Skip to content

[pull] main from trpc:main#189

Merged
pull[bot] merged 1 commit intoMu-L:mainfrom
trpc:main
Jan 15, 2026
Merged

[pull] main from trpc:main#189
pull[bot] merged 1 commit intoMu-L:mainfrom
trpc:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Jan 15, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

> **Note:** This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [undici](https://undici.nodejs.org)
([source](https://redirect.github.com/nodejs/undici)) | [`7.5.0` →
`7.18.2`](https://renovatebot.com/diffs/npm/undici/7.5.0/7.18.2) |
![age](https://developer.mend.io/api/mc/badges/age/npm/undici/7.18.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/7.5.0/7.18.2?slim=true)
|

### GitHub Vulnerability Alerts

####
[CVE-2026-22036](https://redirect.github.com/nodejs/undici/security/advisories/GHSA-g9mf-h72j-4rw9)

### Impact

The `fetch()` API supports chained HTTP encoding algorithms for response
content according to RFC 9110 (e.g., Content-Encoding: gzip, br). This
is also supported by the undici decompress interceptor.

However, the number of links in the decompression chain is unbounded and
the default maxHeaderSize allows a malicious server to insert thousands
compression steps leading to high CPU usage and excessive memory
allocation.

### Patches

Upgrade to 7.18.2 or 6.23.0.

### Workarounds

It is possible to apply an undici interceptor and filter long
`Content-Encoding` sequences manually.

### References

* https://hackerone.com/reports/3456148
* https://github.com/advisories/GHSA-gm62-xv2j-4w53
* https://curl.se/docs/CVE-2022-32206.html

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

###
[`v7.18.2`](https://redirect.github.com/nodejs/undici/releases/tag/v7.18.2)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.18.1...v7.18.2)

#### What's Changed

- fix(decompress): limit Content-Encoding chain to 5 to prevent resourc…
by [@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4729](https://redirect.github.com/nodejs/undici/pull/4729)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.18.1...v7.18.2>

###
[`v7.18.1`](https://redirect.github.com/nodejs/undici/releases/tag/v7.18.1)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.18.0...v7.18.1)

#### What's Changed

- Test and Fix running without SSL by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4727](https://redirect.github.com/nodejs/undici/pull/4727)
- docs: add security warning for strictContentLength option by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4726](https://redirect.github.com/nodejs/undici/pull/4726)
- build(deps): bump step-security/harden-runner from 2.13.1 to 2.14.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4718](https://redirect.github.com/nodejs/undici/pull/4718)
- build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4719](https://redirect.github.com/nodejs/undici/pull/4719)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.18.0...v7.18.1>

###
[`v7.18.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.18.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.17.0...v7.18.0)

#### What's Changed

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.17.0...v7.18.0>

###
[`v7.17.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.17.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.16.0...v7.17.0)

#### What's Changed

- chore: extract infra and encoding methods by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4523](https://redirect.github.com/nodejs/undici/pull/4523)
- ci: remove h2 by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4534](https://redirect.github.com/nodejs/undici/pull/4534)
- ci: make nodejs-shared wf reusable, install binaryen for wasm-opt,
test on node-nightly by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4535](https://redirect.github.com/nodejs/undici/pull/4535)
- ci: fix nightly shared library case by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4543](https://redirect.github.com/nodejs/undici/pull/4543)
- test: consume bodies of fetch responses to fix failing macos 20 ci by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4528](https://redirect.github.com/nodejs/undici/pull/4528)
- docs: add Cache Interceptor example to README by
[@&#8203;tawseefnabi](https://redirect.github.com/tawseefnabi) in
[#&#8203;4393](https://redirect.github.com/nodejs/undici/pull/4393)
- test: remove node20 version check by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4544](https://redirect.github.com/nodejs/undici/pull/4544)
- types: use MessagePort instance type in MessageEvent by
[@&#8203;Renegade334](https://redirect.github.com/Renegade334) in
[#&#8203;4546](https://redirect.github.com/nodejs/undici/pull/4546)
- ci: set write permissions on job level by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4537](https://redirect.github.com/nodejs/undici/pull/4537)
- lint: activate n/no-process-exit by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4548](https://redirect.github.com/nodejs/undici/pull/4548)
- ci: run benchmarks on pull\_requests and by pushing on specific
branches only by [@&#8203;Uzlopak](https://redirect.github.com/Uzlopak)
in [#&#8203;4536](https://redirect.github.com/nodejs/undici/pull/4536)
- chore: activate n/prefer-node-protocol to enforce `'node:'` prefix for
requiring node built-ins by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4547](https://redirect.github.com/nodejs/undici/pull/4547)
- feat(H2): correct CONNECT behaviour by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4541](https://redirect.github.com/nodejs/undici/pull/4541)
- test: fix plans by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4550](https://redirect.github.com/nodejs/undici/pull/4550)
- feat: add runtime feature "detection" by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4545](https://redirect.github.com/nodejs/undici/pull/4545)
- perf: use less promises in extractBody by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4458](https://redirect.github.com/nodejs/undici/pull/4458)
- fix(proxy-agent): add missing return after callback-call by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4553](https://redirect.github.com/nodejs/undici/pull/4553)
- fix: remove redundant line in retry-handler by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4554](https://redirect.github.com/nodejs/undici/pull/4554)
- ci: add no-wasm-simd option by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4533](https://redirect.github.com/nodejs/undici/pull/4533)
- fix: use lazyloaders for runtime feature detection by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4557](https://redirect.github.com/nodejs/undici/pull/4557)
- fix: minor changes in dispatcher-base.js and types for Dispatcher by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4556](https://redirect.github.com/nodejs/undici/pull/4556)
- http2: refactor and split tests of http2.js into multiple files by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4561](https://redirect.github.com/nodejs/undici/pull/4561)
- fix: dns-interceptor test should await plan to complete by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4560](https://redirect.github.com/nodejs/undici/pull/4560)
- chore: remove istanbul instructions by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4559](https://redirect.github.com/nodejs/undici/pull/4559)
- fix: keep promise chains intact by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4558](https://redirect.github.com/nodejs/undici/pull/4558)
- build(deps): bump wait-on from 8.0.5 to 9.0.1 in /benchmarks by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4567](https://redirect.github.com/nodejs/undici/pull/4567)
- chore: remove tspl from eventsource by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4569](https://redirect.github.com/nodejs/undici/pull/4569)
- chore: remove tspl from fetch by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4570](https://redirect.github.com/nodejs/undici/pull/4570)
- feat: add getUpstream() method to BalancedPool by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4586](https://redirect.github.com/nodejs/undici/pull/4586)
- fetch: handle invalid priority values properly by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4522](https://redirect.github.com/nodejs/undici/pull/4522)
- ci: fix test coverage for codecov by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4520](https://redirect.github.com/nodejs/undici/pull/4520)
- types: optional `status` in `Response.redirect` by
[@&#8203;gineika](https://redirect.github.com/gineika) in
[#&#8203;4591](https://redirect.github.com/nodejs/undici/pull/4591)
- docs: unix socket add-on by
[@&#8203;FelixVaughan](https://redirect.github.com/FelixVaughan) in
[#&#8203;4587](https://redirect.github.com/nodejs/undici/pull/4587)
- build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4601](https://redirect.github.com/nodejs/undici/pull/4601)
- build(deps): bump hendrikmuhs/ccache-action from 1.2.18 to 1.2.19 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4600](https://redirect.github.com/nodejs/undici/pull/4600)
- build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4603](https://redirect.github.com/nodejs/undici/pull/4603)
- build(deps): bump actions/setup-node from 4.0.2 to 5.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4604](https://redirect.github.com/nodejs/undici/pull/4604)
- build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4602](https://redirect.github.com/nodejs/undici/pull/4602)
- build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4598](https://redirect.github.com/nodejs/undici/pull/4598)
- build(deps): bump github/codeql-action from 3.30.0 to 3.30.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4599](https://redirect.github.com/nodejs/undici/pull/4599)
- build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4597](https://redirect.github.com/nodejs/undici/pull/4597)
- fix: cacheStores types and usage in README by
[@&#8203;lucalooz](https://redirect.github.com/lucalooz) in
[#&#8203;4605](https://redirect.github.com/nodejs/undici/pull/4605)
- Feat dns interceptor storage by
[@&#8203;SuperOleg39](https://redirect.github.com/SuperOleg39) in
[#&#8203;4589](https://redirect.github.com/nodejs/undici/pull/4589)
- docs: add crawling best practices by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4590](https://redirect.github.com/nodejs/undici/pull/4590)
- fix: `304 not modified` reply upon revalidation did not update cache.
by [@&#8203;daan944](https://redirect.github.com/daan944) in
[#&#8203;4617](https://redirect.github.com/nodejs/undici/pull/4617)
- chore: use testcontext for test:infra by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4579](https://redirect.github.com/nodejs/undici/pull/4579)
- fetch: improve regexes in data-uri.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4483](https://redirect.github.com/nodejs/undici/pull/4483)
- perf: optimize validate http token by
[@&#8203;PandaWorker](https://redirect.github.com/PandaWorker) in
[#&#8203;4608](https://redirect.github.com/nodejs/undici/pull/4608)
- test: improve long-lived-abort-controller test by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4621](https://redirect.github.com/nodejs/undici/pull/4621)
- ci: add node.js 25 to test matrix by
[@&#8203;shivarm](https://redirect.github.com/shivarm) in
[#&#8203;4626](https://redirect.github.com/nodejs/undici/pull/4626)
- chore: use testcontext for test/utils tests by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4577](https://redirect.github.com/nodejs/undici/pull/4577)
- chore: remove tspl from websocket by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4568](https://redirect.github.com/nodejs/undici/pull/4568)
- fix(ws) onSocketClose being called multiple times by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4632](https://redirect.github.com/nodejs/undici/pull/4632)
- fix: prevent duplicate debug logs when multiple undici instances exist
by [@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4630](https://redirect.github.com/nodejs/undici/pull/4630)
- chore: use testcontext for busboy tests by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4572](https://redirect.github.com/nodejs/undici/pull/4572)
- test: fix flaky http2-dispatcher test by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4633](https://redirect.github.com/nodejs/undici/pull/4633)
- build(deps): bump uWebSockets.js from v20.52.0 to v20.54.0 in
/benchmarks by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4635](https://redirect.github.com/nodejs/undici/pull/4635)
- Run the gc() in long-lived-abort-controller test by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4638](https://redirect.github.com/nodejs/undici/pull/4638)
- Do not destroy the HTTP2 stream twice in tests by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4637](https://redirect.github.com/nodejs/undici/pull/4637)
- Fix http2-dispatcher test by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4640](https://redirect.github.com/nodejs/undici/pull/4640)
- fix: fetch blob with range off-by-one error by
[@&#8203;platypii](https://redirect.github.com/platypii) in
[#&#8203;4643](https://redirect.github.com/nodejs/undici/pull/4643)
- fix: ensure HTTP/2 sends Content-Length for empty POST requests by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4613](https://redirect.github.com/nodejs/undici/pull/4613)
- build(deps): bump uWebSockets.js from v20.54.0 to v20.55.0 in
/benchmarks by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4645](https://redirect.github.com/nodejs/undici/pull/4645)
-
feat([#&#8203;2458](https://redirect.github.com/nodejs/undici/issues/2458)):
WebSocket through HTTP/2 by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4540](https://redirect.github.com/nodejs/undici/pull/4540)
- docs(README): correct the example code for the consumption of respons…
by [@&#8203;tenkirin](https://redirect.github.com/tenkirin) in
[#&#8203;4658](https://redirect.github.com/nodejs/undici/pull/4658)
- build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4653](https://redirect.github.com/nodejs/undici/pull/4653)
- build(deps): bump fastify/github-action-merge-dependabot from 3.11.1
to 3.11.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4655](https://redirect.github.com/nodejs/undici/pull/4655)
- build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4652](https://redirect.github.com/nodejs/undici/pull/4652)
- build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4651](https://redirect.github.com/nodejs/undici/pull/4651)
- build(deps): bump actions/dependency-review-action from 4.8.0 to 4.8.1
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4654](https://redirect.github.com/nodejs/undici/pull/4654)
- don't freeze urlList for opaque filtered responses by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4656](https://redirect.github.com/nodejs/undici/pull/4656)
- fix fd parsing unquoted attribute values by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4662](https://redirect.github.com/nodejs/undici/pull/4662)
- build(deps): bump uWebSockets.js from v20.55.0 to v20.56.0 in
/benchmarks by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4665](https://redirect.github.com/nodejs/undici/pull/4665)
- feat(dispatcher/proxy-agent): new diagnostics event
'undici:proxy:connected' by
[@&#8203;SuperOleg39](https://redirect.github.com/SuperOleg39) in
[#&#8203;4659](https://redirect.github.com/nodejs/undici/pull/4659)
- Feat/round robin pool by
[@&#8203;FelixVaughan](https://redirect.github.com/FelixVaughan) in
[#&#8203;4650](https://redirect.github.com/nodejs/undici/pull/4650)
- Formdata ignore epilogue preamble by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4672](https://redirect.github.com/nodejs/undici/pull/4672)
- build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4682](https://redirect.github.com/nodejs/undici/pull/4682)
- fix: snapshot url exclusion by
[@&#8203;FelixVaughan](https://redirect.github.com/FelixVaughan) in
[#&#8203;4670](https://redirect.github.com/nodejs/undici/pull/4670)
- feat: support h2c over unix domain sockets by
[@&#8203;chrros95](https://redirect.github.com/chrros95) in
[#&#8203;4690](https://redirect.github.com/nodejs/undici/pull/4690)
- fix(docs): remove unused TypeScript example code block by
[@&#8203;kerolloz](https://redirect.github.com/kerolloz) in
[#&#8203;4701](https://redirect.github.com/nodejs/undici/pull/4701)
- feat: add deduplicate interceptor for request deduplication by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4679](https://redirect.github.com/nodejs/undici/pull/4679)
- chore: use testcontext for mock tests by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4582](https://redirect.github.com/nodejs/undici/pull/4582)
- fix(test): remove hardcoded folder name in client-error-stack-trace
test by [@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4707](https://redirect.github.com/nodejs/undici/pull/4707)

#### New Contributors

- [@&#8203;gineika](https://redirect.github.com/gineika) made their
first contribution in
[#&#8203;4591](https://redirect.github.com/nodejs/undici/pull/4591)
- [@&#8203;lucalooz](https://redirect.github.com/lucalooz) made their
first contribution in
[#&#8203;4605](https://redirect.github.com/nodejs/undici/pull/4605)
- [@&#8203;SuperOleg39](https://redirect.github.com/SuperOleg39) made
their first contribution in
[#&#8203;4589](https://redirect.github.com/nodejs/undici/pull/4589)
- [@&#8203;daan944](https://redirect.github.com/daan944) made their
first contribution in
[#&#8203;4617](https://redirect.github.com/nodejs/undici/pull/4617)
- [@&#8203;PandaWorker](https://redirect.github.com/PandaWorker) made
their first contribution in
[#&#8203;4608](https://redirect.github.com/nodejs/undici/pull/4608)
- [@&#8203;platypii](https://redirect.github.com/platypii) made their
first contribution in
[#&#8203;4643](https://redirect.github.com/nodejs/undici/pull/4643)
- [@&#8203;tenkirin](https://redirect.github.com/tenkirin) made their
first contribution in
[#&#8203;4658](https://redirect.github.com/nodejs/undici/pull/4658)
- [@&#8203;kerolloz](https://redirect.github.com/kerolloz) made their
first contribution in
[#&#8203;4701](https://redirect.github.com/nodejs/undici/pull/4701)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.16.0...v7.17.0>

###
[`v7.16.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.16.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.15.0...v7.16.0)

