Highlights
- Signing in with GitHub works again on the published image. On the 1.2.0 image, every response the server fetched from an HTTP/2 origin arrived compressed and unread, and the GitHub OAuth token exchange was the first caller to fail (
?login=failed). Cause:undici8.11.0, published the morning of the 1.2.0 build, installs a global dispatcher that negotiates HTTP/2 for Node 22's built-infetchand leaves its gzip decoding behind.undiciis now pinned to 8.10.0, and a test loads the outbound-request guard and checks that the built-in fetch still decodes a gzip response from an HTTP/2 origin.
Breaking
- None.
Migration
- Pull the 1.2.1 image, or upgrade the packages. Affected: the 1.2.0 image, and any install of
@skrun-dev/runtime,@skrun-dev/apior@skrun-dev/cliat 1.0.0–1.2.0 made afterundici8.11.0 shipped (2026-09-22), on Node 22 and 24 alike. (Corrected 2026-09-23: this note first said Node 24 was not affected; that had not been measured.)
Stats
- 1973 unit + integration tests pass (was 1972 at v1.2.0)
- 144 E2E in-memory, plus the live multi-provider suite
- OpenAPI 3.1 spec at 1.2.1
Install
npx @skrun-dev/cli@1.2.1 --version
# or
npm i -g @skrun-dev/cli@1.2.1Full changelog: CHANGELOG.md