kodev-org
/
vikunja
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(deps): bump desktop undici to patched versions 

node-gyp's undici 6.26.0 -> 6.27.0 and @electron/get's 7.27.2 -> 7.28.0,
each pinned within its major via overrides so only the security patch is
taken (an open >= range would jump across majors, e.g. to undici 8).

Resolves the 9 open desktop undici Dependabot alerts.
This commit is contained in:
kolaente 2026-06-27 14:34:20 +02:00
parent 7b5b8ecad2
commit 18a0df505b
No known key found for this signature in database
2 changed files with 13 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
desktop/package.json
View File

@ -80,7 +80,9 @@
"tmp": ">=0.2.7", "tmp": ">=0.2.7",
"ip-address": ">=10.1.1", "ip-address": ">=10.1.1",
"form-data": ">=4.0.6", "form-data": ">=4.0.6",
"js-yaml": ">=4.2.0" "js-yaml": ">=4.2.0",
"undici@6": "^6.27.0",
"undici@7": "^7.28.0"
} }
} }
} }

18
desktop/pnpm-lock.yaml
View File

@ -13,6 +13,8 @@ overrides:
ip-address: '>=10.1.1' ip-address: '>=10.1.1'
form-data: '>=4.0.6' form-data: '>=4.0.6'
js-yaml: '>=4.2.0' js-yaml: '>=4.2.0'
undici@6: ^6.27.0
undici@7: ^7.28.0
importers: importers:
@ -1344,12 +1346,12 @@ packages:
undici-types@7.16.0: undici-types@7.16.0:
resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==} resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
undici@6.26.0: undici@6.27.0:
resolution: {integrity: sha512-4yqz8a3n5HmGTlsbADNtr/dJlhkh/55Rq798G6ibiULcXbDtaLpTl1pvdqcbFfeoj3iSi52lePFM7h9H21cw/A==} resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
engines: {node: '>=18.17'} engines: {node: '>=18.17'}
undici@7.27.2: undici@7.28.0:
resolution: {integrity: sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==} resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
engines: {node: '>=20.18.1'} engines: {node: '>=20.18.1'}
universalify@0.1.2: universalify@0.1.2:
@ -1486,7 +1488,7 @@ snapshots:
semver: 7.8.1 semver: 7.8.1
sumchecker: 3.0.1 sumchecker: 3.0.1
optionalDependencies: optionalDependencies:
undici: 7.27.2 undici: 7.28.0
transitivePeerDependencies: transitivePeerDependencies:
- supports-color - supports-color
@ -2649,7 +2651,7 @@ snapshots:
semver: 7.8.1 semver: 7.8.1
tar: 7.5.16 tar: 7.5.16
tinyglobby: 0.2.15 tinyglobby: 0.2.15
undici: 6.26.0 undici: 6.27.0
which: 6.0.1 which: 6.0.1
node-int64@0.4.0: {} node-int64@0.4.0: {}
@ -3048,9 +3050,9 @@ snapshots:
undici-types@7.16.0: {} undici-types@7.16.0: {}
undici@6.26.0: {} undici@6.27.0: {}
undici@7.27.2: undici@7.28.0:
optional: true optional: true
universalify@0.1.2: {} universalify@0.1.2: {}