From 6e86421a9eada9a2f6301592831aa69675cb03a8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 5 Aug 2026 16:06:06 +0000
Subject: [PATCH 1/3] Initial plan


From 56c24772fce5bbc11de4c2275f3cac27faba2d4c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 5 Aug 2026 16:09:03 +0000
Subject: [PATCH 2/3] fix: override undici to >=7.29.0 to resolve
 GHSA-4cwx-7wf7-3272

Co-authored-by: jorgerangel-msft <102122018+jorgerangel-msft@users.noreply.github.com>
---
 pnpm-lock.yaml      | 11 ++++++-----
 pnpm-workspace.yaml |  1 +
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e6bf72beb76..cf482b6d0e8 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -476,6 +476,7 @@ overrides:
   cross-spawn@>=7.0.0 <7.0.5: '>=7.0.5'
   diff@>=6.0.0 <8.0.3: '>=8.0.3'
   dompurify: ^3.3.3
+  undici@>=7.0.0 <7.29.0: '>=7.29.0'
   yaml@>=2.0.0 <2.8.3: '>=2.8.3'
 
 packageExtensionsChecksum: sha256-41ngUhSL5ByEpDCSEB/d425efDxH3k+E1gkcIyo00jw=
@@ -10343,9 +10344,9 @@ packages:
   undici-types@8.3.0:
     resolution: {integrity: sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==}
 
-  undici@7.28.0:
-    resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
-    engines: {node: '>=20.18.1'}
+  undici@8.9.0:
+    resolution: {integrity: sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==}
+    engines: {node: '>=22.19.0'}
 
   unicorn-magic@0.1.0:
     resolution: {integrity: sha512-lRfVq8fE8gz6QMBuDM6a+LO3IAzTi05H6gCVaUpir2E1Rwpo4ZUog45KpNXKC/Mn3Yb9UDuHumeFTo9iV/D9FQ==}
@@ -15913,7 +15914,7 @@ snapshots:
       parse5: 7.3.0
       parse5-htmlparser2-tree-adapter: 7.1.0
       parse5-parser-stream: 7.1.2
-      undici: 7.28.0
+      undici: 8.9.0
       whatwg-mimetype: 4.0.0
 
   chokidar@4.0.3:
@@ -20139,7 +20140,7 @@ snapshots:
 
   undici-types@8.3.0: {}
 
-  undici@7.28.0: {}
+  undici@8.9.0: {}
 
   unicorn-magic@0.1.0: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 99fd6819c3f..a52ec6d6daf 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -203,4 +203,5 @@ overrides:
   cross-spawn@>=7.0.0 <7.0.5: ">=7.0.5"
   diff@>=6.0.0 <8.0.3: ">=8.0.3"
   dompurify: ^3.3.3
+  undici@>=7.0.0 <7.29.0: ">=7.29.0"
   yaml@>=2.0.0 <2.8.3: ">=2.8.3"

From 286d27acb246174746c3cbca15d1db34c1df61be Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 5 Aug 2026 16:10:05 +0000
Subject: [PATCH 3/3] fix: broaden undici override to cover v8 range below
 8.9.0

Co-authored-by: jorgerangel-msft <102122018+jorgerangel-msft@users.noreply.github.com>
---
 pnpm-lock.yaml      | 1 +
 pnpm-workspace.yaml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index cf482b6d0e8..b2c74c260ac 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -477,6 +477,7 @@ overrides:
   diff@>=6.0.0 <8.0.3: '>=8.0.3'
   dompurify: ^3.3.3
   undici@>=7.0.0 <7.29.0: '>=7.29.0'
+  undici@>=8.0.0 <8.9.0: '>=8.9.0'
   yaml@>=2.0.0 <2.8.3: '>=2.8.3'
 
 packageExtensionsChecksum: sha256-41ngUhSL5ByEpDCSEB/d425efDxH3k+E1gkcIyo00jw=
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index a52ec6d6daf..4c2a78e6e0f 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -204,4 +204,5 @@ overrides:
   diff@>=6.0.0 <8.0.3: ">=8.0.3"
   dompurify: ^3.3.3
   undici@>=7.0.0 <7.29.0: ">=7.29.0"
+  undici@>=8.0.0 <8.9.0: ">=8.9.0"
   yaml@>=2.0.0 <2.8.3: ">=2.8.3"