Skip to content

chore(deps): upgrade undici to 7.29.0 - #3315

Merged
NathanColosimo merged 2 commits into
mainfrom
pgp/bump-undici-7.29.0
Aug 4, 2026
Merged

chore(deps): upgrade undici to 7.29.0#3315
NathanColosimo merged 2 commits into
mainfrom
pgp/bump-undici-7.29.0

Conversation

@pranaygp

@pranaygp pranaygp commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Upgrades undici from 7.28.0 to 7.29.0 in the workspace catalog, consumed by @workflow/world-local and @workflow/world-vercel.

  • Unit tests pass for both packages (world-local 508, world-vercel 334)
  • Changeset included (patch bump for both packages)

🤖 Generated with Claude Code

@pranaygp
pranaygp requested a review from a team as a code owner August 4, 2026 01:25
Copilot AI review requested due to automatic review settings August 4, 2026 01:25
@changeset-bot

changeset-bot Bot commented Aug 4, 2026

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: e50aac8

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 19 packages
Name Type
@workflow/world-local Patch
@workflow/world-vercel Patch
@workflow/cli Patch
@workflow/core Patch
@workflow/vitest Patch
@workflow/web Patch
@workflow/world-postgres Patch
workflow Patch
@workflow/world-testing Patch
@workflow/builders Patch
@workflow/next Patch
@workflow/nitro Patch
@workflow/web-shared Patch
@workflow/astro Patch
@workflow/nest Patch
@workflow/rollup Patch
@workflow/sveltekit Patch
@workflow/vite Patch
@workflow/nuxt Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@vercel

vercel Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
example-nextjs-workflow-turbopack Ready Ready Preview Aug 4, 2026 9:06pm
example-nextjs-workflow-webpack Ready Ready Preview Aug 4, 2026 9:06pm
example-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-astro-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-express-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-fastify-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-hono-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-nestjs-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-nitro-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-nuxt-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-sveltekit-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-tanstack-start-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workbench-vite-workflow Ready Ready Preview Aug 4, 2026 9:06pm
workflow-docs Ready Ready Preview, v0 Aug 4, 2026 9:06pm
workflow-swc-playground Ready Ready Preview Aug 4, 2026 9:06pm
workflow-tarballs Ready Ready Preview Aug 4, 2026 9:06pm
workflow-web Ready Ready Preview Aug 4, 2026 9:06pm

@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

📊 Workflow Benchmarks

commit e50aac8 · Tue, 04 Aug 2026 21:26:34 GMT · run logs

Backend: vercel · app: nextjs-turbopack

Metric Scenario Best (ms) P75 (ms) P90 (ms) P99 (ms) Samples
TTFS step 1315 (+514%) 🔻 1399 🔴 (+17%) 🔻 1451 🔴 (+18%) 🔻 1498 🔴 (-8.4%) 30
TTFS stream 366 (+49%) 🔻 1486 🔴 (+39%) 🔻 1588 🔴 (+45%) 🔻 3675 🔴 (+221%) 🔻 30
TTFS hook + stream 1429 (+276%) 🔻 1759 🔴 (+33%) 🔻 1816 🔴 (+32%) 🔻 6758 🔴 (+362%) 🔻 30
STSO 1020 steps (inline) 140 (+40%) 🔻 171 (+6.9%) 191 (-1.5%) 288 (-34%) 💚 1018
STSO 1020 steps (queue-hop) 3150 (+6.1%) 3150 (+6.1%) 3150 (+6.1%) 3150 (+6.1%) 1
WO 1020 steps 174368 (+2.4%) 174368 (+2.4%) 174368 (+2.4%) 174368 (+2.4%) 1
SL stream latency 121 (+25%) 🔻 200 🔴 (+34%) 🔻 225 🔴 (+0.9%) 317 🔴 (-58%) 💚 30
SO stream overhead (text) 141 (+18%) 🔻 205 (-21%) 💚 221 (-62%) 💚 635 (-21%) 💚 30
SO stream overhead (structured) 160 (+37%) 🔻 223 (-28%) 💚 233 (-59%) 💚 236 (-73%) 💚 30
📈 STSO distribution vs main (inline / queue-hop histograms)

1020 steps (inline)

Cumulative STSO time: main 166837ms → this run 169813ms (Δ +2976ms, +2%)

  100-150 ms  ███┃██████████████        main 624  this 123  -501
  150-200 ms  █████████░░░░░░░░░░░░░░┃  main 302  this 829  +527
  200-250 ms  ┃                         main  48  this  50    +2
  250-300 ms  ┃                         main  13  this   7    -6
  300-350 ms  ┃                         main  12  this   2   -10
  350-400 ms  ┃                         main   6  this   3    -3
  400-450 ms  ┃                         main   3  this   4    +1
  500-550 ms  ┃                         main   2  this   0    -2
  550-600 ms  ┃                         main   3  this   0    -3
  650-700 ms  ┃                         main   1  this   0    -1
  850-900 ms  ┃                         main   1  this   0    -1
2150-2200 ms  ┃                         main   1  this   0    -1
3300-3350 ms  ┃                         main   1  this   0    -1
3800-3850 ms  ┃                         main   1  this   0    -1

1020 steps (queue-hop)

Cumulative STSO time: main 2968ms → this run 3150ms (Δ +182ms, +6%)

2500-3000 ms  ┃███████████████████████  main 1  this 0  -1
3000-3500 ms  ░░░░░░░░░░░░░░░░░░░░░░░┃  main 0  this 1  +1
📜 Previous results (1)

0d41ea1

Tue, 04 Aug 2026 01:44:31 GMT · run logs

vercel / nextjs-turbopack

Metric Scenario Best (ms) P75 (ms) P90 (ms) P99 (ms) Samples
TTFS step 219 (-79%) 💚 1350 🔴 (+20%) 🔻 1410 🔴 (+24%) 🔻 1959 🔴 (+35%) 🔻 30
TTFS stream 259 (+12%) 1356 🔴 (+25%) 🔻 1399 🔴 (+26%) 🔻 1489 🔴 (+17%) 🔻 30
TTFS hook + stream 393 (-20%) 💚 1554 🔴 (+12%) 1567 🔴 (+8.9%) 1653 🔴 (-7.4%) 30
STSO 1020 steps (inline) 94 (-4.1%) 133 (-13%) 151 (-17%) 💚 272 (-7.8%) 1018
STSO 1020 steps (queue-hop) 2389 (-16%) 💚 2389 (-16%) 💚 2389 (-16%) 💚 2389 (-16%) 💚 1
WO 1020 steps 134768 (-9.4%) 134768 (-9.4%) 134768 (-9.4%) 134768 (-9.4%) 1
SL stream latency 117 (+6.4%) 152 🔴 (-22%) 💚 174 🔴 (-39%) 💚 222 🔴 (-43%) 💚 30
SO stream overhead (text) 120 (-2.4%) 231 (+7.4%) 503 🔴 (+104%) 🔻 797 (+175%) 🔻 30
SO stream overhead (structured) 123 (+6.0%) 227 (+16%) 🔻 428 (+82%) 🔻 807 (+133%) 🔻 30
ℹ️ Metric definitions & methodology

The collapsed STSO distribution section above buckets every step gap of the sequential-steps run (not a sampled window), split by whether the step ending the gap ran inline — in the same warm process as the step before it, so the gap is pure framework overhead — or after a queue-hop — the first step of a fresh process, which pays queue dispatch, client reinit and event-log replay. Bars overlay the two runs: is main, marks where this run lands, bridges the gap when this run has more samples in a bucket.

Best/P75/P90/P99 deltas compare against the most recent benchmark run on main at the time of this run. 🔻 flags a delta worse than +15%, 💚 one better than −15%.

Metrics — TTFS: time to first step body (in-deployment start() → first step body, deployment clocks) · STSO: step-to-step overhead (gap between consecutive step bodies) · WO: workflow overhead (whole-run time outside step bodies, in-deployment anchored) · SL: stream latency (in-deployment write → read propagation, readAt - writtenAt) · SO: stream overhead (end-to-end write+consume time beyond the modelled generation window)

Scenarios — step: one trivial no-op step, no stream; no hooks, so the run stays in turbo mode (in-process fast path) · stream: one streaming step; no hooks, so the run stays in turbo mode (in-process fast path) · hook + stream: registers a hook before one step, which exits turbo mode (dispatch path) · 1020 steps: 1020 trivial sequential steps; STSO is measured between consecutive steps in the given step ranges, and WO is the whole-run overhead outside step bodies · stream latency: parallel reader/writer steps on a dedicated stream; SL is the in-deployment write->read propagation (readAt - writtenAt) · stream overhead (text): writer streams 300 variable-length text token deltas paced at 100/s for 3s (a haiku-size LLM's token throughput) while a parallel reader drains the whole stream; SO is the end-to-end write+consume time beyond the 3s generation window (overhead/backpressure) · stream overhead (structured): same workload as stream overhead (text), but each delta is an AI-SDK-style structured object ({ type: 'text-delta', id, text }) instead of a raw string, so the SO gap vs the text scenario is the added serialization cost

🔴 marks a percentile over its target (within target is left unmarked). Targets (p75/p90/p99, ms) — TTFS 200/300/600 · SL 50/60/125 · SO 250/500/1000

All metrics are measured from deployment-side timestamps only. Runs are triggered by an in-deployment route that stamps the anchor (clientStart) right before start(), so the CI runner’s request and its path through api.vercel.com sit outside every measured window. TTFS = in-deployment start() → first step body (turbo uses the in-process fast path, non-turbo the dispatch path), and includes the VQS dispatch hop plus any /flow cold start. STSO/WO are measured between step bodies on the deployment. SL is measured inside the workflow (parallel reader/writer steps), so it no longer includes the api.vercel.com read path.

Cold starts are kept in the numbers on purpose — they are part of real bursty-workload latency. The workbench deployment cold-starts the /flow invocation for a large fraction of runs, inflating P75+; the Best column shows the fastest (warm-start) sample for comparison.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: Pranay Prakash <pranay.gp@gmail.com>
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

🧪 E2E Test Results

All tests passed

E2E Test Summary

Summary
Passed Failed Skipped Total
✅ ▲ Vercel Production 2932 0 500 3432
✅ 💻 Local Development 3290 0 454 3744
✅ 📦 Local Production 3290 0 454 3744
✅ 🐘 Local Postgres 3290 0 454 3744
✅ 🪟 Windows 312 0 0 312
✅ 📋 Other 2068 0 428 2496
✅ vercel-multi-region 27 0 0 27
Total 15209 0 2290 17499
Details by Category

✅ ▲ Vercel Production

App Passed Failed Skipped
✅ astro-node 127 0 29
✅ astro-quickjs 127 0 29
✅ example-node 127 0 29
✅ example-quickjs 127 0 29
✅ express-node 127 0 29
✅ express-quickjs 127 0 29
✅ fastify-node 127 0 29
✅ fastify-quickjs 127 0 29
✅ hono-node 127 0 29
✅ hono-quickjs 127 0 29
✅ nextjs-turbopack-node 152 0 4
✅ nextjs-turbopack-quickjs 152 0 4
✅ nextjs-webpack-node 152 0 4
✅ nextjs-webpack-quickjs 152 0 4
✅ nitro-node 127 0 29
✅ nitro-quickjs 127 0 29
✅ nuxt-node 127 0 29
✅ nuxt-quickjs 127 0 29
✅ sveltekit-node 146 0 10
✅ sveltekit-quickjs 146 0 10
✅ vite-node 127 0 29
✅ vite-quickjs 127 0 29

✅ 💻 Local Development

App Passed Failed Skipped
✅ astro-stable-node 130 0 26
✅ astro-stable-quickjs 130 0 26
✅ express-stable-node 130 0 26
✅ express-stable-quickjs 130 0 26
✅ fastify-stable-node 130 0 26
✅ fastify-stable-quickjs 130 0 26
✅ hono-stable-node 130 0 26
✅ hono-stable-quickjs 130 0 26
✅ nextjs-turbopack-canary-node 137 0 19
✅ nextjs-turbopack-canary-quickjs 137 0 19
✅ nextjs-turbopack-stable-node 156 0 0
✅ nextjs-turbopack-stable-quickjs 156 0 0
✅ nextjs-webpack-canary-node 137 0 19
✅ nextjs-webpack-canary-quickjs 137 0 19
✅ nextjs-webpack-stable-node 156 0 0
✅ nextjs-webpack-stable-quickjs 156 0 0
✅ nitro-stable-node 130 0 26
✅ nitro-stable-quickjs 130 0 26
✅ nuxt-stable-node 130 0 26
✅ nuxt-stable-quickjs 130 0 26
✅ sveltekit-stable-node 149 0 7
✅ sveltekit-stable-quickjs 149 0 7
✅ vite-stable-node 130 0 26
✅ vite-stable-quickjs 130 0 26

✅ 📦 Local Production

App Passed Failed Skipped
✅ astro-stable-node 130 0 26
✅ astro-stable-quickjs 130 0 26
✅ express-stable-node 130 0 26
✅ express-stable-quickjs 130 0 26
✅ fastify-stable-node 130 0 26
✅ fastify-stable-quickjs 130 0 26
✅ hono-stable-node 130 0 26
✅ hono-stable-quickjs 130 0 26
✅ nextjs-turbopack-canary-node 137 0 19
✅ nextjs-turbopack-canary-quickjs 137 0 19
✅ nextjs-turbopack-stable-node 156 0 0
✅ nextjs-turbopack-stable-quickjs 156 0 0
✅ nextjs-webpack-canary-node 137 0 19
✅ nextjs-webpack-canary-quickjs 137 0 19
✅ nextjs-webpack-stable-node 156 0 0
✅ nextjs-webpack-stable-quickjs 156 0 0
✅ nitro-stable-node 130 0 26
✅ nitro-stable-quickjs 130 0 26
✅ nuxt-stable-node 130 0 26
✅ nuxt-stable-quickjs 130 0 26
✅ sveltekit-stable-node 149 0 7
✅ sveltekit-stable-quickjs 149 0 7
✅ vite-stable-node 130 0 26
✅ vite-stable-quickjs 130 0 26

✅ 🐘 Local Postgres

App Passed Failed Skipped
✅ astro-stable-node 130 0 26
✅ astro-stable-quickjs 130 0 26
✅ express-stable-node 130 0 26
✅ express-stable-quickjs 130 0 26
✅ fastify-stable-node 130 0 26
✅ fastify-stable-quickjs 130 0 26
✅ hono-stable-node 130 0 26
✅ hono-stable-quickjs 130 0 26
✅ nextjs-turbopack-canary-node 137 0 19
✅ nextjs-turbopack-canary-quickjs 137 0 19
✅ nextjs-turbopack-stable-node 156 0 0
✅ nextjs-turbopack-stable-quickjs 156 0 0
✅ nextjs-webpack-canary-node 137 0 19
✅ nextjs-webpack-canary-quickjs 137 0 19
✅ nextjs-webpack-stable-node 156 0 0
✅ nextjs-webpack-stable-quickjs 156 0 0
✅ nitro-stable-node 130 0 26
✅ nitro-stable-quickjs 130 0 26
✅ nuxt-stable-node 130 0 26
✅ nuxt-stable-quickjs 130 0 26
✅ sveltekit-stable-node 149 0 7
✅ sveltekit-stable-quickjs 149 0 7
✅ vite-stable-node 130 0 26
✅ vite-stable-quickjs 130 0 26

✅ 🪟 Windows

App Passed Failed Skipped
✅ nextjs-turbopack-node 156 0 0
✅ nextjs-turbopack-quickjs 156 0 0

✅ 📋 Other

App Passed Failed Skipped
✅ e2e-local-dev-nest-stable-node 130 0 26
✅ e2e-local-dev-nest-stable-quickjs 130 0 26
✅ e2e-local-dev-tanstack-start-node 130 0 26
✅ e2e-local-dev-tanstack-start-quickjs 130 0 26
✅ e2e-local-postgres-nest-stable-node 130 0 26
✅ e2e-local-postgres-nest-stable-quickjs 130 0 26
✅ e2e-local-postgres-tanstack-start-node 130 0 26
✅ e2e-local-postgres-tanstack-start-quickjs 130 0 26
✅ e2e-local-prod-nest-stable-node 130 0 26
✅ e2e-local-prod-nest-stable-quickjs 130 0 26
✅ e2e-local-prod-tanstack-start-node 130 0 26
✅ e2e-local-prod-tanstack-start-quickjs 130 0 26
✅ e2e-vercel-prod-nest-node 127 0 29
✅ e2e-vercel-prod-nest-quickjs 127 0 29
✅ e2e-vercel-prod-tanstack-start-node 127 0 29
✅ e2e-vercel-prod-tanstack-start-quickjs 127 0 29

✅ vercel-multi-region

App Passed Failed Skipped
✅ nextjs-turbopack 27 0 0

📋 View full workflow run

@socket-security

socket-security Bot commented Aug 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​undici@​7.29.09310010098100

View full report

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the workspace catalog to use undici@7.29.0, updating the resolved dependency for the packages that consume undici via catalog: (notably @workflow/world-local and @workflow/world-vercel), and records the change with a changeset.

Changes:

  • Bump the workspace catalog entry for undici from 7.28.0 to 7.29.0.
  • Regenerate pnpm-lock.yaml to reflect the new catalog resolution (including importer versions).
  • Add a changeset to publish patch releases of @workflow/world-local and @workflow/world-vercel.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
pnpm-workspace.yaml Updates the workspace dependency catalog to undici: 7.29.0.
pnpm-lock.yaml Updates the lockfile catalog/importer resolutions and adds undici@7.29.0 metadata.
.changeset/bump-undici-7-29-0.md Records a patch-level release for the affected packages.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Signed-off-by: Nathan Colosimo <110621881+NathanColosimo@users.noreply.github.com>

@VaguelySerious VaguelySerious left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM assuming checks pass

@NathanColosimo
NathanColosimo enabled auto-merge (squash) August 4, 2026 21:10
@NathanColosimo
NathanColosimo merged commit 1222aab into main Aug 4, 2026
416 of 421 checks passed
@NathanColosimo
NathanColosimo deleted the pgp/bump-undici-7.29.0 branch August 4, 2026 21:59
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

No backport to stable for 1222aab (AI decision).

This is a routine patch-level dependency bump of undici (7.28.0 → 7.29.0) in the workspace catalog, with no mention of a security vulnerability or a bug that affects stable. The commit only touches a changeset, pnpm-lock.yaml, and pnpm-workspace.yaml, and nothing indicates it keeps the maintenance line working correctly.

To override, re-run the Backport to stable workflow manually via workflow_dispatch and paste this commit SHA into the ref input:

1222aab74da39b4a7ae93e6c5ecc2dc4707b68d0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants