Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

expose websocket in node bundle #2217

Merged
merged 1 commit into from Sep 15, 2023
Merged

Conversation

KhafraDev
Copy link
Member

fixes #2216

Copy link
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm adding a -1 block mostly because this should be discussed with the rest of the @nodejs/collaborators, and I know more than one will object.

Given Node.js needs, this should be a semver-major for them.

I think targeting a major for undici should be good.

@GeoffreyBooth
Copy link
Member

I’ve been wanting Node to include a global WebSocket like browsers for quite a while. Sure it can be semver-major, but what are the arguments against exposing it? It feels along the same lines as fetch.

We might want to consider whether we want Undici’s WebSocket versus incorporating the ws module or other solutions, but are there objections to adding any solution?

@mcollina
Copy link
Member

ws is (for good reasons) not standard compliant.

@devsnek
Copy link
Member

devsnek commented Aug 17, 2023

What is not spec compliant? Just the extension for passing dispatcher?

@KhafraDev
Copy link
Member Author

ws the npm package, not undici's websocket. lpinca's comment includes a few places where ws breaks from the spec. There's also some non-standard properties exposed, some options which go completely against the spec (ie. disabling masking for performance reasons), and some other things I'm probably forgetting. It's a great library, that I based undici's impl on quite a bit with help from @/lpinca, but exposing it in node would definitely be a mistake.

@GeoffreyBooth
Copy link
Member

Assuming there’s no preferable implementation than Undici’s, what are the objections to exposing it in Node?

Should we update this PR to expose the new global WebSocket behind a flag --experimental-websocket? Then it could land and be backported, since the new flag would mean that it wouldn’t be a semver-major change. This would also let us start gathering feedback, for example if the Undici implementation has its own spec issues to fix. We’d have to resolve those (at least as much as we did for fetch) before unflagging; and the unflagging could only happen as semver-major. But at least we would start the process.

@KhafraDev
Copy link
Member Author

Maybe some of the comments in nodejs/node#19308? If anything, it's good to be safe and get feedback before merging this :)

@lpinca
Copy link
Member

lpinca commented Aug 18, 2023

@mcollina
Copy link
Member

Here goes the question for the @nodejs/tsc:

Given the downsides of nodejs/node#19308 (comment) and @lpinca objection, are we good in bringing a standard compliant implementation of WebSocket as a global?

@mcollina
Copy link
Member

Should we update this PR to expose the new global WebSocket behind a flag --experimental-websocket? Then it could land and be backported, since the new flag would mean that it wouldn’t be a semver-major change. This would also let us start gathering feedback, for example if the Undici implementation has its own spec issues to fix. We’d have to resolve those (at least as much as we did for fetch) before unflagging; and the unflagging could only happen as semver-major. But at least we would start the process.

Having this approach would simplify our maintenance, as we would be able to not release a major of undici, and simplify backporting.

@lpinca
Copy link
Member

lpinca commented Aug 18, 2023

Given the downsides of nodejs/node#19308 (comment) and @lpinca objection

I do not object. We just have to be aware of the shortcomings.

@marco-ippolito
Copy link
Member

marco-ippolito commented Aug 18, 2023

I'm +1 on this, it's the first step towards compatibility with web standard

@ShogunPanda
Copy link
Contributor

+1 as well

@targos
Copy link
Member

targos commented Aug 18, 2023

This PR doesn't have direct impact on node (except bundle size), right?

@targos
Copy link
Member

targos commented Aug 18, 2023

nodejs/node#19308 (comment) mentions fetch('wss://'). Is that implemented? Is it actually already available in Node.js?
This would make the exposition of the WebSocket constructor a small addition compared to the actual support of WebSockets.

@mildsunrise
Copy link
Member

I agree with @/lpinca on shortcomings, +1 on adding this behind a flag

@KhafraDev
Copy link
Member Author

@targos

mentions fetch('wss://'). Is that implemented? Is it actually already available in Node.js?

I think I misinterpreted the spec there; the websocket spec uses fetch internals, which is why it's mentioned in the fetch spec. I thought this meant that fetch would support websockets, which in hindsight doesn't make much sense (there wouldn't be a way to send or receive messages lol). https://fetch.spec.whatwg.org/#websocket-protocol

This PR doesn't have direct impact on node (except bundle size), right?

yeah

@GeoffreyBooth
Copy link
Member

@mcollina I don’t see any objections since your block, would you consider lifting it? I think we can add support for this behind an experimental flag. Then we can both backport it and continue to iterate on any spec or other issues.

With regard to the “but it’s only a WebSocket client, not also a server” . . . well, yeah, but that’s fine. If we want to ship a WebSocket server built into Node, we can do so via some other API. To use Deno as a reference:

Provides the API for creating and managing a WebSocket connection to a server, as well as for sending and receiving data on the connection.

If you are looking to create a WebSocket server, please take a look at Deno.upgradeWebSocket().

Exposing this behind a flag would let people start to explore options for solving that use case.

Copy link
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@GeoffreyBooth
Copy link
Member

@KhafraDev to be clear, I don’t think this PR can land as is, it needs to still add a flag. Perhaps --experimental-websocket? --experimental-websocket-client? And the docs need updating.

@KhafraDev
Copy link
Member Author

A flag would need to be added once websocket is exposed in node core (I plan on doing this once this lands). There's already an experimental warning added.

@GeoffreyBooth
Copy link
Member

A flag would need to be added once websocket is exposed in node core (I plan on doing this once this lands). There’s already an experimental warning added.

Does this PR expose anything that application authors would be able to access?

@KhafraDev
Copy link
Member Author

no, websocket has been available in undici for a few months now, but in node core you'd have to add it to https://github.com/nodejs/node/blob/996f3904bcf02f115f9e52b28545d92886a8d906/lib/internal/process/pre_execution.js#L292-L297

@GeoffreyBooth
Copy link
Member

Okay so if this doesn’t expose it to end users just yet, then 👍 seems fine to land this to me. Before we expose it as a public API let’s please add the flag and docs.

@JakobJingleheimer
Copy link

Perhaps --experimental-websocket? --experimental-websocket-client? And the docs need updating.

If we're potentially adding both a client and server, how about --experimental-websocket=client|server (then in code, if getOption(…).includes('client')) and if getOption(…).includes('server'))).

@mcollina
Copy link
Member

I don't think there is or there should be a server implementation of this. The API is really flawed for that use case.

@mcollina
Copy link
Member

I don't think there is or there should be a server implementation of this. The API is really flawed for that use case.

@GeoffreyBooth
Copy link
Member

I don’t think there is or there should be a server implementation of this. The API is really flawed for that use case.

I wouldn’t be so categorical that Node will never have a websocket server of any kind. Deno has one, the ws module provides one. Maybe it won’t be via this API, but I wouldn’t rule out that we might add one at some point.

I’m not sure --experimental-websocket=client|server makes much sense; that seems like you have to enable only one or the other? Or pass this flag twice to enable both? I think we could maybe just have --experimental-websocket that enables both (if we ever get that far) and maybe we could make the client available unflagged when it’s ready and the flag continues to gate the server until that’s ready.

@mcollina
Copy link
Member

Not blocking that on this.

@regseb
Copy link
Contributor

regseb commented Aug 29, 2023

events.js should also be exposed:

@shellscape
Copy link
Contributor

shellscape commented Sep 4, 2023

I wouldn’t be so categorical that Node will never have a websocket server of any kind. Deno has one, the ws module provides one.

Given that we've been waiting for @nodejs/collaborators to act on WebSockets since Mar 12, 2018, I think it would be fair to be categorical about that.

ws is great, had been around a very long time, and meets most needs, but does have a fair amount of quirks. As someone who's been using undici as a dependency (request is so much nicer than fetch) instead of what's exposed via Node directly, I wouldn't mind an undici-dependency-only WebSocket server as part of this package. We've lived with Koa/Express/etc for well over a decade now without anything as comprehensive and complete exposed from Node core, so I'm not really sold that it's needed in Node core. I'd welcome a compliant websocket server package from the same team that's put undici together because it is quite excellent.

@tniessen
Copy link
Member

tniessen commented Sep 7, 2023

For visibility, someone independently proposed a new node:websocket module in nodejs/node#49478.

@jimmywarting
Copy link
Contributor

jimmywarting commented Sep 15, 2023

I like the Deno.upgradeWebSocket(req)

Deno.serve((req) => {
  if (req.headers.get("upgrade") != "websocket") {
    return new Response(null, { status: 501 });
  }
  const socket = Deno.upgradeWebSocket(req);

  socket instanceof WebSocket // true

  socket.addEventListener("open", () => {
    console.log("a client connected!");
  });

  socket.addEventListener("message", (event) => {
    if (event.data === "ping") {
      socket.send("pong");
    }
  });

  return response;
});

would like to have something like

server.on('upgrade', (req, socket) => {
  const socket = req.toWebSocket()
  
  socket.addEventListener("open", () => {
    console.log("a client connected!")
  })

  socket.addEventListener("message", (event) => {
    if (event.data === "ping") {
      socket.send("pong")
    }
  })
})

@mcollina mcollina merged commit a926023 into nodejs:main Sep 15, 2023
16 of 18 checks passed
@mcollina
Copy link
Member

I think no one would recommend the use of WebSocket. Use the ws module, at least in servers. It's a really badly spec'd api.

@KhafraDev KhafraDev deleted the node-bundle-ws branch September 15, 2023 23:34
@KhafraDev
Copy link
Member Author

I don't think undici (an http client) is the correct place to adding a Websocket server. ws is a great module, or node could use uws for a websocket server.

kodiakhq bot pushed a commit to X-oss-byte/Canary-nextjs that referenced this pull request Oct 1, 2023
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org) ([source](https://togithub.com/nodejs/undici)) | [`5.19.1` -> `5.25.2`](https://renovatebot.com/diffs/npm/undici/5.19.1/5.25.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.19.1/5.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.19.1/5.25.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) |

---

### ⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

-   Add Khaf to releasers by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2276
-   fix: fix request with readable mode is object by [@&#8203;killagu](https://togithub.com/killagu) in [nodejs/undici#2279
-   fix loading websockets when node is built w/ --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2282

#### New Contributors

-   [@&#8203;killagu](https://togithub.com/killagu) made their first contribution in [nodejs/undici#2279

**Full Changelog**: nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

-   Add publish types script by [@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in [nodejs/undici#2273

**Full Changelog**: nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

-   fix: h2 without body by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2258
-   ci: remove duplicated runs by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2265
-   improve documentation of timeouts by making the units clear in all places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in [nodejs/undici#2266
-   expose websocket in node bundle by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2217
-   test: fix Fetch/HTTP2 tests by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2263
-   fix undici when node is built with --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2272
-   fix: Fix type definition for Client Interceptors by [@&#8203;ComradeCow](https://togithub.com/ComradeCow) in [nodejs/undici#2269
-   Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2275

#### New Contributors

-   [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first contribution in [nodejs/undici#2269

**Full Changelog**: nodejs/undici@v5.24.0...v5.25.0

### [`v5.24.0`](https://togithub.com/nodejs/undici/releases/tag/v5.24.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.23.0...v5.24.0)

#### Notable Changes

-   feat: Add H2 support by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2061

#### What's Changed

-   build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2203
-   better stack trace for body.json by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2215
-   allow http & https websocket urls by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2218
-   build(deps-dev): bump [@&#8203;sinonjs/fake-timers](https://togithub.com/sinonjs/fake-timers) from 10.3.0 to 11.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2221
-   fix: pass ProxyAgent proxy status code error by [@&#8203;NBNGaming](https://togithub.com/NBNGaming) in [nodejs/undici#2162
-   fix failing test by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2223
-   docs: update MockPool.md intercept method description by [@&#8203;capaj](https://togithub.com/capaj) in [nodejs/undici#2220
-   Update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2226
-   build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2240
-   build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2237
-   build(deps): bump fastify/github-action-merge-dependabot from 3.9.0 to 3.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2236
-   build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2241
-   build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2238
-   fix: aborting request with non-object error by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2243
-   fix: preserve file path when parsing formdata by [@&#8203;jimmywarting](https://togithub.com/jimmywarting) in [nodejs/undici#2245
-   build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2246
-   Updated benchmarks by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2250
-   Fix fetch in node v20.6.0 by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2251
-   Maybe fix v20 by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2252
-   feat: Add H2 support by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2061
-   docs: fix tables in README by [@&#8203;regseb](https://togithub.com/regseb) in [nodejs/undici#2254
-   Fix http2 fetch test by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2253

#### New Contributors

-   [@&#8203;NBNGaming](https://togithub.com/NBNGaming) made their first contribution in [nodejs/undici#2162
-   [@&#8203;capaj](https://togithub.com/capaj) made their first contribution in [nodejs/undici#2220
-   [@&#8203;regseb](https://togithub.com/regseb) made their first contribution in [nodejs/undici#2254

**Full Changelog**: nodejs/undici@v5.23.0...v5.24.0

### [`v5.23.0`](https://togithub.com/nodejs/undici/releases/tag/v5.23.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.22.1...v5.23.0)

#### What's Changed

-   bump engines to node >= 16 by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2119
-   Revert "bump engines to node >= 16 ([#&#8203;2119](https://togithub.com/nodejs/undici/issues/2119))" by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2121
-   fetch: set referrer properly by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2125
-   fix: support truncated gzip by [@&#8203;jimmywarting](https://togithub.com/jimmywarting) in [nodejs/undici#2126
-   workflow: apply security best practices by [@&#8203;step-security-bot](https://togithub.com/step-security-bot) in [nodejs/undici#2130
-   build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2135
-   build(deps): bump actions/dependency-review-action from 2.5.1 to 3.0.4 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2133
-   build(deps): bump node from 18-alpine to 20-alpine in /build by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2131
-   build(deps): bump pkgjs/action from 0.1.6 to 0.1.7 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2136
-   build(deps): bump actions/checkout from 3.1.0 to 3.5.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2132
-   build(deps-dev): bump jsdom from 21.1.2 to 22.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2142
-   build(deps): bump fastify/github-action-merge-dependabot from 3.7.0 to 3.8.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2148
-   fix(pr): use correct pr template file by [@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) in [nodejs/undici#2141
-   Additional WebSocket send tests to cover all payload size categories by [@&#8203;jawj](https://togithub.com/jawj) in [nodejs/undici#2149
-   fix: reverse decompression order of "Content-Encoding" encodings (fixes [#&#8203;2158](https://togithub.com/nodejs/undici/issues/2158)) by [@&#8203;rychkog](https://togithub.com/rychkog) in [nodejs/undici#2159
-   fix: keep running WPTs if a test times out by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2165
-   feat: add build environment info by [@&#8203;mhdawson](https://togithub.com/mhdawson) in [nodejs/undici#2168
-   fix: forward error reason to fetch controller by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2172
-   stricter types for bodymixin.json by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2181
-   chore: Renable autoSelectFamily tests. by [@&#8203;ShogunPanda](https://togithub.com/ShogunPanda) in [nodejs/undici#2180
-   build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2147
-   build(deps): bump github/codeql-action from 2.3.2 to 2.20.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2185
-   fix: fetch resource timing performance entry names should be strings by [@&#8203;GaryWilber](https://togithub.com/GaryWilber) in [nodejs/undici#2188
-   build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2176
-   build(deps): bump fastify/github-action-merge-dependabot from 3.8.0 to 3.9.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2177
-   build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2178
-   build(deps): bump step-security/harden-runner from 2.4.0 to 2.4.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2175
-   test: fix `autoselectfamily` on platforms without IPv6 support by [@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in [nodejs/undici#2197
-   fix: make multipart/form-data boundary string more consistent by [@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in [nodejs/undici#2196
-   docs: add proxy agent options docs by [@&#8203;dancastillo](https://togithub.com/dancastillo) in [nodejs/undici#2193
-   build(deps): bump github/codeql-action from 2.20.3 to 2.21.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2205
-   feat: make use of `addAbortListener` where applicable by [@&#8203;atlowChemi](https://togithub.com/atlowChemi) in [nodejs/undici#2195

#### New Contributors

-   [@&#8203;step-security-bot](https://togithub.com/step-security-bot) made their first contribution in [nodejs/undici#2130
-   [@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) made their first contribution in [nodejs/undici#2141
-   [@&#8203;rychkog](https://togithub.com/rychkog) made their first contribution in [nodejs/undici#2159
-   [@&#8203;mhdawson](https://togithub.com/mhdawson) made their first contribution in [nodejs/undici#2168
-   [@&#8203;GaryWilber](https://togithub.com/GaryWilber) made their first contribution in [nodejs/undici#2188
-   [@&#8203;atlowChemi](https://togithub.com/atlowChemi) made their first contribution in [nodejs/undici#2195

**Full Changelog**: nodejs/undici@v5.22.1...v5.23.0

### [`v5.22.1`](https://togithub.com/nodejs/undici/releases/tag/v5.22.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.22.0...v5.22.1)

#### What's Changed

-   Cache storage by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2076
-   test: skip content-disposition test in node 18 by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2081
-   Cache storage cleanup by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2082
-   Cache storage fixes by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2083
-   test: improve test coverage for ErrorEvent and MessageEvent by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2085
-   test: remove --experimental-wasm-simd by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2087
-   websocket: add websocketinit by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2088
-   feat(websocket): allow setting custom headers by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2089
-   test: fix tests failing only on node v20 by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2096
-   fix: skip set content-length when FormData value is stream by [@&#8203;fengmk2](https://togithub.com/fengmk2) in [nodejs/undici#2091
-   doc: update outdated command in contributing.md by [@&#8203;jazelly](https://togithub.com/jazelly) in [nodejs/undici#2099
-   cache: fix most failing WPTs by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2100
-   feat: allow build:wasm to auto detect platform by [@&#8203;jazelly](https://togithub.com/jazelly) in [nodejs/undici#2102
-   docs: updated Error documentation (fixes [#&#8203;2090](https://togithub.com/nodejs/undici/issues/2090)) by [@&#8203;titanism](https://togithub.com/titanism) in [nodejs/undici#2092
-   mimesniff: fix many broken tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2103
-   test: fix failing tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2097
-   build(deps): bump github/codeql-action from 2.2.9 to 2.3.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2105
-   fix: more informative error message to tell that the server doesn't match http/1.1 protocol by [@&#8203;Songkeys](https://togithub.com/Songkeys) in [nodejs/undici#2055
-   Fix bug in 16-bit frame length when buffer is a subarray by [@&#8203;jawj](https://togithub.com/jawj) in [nodejs/undici#2106
-   update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2108
-   fix: update error definitions by [@&#8203;dfilatov](https://togithub.com/dfilatov) in [nodejs/undici#2112
-   fix: make assertion a noop by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2111

#### New Contributors

-   [@&#8203;jazelly](https://togithub.com/jazelly) made their first contribution in [nodejs/undici#2099
-   [@&#8203;titanism](https://togithub.com/titanism) made their first contribution in [nodejs/undici#2092
-   [@&#8203;Songkeys](https://togithub.com/Songkeys) made their first contribution in [nodejs/undici#2055
-   [@&#8203;jawj](https://togithub.com/jawj) made their first contribution in [nodejs/undici#2106
-   [@&#8203;dfilatov](https://togithub.com/dfilatov) made their first contribution in [nodejs/undici#2112

**Full Changelog**: nodejs/undici@v5.22.0...v5.22.1

### [`v5.22.0`](https://togithub.com/nodejs/undici/releases/tag/v5.22.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.21.2...v5.22.0)

#### What's Changed

-   build(deps-dev): bump tsd from 0.27.0 to 0.28.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2042
-   build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2040
-   fix: handle opaque origin in sameOrigin by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2053
-   test: add typescript import test back by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2054
-   fix: use getMaxListeners when available by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2063
-   feat: allow overriding hwm by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2057
-   fix: there is no sync connector by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2059
-   fix: rename .wasm to -wasm to appease jest by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2064
-   fix: set content-length when using FormData body w/ request by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2066
-   refactor: unify error body handling by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2060
-   fix: close and destroy overlap by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2068
-   remove node 12 from test matrix by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2069
-   fix: don't leak socket if client is destroyed while connecting by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2058
-   fix: flaky leak test by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2070
-   test: update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2073
-   perf: latin1 by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2075
-   fix: mock fetch headers shouldn't be an array  by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2080

**Full Changelog**: nodejs/undici@v5.21.2...v5.22.0

### [`v5.21.2`](https://togithub.com/nodejs/undici/releases/tag/v5.21.2)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.21.1...v5.21.2)

#### What's Changed

-   Content disposition parsing by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2051
-   fix: clear set-cookie headers by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2052

**Full Changelog**: nodejs/undici@v5.21.1...v5.21.2

### [`v5.21.1`](https://togithub.com/nodejs/undici/releases/tag/v5.21.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.21.0...v5.21.1)

#### What's Changed

-   Fix typo in kPipelining symbol by [@&#8203;andrewfecenko](https://togithub.com/andrewfecenko) in [nodejs/undici#2005
-   fix(fetch): remove `undefined` error cause by [@&#8203;aduh95](https://togithub.com/aduh95) in [nodejs/undici#2006
-   chore(deps-dev): bump tsd from 0.25.0 to 0.27.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2007
-   build(deps-dev): bump wait-on from 6.0.1 to 7.0.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#1820
-   fix(wpt): set global META_TITLE for the runner by [@&#8203;panva](https://togithub.com/panva) in [nodejs/undici#2008
-   fix: issue 2009 by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2013
-   build(deps-dev): bump typescript from 4.9.5 to 5.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2018
-   added descriptive error messages for URL parser by [@&#8203;RishabhKodes](https://togithub.com/RishabhKodes) in [nodejs/undici#2016
-   fix(fetch): remove content-length header on redirect by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2022
-   fix(fetch): remove assertion on request.body.source on redirect ([#&#8203;2027](https://togithub.com/nodejs/undici/issues/2027)) by [@&#8203;macno](https://togithub.com/macno) in [nodejs/undici#2028
-   fix: skip failing test in node >= v19.8 by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2034
-   fetch: treat content-encoding as case-insensitive & remove x-deflate by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2037
-   perf(fetch): use string comparisons for url schemes by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2038
-   util: replace util.toUSVString with String.prototype.toWellFormed by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2036
-   build(deps): bump github/codeql-action from 2.2.4 to 2.2.9 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2039
-   build(deps-dev): bump concurrently from 7.6.0 to 8.0.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2041
-   Small performance improvements by [@&#8203;anonrig](https://togithub.com/anonrig) in [nodejs/undici#2044
-   fix(types): Add missing Blob import by [@&#8203;dpogue](https://togithub.com/dpogue) in [nodejs/undici#2047
-   fix: set window option properly by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2048
-   fetch: fix leak by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2049

#### New Contributors

-   [@&#8203;aduh95](https://togithub.com/aduh95) made their first contribution in [nodejs/undici#2006
-   [@&#8203;RishabhKodes](https://togithub.com/RishabhKodes) made their first contribution in [nodejs/undici#2016
-   [@&#8203;macno](https://togithub.com/macno) made their first contribution in [nodejs/undici#2028
-   [@&#8203;dpogue](https://togithub.com/dpogue) made their first contribution in [nodejs/undici#2047

**Full Changelog**: nodejs/undici@v5.21.0...v5.21.1

### [`v5.21.0`](https://togithub.com/nodejs/undici/releases/tag/v5.21.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.20.0...v5.21.0)

##### What's Changed

-   workflow: add scorecard.yml by [@&#8203;RafaelGSS](https://togithub.com/RafaelGSS) in [nodejs/undici#1942
-   ci: timeout CI jobs after 15 minutes by [@&#8203;dominykas](https://togithub.com/dominykas) in [nodejs/undici#1946
-   test(wpt): respect variants by [@&#8203;panva](https://togithub.com/panva) in [nodejs/undici#1951
-   fix: improve isFormDataLike compat by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#1953
-   fix: flaky fetch tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1956
-   test(wpt): include all testing files by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1954
-   fix: remove unneeded fetch tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1960
-   fix: use normal timers for delays < 1s by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#1961
-   perf: optimize happy path by [@&#8203;anonrig](https://togithub.com/anonrig) in [nodejs/undici#1955
-   fix: 🐛 add URL upstream variations in BalancedPool types by [@&#8203;jimmy-guzman](https://togithub.com/jimmy-guzman) in [nodejs/undici#1966
-   test(wpt): handle uncaught exceptions by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1965
-   Fix failing wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1967
-   test(wpt): add results to an existing WPT Report by [@&#8203;panva](https://togithub.com/panva) in [nodejs/undici#1944
-   fix: strengthen isStream condition checking by [@&#8203;debadree25](https://togithub.com/debadree25) in [nodejs/undici#1969
-   fix: implement basic policy container by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1970
-   TypeScript type fixes, for [#&#8203;1949](https://togithub.com/nodejs/undici/issues/1949) by [@&#8203;joshxyzhimself](https://togithub.com/joshxyzhimself) in [nodejs/undici#1968
-   websocket: separate connection logic from websocket by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1973
-   README: h3 not showing ### as a header by [@&#8203;hilleer](https://togithub.com/hilleer) in [nodejs/undici#1975
-   wptrunner: expose gc by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1974
-   perf: cork socket before writing by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#1982
-   fix: fast timers and event loop lag by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#1977
-   fix: correctly calculate resource timing duration by [@&#8203;amilajack](https://togithub.com/amilajack) in [nodejs/undici#1988
-   wpt: update tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1984
-   fix: undici stream throwOnError by [@&#8203;dancastillo](https://togithub.com/dancastillo) in [nodejs/undici#1995
-   fix: remove unnecessary WeakRef by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2000
-   Fix: websocket.d.ts - error TS2304: Cannot find name 'MessagePort' by [@&#8203;ZaBlazzingZephyrus](https://togithub.com/ZaBlazzingZephyrus) in [nodejs/undici#1997
-   feat: add abort signal to body.dump() by [@&#8203;debadree25](https://togithub.com/debadree25) in [nodejs/undici#1993
-   fix(fetch): third party abortcontrollers throwing errors by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2002
-   Improve ProxyAgent example with autentication by [@&#8203;egmen](https://togithub.com/egmen) in [nodejs/undici#2004
-   Add clientFactory option to ProxyAgent by [@&#8203;andrewfecenko](https://togithub.com/andrewfecenko) in [nodejs/undici#2003

##### New Contributors

-   [@&#8203;jimmy-guzman](https://togithub.com/jimmy-guzman) made their first contribution in [nodejs/undici#1966
-   [@&#8203;hilleer](https://togithub.com/hilleer) made their first contribution in [nodejs/undici#1975
-   [@&#8203;amilajack](https://togithub.com/amilajack) made their first contribution in [nodejs/undici#1988
-   [@&#8203;ZaBlazzingZephyrus](https://togithub.com/ZaBlazzingZephyrus) made their first contribution in [nodejs/undici#1997
-   [@&#8203;egmen](https://togithub.com/egmen) made their first contribution in [nodejs/undici#2004
-   [@&#8203;andrewfecenko](https://togithub.com/andrewfecenko) made their first contribution in [nodejs/undici#2003

**Full Changelog**: nodejs/undici@v5.20.0...v5.21.0

### [`v5.20.0`](https://togithub.com/nodejs/undici/releases/tag/v5.20.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.19.1...v5.20.0)

#### What's Changed

-   perf: improve cookie parsing performance by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1931
-   fix: disable websocket wpts in ci :( by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1932
-   fix: Allow “undefined“ as value in headers by [@&#8203;pan93412](https://togithub.com/pan93412) in [nodejs/undici#1929
-   feat: Support autoSelectFamily when connecting. by [@&#8203;ShogunPanda](https://togithub.com/ShogunPanda) in [nodejs/undici#1914
-   fix: copy cookies when cloning haders by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1936
-   test: more logs in wpt runner by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#1933
-   feat: change headersTimeout and bodyTimeout to 300s by [@&#8203;kyrylkov](https://togithub.com/kyrylkov) in [nodejs/undici#1937

**Full Changelog**: nodejs/undici@v5.19.1...v5.20.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/X-oss-byte/Canary-nextjs).
kodiakhq bot pushed a commit to ascorbic/unpic-img that referenced this pull request Oct 2, 2023
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org) ([source](https://togithub.com/nodejs/undici)) | [`5.24.0` -> `5.25.3`](https://renovatebot.com/diffs/npm/undici/5.24.0/5.25.3) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.24.0/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.24.0/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.25.3`](https://togithub.com/nodejs/undici/releases/tag/v5.25.3)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.2...v5.25.3)

#### What's Changed

-   perf: improve parse-url implementation by [@&#8203;anonrig](https://togithub.com/anonrig) in [nodejs/undici#2286
-   test: enable websockets inclusion in WPTReport by [@&#8203;panva](https://togithub.com/panva) in [nodejs/undici#2284
-   remove npm run test from pre-commit hook by [@&#8203;dancastillo](https://togithub.com/dancastillo) in [nodejs/undici#2296
-   perf: use [@&#8203;fastify/busboy](https://togithub.com/fastify/busboy) by [@&#8203;gurgunday](https://togithub.com/gurgunday) in [nodejs/undici#2211
-   Disable finalizationregistry if node code cov by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2298

#### New Contributors

-   [@&#8203;gurgunday](https://togithub.com/gurgunday) made their first contribution in [nodejs/undici#2211

**Full Changelog**: nodejs/undici@v5.25.2...v5.25.3

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

-   Add Khaf to releasers by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2276
-   fix: fix request with readable mode is object by [@&#8203;killagu](https://togithub.com/killagu) in [nodejs/undici#2279
-   fix loading websockets when node is built w/ --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2282

#### New Contributors

-   [@&#8203;killagu](https://togithub.com/killagu) made their first contribution in [nodejs/undici#2279

**Full Changelog**: nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

-   Add publish types script by [@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in [nodejs/undici#2273

**Full Changelog**: nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

-   fix: h2 without body by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2258
-   ci: remove duplicated runs by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2265
-   improve documentation of timeouts by making the units clear in all places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in [nodejs/undici#2266
-   expose websocket in node bundle by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2217
-   test: fix Fetch/HTTP2 tests by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2263
-   fix undici when node is built with --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2272
-   fix: Fix type definition for Client Interceptors by [@&#8203;ComradeCow](https://togithub.com/ComradeCow) in [nodejs/undici#2269
-   Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2275

#### New Contributors

-   [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first contribution in [nodejs/undici#2269

**Full Changelog**: nodejs/undici@v5.24.0...v5.25.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 9pm on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/ascorbic/unpic-img).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4wLjMiLCJ1cGRhdGVkSW5WZXIiOiIzNy4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->
kodiakhq bot pushed a commit to X-oss-byte/Nextjs that referenced this pull request Oct 6, 2023
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org) ([source](https://togithub.com/nodejs/undici)) | [`5.22.0` -> `5.25.4`](https://renovatebot.com/diffs/npm/undici/5.22.0/5.25.4) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.22.0/5.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.22.0/5.25.4?slim=true)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.25.4`](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

### [`v5.25.3`](https://togithub.com/nodejs/undici/releases/tag/v5.25.3)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.2...v5.25.3)

#### What's Changed

-   perf: improve parse-url implementation by [@&#8203;anonrig](https://togithub.com/anonrig) in [nodejs/undici#2286
-   test: enable websockets inclusion in WPTReport by [@&#8203;panva](https://togithub.com/panva) in [nodejs/undici#2284
-   remove npm run test from pre-commit hook by [@&#8203;dancastillo](https://togithub.com/dancastillo) in [nodejs/undici#2296
-   perf: use [@&#8203;fastify/busboy](https://togithub.com/fastify/busboy) by [@&#8203;gurgunday](https://togithub.com/gurgunday) in [nodejs/undici#2211
-   Disable finalizationregistry if node code cov by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2298

#### New Contributors

-   [@&#8203;gurgunday](https://togithub.com/gurgunday) made their first contribution in [nodejs/undici#2211

**Full Changelog**: nodejs/undici@v5.25.2...v5.25.3

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

-   Add Khaf to releasers by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2276
-   fix: fix request with readable mode is object by [@&#8203;killagu](https://togithub.com/killagu) in [nodejs/undici#2279
-   fix loading websockets when node is built w/ --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2282

#### New Contributors

-   [@&#8203;killagu](https://togithub.com/killagu) made their first contribution in [nodejs/undici#2279

**Full Changelog**: nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

-   Add publish types script by [@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in [nodejs/undici#2273

**Full Changelog**: nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

-   fix: h2 without body by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2258
-   ci: remove duplicated runs by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2265
-   improve documentation of timeouts by making the units clear in all places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in [nodejs/undici#2266
-   expose websocket in node bundle by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2217
-   test: fix Fetch/HTTP2 tests by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2263
-   fix undici when node is built with --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2272
-   fix: Fix type definition for Client Interceptors by [@&#8203;ComradeCow](https://togithub.com/ComradeCow) in [nodejs/undici#2269
-   Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2275

#### New Contributors

-   [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first contribution in [nodejs/undici#2269

**Full Changelog**: nodejs/undici@v5.24.0...v5.25.0

### [`v5.24.0`](https://togithub.com/nodejs/undici/releases/tag/v5.24.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.23.0...v5.24.0)

#### Notable Changes

-   feat: Add H2 support by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2061

#### What's Changed

-   build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2203
-   better stack trace for body.json by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2215
-   allow http & https websocket urls by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2218
-   build(deps-dev): bump [@&#8203;sinonjs/fake-timers](https://togithub.com/sinonjs/fake-timers) from 10.3.0 to 11.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2221
-   fix: pass ProxyAgent proxy status code error by [@&#8203;NBNGaming](https://togithub.com/NBNGaming) in [nodejs/undici#2162
-   fix failing test by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2223
-   docs: update MockPool.md intercept method description by [@&#8203;capaj](https://togithub.com/capaj) in [nodejs/undici#2220
-   Update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2226
-   build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2240
-   build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2237
-   build(deps): bump fastify/github-action-merge-dependabot from 3.9.0 to 3.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2236
-   build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2241
-   build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2238
-   fix: aborting request with non-object error by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2243
-   fix: preserve file path when parsing formdata by [@&#8203;jimmywarting](https://togithub.com/jimmywarting) in [nodejs/undici#2245
-   build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2246
-   Updated benchmarks by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2250
-   Fix fetch in node v20.6.0 by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2251
-   Maybe fix v20 by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2252
-   feat: Add H2 support by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2061
-   docs: fix tables in README by [@&#8203;regseb](https://togithub.com/regseb) in [nodejs/undici#2254
-   Fix http2 fetch test by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2253

#### New Contributors

-   [@&#8203;NBNGaming](https://togithub.com/NBNGaming) made their first contribution in [nodejs/undici#2162
-   [@&#8203;capaj](https://togithub.com/capaj) made their first contribution in [nodejs/undici#2220
-   [@&#8203;regseb](https://togithub.com/regseb) made their first contribution in [nodejs/undici#2254

**Full Changelog**: nodejs/undici@v5.23.0...v5.24.0

### [`v5.23.0`](https://togithub.com/nodejs/undici/releases/tag/v5.23.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.22.1...v5.23.0)

#### What's Changed

-   bump engines to node >= 16 by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2119
-   Revert "bump engines to node >= 16 ([#&#8203;2119](https://togithub.com/nodejs/undici/issues/2119))" by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2121
-   fetch: set referrer properly by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2125
-   fix: support truncated gzip by [@&#8203;jimmywarting](https://togithub.com/jimmywarting) in [nodejs/undici#2126
-   workflow: apply security best practices by [@&#8203;step-security-bot](https://togithub.com/step-security-bot) in [nodejs/undici#2130
-   build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2135
-   build(deps): bump actions/dependency-review-action from 2.5.1 to 3.0.4 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2133
-   build(deps): bump node from 18-alpine to 20-alpine in /build by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2131
-   build(deps): bump pkgjs/action from 0.1.6 to 0.1.7 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2136
-   build(deps): bump actions/checkout from 3.1.0 to 3.5.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2132
-   build(deps-dev): bump jsdom from 21.1.2 to 22.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2142
-   build(deps): bump fastify/github-action-merge-dependabot from 3.7.0 to 3.8.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2148
-   fix(pr): use correct pr template file by [@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) in [nodejs/undici#2141
-   Additional WebSocket send tests to cover all payload size categories by [@&#8203;jawj](https://togithub.com/jawj) in [nodejs/undici#2149
-   fix: reverse decompression order of "Content-Encoding" encodings (fixes [#&#8203;2158](https://togithub.com/nodejs/undici/issues/2158)) by [@&#8203;rychkog](https://togithub.com/rychkog) in [nodejs/undici#2159
-   fix: keep running WPTs if a test times out by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2165
-   feat: add build environment info by [@&#8203;mhdawson](https://togithub.com/mhdawson) in [nodejs/undici#2168
-   fix: forward error reason to fetch controller by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2172
-   stricter types for bodymixin.json by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2181
-   chore: Renable autoSelectFamily tests. by [@&#8203;ShogunPanda](https://togithub.com/ShogunPanda) in [nodejs/undici#2180
-   build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2147
-   build(deps): bump github/codeql-action from 2.3.2 to 2.20.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2185
-   fix: fetch resource timing performance entry names should be strings by [@&#8203;GaryWilber](https://togithub.com/GaryWilber) in [nodejs/undici#2188
-   build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2176
-   build(deps): bump fastify/github-action-merge-dependabot from 3.8.0 to 3.9.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2177
-   build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2178
-   build(deps): bump step-security/harden-runner from 2.4.0 to 2.4.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2175
-   test: fix `autoselectfamily` on platforms without IPv6 support by [@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in [nodejs/undici#2197
-   fix: make multipart/form-data boundary string more consistent by [@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in [nodejs/undici#2196
-   docs: add proxy agent options docs by [@&#8203;dancastillo](https://togithub.com/dancastillo) in [nodejs/undici#2193
-   build(deps): bump github/codeql-action from 2.20.3 to 2.21.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2205
-   feat: make use of `addAbortListener` where applicable by [@&#8203;atlowChemi](https://togithub.com/atlowChemi) in [nodejs/undici#2195

#### New Contributors

-   [@&#8203;step-security-bot](https://togithub.com/step-security-bot) made their first contribution in [nodejs/undici#2130
-   [@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) made their first contribution in [nodejs/undici#2141
-   [@&#8203;rychkog](https://togithub.com/rychkog) made their first contribution in [nodejs/undici#2159
-   [@&#8203;mhdawson](https://togithub.com/mhdawson) made their first contribution in [nodejs/undici#2168
-   [@&#8203;GaryWilber](https://togithub.com/GaryWilber) made their first contribution in [nodejs/undici#2188
-   [@&#8203;atlowChemi](https://togithub.com/atlowChemi) made their first contribution in [nodejs/undici#2195

**Full Changelog**: nodejs/undici@v5.22.1...v5.23.0

### [`v5.22.1`](https://togithub.com/nodejs/undici/releases/tag/v5.22.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.22.0...v5.22.1)

#### What's Changed

-   Cache storage by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2076
-   test: skip content-disposition test in node 18 by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2081
-   Cache storage cleanup by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2082
-   Cache storage fixes by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2083
-   test: improve test coverage for ErrorEvent and MessageEvent by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2085
-   test: remove --experimental-wasm-simd by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2087
-   websocket: add websocketinit by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2088
-   feat(websocket): allow setting custom headers by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2089
-   test: fix tests failing only on node v20 by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2096
-   fix: skip set content-length when FormData value is stream by [@&#8203;fengmk2](https://togithub.com/fengmk2) in [nodejs/undici#2091
-   doc: update outdated command in contributing.md by [@&#8203;jazelly](https://togithub.com/jazelly) in [nodejs/undici#2099
-   cache: fix most failing WPTs by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2100
-   feat: allow build:wasm to auto detect platform by [@&#8203;jazelly](https://togithub.com/jazelly) in [nodejs/undici#2102
-   docs: updated Error documentation (fixes [#&#8203;2090](https://togithub.com/nodejs/undici/issues/2090)) by [@&#8203;titanism](https://togithub.com/titanism) in [nodejs/undici#2092
-   mimesniff: fix many broken tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2103
-   test: fix failing tests by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2097
-   build(deps): bump github/codeql-action from 2.2.9 to 2.3.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [nodejs/undici#2105
-   fix: more informative error message to tell that the server doesn't match http/1.1 protocol by [@&#8203;Songkeys](https://togithub.com/Songkeys) in [nodejs/undici#2055
-   Fix bug in 16-bit frame length when buffer is a subarray by [@&#8203;jawj](https://togithub.com/jawj) in [nodejs/undici#2106
-   update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2108
-   fix: update error definitions by [@&#8203;dfilatov](https://togithub.com/dfilatov) in [nodejs/undici#2112
-   fix: make assertion a noop by [@&#8203;ronag](https://togithub.com/ronag) in [nodejs/undici#2111

#### New Contributors

-   [@&#8203;jazelly](https://togithub.com/jazelly) made their first contribution in [nodejs/undici#2099
-   [@&#8203;titanism](https://togithub.com/titanism) made their first contribution in [nodejs/undici#2092
-   [@&#8203;Songkeys](https://togithub.com/Songkeys) made their first contribution in [nodejs/undici#2055
-   [@&#8203;jawj](https://togithub.com/jawj) made their first contribution in [nodejs/undici#2106
-   [@&#8203;dfilatov](https://togithub.com/dfilatov) made their first contribution in [nodejs/undici#2112

**Full Changelog**: nodejs/undici@v5.22.0...v5.22.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/X-oss-byte/Nextjs).
ascorbic pushed a commit to ascorbic/unpic-img that referenced this pull request Oct 7, 2023
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org) ([source](https://togithub.com/nodejs/undici)) | [`5.24.0` -> `5.25.3`](https://renovatebot.com/diffs/npm/undici/5.24.0/5.25.3) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.24.0/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.24.0/5.25.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.25.3`](https://togithub.com/nodejs/undici/releases/tag/v5.25.3)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.2...v5.25.3)

#### What's Changed

-   perf: improve parse-url implementation by [@&#8203;anonrig](https://togithub.com/anonrig) in [nodejs/undici#2286
-   test: enable websockets inclusion in WPTReport by [@&#8203;panva](https://togithub.com/panva) in [nodejs/undici#2284
-   remove npm run test from pre-commit hook by [@&#8203;dancastillo](https://togithub.com/dancastillo) in [nodejs/undici#2296
-   perf: use [@&#8203;fastify/busboy](https://togithub.com/fastify/busboy) by [@&#8203;gurgunday](https://togithub.com/gurgunday) in [nodejs/undici#2211
-   Disable finalizationregistry if node code cov by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2298

#### New Contributors

-   [@&#8203;gurgunday](https://togithub.com/gurgunday) made their first contribution in [nodejs/undici#2211

**Full Changelog**: nodejs/undici@v5.25.2...v5.25.3

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

-   Add Khaf to releasers by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2276
-   fix: fix request with readable mode is object by [@&#8203;killagu](https://togithub.com/killagu) in [nodejs/undici#2279
-   fix loading websockets when node is built w/ --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2282

#### New Contributors

-   [@&#8203;killagu](https://togithub.com/killagu) made their first contribution in [nodejs/undici#2279

**Full Changelog**: nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

-   Add publish types script by [@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in [nodejs/undici#2273

**Full Changelog**: nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

-   fix: h2 without body by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2258
-   ci: remove duplicated runs by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2265
-   improve documentation of timeouts by making the units clear in all places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in [nodejs/undici#2266
-   expose websocket in node bundle by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2217
-   test: fix Fetch/HTTP2 tests by [@&#8203;metcoder95](https://togithub.com/metcoder95) in [nodejs/undici#2263
-   fix undici when node is built with --without-ssl by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in [nodejs/undici#2272
-   fix: Fix type definition for Client Interceptors by [@&#8203;ComradeCow](https://togithub.com/ComradeCow) in [nodejs/undici#2269
-   Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina) in [nodejs/undici#2275

#### New Contributors

-   [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first contribution in [nodejs/undici#2269

**Full Changelog**: nodejs/undici@v5.24.0...v5.25.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 9pm on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/ascorbic/unpic-img).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4wLjMiLCJ1cGRhdGVkSW5WZXIiOiIzNy4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->
kfcampbell pushed a commit to octokit/rest.js that referenced this pull request Oct 16, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org)
([source](https://togithub.com/nodejs/undici)) | [`5.22.1` ->
`5.26.2`](https://renovatebot.com/diffs/npm/undici/5.22.1/5.26.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.22.1/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.22.1/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

####
[CVE-2023-45143](https://togithub.com/nodejs/undici/security/advisories/GHSA-q768-x9m6-m9qp)

### Impact

Undici clears Authorization headers on cross-origin redirects, but does
not clear `Cookie` headers. By design, `cookie` headers are [forbidden
request
headers](https://fetch.spec.whatwg.org/#forbidden-request-header),
disallowing them to be set in `RequestInit.headers` in browser
environments. Since Undici handles headers more liberally than the
specification, there was a disconnect from the assumptions the spec
made, and Undici's implementation of fetch.

As such this may lead to accidental leakage of cookie to a 3rd-party
site or a malicious attacker who can control the redirection target (ie.
an open redirector) to leak the cookie to the 3rd party site.

### Patches

This was patched in
[e041de359221ebeae04c469e8aff4145764e6d76](https://togithub.com/nodejs/undici/commit/e041de359221ebeae04c469e8aff4145764e6d76),
which is included in version 5.26.2.

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.26.2`](https://togithub.com/nodejs/undici/releases/tag/v5.26.2)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.26.1...v5.26.2)

Security Release, CVE-2023-45143.

### [`v5.26.1`](https://togithub.com/nodejs/undici/releases/tag/v5.26.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.26.0...v5.26.1)

#### What's Changed

- Fix publish undici-types once and for all! by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2338
- Fix node detection omfg by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2341

**Full Changelog**:
nodejs/undici@v5.26.0...v5.26.1

### [`v5.26.0`](https://togithub.com/nodejs/undici/releases/tag/v5.26.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/5e654f351a9a813fed3e9feff4388b5c4fbda787...v5.26.0)

#### What's Changed

- use npm install instead of npm ci by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2309
- change default header to `node` by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2310
- chore: change order of the pseudo-headers by
[@&#8203;kyrylodolynskyi](https://togithub.com/kyrylodolynskyi) in
[nodejs/undici#2308
- fix: Agent.Options.factory should accept URL object or string as
parameter by [@&#8203;nicole0707](https://togithub.com/nicole0707) in
[nodejs/undici#2295
- build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2312
- test: handle npm ignore-scripts settings by
[@&#8203;panva](https://togithub.com/panva) in
[nodejs/undici#2313
- feat: respect `--max-http-header-size` Node.js flag by
[@&#8203;balazsorban44](https://togithub.com/balazsorban44) in
[nodejs/undici#2234
- fix([#&#8203;2311](https://togithub.com/nodejs/undici/issues/2311)):
End stream after body sent by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2314
- disallow setting host header in fetch by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2322
- \[StepSecurity] ci: Harden GitHub Actions by
[@&#8203;step-security-bot](https://togithub.com/step-security-bot) in
[nodejs/undici#2325
- fix fetch with coverage enabled by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2330
- Fix stuck when using http2 POST Buffer by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2336
- fix: 🏷️ add allowH2 to BuildOptions by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2334
- fix: 🐛 fix process http2 header by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2332

#### New Contributors

- [@&#8203;kyrylodolynskyi](https://togithub.com/kyrylodolynskyi) made
their first contribution in
[nodejs/undici#2308
- [@&#8203;nicole0707](https://togithub.com/nicole0707) made their first
contribution in
[nodejs/undici#2295
- [@&#8203;balazsorban44](https://togithub.com/balazsorban44) made their
first contribution in
[nodejs/undici#2234
- [@&#8203;binsee](https://togithub.com/binsee) made their first
contribution in
[nodejs/undici#2336

**Full Changelog**:
nodejs/undici@v5.23.4...v5.26.0

###
[`v5.25.4`](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

### [`v5.25.3`](https://togithub.com/nodejs/undici/releases/tag/v5.25.3)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.2...v5.25.3)

#### What's Changed

- perf: improve parse-url implementation by
[@&#8203;anonrig](https://togithub.com/anonrig) in
[nodejs/undici#2286
- test: enable websockets inclusion in WPTReport by
[@&#8203;panva](https://togithub.com/panva) in
[nodejs/undici#2284
- remove npm run test from pre-commit hook by
[@&#8203;dancastillo](https://togithub.com/dancastillo) in
[nodejs/undici#2296
- perf: use
[@&#8203;fastify/busboy](https://togithub.com/fastify/busboy) by
[@&#8203;gurgunday](https://togithub.com/gurgunday) in
[nodejs/undici#2211
- Disable finalizationregistry if node code cov by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2298

#### New Contributors

- [@&#8203;gurgunday](https://togithub.com/gurgunday) made their first
contribution in
[nodejs/undici#2211

**Full Changelog**:
nodejs/undici@v5.25.2...v5.25.3

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

- Add Khaf to releasers by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2276
- fix: fix request with readable mode is object by
[@&#8203;killagu](https://togithub.com/killagu) in
[nodejs/undici#2279
- fix loading websockets when node is built w/ --without-ssl by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2282

#### New Contributors

- [@&#8203;killagu](https://togithub.com/killagu) made their first
contribution in
[nodejs/undici#2279

**Full Changelog**:
nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

- Add publish types script by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2273

**Full Changelog**:
nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

- fix: h2 without body by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2258
- ci: remove duplicated runs by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2265
- improve documentation of timeouts by making the units clear in all
places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in
[nodejs/undici#2266
- expose websocket in node bundle by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2217
- test: fix Fetch/HTTP2 tests by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2263
- fix undici when node is built with --without-ssl by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2272
- fix: Fix type definition for Client Interceptors by
[@&#8203;ComradeCow](https://togithub.com/ComradeCow) in
[nodejs/undici#2269
- Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina)
in
[nodejs/undici#2275

#### New Contributors

- [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first
contribution in
[nodejs/undici#2269

**Full Changelog**:
nodejs/undici@v5.24.0...v5.25.0

### [`v5.24.0`](https://togithub.com/nodejs/undici/releases/tag/v5.24.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.23.0...v5.24.0)

#### Notable Changes

- feat: Add H2 support by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2061

#### What's Changed

- build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2203
- better stack trace for body.json by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2215
- allow http & https websocket urls by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2218
- build(deps-dev): bump
[@&#8203;sinonjs/fake-timers](https://togithub.com/sinonjs/fake-timers)
from 10.3.0 to 11.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2221
- fix: pass ProxyAgent proxy status code error by
[@&#8203;NBNGaming](https://togithub.com/NBNGaming) in
[nodejs/undici#2162
- fix failing test by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2223
- docs: update MockPool.md intercept method description by
[@&#8203;capaj](https://togithub.com/capaj) in
[nodejs/undici#2220
- Update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2226
- build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2240
- build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2237
- build(deps): bump fastify/github-action-merge-dependabot from 3.9.0 to
3.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2236
- build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2241
- build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2238
- fix: aborting request with non-object error by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2243
- fix: preserve file path when parsing formdata by
[@&#8203;jimmywarting](https://togithub.com/jimmywarting) in
[nodejs/undici#2245
- build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2246
- Updated benchmarks by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2250
- Fix fetch in node v20.6.0 by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2251
- Maybe fix v20 by [@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2252
- feat: Add H2 support by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2061
- docs: fix tables in README by
[@&#8203;regseb](https://togithub.com/regseb) in
[nodejs/undici#2254
- Fix http2 fetch test by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2253

#### New Contributors

- [@&#8203;NBNGaming](https://togithub.com/NBNGaming) made their first
contribution in
[nodejs/undici#2162
- [@&#8203;capaj](https://togithub.com/capaj) made their first
contribution in
[nodejs/undici#2220
- [@&#8203;regseb](https://togithub.com/regseb) made their first
contribution in
[nodejs/undici#2254

**Full Changelog**:
nodejs/undici@v5.23.0...v5.24.0

### [`v5.23.0`](https://togithub.com/nodejs/undici/releases/tag/v5.23.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.22.1...v5.23.0)

#### What's Changed

- bump engines to node >= 16 by
[@&#8203;ronag](https://togithub.com/ronag) in
[nodejs/undici#2119
- Revert "bump engines to node >= 16
([#&#8203;2119](https://togithub.com/nodejs/undici/issues/2119))" by
[@&#8203;ronag](https://togithub.com/ronag) in
[nodejs/undici#2121
- fetch: set referrer properly by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2125
- fix: support truncated gzip by
[@&#8203;jimmywarting](https://togithub.com/jimmywarting) in
[nodejs/undici#2126
- workflow: apply security best practices by
[@&#8203;step-security-bot](https://togithub.com/step-security-bot) in
[nodejs/undici#2130
- build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2135
- build(deps): bump actions/dependency-review-action from 2.5.1 to 3.0.4
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2133
- build(deps): bump node from 18-alpine to 20-alpine in /build by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2131
- build(deps): bump pkgjs/action from 0.1.6 to 0.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2136
- build(deps): bump actions/checkout from 3.1.0 to 3.5.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2132
- build(deps-dev): bump jsdom from 21.1.2 to 22.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2142
- build(deps): bump fastify/github-action-merge-dependabot from 3.7.0 to
3.8.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2148
- fix(pr): use correct pr template file by
[@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) in
[nodejs/undici#2141
- Additional WebSocket send tests to cover all payload size categories
by [@&#8203;jawj](https://togithub.com/jawj) in
[nodejs/undici#2149
- fix: reverse decompression order of "Content-Encoding" encodings
(fixes [#&#8203;2158](https://togithub.com/nodejs/undici/issues/2158))
by [@&#8203;rychkog](https://togithub.com/rychkog) in
[nodejs/undici#2159
- fix: keep running WPTs if a test times out by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2165
- feat: add build environment info by
[@&#8203;mhdawson](https://togithub.com/mhdawson) in
[nodejs/undici#2168
- fix: forward error reason to fetch controller by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2172
- stricter types for bodymixin.json by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2181
- chore: Renable autoSelectFamily tests. by
[@&#8203;ShogunPanda](https://togithub.com/ShogunPanda) in
[nodejs/undici#2180
- build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2147
- build(deps): bump github/codeql-action from 2.3.2 to 2.20.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2185
- fix: fetch resource timing performance entry names should be strings
by [@&#8203;GaryWilber](https://togithub.com/GaryWilber) in
[nodejs/undici#2188
- build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2176
- build(deps): bump fastify/github-action-merge-dependabot from 3.8.0 to
3.9.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2177
- build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2178
- build(deps): bump step-security/harden-runner from 2.4.0 to 2.4.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2175
- test: fix `autoselectfamily` on platforms without IPv6 support by
[@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in
[nodejs/undici#2197
- fix: make multipart/form-data boundary string more consistent by
[@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in
[nodejs/undici#2196
- docs: add proxy agent options docs by
[@&#8203;dancastillo](https://togithub.com/dancastillo) in
[nodejs/undici#2193
- build(deps): bump github/codeql-action from 2.20.3 to 2.21.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2205
- feat: make use of `addAbortListener` where applicable by
[@&#8203;atlowChemi](https://togithub.com/atlowChemi) in
[nodejs/undici#2195

#### New Contributors

- [@&#8203;step-security-bot](https://togithub.com/step-security-bot)
made their first contribution in
[nodejs/undici#2130
- [@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) made
their first contribution in
[nodejs/undici#2141
- [@&#8203;rychkog](https://togithub.com/rychkog) made their first
contribution in
[nodejs/undici#2159
- [@&#8203;mhdawson](https://togithub.com/mhdawson) made their first
contribution in
[nodejs/undici#2168
- [@&#8203;GaryWilber](https://togithub.com/GaryWilber) made their first
contribution in
[nodejs/undici#2188
- [@&#8203;atlowChemi](https://togithub.com/atlowChemi) made their first
contribution in
[nodejs/undici#2195

**Full Changelog**:
nodejs/undici@v5.22.1...v5.23.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/octokit/rest.js).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xOS4yIiwidXBkYXRlZEluVmVyIjoiMzcuMTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate bot added a commit to specfy/specfy that referenced this pull request Oct 16, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org)
([source](https://togithub.com/nodejs/undici)) | [`5.23.0` ->
`5.26.2`](https://renovatebot.com/diffs/npm/undici/5.23.0/5.26.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.23.0/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.23.0/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

####
[CVE-2023-45143](https://togithub.com/nodejs/undici/security/advisories/GHSA-q768-x9m6-m9qp)

### Impact

Undici clears Authorization headers on cross-origin redirects, but does
not clear `Cookie` headers. By design, `cookie` headers are [forbidden
request
headers](https://fetch.spec.whatwg.org/#forbidden-request-header),
disallowing them to be set in `RequestInit.headers` in browser
environments. Since Undici handles headers more liberally than the
specification, there was a disconnect from the assumptions the spec
made, and Undici's implementation of fetch.

As such this may lead to accidental leakage of cookie to a 3rd-party
site or a malicious attacker who can control the redirection target (ie.
an open redirector) to leak the cookie to the 3rd party site.

### Patches

This was patched in
[e041de359221ebeae04c469e8aff4145764e6d76](https://togithub.com/nodejs/undici/commit/e041de359221ebeae04c469e8aff4145764e6d76),
which is included in version 5.26.2.

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.26.2`](https://togithub.com/nodejs/undici/releases/tag/v5.26.2)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.26.1...v5.26.2)

Security Release, CVE-2023-45143.

### [`v5.26.1`](https://togithub.com/nodejs/undici/releases/tag/v5.26.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.26.0...v5.26.1)

#### What's Changed

- Fix publish undici-types once and for all! by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2338
- Fix node detection omfg by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2341

**Full Changelog**:
nodejs/undici@v5.26.0...v5.26.1

### [`v5.26.0`](https://togithub.com/nodejs/undici/releases/tag/v5.26.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/5e654f351a9a813fed3e9feff4388b5c4fbda787...v5.26.0)

#### What's Changed

- use npm install instead of npm ci by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2309
- change default header to `node` by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2310
- chore: change order of the pseudo-headers by
[@&#8203;kyrylodolynskyi](https://togithub.com/kyrylodolynskyi) in
[nodejs/undici#2308
- fix: Agent.Options.factory should accept URL object or string as
parameter by [@&#8203;nicole0707](https://togithub.com/nicole0707) in
[nodejs/undici#2295
- build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2312
- test: handle npm ignore-scripts settings by
[@&#8203;panva](https://togithub.com/panva) in
[nodejs/undici#2313
- feat: respect `--max-http-header-size` Node.js flag by
[@&#8203;balazsorban44](https://togithub.com/balazsorban44) in
[nodejs/undici#2234
- fix([#&#8203;2311](https://togithub.com/nodejs/undici/issues/2311)):
End stream after body sent by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2314
- disallow setting host header in fetch by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2322
- \[StepSecurity] ci: Harden GitHub Actions by
[@&#8203;step-security-bot](https://togithub.com/step-security-bot) in
[nodejs/undici#2325
- fix fetch with coverage enabled by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2330
- Fix stuck when using http2 POST Buffer by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2336
- fix: 🏷️ add allowH2 to BuildOptions by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2334
- fix: 🐛 fix process http2 header by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2332

#### New Contributors

- [@&#8203;kyrylodolynskyi](https://togithub.com/kyrylodolynskyi) made
their first contribution in
[nodejs/undici#2308
- [@&#8203;nicole0707](https://togithub.com/nicole0707) made their first
contribution in
[nodejs/undici#2295
- [@&#8203;balazsorban44](https://togithub.com/balazsorban44) made their
first contribution in
[nodejs/undici#2234
- [@&#8203;binsee](https://togithub.com/binsee) made their first
contribution in
[nodejs/undici#2336

**Full Changelog**:
nodejs/undici@v5.23.4...v5.26.0

###
[`v5.25.4`](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

### [`v5.25.3`](https://togithub.com/nodejs/undici/releases/tag/v5.25.3)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.2...v5.25.3)

#### What's Changed

- perf: improve parse-url implementation by
[@&#8203;anonrig](https://togithub.com/anonrig) in
[nodejs/undici#2286
- test: enable websockets inclusion in WPTReport by
[@&#8203;panva](https://togithub.com/panva) in
[nodejs/undici#2284
- remove npm run test from pre-commit hook by
[@&#8203;dancastillo](https://togithub.com/dancastillo) in
[nodejs/undici#2296
- perf: use
[@&#8203;fastify/busboy](https://togithub.com/fastify/busboy) by
[@&#8203;gurgunday](https://togithub.com/gurgunday) in
[nodejs/undici#2211
- Disable finalizationregistry if node code cov by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2298

#### New Contributors

- [@&#8203;gurgunday](https://togithub.com/gurgunday) made their first
contribution in
[nodejs/undici#2211

**Full Changelog**:
nodejs/undici@v5.25.2...v5.25.3

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

- Add Khaf to releasers by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2276
- fix: fix request with readable mode is object by
[@&#8203;killagu](https://togithub.com/killagu) in
[nodejs/undici#2279
- fix loading websockets when node is built w/ --without-ssl by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2282

#### New Contributors

- [@&#8203;killagu](https://togithub.com/killagu) made their first
contribution in
[nodejs/undici#2279

**Full Changelog**:
nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

- Add publish types script by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2273

**Full Changelog**:
nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

- fix: h2 without body by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2258
- ci: remove duplicated runs by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2265
- improve documentation of timeouts by making the units clear in all
places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in
[nodejs/undici#2266
- expose websocket in node bundle by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2217
- test: fix Fetch/HTTP2 tests by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2263
- fix undici when node is built with --without-ssl by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2272
- fix: Fix type definition for Client Interceptors by
[@&#8203;ComradeCow](https://togithub.com/ComradeCow) in
[nodejs/undici#2269
- Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina)
in
[nodejs/undici#2275

#### New Contributors

- [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first
contribution in
[nodejs/undici#2269

**Full Changelog**:
nodejs/undici@v5.24.0...v5.25.0

### [`v5.24.0`](https://togithub.com/nodejs/undici/releases/tag/v5.24.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.23.0...v5.24.0)

#### Notable Changes

- feat: Add H2 support by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2061

#### What's Changed

- build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2203
- better stack trace for body.json by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2215
- allow http & https websocket urls by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2218
- build(deps-dev): bump
[@&#8203;sinonjs/fake-timers](https://togithub.com/sinonjs/fake-timers)
from 10.3.0 to 11.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2221
- fix: pass ProxyAgent proxy status code error by
[@&#8203;NBNGaming](https://togithub.com/NBNGaming) in
[nodejs/undici#2162
- fix failing test by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2223
- docs: update MockPool.md intercept method description by
[@&#8203;capaj](https://togithub.com/capaj) in
[nodejs/undici#2220
- Update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2226
- build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2240
- build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2237
- build(deps): bump fastify/github-action-merge-dependabot from 3.9.0 to
3.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2236
- build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2241
- build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2238
- fix: aborting request with non-object error by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2243
- fix: preserve file path when parsing formdata by
[@&#8203;jimmywarting](https://togithub.com/jimmywarting) in
[nodejs/undici#2245
- build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2246
- Updated benchmarks by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2250
- Fix fetch in node v20.6.0 by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2251
- Maybe fix v20 by [@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2252
- feat: Add H2 support by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2061
- docs: fix tables in README by
[@&#8203;regseb](https://togithub.com/regseb) in
[nodejs/undici#2254
- Fix http2 fetch test by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2253

#### New Contributors

- [@&#8203;NBNGaming](https://togithub.com/NBNGaming) made their first
contribution in
[nodejs/undici#2162
- [@&#8203;capaj](https://togithub.com/capaj) made their first
contribution in
[nodejs/undici#2220
- [@&#8203;regseb](https://togithub.com/regseb) made their first
contribution in
[nodejs/undici#2254

**Full Changelog**:
nodejs/undici@v5.23.0...v5.24.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" in timezone Europe/Paris, Automerge
- At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/specfy/specfy).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xOS4yIiwidXBkYXRlZEluVmVyIjoiMzcuMTkuMiIsInRhcmdldEJyYW5jaCI6ImNob3JlL3Jlbm92YXRlQmFzZUJyYW5jaCJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
louis-bompart pushed a commit to coveo/cli that referenced this pull request Jan 16, 2024
…#1402)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [undici](https://undici.nodejs.org)
([source](https://togithub.com/nodejs/undici)) | [`5.22.0` ->
`5.26.2`](https://renovatebot.com/diffs/npm/undici/5.22.0/5.26.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/undici/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/5.22.0/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/5.22.0/5.26.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

### GitHub Vulnerability Alerts

####
[CVE-2023-45143](https://togithub.com/nodejs/undici/security/advisories/GHSA-q768-x9m6-m9qp)

### Impact

Undici clears Authorization headers on cross-origin redirects, but does
not clear `Cookie` headers. By design, `cookie` headers are [forbidden
request
headers](https://fetch.spec.whatwg.org/#forbidden-request-header),
disallowing them to be set in `RequestInit.headers` in browser
environments. Since Undici handles headers more liberally than the
specification, there was a disconnect from the assumptions the spec
made, and Undici's implementation of fetch.

As such this may lead to accidental leakage of cookie to a 3rd-party
site or a malicious attacker who can control the redirection target (ie.
an open redirector) to leak the cookie to the 3rd party site.

### Patches

This was patched in
[e041de359221ebeae04c469e8aff4145764e6d76](https://togithub.com/nodejs/undici/commit/e041de359221ebeae04c469e8aff4145764e6d76),
which is included in version 5.26.2.

---

### Release Notes

<details>
<summary>nodejs/undici (undici)</summary>

### [`v5.26.2`](https://togithub.com/nodejs/undici/releases/tag/v5.26.2)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.26.1...v5.26.2)

Security Release, CVE-2023-45143.

### [`v5.26.1`](https://togithub.com/nodejs/undici/releases/tag/v5.26.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.26.0...v5.26.1)

#### What's Changed

- Fix publish undici-types once and for all! by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2338
- Fix node detection omfg by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2341

**Full Changelog**:
nodejs/undici@v5.26.0...v5.26.1

### [`v5.26.0`](https://togithub.com/nodejs/undici/releases/tag/v5.26.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/5e654f351a9a813fed3e9feff4388b5c4fbda787...v5.26.0)

#### What's Changed

- use npm install instead of npm ci by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2309
- change default header to `node` by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2310
- chore: change order of the pseudo-headers by
[@&#8203;kyrylodolynskyi](https://togithub.com/kyrylodolynskyi) in
[nodejs/undici#2308
- fix: Agent.Options.factory should accept URL object or string as
parameter by [@&#8203;nicole0707](https://togithub.com/nicole0707) in
[nodejs/undici#2295
- build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2312
- test: handle npm ignore-scripts settings by
[@&#8203;panva](https://togithub.com/panva) in
[nodejs/undici#2313
- feat: respect `--max-http-header-size` Node.js flag by
[@&#8203;balazsorban44](https://togithub.com/balazsorban44) in
[nodejs/undici#2234
- fix([#&#8203;2311](https://togithub.com/nodejs/undici/issues/2311)):
End stream after body sent by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2314
- disallow setting host header in fetch by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2322
- \[StepSecurity] ci: Harden GitHub Actions by
[@&#8203;step-security-bot](https://togithub.com/step-security-bot) in
[nodejs/undici#2325
- fix fetch with coverage enabled by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2330
- Fix stuck when using http2 POST Buffer by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2336
- fix: 🏷️ add allowH2 to BuildOptions by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2334
- fix: 🐛 fix process http2 header by
[@&#8203;binsee](https://togithub.com/binsee) in
[nodejs/undici#2332

#### New Contributors

- [@&#8203;kyrylodolynskyi](https://togithub.com/kyrylodolynskyi) made
their first contribution in
[nodejs/undici#2308
- [@&#8203;nicole0707](https://togithub.com/nicole0707) made their first
contribution in
[nodejs/undici#2295
- [@&#8203;balazsorban44](https://togithub.com/balazsorban44) made their
first contribution in
[nodejs/undici#2234
- [@&#8203;binsee](https://togithub.com/binsee) made their first
contribution in
[nodejs/undici#2336

**Full Changelog**:
nodejs/undici@v5.23.4...v5.26.0

###
[`v5.25.4`](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.3...5e654f351a9a813fed3e9feff4388b5c4fbda787)

### [`v5.25.3`](https://togithub.com/nodejs/undici/releases/tag/v5.25.3)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.2...v5.25.3)

#### What's Changed

- perf: improve parse-url implementation by
[@&#8203;anonrig](https://togithub.com/anonrig) in
[nodejs/undici#2286
- test: enable websockets inclusion in WPTReport by
[@&#8203;panva](https://togithub.com/panva) in
[nodejs/undici#2284
- remove npm run test from pre-commit hook by
[@&#8203;dancastillo](https://togithub.com/dancastillo) in
[nodejs/undici#2296
- perf: use
[@&#8203;fastify/busboy](https://togithub.com/fastify/busboy) by
[@&#8203;gurgunday](https://togithub.com/gurgunday) in
[nodejs/undici#2211
- Disable finalizationregistry if node code cov by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2298

#### New Contributors

- [@&#8203;gurgunday](https://togithub.com/gurgunday) made their first
contribution in
[nodejs/undici#2211

**Full Changelog**:
nodejs/undici@v5.25.2...v5.25.3

### [`v5.25.2`](https://togithub.com/nodejs/undici/releases/tag/v5.25.2)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.1...v5.25.2)

#### What's Changed

- Add Khaf to releasers by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2276
- fix: fix request with readable mode is object by
[@&#8203;killagu](https://togithub.com/killagu) in
[nodejs/undici#2279
- fix loading websockets when node is built w/ --without-ssl by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2282

#### New Contributors

- [@&#8203;killagu](https://togithub.com/killagu) made their first
contribution in
[nodejs/undici#2279

**Full Changelog**:
nodejs/undici@v5.25.1...v5.25.2

### [`v5.25.1`](https://togithub.com/nodejs/undici/releases/tag/v5.25.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.25.0...v5.25.1)

#### What's Changed

- Add publish types script by
[@&#8203;Ethan-Arrowood](https://togithub.com/Ethan-Arrowood) in
[nodejs/undici#2273

**Full Changelog**:
nodejs/undici@v5.25.0...v5.25.1

### [`v5.25.0`](https://togithub.com/nodejs/undici/releases/tag/v5.25.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.24.0...v5.25.0)

#### What's Changed

- fix: h2 without body by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2258
- ci: remove duplicated runs by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2265
- improve documentation of timeouts by making the units clear in all
places by [@&#8203;mcfedr](https://togithub.com/mcfedr) in
[nodejs/undici#2266
- expose websocket in node bundle by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2217
- test: fix Fetch/HTTP2 tests by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2263
- fix undici when node is built with --without-ssl by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2272
- fix: Fix type definition for Client Interceptors by
[@&#8203;ComradeCow](https://togithub.com/ComradeCow) in
[nodejs/undici#2269
- Fix http2 agent by [@&#8203;mcollina](https://togithub.com/mcollina)
in
[nodejs/undici#2275

#### New Contributors

- [@&#8203;ComradeCow](https://togithub.com/ComradeCow) made their first
contribution in
[nodejs/undici#2269

**Full Changelog**:
nodejs/undici@v5.24.0...v5.25.0

### [`v5.24.0`](https://togithub.com/nodejs/undici/releases/tag/v5.24.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.23.0...v5.24.0)

#### Notable Changes

- feat: Add H2 support by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2061

#### What's Changed

- build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2203
- better stack trace for body.json by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2215
- allow http & https websocket urls by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2218
- build(deps-dev): bump
[@&#8203;sinonjs/fake-timers](https://togithub.com/sinonjs/fake-timers)
from 10.3.0 to 11.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2221
- fix: pass ProxyAgent proxy status code error by
[@&#8203;NBNGaming](https://togithub.com/NBNGaming) in
[nodejs/undici#2162
- fix failing test by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2223
- docs: update MockPool.md intercept method description by
[@&#8203;capaj](https://togithub.com/capaj) in
[nodejs/undici#2220
- Update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2226
- build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2240
- build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2237
- build(deps): bump fastify/github-action-merge-dependabot from 3.9.0 to
3.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2236
- build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2241
- build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2238
- fix: aborting request with non-object error by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2243
- fix: preserve file path when parsing formdata by
[@&#8203;jimmywarting](https://togithub.com/jimmywarting) in
[nodejs/undici#2245
- build(deps-dev): bump tsd from 0.28.1 to 0.29.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2246
- Updated benchmarks by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2250
- Fix fetch in node v20.6.0 by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2251
- Maybe fix v20 by [@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2252
- feat: Add H2 support by
[@&#8203;metcoder95](https://togithub.com/metcoder95) in
[nodejs/undici#2061
- docs: fix tables in README by
[@&#8203;regseb](https://togithub.com/regseb) in
[nodejs/undici#2254
- Fix http2 fetch test by
[@&#8203;mcollina](https://togithub.com/mcollina) in
[nodejs/undici#2253

#### New Contributors

- [@&#8203;NBNGaming](https://togithub.com/NBNGaming) made their first
contribution in
[nodejs/undici#2162
- [@&#8203;capaj](https://togithub.com/capaj) made their first
contribution in
[nodejs/undici#2220
- [@&#8203;regseb](https://togithub.com/regseb) made their first
contribution in
[nodejs/undici#2254

**Full Changelog**:
nodejs/undici@v5.23.0...v5.24.0

### [`v5.23.0`](https://togithub.com/nodejs/undici/releases/tag/v5.23.0)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.22.1...v5.23.0)

#### What's Changed

- bump engines to node >= 16 by
[@&#8203;ronag](https://togithub.com/ronag) in
[nodejs/undici#2119
- Revert "bump engines to node >= 16
([#&#8203;2119](https://togithub.com/nodejs/undici/issues/2119))" by
[@&#8203;ronag](https://togithub.com/ronag) in
[nodejs/undici#2121
- fetch: set referrer properly by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2125
- fix: support truncated gzip by
[@&#8203;jimmywarting](https://togithub.com/jimmywarting) in
[nodejs/undici#2126
- workflow: apply security best practices by
[@&#8203;step-security-bot](https://togithub.com/step-security-bot) in
[nodejs/undici#2130
- build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2135
- build(deps): bump actions/dependency-review-action from 2.5.1 to 3.0.4
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2133
- build(deps): bump node from 18-alpine to 20-alpine in /build by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2131
- build(deps): bump pkgjs/action from 0.1.6 to 0.1.7 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2136
- build(deps): bump actions/checkout from 3.1.0 to 3.5.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2132
- build(deps-dev): bump jsdom from 21.1.2 to 22.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2142
- build(deps): bump fastify/github-action-merge-dependabot from 3.7.0 to
3.8.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2148
- fix(pr): use correct pr template file by
[@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) in
[nodejs/undici#2141
- Additional WebSocket send tests to cover all payload size categories
by [@&#8203;jawj](https://togithub.com/jawj) in
[nodejs/undici#2149
- fix: reverse decompression order of "Content-Encoding" encodings
(fixes [#&#8203;2158](https://togithub.com/nodejs/undici/issues/2158))
by [@&#8203;rychkog](https://togithub.com/rychkog) in
[nodejs/undici#2159
- fix: keep running WPTs if a test times out by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2165
- feat: add build environment info by
[@&#8203;mhdawson](https://togithub.com/mhdawson) in
[nodejs/undici#2168
- fix: forward error reason to fetch controller by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2172
- stricter types for bodymixin.json by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2181
- chore: Renable autoSelectFamily tests. by
[@&#8203;ShogunPanda](https://togithub.com/ShogunPanda) in
[nodejs/undici#2180
- build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6
by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2147
- build(deps): bump github/codeql-action from 2.3.2 to 2.20.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2185
- fix: fetch resource timing performance entry names should be strings
by [@&#8203;GaryWilber](https://togithub.com/GaryWilber) in
[nodejs/undici#2188
- build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2176
- build(deps): bump fastify/github-action-merge-dependabot from 3.8.0 to
3.9.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2177
- build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2178
- build(deps): bump step-security/harden-runner from 2.4.0 to 2.4.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2175
- test: fix `autoselectfamily` on platforms without IPv6 support by
[@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in
[nodejs/undici#2197
- fix: make multipart/form-data boundary string more consistent by
[@&#8203;LiviaMedeiros](https://togithub.com/LiviaMedeiros) in
[nodejs/undici#2196
- docs: add proxy agent options docs by
[@&#8203;dancastillo](https://togithub.com/dancastillo) in
[nodejs/undici#2193
- build(deps): bump github/codeql-action from 2.20.3 to 2.21.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2205
- feat: make use of `addAbortListener` where applicable by
[@&#8203;atlowChemi](https://togithub.com/atlowChemi) in
[nodejs/undici#2195

#### New Contributors

- [@&#8203;step-security-bot](https://togithub.com/step-security-bot)
made their first contribution in
[nodejs/undici#2130
- [@&#8203;AugustinMauroy](https://togithub.com/AugustinMauroy) made
their first contribution in
[nodejs/undici#2141
- [@&#8203;rychkog](https://togithub.com/rychkog) made their first
contribution in
[nodejs/undici#2159
- [@&#8203;mhdawson](https://togithub.com/mhdawson) made their first
contribution in
[nodejs/undici#2168
- [@&#8203;GaryWilber](https://togithub.com/GaryWilber) made their first
contribution in
[nodejs/undici#2188
- [@&#8203;atlowChemi](https://togithub.com/atlowChemi) made their first
contribution in
[nodejs/undici#2195

**Full Changelog**:
nodejs/undici@v5.22.1...v5.23.0

### [`v5.22.1`](https://togithub.com/nodejs/undici/releases/tag/v5.22.1)

[Compare
Source](https://togithub.com/nodejs/undici/compare/v5.22.0...v5.22.1)

#### What's Changed

- Cache storage by [@&#8203;KhafraDev](https://togithub.com/KhafraDev)
in
[nodejs/undici#2076
- test: skip content-disposition test in node 18 by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2081
- Cache storage cleanup by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2082
- Cache storage fixes by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2083
- test: improve test coverage for ErrorEvent and MessageEvent by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2085
- test: remove --experimental-wasm-simd by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2087
- websocket: add websocketinit by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2088
- feat(websocket): allow setting custom headers by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2089
- test: fix tests failing only on node v20 by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2096
- fix: skip set content-length when FormData value is stream by
[@&#8203;fengmk2](https://togithub.com/fengmk2) in
[nodejs/undici#2091
- doc: update outdated command in contributing.md by
[@&#8203;jazelly](https://togithub.com/jazelly) in
[nodejs/undici#2099
- cache: fix most failing WPTs by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2100
- feat: allow build:wasm to auto detect platform by
[@&#8203;jazelly](https://togithub.com/jazelly) in
[nodejs/undici#2102
- docs: updated Error documentation (fixes
[#&#8203;2090](https://togithub.com/nodejs/undici/issues/2090)) by
[@&#8203;titanism](https://togithub.com/titanism) in
[nodejs/undici#2092
- mimesniff: fix many broken tests by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2103
- test: fix failing tests by
[@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2097
- build(deps): bump github/codeql-action from 2.2.9 to 2.3.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[nodejs/undici#2105
- fix: more informative error message to tell that the server doesn't
match http/1.1 protocol by
[@&#8203;Songkeys](https://togithub.com/Songkeys) in
[nodejs/undici#2055
- Fix bug in 16-bit frame length when buffer is a subarray by
[@&#8203;jawj](https://togithub.com/jawj) in
[nodejs/undici#2106
- update wpts by [@&#8203;KhafraDev](https://togithub.com/KhafraDev) in
[nodejs/undici#2108
- fix: update error definitions by
[@&#8203;dfilatov](https://togithub.com/dfilatov) in
[nodejs/undici#2112
- fix: make assertion a noop by
[@&#8203;ronag](https://togithub.com/ronag) in
[nodejs/undici#2111

#### New Contributors

- [@&#8203;jazelly](https://togithub.com/jazelly) made their first
contribution in
[nodejs/undici#2099
- [@&#8203;titanism](https://togithub.com/titanism) made their first
contribution in
[nodejs/undici#2092
- [@&#8203;Songkeys](https://togithub.com/Songkeys) made their first
contribution in
[nodejs/undici#2055
- [@&#8203;jawj](https://togithub.com/jawj) made their first
contribution in
[nodejs/undici#2106
- [@&#8203;dfilatov](https://togithub.com/dfilatov) made their first
contribution in
[nodejs/undici#2112

**Full Changelog**:
nodejs/undici@v5.22.0...v5.22.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log [here](https://developer.mend.io/github/coveo/cli).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9-->

---------

Co-authored-by: developer-experience-bot[bot] <91079284+developer-experience-bot[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
crysmags pushed a commit to crysmags/undici that referenced this pull request Feb 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

expose WebSocket to fetch bundle