#### What's Changed

- Drop npm token, use OIDC instead by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4447](https://redirect.github.com/nodejs/undici/pull/4447)
- fetch: instantiate readableStream in extractBody with sync methods by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4350](https://redirect.github.com/nodejs/undici/pull/4350)
- fix: remove async on `[kClose]` and `[kDestroy]`, only return Promise
by [@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4450](https://redirect.github.com/nodejs/undici/pull/4450)
- fetch: make consumeBody sync by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4449](https://redirect.github.com/nodejs/undici/pull/4449)
- perf: make `client.connect()` sync by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4455](https://redirect.github.com/nodejs/undici/pull/4455)
- fetch: remove promise in exported fetch by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4452](https://redirect.github.com/nodejs/undici/pull/4452)
-
fix([#&#8203;4451](https://redirect.github.com/nodejs/undici/issues/4451)):
implement http2 cookie support by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4453](https://redirect.github.com/nodejs/undici/pull/4453)
- test: cache store tests should properly be skipped by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4463](https://redirect.github.com/nodejs/undici/pull/4463)
- test: fix IPv6 skip check for test/client.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4466](https://redirect.github.com/nodejs/undici/pull/4466)
- test: remove skip check for AbortSignal.timeout, as it exists since
node18 by [@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4464](https://redirect.github.com/nodejs/undici/pull/4464)
- test: investigate macos failing by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4467](https://redirect.github.com/nodejs/undici/pull/4467)
- test: remove obsolete < node v18 test case for http2 by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4461](https://redirect.github.com/nodejs/undici/pull/4461)
- perf: avoid intermediate promise on `BodyReadable.dump` by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4459](https://redirect.github.com/nodejs/undici/pull/4459)
- test: remove skip check for long-lived-abort-controller test (was
flaky 10 months ago) by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4465](https://redirect.github.com/nodejs/undici/pull/4465)
- test: remove skip checks for existance of global available Blob and
File by [@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4460](https://redirect.github.com/nodejs/undici/pull/4460)
- perf (fetch): use less promises for ReadableStream by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4457](https://redirect.github.com/nodejs/undici/pull/4457)
- fix: catch synchronous errors in request callbacks by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4443](https://redirect.github.com/nodejs/undici/pull/4443)
- fix: avoid instanceof MockNotMatchedError by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4474](https://redirect.github.com/nodejs/undici/pull/4474)
- eventsource: remove promise for #reconnect method by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4469](https://redirect.github.com/nodejs/undici/pull/4469)
- feat: make UndiciErrors reliable to instanceof by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4472](https://redirect.github.com/nodejs/undici/pull/4472)
- chore: call super() after type checks by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4475](https://redirect.github.com/nodejs/undici/pull/4475)
- chore: FixedQueue does not need special constructor by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4476](https://redirect.github.com/nodejs/undici/pull/4476)
- fix: buildAndValidateMockOptions should always get an object passed
and always return an object by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4479](https://redirect.github.com/nodejs/undici/pull/4479)
- fix: remove unused ResponseStatusCodeError by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4473](https://redirect.github.com/nodejs/undici/pull/4473)
- chore: pool and dispatcherbase dont need constructor, use no array
helper functions by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4477](https://redirect.github.com/nodejs/undici/pull/4477)
- lint: avoid unintented use of globals in code and tests, improve test
for installing/overwriting globals by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4478](https://redirect.github.com/nodejs/undici/pull/4478)
- test: fix macos flakyness by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4468](https://redirect.github.com/nodejs/undici/pull/4468)
- fix: 'no-referrer-when-downgrade' in determineRequestsReferrer should
return referrerURL by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4482](https://redirect.github.com/nodejs/undici/pull/4482)
- fix: deflake cache-fastimers-fix.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4491](https://redirect.github.com/nodejs/undici/pull/4491)
- fix: improve validation of IP addresses as trustworthy, correct ipv4
check by [@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4489](https://redirect.github.com/nodejs/undici/pull/4489)
- test (pool.js): fix flakyness of clientTtl test by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4494](https://redirect.github.com/nodejs/undici/pull/4494)
- test (eventsource): refactor tests for eventsource, speed them up by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4493](https://redirect.github.com/nodejs/undici/pull/4493)
- fix: remove useless catch in client-h1.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4481](https://redirect.github.com/nodejs/undici/pull/4481)
- test: skip flaky encoding test on macos and node20 by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4497](https://redirect.github.com/nodejs/undici/pull/4497)
- fix: implement proper stale-while-revalidate behavior per RFC 5861 by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4492](https://redirect.github.com/nodejs/undici/pull/4492)
- test (websocket): speed up test/websocket/issue-2679.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4501](https://redirect.github.com/nodejs/undici/pull/4501)
- webidl: fix existing and add missing buffer source converters by
[@&#8203;Renegade334](https://redirect.github.com/Renegade334) in
[#&#8203;4503](https://redirect.github.com/nodejs/undici/pull/4503)
- use real wpt test server by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4486](https://redirect.github.com/nodejs/undici/pull/4486)
- test: another try to fix flaky macos and node 20 by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4490](https://redirect.github.com/nodejs/undici/pull/4490)
- build(deps): bump actions/checkout from 4 to 5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4507](https://redirect.github.com/nodejs/undici/pull/4507)
- build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3
by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4509](https://redirect.github.com/nodejs/undici/pull/4509)
- fix writing to websocketstream with SharedArrayBuffer/SharedArrayBuff…
by [@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4504](https://redirect.github.com/nodejs/undici/pull/4504)
- test: use faketimers for test/client-keep-alive, refactor a little by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4499](https://redirect.github.com/nodejs/undici/pull/4499)
- build(deps): bump github/codeql-action from 3.29.7 to 3.30.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4510](https://redirect.github.com/nodejs/undici/pull/4510)
- build(deps): bump codecov/codecov-action from 5.4.3 to 5.5.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4508](https://redirect.github.com/nodejs/undici/pull/4508)
- fix(h2): adjust :scheme on h2 requests by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4454](https://redirect.github.com/nodejs/undici/pull/4454)
- chore: use lowercase filenames, remove unused verifyVersion.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4514](https://redirect.github.com/nodejs/undici/pull/4514)
- chore: refactor workflows by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4513](https://redirect.github.com/nodejs/undici/pull/4513)
- chore: use `[]` instead of new Array(0) by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4435](https://redirect.github.com/nodejs/undici/pull/4435)
- change webidl attribute to bitwise flag by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4505](https://redirect.github.com/nodejs/undici/pull/4505)
- chore: make also cache-tests integrated as a submodule by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4517](https://redirect.github.com/nodejs/undici/pull/4517)
- ci: fine grained test nodejs workflow by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4516](https://redirect.github.com/nodejs/undici/pull/4516)
- feat: Support for capping the number of origins in Agent by
[@&#8203;JoshMock](https://redirect.github.com/JoshMock) in
[#&#8203;4365](https://redirect.github.com/nodejs/undici/pull/4365)
- wpt: properly handle write permissions errors in wpt-runner setup by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4518](https://redirect.github.com/nodejs/undici/pull/4518)
- fetch: process content-encoding header only if relevant by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4496](https://redirect.github.com/nodejs/undici/pull/4496)
- websocket: always emit error event by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4521](https://redirect.github.com/nodejs/undici/pull/4521)
- refactor: parseHttpDate by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4421](https://redirect.github.com/nodejs/undici/pull/4421)
- fix: wpt should use master branch by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4524](https://redirect.github.com/nodejs/undici/pull/4524)
- fix: shell command built from environment values by
[@&#8203;ptrgits](https://redirect.github.com/ptrgits) in
[#&#8203;4392](https://redirect.github.com/nodejs/undici/pull/4392)
- example: use metcoders https-pem for the example by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4436](https://redirect.github.com/nodejs/undici/pull/4436)
- Disable SIMD for PPC64 architecture, add UNDICI\_NO\_WASM\_SIMD env to
facilitate testing by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4530](https://redirect.github.com/nodejs/undici/pull/4530)
- fix: make error symbols non enumerable by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4531](https://redirect.github.com/nodejs/undici/pull/4531)

#### New Contributors

- [@&#8203;Renegade334](https://redirect.github.com/Renegade334) made
their first contribution in
[#&#8203;4503](https://redirect.github.com/nodejs/undici/pull/4503)
- [@&#8203;JoshMock](https://redirect.github.com/JoshMock) made their
first contribution in
[#&#8203;4365](https://redirect.github.com/nodejs/undici/pull/4365)
- [@&#8203;ptrgits](https://redirect.github.com/ptrgits) made their
first contribution in
[#&#8203;4392](https://redirect.github.com/nodejs/undici/pull/4392)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.15.0...v7.16.0>

###
[`v7.15.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.15.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.14.0...v7.15.0)

#### What's Changed

- feat: extract sri from fetch, upgrade to latest spec by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4307](https://redirect.github.com/nodejs/undici/pull/4307)
- Update WPT by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;4422](https://redirect.github.com/nodejs/undici/pull/4422)
- build(deps-dev): bump
[@&#8203;fastify/busboy](https://redirect.github.com/fastify/busboy)
from 3.1.1 to 3.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4428](https://redirect.github.com/nodejs/undici/pull/4428)
- fix: memory leak in Agent by
[@&#8203;hexchain](https://redirect.github.com/hexchain) in
[#&#8203;4425](https://redirect.github.com/nodejs/undici/pull/4425)
- chore: remove lib/api/util.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;3578](https://redirect.github.com/nodejs/undici/pull/3578)
- ci: reenable shared builtin CI tests by
[@&#8203;richardlau](https://redirect.github.com/richardlau) in
[#&#8203;4426](https://redirect.github.com/nodejs/undici/pull/4426)
- Decompression Interceptor by
[@&#8203;FelixVaughan](https://redirect.github.com/FelixVaughan) in
[#&#8203;4317](https://redirect.github.com/nodejs/undici/pull/4317)
- chore: update llhttp by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4431](https://redirect.github.com/nodejs/undici/pull/4431)
- chore: remove unused exceptions in try catch blocks by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4440](https://redirect.github.com/nodejs/undici/pull/4440)
- types: remove type Error = unknown for diagnostic-channels by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4438](https://redirect.github.com/nodejs/undici/pull/4438)
- chore: avoid overriding global escape and unescape by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4437](https://redirect.github.com/nodejs/undici/pull/4437)
- cache : serialize Query only if needed, avoid throwing error by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4441](https://redirect.github.com/nodejs/undici/pull/4441)
- types: add SnapshotRecorderMode by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4442](https://redirect.github.com/nodejs/undici/pull/4442)

#### New Contributors

- [@&#8203;hexchain](https://redirect.github.com/hexchain) made their
first contribution in
[#&#8203;4425](https://redirect.github.com/nodejs/undici/pull/4425)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.14.0...v7.15.0>

###
[`v7.14.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.14.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.13.0...v7.14.0)

#### What's Changed

- Fix flaky snapshot-testing by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4367](https://redirect.github.com/nodejs/undici/pull/4367)
- Actually flush the file in lib/mock/snapshot-recorder.js by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4378](https://redirect.github.com/nodejs/undici/pull/4378)
- docs: clarify Node.js version support in LTS table by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4375](https://redirect.github.com/nodejs/undici/pull/4375)
- cache: fix excessive caching and some other lack of caching by
[@&#8203;fredericDelaporte](https://redirect.github.com/fredericDelaporte)
in [#&#8203;4335](https://redirect.github.com/nodejs/undici/pull/4335)
- feat(websocket): add handshake response info to undici:websocket:open
diagnostic event by
[@&#8203;tawseefnabi](https://redirect.github.com/tawseefnabi) in
[#&#8203;4396](https://redirect.github.com/nodejs/undici/pull/4396)
- feat: add install() function to type definitions by
[@&#8203;jsaguet](https://redirect.github.com/jsaguet) in
[#&#8203;4384](https://redirect.github.com/nodejs/undici/pull/4384)
- build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4380](https://redirect.github.com/nodejs/undici/pull/4380)
- build(deps): bump cronometro from 4.0.3 to 5.3.0 in /benchmarks by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4171](https://redirect.github.com/nodejs/undici/pull/4171)
- build(deps): bump step-security/harden-runner from 2.12.0 to 2.13.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4379](https://redirect.github.com/nodejs/undici/pull/4379)
- fix: h2 CI by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4395](https://redirect.github.com/nodejs/undici/pull/4395)
- feat: EventSource can be configured with reconnectionTime by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4260](https://redirect.github.com/nodejs/undici/pull/4260)
- build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4404](https://redirect.github.com/nodejs/undici/pull/4404)
- eventsource: deflake reconnectionTime tests by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4406](https://redirect.github.com/nodejs/undici/pull/4406)
- cache: change normaliseHeaders to normalizeHeaders by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4408](https://redirect.github.com/nodejs/undici/pull/4408)
- build(deps-dev): bump jest from 29.7.0 to 30.0.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4387](https://redirect.github.com/nodejs/undici/pull/4387)
- build(deps-dev): bump cross-env from 7.0.3 to 10.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4386](https://redirect.github.com/nodejs/undici/pull/4386)
- cache-control: no-cache: use quoted-string form by
[@&#8203;alxndrsn](https://redirect.github.com/alxndrsn) in
[#&#8203;4177](https://redirect.github.com/nodejs/undici/pull/4177)
- test: fix snapshot testing flaky test by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4410](https://redirect.github.com/nodejs/undici/pull/4410)
- fix formdata constructor args mark optional by
[@&#8203;tsctx](https://redirect.github.com/tsctx) in
[#&#8203;4411](https://redirect.github.com/nodejs/undici/pull/4411)
- Update WPT by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;4358](https://redirect.github.com/nodejs/undici/pull/4358)
- Update Cache Tests by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;4096](https://redirect.github.com/nodejs/undici/pull/4096)
- chore: improve imports and requires by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4418](https://redirect.github.com/nodejs/undici/pull/4418)
- refactor: snapshot-recorder by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4413](https://redirect.github.com/nodejs/undici/pull/4413)
- Update WPT by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;4416](https://redirect.github.com/nodejs/undici/pull/4416)
- fix: better set a finalizer on cloned response by
[@&#8203;tsctx](https://redirect.github.com/tsctx) in
[#&#8203;4419](https://redirect.github.com/nodejs/undici/pull/4419)

#### New Contributors

- [@&#8203;tawseefnabi](https://redirect.github.com/tawseefnabi) made
their first contribution in
[#&#8203;4396](https://redirect.github.com/nodejs/undici/pull/4396)
- [@&#8203;jsaguet](https://redirect.github.com/jsaguet) made their
first contribution in
[#&#8203;4384](https://redirect.github.com/nodejs/undici/pull/4384)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.13.0...v7.14.0>

###
[`v7.13.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.13.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.12.0...v7.13.0)

#### What's Changed

- MockAgent.prototype.get support ignoreTrailingSlash option by
[@&#8203;lisez](https://redirect.github.com/lisez) in
[#&#8203;4344](https://redirect.github.com/nodejs/undici/pull/4344)
- chore: more jsdoc and minor improvements for lib/api/readable.js, by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4351](https://redirect.github.com/nodejs/undici/pull/4351)
- ci: skip Node.js 20 tests on Windows by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4353](https://redirect.github.com/nodejs/undici/pull/4353)
- Update WPT by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;4267](https://redirect.github.com/nodejs/undici/pull/4267)
- feat(ProxyAgent) improve Curl-y behavior in HTTP->HTTP Proxy
connections
([#&#8203;4180](https://redirect.github.com/nodejs/undici/issues/4180))
by [@&#8203;caitp](https://redirect.github.com/caitp) in
[#&#8203;4340](https://redirect.github.com/nodejs/undici/pull/4340)
- fix: detect and prevent redirect loops with Client/Pool by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4361](https://redirect.github.com/nodejs/undici/pull/4361)
- remove node:buffer imports by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4362](https://redirect.github.com/nodejs/undici/pull/4362)
- fix: remove deprecated maxRedirections option from types by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4363](https://redirect.github.com/nodejs/undici/pull/4363)
- Amend the GC warning in the README to clarify that consuming bodies is
recommended but not required by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4364](https://redirect.github.com/nodejs/undici/pull/4364)
- fix(inteceptor/dump): handle preemptive network errors by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4354](https://redirect.github.com/nodejs/undici/pull/4354)
- feat: add SnapshotAgent for HTTP request recording and playback by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4270](https://redirect.github.com/nodejs/undici/pull/4270)

#### New Contributors

- [@&#8203;lisez](https://redirect.github.com/lisez) made their first
contribution in
[#&#8203;4344](https://redirect.github.com/nodejs/undici/pull/4344)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.12.0...v7.13.0>

###
[`v7.12.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.12.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.11.0...v7.12.0)

#### What's Changed

- test: remove tspl on 2283 test by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4301](https://redirect.github.com/nodejs/undici/pull/4301)
- chore: reduce amount of intermediate functions by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4298](https://redirect.github.com/nodejs/undici/pull/4298)
- ci: disable shared builtin CI tests by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4276](https://redirect.github.com/nodejs/undici/pull/4276)
- webidl: remove unnecessary parameters from
webidl.converters.RequestInfo and webidl.converters.RequestInit by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4304](https://redirect.github.com/nodejs/undici/pull/4304)
- fetch: remove await, add jsdoc for some body read functions by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4303](https://redirect.github.com/nodejs/undici/pull/4303)
- test: use assert and not testcontext in issue-2283.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4306](https://redirect.github.com/nodejs/undici/pull/4306)
- chore: jsdoc use `@returns` everywhere by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4302](https://redirect.github.com/nodejs/undici/pull/4302)
- chore: fix typo by
[@&#8203;pimothyxd](https://redirect.github.com/pimothyxd) in
[#&#8203;4312](https://redirect.github.com/nodejs/undici/pull/4312)
- build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;4315](https://redirect.github.com/nodejs/undici/pull/4315)
- feat: throw error when maxRedirections is used with undici.request()
by [@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4311](https://redirect.github.com/nodejs/undici/pull/4311)
- Clarify the type option of the cache interceptor by
[@&#8203;fredericDelaporte](https://redirect.github.com/fredericDelaporte)
in [#&#8203;4299](https://redirect.github.com/nodejs/undici/pull/4299)
- cache: allow caching heuristically cacheable error status codes by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4318](https://redirect.github.com/nodejs/undici/pull/4318)
- chore(doc): update undici vs fetch by
[@&#8203;styfle](https://redirect.github.com/styfle) in
[#&#8203;4319](https://redirect.github.com/nodejs/undici/pull/4319)
- don't set a finalizer on cloned request by
[@&#8203;tsctx](https://redirect.github.com/tsctx) in
[#&#8203;4320](https://redirect.github.com/nodejs/undici/pull/4320)
- websocketstream: close readablestream properly by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4322](https://redirect.github.com/nodejs/undici/pull/4322)
- add ping(websocket, payload) util by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4325](https://redirect.github.com/nodejs/undici/pull/4325)
- fix sending ping with no payload by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4329](https://redirect.github.com/nodejs/undici/pull/4329)
- refactor: eliminate eager llhttp promise creation by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4337](https://redirect.github.com/nodejs/undici/pull/4337)
- Fix misleading cacheByDefault documentation by
[@&#8203;fredericDelaporte](https://redirect.github.com/fredericDelaporte)
in [#&#8203;4338](https://redirect.github.com/nodejs/undici/pull/4338)
- add websocket to websocket diagnostic channels by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4321](https://redirect.github.com/nodejs/undici/pull/4321)
- speed up flaky websocket test by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4343](https://redirect.github.com/nodejs/undici/pull/4343)
- fetch: minor modifications by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4347](https://redirect.github.com/nodejs/undici/pull/4347)
- fetch: make readable-stream methods sync by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4346](https://redirect.github.com/nodejs/undici/pull/4346)
- remove creating an extra Promise just for common cleanup by
[@&#8203;bmeck](https://redirect.github.com/bmeck) in
[#&#8203;4339](https://redirect.github.com/nodejs/undici/pull/4339)
- chore: extract createDeferredPromise from fetch/utils.js by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4345](https://redirect.github.com/nodejs/undici/pull/4345)

#### New Contributors

- [@&#8203;pimothyxd](https://redirect.github.com/pimothyxd) made their
first contribution in
[#&#8203;4312](https://redirect.github.com/nodejs/undici/pull/4312)
-
[@&#8203;fredericDelaporte](https://redirect.github.com/fredericDelaporte)
made their first contribution in
[#&#8203;4299](https://redirect.github.com/nodejs/undici/pull/4299)
- [@&#8203;bmeck](https://redirect.github.com/bmeck) made their first
contribution in
[#&#8203;4339](https://redirect.github.com/nodejs/undici/pull/4339)

**Full Changelog**:
<https://github.com/nodejs/undici/compare/v7.11.0...v7.12.0>

###
[`v7.11.0`](https://redirect.github.com/nodejs/undici/releases/tag/v7.11.0)

[Compare
Source](https://redirect.github.com/nodejs/undici/compare/v7.10.0...v7.11.0)

#### What's Changed

- Update WPT by
[@&#8203;github-actions](https://redirect.github.com/github-actions) in
[#&#8203;4214](https://redirect.github.com/nodejs/undici/pull/4214)
- feat(fetch): add zstandard decompression support by
[@&#8203;J3m5](https://redirect.github.com/J3m5) in
[#&#8203;4238](https://redirect.github.com/nodejs/undici/pull/4238)
- fix(debug): remove extra forward slash in logs by
[@&#8203;aidant](https://redirect.github.com/aidant) in
[#&#8203;4236](https://redirect.github.com/nodejs/undici/pull/4236)
- types: EventSource short handlers can be null by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4246](https://redirect.github.com/nodejs/undici/pull/4246)
- remove finalizationregistry workaround by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4250](https://redirect.github.com/nodejs/undici/pull/4250)
- build(deps): bump actions/dependency-review-action from 4.5.0 to 4.7.1
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4255](https://redirect.github.com/nodejs/undici/pull/4255)
- build(deps): bump github/codeql-action from 3.28.1 to 3.28.18 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4252](https://redirect.github.com/nodejs/undici/pull/4252)
- build(deps): bump codecov/codecov-action from 5.1.2 to 5.4.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4253](https://redirect.github.com/nodejs/undici/pull/4253)
- build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4254](https://redirect.github.com/nodejs/undici/pull/4254)
- Query unaware interceptors cache fix by
[@&#8203;FelixVaughan](https://redirect.github.com/FelixVaughan) in
[#&#8203;4240](https://redirect.github.com/nodejs/undici/pull/4240)
- docs: fix interceptor order description in compose method by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4251](https://redirect.github.com/nodejs/undici/pull/4251)
- chore: require node native modules with `node:`-prefix by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4256](https://redirect.github.com/nodejs/undici/pull/4256)
- fix: eventsource does not reconnect on network error by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4247](https://redirect.github.com/nodejs/undici/pull/4247)
- fix: add guard by
[@&#8203;GeoffreyBooth](https://redirect.github.com/GeoffreyBooth) in
[#&#8203;4262](https://redirect.github.com/nodejs/undici/pull/4262)
- Extract webidl by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4259](https://redirect.github.com/nodejs/undici/pull/4259)
- build(deps): bump peter-evans/create-pull-request from 7.0.6 to 7.0.8
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4132](https://redirect.github.com/nodejs/undici/pull/4132)
- build(deps-dev): bump fast-check from 3.23.2 to 4.1.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4167](https://redirect.github.com/nodejs/undici/pull/4167)
- build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4137](https://redirect.github.com/nodejs/undici/pull/4137)
- build(deps-dev): bump tsd from 0.31.2 to 0.32.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4168](https://redirect.github.com/nodejs/undici/pull/4168)
- build(deps): bump hendrikmuhs/ccache-action from 1.2.14 to 1.2.18 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4190](https://redirect.github.com/nodejs/undici/pull/4190)
- build(deps): bump fastify/github-action-merge-dependabot from 3.11.0
to 3.11.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4135](https://redirect.github.com/nodejs/undici/pull/4135)
- build(deps): bump step-security/harden-runner from 2.11.1 to 2.12.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4188](https://redirect.github.com/nodejs/undici/pull/4188)
- build(deps-dev): bump borp from 0.19.0 to 0.20.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;4194](https://redirect.github.com/nodejs/undici/pull/4194)
- Fix several WPT failures by
[@&#8203;tsctx](https://redirect.github.com/tsctx) in
[#&#8203;4263](https://redirect.github.com/nodejs/undici/pull/4263)
- Update WPT by
[@&#8203;github-actions](https://redirect.github.com/github-actions) in
[#&#8203;4235](https://redirect.github.com/nodejs/undici/pull/4235)
- node.js `fetch` is wrongly typed
([#&#8203;4271](https://redirect.github.com/nodejs/undici/issues/4271))
by [@&#8203;bpasero](https://redirect.github.com/bpasero) in
[#&#8203;4272](https://redirect.github.com/nodejs/undici/pull/4272)
- Fix: Provide body on retry error, preserve socket by
[@&#8203;fatal10110](https://redirect.github.com/fatal10110) in
[#&#8203;4228](https://redirect.github.com/nodejs/undici/pull/4228)
- add cause to WebSocket error by
[@&#8203;KhafraDev](https://redirect.github.com/KhafraDev) in
[#&#8203;4274](https://redirect.github.com/nodejs/undici/pull/4274)
- doc: undici vs fetch by
[@&#8203;FelixVaughan](https://redirect.github.com/FelixVaughan) in
[#&#8203;4245](https://redirect.github.com/nodejs/undici/pull/4245)
- bench: add websockets by
[@&#8203;tsctx](https://redirect.github.com/tsctx) in
[#&#8203;3203](https://redirect.github.com/nodejs/undici/pull/3203)
- webidl: remove fallback for USVString by
[@&#8203;Uzlopak](https://redirect.github.com/Uzlopak) in
[#&#8203;4264](https://redirect.github.com/nodejs/undici/pull/4264)
- fix: Use correct `Dispatcher.RequestOptions` by
[@&#8203;IvanDimanov-OfficeRnD](https://redirect.github.com/IvanDimanov-OfficeRnD)
in [#&#8203;4281](https://redirect.github.com/nodejs/undici/pull/4281)
- feat: add install() function for global WHATWG fetch classes by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4286](https://redirect.github.com/nodejs/undici/pull/4286)
- Fixed RedirectHandler type by
[@&#8203;rahulyadav5524](https://redirect.github.com/rahulyadav5524) in
[#&#8203;4278](https://redirect.github.com/nodejs/undici/pull/4278)
-
feat([#&#8203;4086](https://redirect.github.com/nodejs/undici/issues/4086)):
proxy keep alive by
[@&#8203;metcoder95](https://redirect.github.com/metcoder95) in
[#&#8203;4128](https://redirect.github.com/nodejs/undici/pull/4128)
- Add `cleanMocks` to `MockClient` and `MockPool` by
[@&#8203;DemianParkhomenko](https://redirect.github.com/DemianParkhomenko)
in [#&#8203;4176](https://redirect.github.com/nodejs/undici/pull/4176)
- fetch: add missing new operator on TypeError instantiation in
readAllBytes by [@&#8203;Uzlopak](https://redirect.github.com/Uzlopak)
in [#&#8203;4297](https://redirect.github.com/nodejs/undici/pull/4297)
- Skip failing wpts by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4294](https://redirect.github.com/nodejs/undici/pull/4294)
- feat: add request body diagnostic channels by
[@&#8203;legendecas](https://redirect.github.com/legendecas) in
[#&#8203;4289](https://redirect.github.com/nodejs/undici/pull/4289)
- Fix timer guards to avoid TypeError under fake‐timers and polyfilled …
by [@&#8203;1ly4s0](https://redirect.github.com/1ly4s0) in
[#&#8203;4213](https://redirect.github.com/nodejs/undici/pull/4213)
- cache: update MemoryCacheStore default limits by
[@&#8203;mcollina](https://redirect.github.com/mcollina) in
[#&#8203;4292](https://redirect.github.com/nodejs/undici/pull/4292)
- fix: EnvHttpProxyAgent.Options should accept ProxyAgent.Options by
[@&#8203;urugator](https://redirect.github.com/urugator) in
[#&#8203;4243](https://redirect.github.com/nodejs/undici/pull/4243)

#### New Contributors

- [@&#8203;J3m5](https://redirect.github.com/J3m5) made their first
contribution in
[#&#8203;4238](https://redirect.github.com/nodejs/undici/pull/4238)
- [@&#8203;aidant](https://redirect.github.com/aidant) made their first
contribution in
[#&#8203;4236](https://redirect.github.com/nodejs/undici/pull/4236)
- [@&#8203;bpasero](https://redirect.github.com/bpasero) made their
first contribution in
[#&#8203;4272](https://redirect.github.com/nodejs/undici/pull/4272)
-
[@&#8203;IvanDimanov-OfficeRnD](https://redirect.github.com/IvanDimanov-OfficeRnD)
made their first contribution in [#&#8203;4281](https://re

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/trpc/trpc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Jan 15, 2026
@pull pull bot added the ⤵️ pull label Jan 15, 2026
@pull pull bot merged commit 798cc7c into Mu-L:main Jan 15, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants