[Snyk] Upgrade undici from 5.19.1 to 5.22.0

[snyk-bot]

Snyk has created this PR to upgrade undici from 5.19.1 to 5.22.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-04-20.

Release notes

Package name: undici

• 5.22.0 - 2023-04-20
  

  What's Changed

  • build(deps-dev): bump tsd from 0.27.0 to 0.28.1 by @ dependabot in #2042
  • build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @ dependabot in #2040
  • fix: handle opaque origin in sameOrigin by @ KhafraDev in #2053
  • test: add typescript import test back by @ KhafraDev in #2054
  • fix: use getMaxListeners when available by @ KhafraDev in #2063
  • feat: allow overriding hwm by @ ronag in #2057
  • fix: there is no sync connector by @ ronag in #2059
  • fix: rename .wasm to -wasm to appease jest by @ KhafraDev in #2064
  • fix: set content-length when using FormData body w/ request by @ KhafraDev in #2066
  • refactor: unify error body handling by @ ronag in #2060
  • fix: close and destroy overlap by @ ronag in #2068
  • remove node 12 from test matrix by @ ronag in #2069
  • fix: don't leak socket if client is destroyed while connecting by @ ronag in #2058
  • fix: flaky leak test by @ ronag in #2070
  • test: update wpts by @ KhafraDev in #2073
  • perf: latin1 by @ ronag in #2075
  • fix: mock fetch headers shouldn't be an array by @ KhafraDev in #2080

  Full Changelog: v5.21.2...v5.22.0

• 5.21.2 - 2023-04-09
  

  What's Changed

  • Content disposition parsing by @ KhafraDev in #2051
  • fix: clear set-cookie headers by @ KhafraDev in #2052

  Full Changelog: v5.21.1...v5.21.2

• 5.21.1 - 2023-04-08
  Read more
• 5.21.0 - 2023-03-13
  Read more
• 5.20.0 - 2023-02-18
  

  What's Changed

  • perf: improve cookie parsing performance by @ KhafraDev in #1931
  • fix: disable websocket wpts in ci :( by @ KhafraDev in #1932
  • fix: Allow “undefined“ as value in headers by @ pan93412 in #1929
  • feat: Support autoSelectFamily when connecting. by @ ShogunPanda in #1914
  • fix: copy cookies when cloning haders by @ KhafraDev in #1936
  • test: more logs in wpt runner by @ KhafraDev in #1933
  • feat: change headersTimeout and bodyTimeout to 300s by @ kyrylkov in #1937

  Full Changelog: v5.19.1...v5.20.0

• 5.19.1 - 2023-02-13
  

  ⚠️ Security Release ⚠️

  • Regular Expression Denial of Service in Headers with CVE-2023-24807
  • CRLF Injection in Nodejs ‘undici’ via host with CVE-2023-23936

  This release is part of the Node.js security release train: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/

from undici GitHub release notes

Commit messages

Package name: undici

• 6870d5b 5.22.0
• 9041e9f fix: mock fetch headers shouldn't be an array (#2080)
• 472c40e perf: latin1 (#2075)
• 3b3ee20 test: update wpts (#2073)
• 97154f5 fix: flaky leak test (#2070)
• 3e91915 fix: don't leak socket if client is destroyed while connecting (#2058)
• 852bf6e remove node 12 from test matrix (#2069)
• 2ff2e1d fix: close and destroy overlap (#2068)
• 6eb954c refactor: unify error body handling (#2060)
• 9aa639b fix: set content-length when using FormData body w/ request (#2066)
• 25c3230 fix: rename .wasm to -wasm to appease jest (#2064)
• 8349d26 fix: there is no sync connector (#2059)
• ded60f6 feat: allow overriding hwm (#2057)
• 5ca10aa fix: use getMaxListeners when available (#2063)
• dfaec78 test: add typescript import test back (#2054)
• fa4ba00 fix: handle opaque origin in sameOrigin (#2053)
• 8c07892 build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 (#2040)
• 31884e6 build(deps-dev): bump tsd from 0.27.0 to 0.28.1 (#2042)
• b20405e 5.21.2
• 0562e9b fix: clear set-cookie headers (#2052)
• fb84aac Content disposition parsing (#2051)
• 2d94417 5.21.1
• a1846e5 fetch: fix leak (#2049)
• 816dcaa fix: set window option properly (#2048)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs