Skip to content

Bump undici from 6.27.0 to 7.29.0 - #159

Merged
IvanPleshkov merged 2 commits into
masterfrom
dependabot/npm_and_yarn/undici-8.6.0
Aug 3, 2026
Merged

Bump undici from 6.27.0 to 7.29.0#159
IvanPleshkov merged 2 commits into
masterfrom
dependabot/npm_and_yarn/undici-8.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps undici from 6.27.0 to 8.6.0.

Release notes

Sourced from undici's releases.

v8.6.0

What's Changed

New Contributors

Full Changelog: nodejs/undici@v8.5.0...v8.6.0

v8.5.0

⚠️ Security Release

This release line addresses 8 security advisories. Most are fixed in v8.5.0; the SOCKS5 pool-reuse issue was fixed earlier in v8.2.0.

Action required: Upgrade to undici 8.5.0 or later.

npm install undici@^8.5.0

... (truncated)

Commits
  • 6f86196 Bumped v8.6.0 (#5491)
  • 61ddd8e fix: requeue h2 requests after goaway (#5473)
  • c5085ef feat: support HTTP QUERY method (RFC 10008) (#5459)
  • c144fd6 build(deps): bump github/codeql-action/analyze from 4.36.1 to 4.36.2 (#5477)
  • 782ad38 build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 (#5484)
  • c4e045a build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#5482)
  • de960db build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#5478)
  • 1132de8 build(deps): bump fastify/github-action-merge-dependabot (#5480)
  • 3acb7ba build(deps): bump github/codeql-action/upload-sarif (#5481)
  • 88c4254 build(deps): bump github/codeql-action/init from 4.36.1 to 4.36.2 (#5476)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [undici](https://github.com/nodejs/undici) from 6.27.0 to 8.6.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.27.0...v8.6.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026
undici 8 removed the legacy dispatch handler protocol ("Remove legacy
handler wrappers" in v8.0.0), so its Agent rejects the old-style
handlers produced by Node's built-in fetch on Node 22/24 with
"invalid onRequestStart method" — this is what broke CI.

undici 7 is the only major with the bidirectional handler compat
layer (WrapHandler/UnwrapHandler): it accepts both the old protocol
(fetch on Node 22/24) and the new one (fetch on Node 26+), which also
fixes the "invalid onError method" failure from #134.

Also add a dependabot ignore for undici major bumps until the REST
client stops mixing npm undici with the built-in fetch.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@IvanPleshkov IvanPleshkov changed the title Bump undici from 6.27.0 to 8.6.0 Bump undici from 6.27.0 to 7.29.0 Aug 3, 2026
@IvanPleshkov

Copy link
Copy Markdown
Contributor

I changed version to the 7.29.0 because v8 does not work on Node 22 and 24

@IvanPleshkov
IvanPleshkov merged commit 27b342a into master Aug 3, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/undici-8.6.0 branch August 3, 2026 12:18
@IvanPleshkov IvanPleshkov mentioned this pull request Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants