#es2020-polyfills: version "3.36.0" - uid fd682f6129e507c00bb4e6319cc5d6b767e36061 resolved "https://codeload.github.com/getsentry/sucrase/tar.gz/fd682f6129e507c00bb4e6319cc5d6b767e36061" dependencies: "@jridgewell/gen-mapping" "^0.3.2" @@ -29431,9 +29430,9 @@ undici@^5.25.4, undici@^5.28.5: "@fastify/busboy" "^2.0.0" undici@^6.21.2, undici@^6.23.0: - version "6.23.0" - resolved "https://registry.yarnpkg.com/undici/-/undici-6.23.0.tgz#7953087744d9095a96f115de3140ca3828aff3a4" - integrity sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g== + version "6.24.1" + resolved "https://registry.npmjs.org/undici/-/undici-6.24.1.tgz" + integrity sha512-sC+b0tB1whOCzbtlx20fx3WgCXwkW627p4EA9uM+/tNNPkSS+eSEld6pAs9nDv7WbY1UUljBMYPtu9BCOrCWKA== unenv@2.0.0-rc.24, unenv@^2.0.0-rc.18, unenv@^2.0.0-rc.24: version "2.0.0-rc.24"