v7.3.0

What's Changed

• fix: sqlite null ref by @ronag in #4016
• fix: sqlite remove unnecessary parameter by @ronag in #4017
• feat: sqlite add set and minor cleanup by @ronag in #4018

Full Changelog: v7.2.3...v7.3.0

v7.2.3

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

What's Changed

• Fix typo in update cache tests action by @flakey5 in #4008

Full Changelog: v7.2.2...v7.2.3

v6.21.1

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

What's Changed

• fix(#3736): back-port 183f8e9 to v6.x by @ggoodman in #3855
• fix(#3817): send servername for SNI on TLS (#3821) [backport] by @metcoder95 in #3864
• fix: sending formdata bodies with http2 (#3863) [backport] by @metcoder95 in #3866
• [Backport v6.x] fix: Fixed the issue that there is no running request when http2 goaway by @github-actions in #3877
• types: [backport] Update return type of RetryCallback (#3851) by @metcoder95 in #3876

Full Changelog: v6.21.0...v6.21.1

v5.28.5

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

Full Changelog: v5.28.4...v5.28.5

v7.2.2

What's Changed

• Update WPT by @github-actions in #3991
• fix: dual-stack retries infinite loop by @luddd3 in #4001
• build(deps): bump codecov/codecov-action from 5.0.7 to 5.1.2 by @dependabot in #3980
• build(deps): bump github/codeql-action from 3.27.0 to 3.28.1 by @dependabot in #4003
• tests: Update Cache Tests by @github-actions in #3965
• ReadableStreamFrom pull until cannot on empty enqueu by @KhafraDev in #4002
• Resolve circular dependency by @mcollina in #4006

Full Changelog: v7.2.1...v7.2.2

v7.2.1

What's Changed

• fix(3951): typo on errorede dns lookup by @metcoder95 in #3956
• feat: add missing error type by @Gigioliva in #3964
• websocket: improve frame parsing by @tsctx in #3447
• fix(#3966): account for network errors by @metcoder95 in #3967
• build(deps-dev): bump @fastify/busboy from 3.1.0 to 3.1.1 by @dependabot in #3971
• Update WPT by @github-actions in #3954
• docs: fix dispatcher stream example links by @luddd3 in #3972
• fix: undici:request:headers does not indicate completion of a response by @legendecas in #3974
• build(deps): bump cronometro from 3.0.2 to 4.0.1 in /benchmarks by @dependabot in #3976
• fix(#3975): do not unref timeout by @metcoder95 in #3977
• fix: bad response on h2 server by @metcoder95 in #3978
• build(deps): bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 by @dependabot in #3981
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in #3983
• chore: ensure automated v7 release compared to v7 by @trivikr in #3986
• test: ignore test for CITGM by @metcoder95 in #3993
• fix: retry flaky test by @metcoder95 in #3992

New Contributors

• @legendecas made their first contribution in #3974

Full Changelog: v7.2.0...v7.2.1

v7.2.0

What's Changed

• fix: dns interceptor undefined function by @luddd3 in #3958
• More cache fixes by @flakey5 in #3955
• [Release] v7.2.0 by @github-actions in #3962

Full Changelog: v7.1.1...v7.2.0

v7.1.1

What's Changed

• fix: publish undici:client:sendHeaders message on H2 by @fengmk2 in #3921
• Add support schedule by @mcollina in #3923
• cache: do not set undefined etag by @mcollina in #3925
• test: cleanup cache tests by @flakey5 in #3926
• fix mimetype parser wrong operator by @tsctx in #3924
• correctly set if-none-match by @mcollina in #3933
• Add example for request + "Garbage Collection" by @WTCT-TOP in #3916
• fix: response error interceptor by @Gigioliva in #3930
• build(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in #3938
• fix(#3937): respect correct host header by @metcoder95 in #3940
• fix: handle case no content type by @Gigioliva in #3931
• support array of headers in WrapHandler by @KhafraDev in #3941
• build(deps): bump step-security/harden-runner from 2.10.1 to 2.10.2 by @dependabot in #3911
• test: Update WPT by @github-actions in #3888
• build(deps-dev): bump @fastify/busboy from 3.0.0 to 3.1.0 by @dependabot in #3939
• Support SQLite unflagged without useless warnings by @mcollina in #3947
• docs: enhance documentation by @metcoder95 in #3945

New Contributors

• @WTCT-TOP made their first contribution in #3916

Full Changelog: v7.1.0...v7.1.1

v7.1.0

What's Changed

• Mark http/2 support as stable by @mcollina in #3893
• test: fix dns interceptor flakiness by @luddd3 in #3902
• fix(#3901): migrate dns interceptor to new hooks by @metcoder95 in #3903
• feat(interceptors): migrate decorator handler to new hooks by @metcoder95 in #3905
• feat: Adjust allowed error codes for detecting node:sqlite by @xconverge in #3900
• build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @dependabot in #3913
• build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.7 by @dependabot in #3910
• Move Tomas to past collaborators by @delvedor in #3909
• docs: add advanced usage examples for ProxyAgent by @mertcanaltin in #3906
• [Release] v7.1.0 by @github-actions in #3922

Full Changelog: v7.0.0...v7.1.0

v7.0.0-alpha.8

What's Changed

• Multiple fixes for SQLiteStore, enable it in CI by @mcollina in #3881
• Update WPT by @github-actions in #3838
• cache: fix stale-while-revalidate and stale-if-error by @flakey5 in #3865
• refactor: port redirect handler to new hooks by @ronag in #3879
• Drop node v18 by @mcollina in #3880
• build(deps-dev): bump borp from 0.18.0 to 0.19.0 by @dependabot in #3882
• perf: store data as blobs in sql cache by @ronag in #3885
• test: add cache testing suite by @flakey5 in #3842

Full Changelog: v7.0.0-alpha.7...v7.0.0-alpha.8