[Snyk] Upgrade undici from 6.11.1 to 6.18.2

[matrix-compute]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade undici from 6.11.1 to 6.18.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 11 versions ahead of your current version.

• The recommended version was released on a month ago.

Release notes

Package name: undici

• 6.18.2 - 2024-05-29
  

  What's Changed

  • don't use internal header state for cookies by @ KhafraDev in #3295
  • build(deps-dev): bump borp from 0.13.0 to 0.14.0 by @ dependabot in #3298
  • fix: retry on body support by @ metcoder95 in #3294

  Full Changelog: v6.18.1...v6.18.2

• 6.18.1 - 2024-05-22
  

  What's Changed

  • docs: Update references to dispatcher in docs by @ haikyuu in #3281
  • fix: compatibility for global headers by @ tsctx in #3286
  • websocket: pre-calculated length by @ tsctx in #3284
  • ci: fix autobahn workflow by @ Uzlopak in #3291
  • revert: "websocket: pre-calculated length" by @ KhafraDev in #3290
  • websocket: use FixedQueue instead of Set by @ tsctx in #3283

  New Contributors

  • @ haikyuu made their first contribution in #3281

  Full Changelog: v6.18.0...v6.18.1

• 6.18.0 - 2024-05-20
  

  What's Changed

  • permessage-deflate decompression support in websocket by @ KhafraDev in #3263
  • fix: Fix server closing in tests. by @ ShogunPanda in #3279

  Full Changelog: v6.17.0...v6.18.0

• 6.17.0 - 2024-05-17
  

  What's Changed

  • fetch: fix captureStackTrace by @ Uzlopak in #3227
  • fetch: fix wpt test request-upload.any.js by @ Uzlopak in #3234
  • websocket: don't clone buffer by @ tsctx in #3240
  • Remove unecessary async from writeBuffer by @ DarkGL in #3245
  • refactor websocket control frame handling by @ KhafraDev in #3241
  • fix parsing continuation frames in websocket by @ KhafraDev in #3247
  • ci: node nightly test should use node 23 by @ Uzlopak in #3248
  • Add test to verify if the connection is correctly aborted on cancel by @ mcollina in #3219
  • Autobahn suite by @ KhafraDev in #3251
  • websocket: fix 6 autobahn tests by @ KhafraDev in #3254
  • websocket: checkout correct commit in autobahn workflow by @ Uzlopak in #3258
  • Cleanup websocket by @ KhafraDev in #3257
  • websocket: autobahn workflow should fail on error by @ Uzlopak in #3259
  • add bodymixin bytes by @ KhafraDev in #3262
  • perf: avoid buffer cloning by @ tsctx in #3264
  • feat: dump interceptor by @ metcoder95 in #3118
  • use private properties in Headers by @ KhafraDev in #3269
  • Revert "websocket: autobahn workflow should fail on error" by @ Uzlopak in #3270
  • build(deps): bump node from 487dc5d to 9e8f45f in /build by @ dependabot in #3271

  New Contributors

  • @ DarkGL made their first contribution in #3245

  Full Changelog: v6.16.1...v6.17.0

• 6.16.1 - 2024-05-10
  

  What's Changed

  • fix some typos by @ Uzlopak in #3217
  • websocket: move codeblock in parseCloseBody by @ Uzlopak in #3215
  • fetch: enable wpt test request-referrer.any.js by @ Uzlopak in #3223
  • fetch: wpt add /fetch/api/resources/cache.py to server.mjs by @ Uzlopak in #3225
  • add pipe support for wpt server by @ KhafraDev in #3228
  • test: reduce the number of requests in fire-and-forget.js by @ tsctx in #3229
  • ci: add node 22 in ci test matrix, use 22 for coverage by @ Uzlopak in #3226
  • fetch: don't set an invalid origin header by @ KhafraDev in #3235
  • fail wpt runner if expected failures does not match actual by @ KhafraDev in #3236
  • fix: ignore content-length when dumping HEAD by @ ronag in #3222

  Full Changelog: v6.16.0...v6.16.1

• 6.16.0 - 2024-05-07
  

  What's Changed

  • add index to sequence converter errors by @ KhafraDev in #3178
  • build(deps-dev): bump borp from 0.12.0 to 0.13.0 by @ dependabot in #3179
  • build(deps): bump node from 21-alpine3.19 to 22-alpine3.19 in /build by @ dependabot in #3180
  • build(deps): bump superagent from 8.1.2 to 9.0.2 in /benchmarks by @ dependabot in #3181
  • fix: keep raw header name by @ tsctx in #3183
  • fix(fetch): improve Headers and Request type-compatibility by @ kettanaito in #1964
  • fix 3 mimesniff tests by @ KhafraDev in #3185
  • build(deps): bump hendrikmuhs/ccache-action from 1.2.12 to 1.2.13 by @ dependabot in #3187
  • build(deps): bump codecov/codecov-action from 4.1.1 to 4.3.1 by @ dependabot in #3191
  • build(deps): bump github/codeql-action from 3.24.9 to 3.25.3 by @ dependabot in #3192
  • build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @ dependabot in #3189
  • build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @ dependabot in #3188
  • build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 by @ dependabot in #3190
  • build(deps): bump node from 9459e24 to 487dc5d in /build by @ dependabot in #3195
  • perf: avoid spread in makeRequest() by @ gunjam in #3193
  • refactor: code cleanup by @ tsctx in #3194
  • fix parsing when receiving empty body websocket by @ KhafraDev in #3205
  • fix: MockResponseCallbackOptions type by @ merojosa in #2951
  • docs(proxy): fix typo by @ kanadgupta in #3207
  • fix websocket receiving an invalid utf-8 in close frame by @ KhafraDev in #3206
  • perf: avoid setImmediate if body is reading by @ ronag in #3210
  • fix: request abort signal by @ ronag in #3209
  • fix: remove abort handler on close by @ ronag in #3211
  • fix: pass abort function by @ tsctx in #3212
  • websocket: 200x faster generate mask by @ tsctx in #3204
  • use FinalizationRegistry to cancel the body if response is collected by @ mcollina in #3199
  • websocket: don't clone buffer if it's not needed. by @ tsctx in #3214
  • websocket: use FastBuffer by @ tsctx in #3213

  New Contributors

  • @ kettanaito made their first contribution in #1964
  • @ gunjam made their first contribution in #3193
  • @ merojosa made their first contribution in #2951
  • @ kanadgupta made their first contribution in #3207

  Full Changelog: v6.15.0...v6.16.0

• 6.15.0 - 2024-04-29
  

  What's Changed

  • Expose EnvHttpProxyAgent to Node.js core bundle, so it can be turned … by @ mcollina in #3148
  • test: add headerslist copy check by @ tsctx in #3156
  • chore: ensure automated v6 release compared to v6 by @ mweberxyz in #3149
  • fetch: do not leak signal listeners by @ mcollina in #3158
  • fix: request cache mode is not the same as request mode by @ tsibley in #3151
  • fetch: don't re-lowercase HeadersList by @ tsctx in #3159
  • fix casing issue when cloning Headers object by @ KhafraDev in #3160
  • build(deps): bump node from 6d0f18a to db8772d in /build by @ dependabot in #3163
  • fix header cloning bug by @ tsctx in #3162
  • chore: change bench naming for h2 by @ metcoder95 in #3165
  • expose WebSocket related events in node bundle by @ KhafraDev in #3167
  • feat: add support for if-match on retry handler by @ metcoder95 in #3144
  • fix: correct firing order of abort events by @ tsctx in #3169
  • create fast MessageEvent by @ KhafraDev in #3170
  • chore: add explicitly @ fastify/busboy by @ Uzlopak in #3172
  • chore: remove sinon as dev dependency by @ Uzlopak in #3171
  • webidl changes by @ KhafraDev in #3175
  • preserve dictionary key name in webidl errors by @ KhafraDev in #3176

  New Contributors

  • @ tsibley made their first contribution in #3151

  Full Changelog: v6.14.1...v6.15.0

• 6.14.1 - 2024-04-23
  

  What's Changed

  • fix: tweak keep-alive timeout implementation by @ mweberxyz in #3145
  • build(deps-dev): bump borp from 0.11.0 to 0.12.0 by @ dependabot in #3153
  • build(deps): bump node from ad255c6 to 6d0f18a in /build by @ dependabot in #3154
  • fix(EnvHttpProxyAgent): prefer lowercase env vars by @ 10xLaCroixDrinker in #3152

  Full Changelog: v6.14.0...v6.14.1

• 6.14.0...

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/undici@6.18.2	environment, network	0	1.13 MB	matteo.collina

🚮 Removed packages: npm/undici@6.11.1

View full report↗︎