chore(deps-dev): bump undici from 7.2.3 to 8.10.0 in /examples/qwik - #4772
chore(deps-dev): bump undici from 7.2.3 to 8.10.0 in /examples/qwik#4772dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [undici](https://github.com/nodejs/undici) from 7.2.3 to 8.10.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v7.2.3...v8.10.0) --- updated-dependencies: - dependency-name: undici dependency-version: 8.10.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 648808f. Configure here.
| "license": "MIT", | ||
| "engines": { | ||
| "node": ">=20.18.1" | ||
| "node": ">=22.19.0" |
There was a problem hiding this comment.
Incompatible Node engine requirement
Medium Severity
Locking undici to 8.10.0 raises its required Node version to >=22.19.0, but examples/qwik/package.json still declares support for ^18.17.0 || ^20.3.0 || >=21.0.0. Installs or runtime on those supported Node versions can fail after this bump.
Reviewed by Cursor Bugbot for commit 648808f. Configure here.
|
View your CI Pipeline Execution ↗ for commit 648808f
💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗ ☁️ Nx Cloud last updated this comment at |
Bumps undici from 7.2.3 to 8.10.0.
Release notes
Sourced from undici's releases.
... (truncated)
Commits
c8d80e6Bumped v8.10.0 (#5644)66923b4fix: preserve DNS origin hostname on sockets (#5577)3926499fix: retry refused HTTP/2 streams (#5598)73d6e9efix(h2): detach upgrade close handler after GOAWAY (#5641)b111adbfix(mock): emit request body lifecycle hooks (#5367)ae4a3e3build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)ec3fbf1build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)2151720build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)b96a116fix(interceptors): allow interceptors without opts.origin (#5628)a18ef2dfix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for undici since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Major HTTP client upgrade with stricter Node >=22.19.0 requirement may break installs or dev builds on older Node versions used by the example’s declared engines.
Overview
Updates the resolved
undicidev dependency inexamples/qwik/package-lock.jsonfrom 7.2.3 to 8.10.0 (major bump via Dependabot). The lockfile entry also changesundici’s required Node from>=20.18.1to>=22.19.0.No application source changes—only the lockfile pin. Reviewers should confirm local/CI Node versions for the Qwik example still satisfy the new
undiciengine requirement, sincepackage.jsonstill advertises broader Node support (^18.17.0 || ^20.3.0 || >=21.0.0).Reviewed by Cursor Bugbot for commit 648808f. Bugbot is set up for automated code reviews on this repo. Configure here.