-
Notifications
You must be signed in to change notification settings - Fork 525
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(fetch): properly redirect non-ascii location header url #2971
fix(fetch): properly redirect non-ascii location header url #2971
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is correct spec-wise
@anonrig do you know why this is needed? |
cc @lemire |
Please don't merge it until I have some time to review this tomorrow. |
I am confused |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@KhafraDev This is intended, and the output is correct. Look at the example below:
> let u = new URL('http://127.0.0.1:51619/redirect')
undefined
> u.pathname = '/ì\x95\x88ë\x85\x95'
'/ì\x95\x88ë\x85\x95'
> u
URL {
href: 'http://127.0.0.1:51619/%C3%AC%C2%95%C2%88%C3%AB%C2%85%C2%95',
origin: 'http://127.0.0.1:51619',
protocol: 'http:',
username: '',
password: '',
host: '127.0.0.1:51619',
hostname: '127.0.0.1',
port: '51619',
pathname: '/%C3%AC%C2%95%C2%88%C3%AB%C2%85%C2%95',
search: '',
searchParams: URLSearchParams {},
hash: ''
}
URL specification path state (https://url.spec.whatwg.org/#path-state) says that:
UTF-8 percent-encode c using the path percent-encode set and append the result to buffer.
You can replicate the same behavior on Safari as well. |
lib/web/fetch/util.js
Outdated
@@ -44,7 +44,8 @@ function responseLocationURL (response, requestFragment) { | |||
// 3. If location is a header value, then set location to the result of | |||
// parsing location with response’s URL. | |||
if (location !== null && isValidHeaderValue(location)) { | |||
location = new URL(location, responseURL(response)) | |||
// Make sure location is properly encoded. | |||
location = new URL(Buffer.from(location, 'ascii').toString('utf8'), responseURL(response)) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This seems strange to me: Buffer.from(location, 'ascii').toString('utf8')
. I suggest at least some comments to explain what the intention is.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What does "parsing location with response URL" mean precisely? I interpret it is a pathname setter...
The spec links "parsing" to https://url.spec.whatwg.org/#concept-url-parser
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@lemire
This issue arises when the location header's address is not encoded as with encodeURI
, but is responded in binary form.
For example, while the result of encodeURIComponent('안녕')
is %EC%95%88%EB%85%95
, in binary form, this appears as \xEC\x95\x88\xEB\x85\x95
, same as the outcome of Buffer.from('안녕', 'utf8').toString('binary')
.
What I am attempting in this code is to normalize characters that exist outside the ASCII range into UTF-8 form and URL encode them, to ensure behavior consistent with major web browsers.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@KhafraDev Yes. Parsing with the base will work the same in ada, test here : ada-url/ada#611
This seems like quite a bad issue if it's causing pages not to load. How does Safari handle loading the google webstore in this case (example)? |
I've added comments to make the code clearer and revised it to be more concise. Please take a look. |
*/ | ||
function normalizeBinaryStringToUtf8 (value) { | ||
return Buffer.from(value, 'binary').toString('utf8') | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
let b = Buffer.from(value, 'binary');
if(Buffer.isAscii(b)) { return value; } // skip new string alloc.
return b.toString('utf8'); // must alloc a new string
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No need to call Buffer.from()
. Buffer.isAscii(b)
is a static function.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@anonrig We get at the core of the issue here. The value
is a string not a buffer. At some point it was wrongly interpreted as latin1 (maybe in http
) and so we must now convert it to a buffer and then back to a string.
I think that this function should receive a Buffer and then the Buffer could be interpreted as UTF-8 and we'd be done.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
But this is far beyond the scope of this PR.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The irony is that we seem to try to purposefully (in http) prevent people from sending UTF-8 content as UTF-8... and then we go back and say "no, it is really UTF-8".
Much technical debt.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
* adding test for nodejs/undici#2971 * lint
@anonrig PTAL |
) * fix(fetch): properly redirect non-ascii location header url * chore: fix typo * test: use simpler code * chore: clarify what the code does * chore: add comment * chore: normalize location url only if it contains invalid character * chore: apply suggestion See: nodejs#2971 (comment) * chore: remove redundant condition check
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [undici](https://undici.nodejs.org) ([source](https://github.com/nodejs/undici)) | [`6.10.1` -> `6.10.2`](https://renovatebot.com/diffs/npm/undici/6.10.1/6.10.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/6.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/6.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/6.10.1/6.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/6.10.1/6.10.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>nodejs/undici (undici)</summary> ### [`v6.10.2`](https://github.com/nodejs/undici/releases/tag/v6.10.2) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.1...v6.10.2) #### What's Changed - Do not fail test if streams support typed arrays by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2978 - fix(fetch): properly redirect non-ascii location header url by [@​Xvezda](https://github.com/Xvezda) in [nodejs/undici#2971 - perf: Remove double-stringify in setCookie by [@​peterver](https://github.com/peterver) in [nodejs/undici#2980 - \[fix [#​2982](https://github.com/nodejs/undici/issues/2982)] use DispatcherInterceptor type for Dispatcher#Compose by [@​clovis-guillemot](https://github.com/clovis-guillemot) in [nodejs/undici#2983 - fix: make EventSource properties enumerable by [@​MattBidewell](https://github.com/MattBidewell) in [nodejs/undici#2987 - docs: ✏️ fixed benchmark links by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2991 - fix([#​2986](https://github.com/nodejs/undici/issues/2986)): bad start check by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2992 - fix(H2 Client): bind stream 'data' listener only after received 'response' event by [@​St3ffGv4](https://github.com/St3ffGv4) in [nodejs/undici#2985 - feat: added search input by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2993 - chore: validate responses can be consumed without a Content-Length or… by [@​jacob-ebey](https://github.com/jacob-ebey) in [nodejs/undici#2995 - fix error message by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2998 - Revert "perf: reuse TextDecoder instance ([#​2863](https://github.com/nodejs/undici/issues/2863))" by [@​panva](https://github.com/panva) in [nodejs/undici#2999 - test: remove only by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#3001 #### New Contributors - [@​Xvezda](https://github.com/Xvezda) made their first contribution in [nodejs/undici#2971 - [@​peterver](https://github.com/peterver) made their first contribution in [nodejs/undici#2980 - [@​clovis-guillemot](https://github.com/clovis-guillemot) made their first contribution in [nodejs/undici#2983 - [@​MattBidewell](https://github.com/MattBidewell) made their first contribution in [nodejs/undici#2987 - [@​benhalverson](https://github.com/benhalverson) made their first contribution in [nodejs/undici#2991 - [@​St3ffGv4](https://github.com/St3ffGv4) made their first contribution in [nodejs/undici#2985 - [@​jacob-ebey](https://github.com/jacob-ebey) made their first contribution in [nodejs/undici#2995 **Full Changelog**: nodejs/undici@v6.10.0...v6.10.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/X-oss-byte/Canary-nextjs).
## [1.9.2](v1.9.1...v1.9.2) (2024-04-01) ### Bug Fixes * **deps:** bump the production-dependencies group with 1 update ([#123](#123)) ([beea7b8](beea7b8)), closes [nodejs/undici#2978](nodejs/undici#2978) [nodejs/undici#2971](nodejs/undici#2971) [nodejs/undici#2980](nodejs/undici#2980) [#2982](https://github.com/actions/create-github-app-token/issues/2982) [nodejs/undici#2983](nodejs/undici#2983) [nodejs/undici#2987](nodejs/undici#2987) [nodejs/undici#2991](nodejs/undici#2991) [#2986](https://github.com/actions/create-github-app-token/issues/2986) [nodejs/undici#2992](nodejs/undici#2992) [nodejs/undici#2985](nodejs/undici#2985) [nodejs/undici#2993](nodejs/undici#2993) [nodejs/undici#2995](nodejs/undici#2995) [nodejs/undici#2998](nodejs/undici#2998) [#2863](https://github.com/actions/create-github-app-token/issues/2863) [nodejs/undici#2999](nodejs/undici#2999) [nodejs/undici#3001](nodejs/undici#3001) [nodejs/undici#2971](nodejs/undici#2971) [nodejs/undici#2980](nodejs/undici#2980) [nodejs/undici#2983](nodejs/undici#2983) [nodejs/undici#2987](nodejs/undici#2987) [nodejs/undici#2991](nodejs/undici#2991) [nodejs/undici#2985](nodejs/undici#2985) [nodejs/undici#2995](nodejs/undici#2995) [nodejs/undici#2960](nodejs/undici#2960) [nodejs/undici#2959](nodejs/undici#2959) [nodejs/undici#2969](nodejs/undici#2969) [nodejs/undici#2962](nodejs/undici#2962) [nodejs/undici#2974](nodejs/undici#2974) [nodejs/undici#2967](nodejs/undici#2967) [nodejs/undici#2966](nodejs/undici#2966) [nodejs/undici#2969](nodejs/undici#2969) [nodejs/undici#2962](nodejs/undici#2962) [nodejs/undici#2826](nodejs/undici#2826) [nodejs/undici#2952](nodejs/undici#2952) [#3001](https://github.com/actions/create-github-app-token/issues/3001) [#2863](https://github.com/actions/create-github-app-token/issues/2863) [#2999](https://github.com/actions/create-github-app-token/issues/2999) [#2998](https://github.com/actions/create-github-app-token/issues/2998) [#2993](https://github.com/actions/create-github-app-token/issues/2993) [#2986](https://github.com/actions/create-github-app-token/issues/2986) [#2992](https://github.com/actions/create-github-app-token/issues/2992) [#2991](https://github.com/actions/create-github-app-token/issues/2991) [#2987](https://github.com/actions/create-github-app-token/issues/2987)
… v1.9.2 ) (#224) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | action | patch | `v1.9.1` -> `v1.9.2` | --- ### Release Notes <details> <summary>actions/create-github-app-token (actions/create-github-app-token)</summary> ### [`v1.9.2`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.2) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.1...v1.9.2) ##### Bug Fixes - **deps:** bump the production-dependencies group with 1 update ([#​123](https://github.com/actions/create-github-app-token/issues/123)) ([beea7b8](https://github.com/actions/create-github-app-token/commit/beea7b860ac0b14ca14258aca701da842aa65e30)), closes [nodejs/undici#2978](https://github.com/nodejs/undici/issues/2978) [nodejs/undici#2971](https://github.com/nodejs/undici/issues/2971) [nodejs/undici#2980](https://github.com/nodejs/undici/issues/2980) [#​2982](https://github.com/actions/create-github-app-token/issues/2982) [nodejs/undici#2983](https://github.com/nodejs/undici/issues/2983) [nodejs/undici#2987](https://github.com/nodejs/undici/issues/2987) [nodejs/undici#2991](https://github.com/nodejs/undici/issues/2991) [#​2986](https://github.com/actions/create-github-app-token/issues/2986) [nodejs/undici#2992](https://github.com/nodejs/undici/issues/2992) [nodejs/undici#2985](https://github.com/nodejs/undici/issues/2985) [nodejs/undici#2993](https://github.com/nodejs/undici/issues/2993) [nodejs/undici#2995](https://github.com/nodejs/undici/issues/2995) [nodejs/undici#2998](https://github.com/nodejs/undici/issues/2998) [#​2863](https://github.com/actions/create-github-app-token/issues/2863) [nodejs/undici#2999](https://github.com/nodejs/undici/issues/2999) [nodejs/undici#3001](https://github.com/nodejs/undici/issues/3001) [nodejs/undici#2971](https://github.com/nodejs/undici/issues/2971) [nodejs/undici#2980](https://github.com/nodejs/undici/issues/2980) [nodejs/undici#2983](https://github.com/nodejs/undici/issues/2983) [nodejs/undici#2987](https://github.com/nodejs/undici/issues/2987) [nodejs/undici#2991](https://github.com/nodejs/undici/issues/2991) [nodejs/undici#2985](https://github.com/nodejs/undici/issues/2985) [nodejs/undici#2995](https://github.com/nodejs/undici/issues/2995) [nodejs/undici#2960](https://github.com/nodejs/undici/issues/2960) [nodejs/undici#2959](https://github.com/nodejs/undici/issues/2959) [nodejs/undici#2969](https://github.com/nodejs/undici/issues/2969) [nodejs/undici#2962](https://github.com/nodejs/undici/issues/2962) [nodejs/undici#2974](https://github.com/nodejs/undici/issues/2974) [nodejs/undici#2967](https://github.com/nodejs/undici/issues/2967) [nodejs/undici#2966](https://github.com/nodejs/undici/issues/2966) [nodejs/undici#2969](https://github.com/nodejs/undici/issues/2969) [nodejs/undici#2962](https://github.com/nodejs/undici/issues/2962) [nodejs/undici#2826](https://github.com/nodejs/undici/issues/2826) [nodejs/undici#2952](https://github.com/nodejs/undici/issues/2952) [#​3001](https://github.com/actions/create-github-app-token/issues/3001) [#​2863](https://github.com/actions/create-github-app-token/issues/2863) [#​2999](https://github.com/actions/create-github-app-token/issues/2999) [#​2998](https://github.com/actions/create-github-app-token/issues/2998) [#​2993](https://github.com/actions/create-github-app-token/issues/2993) [#​2986](https://github.com/actions/create-github-app-token/issues/2986) [#​2992](https://github.com/actions/create-github-app-token/issues/2992) [#​2991](https://github.com/actions/create-github-app-token/issues/2991) [#​2987](https://github.com/actions/create-github-app-token/issues/2987) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNzkuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI3OS4wIiwidGFyZ2V0QnJhbmNoIjoiZGV2IiwibGFiZWxzIjpbInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iLCJyZW5vdmF0ZS9naXRodWItcmVsZWFzZSIsInR5cGUvcGF0Y2giXX0=--> Co-authored-by: bloopy-boi[bot] <98279278+bloopy-boi[bot]@users.noreply.github.com>
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [undici](https://undici.nodejs.org) ([source](https://github.com/nodejs/undici)) | [`6.6.1` -> `6.11.1`](https://renovatebot.com/diffs/npm/undici/6.6.1/6.11.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/6.6.1/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/6.6.1/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2024-30260](https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7) ### Impact Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. ### Patches This has been patched in nodejs/undici@6805746. Fixes has been released in v5.28.4 and v6.11.1. ### Workarounds use `fetch()` or disable `maxRedirections`. ### References Linzi Shang reported this. * https://hackerone.com/reports/2408074 * GHSA-3787-6prv-h9w3 #### [CVE-2024-30261](https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672) ### Impact If an attacker can alter the `integrity` option passed to `fetch()`, they can let `fetch()` accept requests as valid even if they have been tampered. ### Patches Fixed in nodejs/undici@d542b8c. Fixes has been released in v5.28.4 and v6.11.1. ### Workarounds Ensure that `integrity` cannot be tampered with. ### References https://hackerone.com/reports/2377760 --- ### Release Notes <details> <summary>nodejs/undici (undici)</summary> ### [`v6.11.1`](https://github.com/nodejs/undici/compare/v6.11.0...6df3c738d03dc4014a26640316bf699950d62024) [Compare Source](https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1) ### [`v6.11.0`](https://github.com/nodejs/undici/compare/v6.10.2...ee5f892f3955eaca37730ed30349153ba203e9cd) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0) ### [`v6.10.2`](https://github.com/nodejs/undici/releases/tag/v6.10.2) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.1...v6.10.2) ##### What's Changed - Do not fail test if streams support typed arrays by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2978 - fix(fetch): properly redirect non-ascii location header url by [@​Xvezda](https://github.com/Xvezda) in [nodejs/undici#2971 - perf: Remove double-stringify in setCookie by [@​peterver](https://github.com/peterver) in [nodejs/undici#2980 - \[fix [#​2982](https://github.com/nodejs/undici/issues/2982)] use DispatcherInterceptor type for Dispatcher#Compose by [@​clovis-guillemot](https://github.com/clovis-guillemot) in [nodejs/undici#2983 - fix: make EventSource properties enumerable by [@​MattBidewell](https://github.com/MattBidewell) in [nodejs/undici#2987 - docs: ✏️ fixed benchmark links by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2991 - fix([#​2986](https://github.com/nodejs/undici/issues/2986)): bad start check by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2992 - fix(H2 Client): bind stream 'data' listener only after received 'response' event by [@​St3ffGv4](https://github.com/St3ffGv4) in [nodejs/undici#2985 - feat: added search input by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2993 - chore: validate responses can be consumed without a Content-Length or… by [@​jacob-ebey](https://github.com/jacob-ebey) in [nodejs/undici#2995 - fix error message by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2998 - Revert "perf: reuse TextDecoder instance ([#​2863](https://github.com/nodejs/undici/issues/2863))" by [@​panva](https://github.com/panva) in [nodejs/undici#2999 - test: remove only by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#3001 ##### New Contributors - [@​Xvezda](https://github.com/Xvezda) made their first contribution in [nodejs/undici#2971 - [@​peterver](https://github.com/peterver) made their first contribution in [nodejs/undici#2980 - [@​clovis-guillemot](https://github.com/clovis-guillemot) made their first contribution in [nodejs/undici#2983 - [@​MattBidewell](https://github.com/MattBidewell) made their first contribution in [nodejs/undici#2987 - [@​benhalverson](https://github.com/benhalverson) made their first contribution in [nodejs/undici#2991 - [@​St3ffGv4](https://github.com/St3ffGv4) made their first contribution in [nodejs/undici#2985 - [@​jacob-ebey](https://github.com/jacob-ebey) made their first contribution in [nodejs/undici#2995 **Full Changelog**: nodejs/undici@v6.10.0...v6.10.2 ### [`v6.10.1`](https://github.com/nodejs/undici/compare/v6.10.0...dd3918fee4f90e02fb93ff1bc04e707144041938) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.0...v6.10.1) ### [`v6.10.0`](https://github.com/nodejs/undici/releases/tag/v6.10.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.9.0...v6.10.0) #### What's Changed - test: fix flakyness of issue-803 test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2960 - Cleanup format by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2959 - Chore: run tests daily against node nightly by [@​mweberxyz](https://github.com/mweberxyz) in [nodejs/undici#2969 - fix: fix retry handler option by [@​acommodari](https://github.com/acommodari) in [nodejs/undici#2962 - build(deps): bump node from `4999fa1` to `577f8eb` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2974 - feat(TS): add types for composed dispatchers by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2967 - fix: count for error response and network errors by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2966 #### New Contributors - [@​mweberxyz](https://github.com/mweberxyz) made their first contribution in [nodejs/undici#2969 - [@​acommodari](https://github.com/acommodari) made their first contribution in [nodejs/undici#2962 **Full Changelog**: nodejs/undici@v6.9.0...v6.10.0 ### [`v6.9.0`](https://github.com/nodejs/undici/releases/tag/v6.9.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.8.0...v6.9.0) #### What's Changed - feat: add new dispatch compose by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2826 - ci: add macos-latest to test-matrix by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2952 - types: align RequestInit.body type with lib.dom.ts by [@​jdufresne](https://github.com/jdufresne) in [nodejs/undici#2956 - ci: pin versions of github actions by [@​UlisesGascon](https://github.com/UlisesGascon) in [nodejs/undici#2957 - fetch: improve output for FormData, Response, Request by [@​mertcanaltin](https://github.com/mertcanaltin) in [nodejs/undici#2955 - perf: optimize collectASequenceOfBytes by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2958 #### New Contributors - [@​jdufresne](https://github.com/jdufresne) made their first contribution in [nodejs/undici#2956 - [@​UlisesGascon](https://github.com/UlisesGascon) made their first contribution in [nodejs/undici#2957 **Full Changelog**: nodejs/undici@v6.8.0...v6.9.0 ### [`v6.8.0`](https://github.com/nodejs/undici/releases/tag/v6.8.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.7.1...v6.8.0) #### What's Changed - fix: send correct SNI for proxy connections by [@​chrros95](https://github.com/chrros95) in [nodejs/undici#2939 - build(deps): bump node from `8bf9240` to `7bfef1d` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2937 - fetch: improve util.inspect output for web specifications by [@​mertcanaltin](https://github.com/mertcanaltin) in [nodejs/undici#2938 - ci: fix broken ci on windows and node v21 because of libuv bug by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2941 - perf: improve getResolveErrorBodyCallback by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2940 - fix: don't assign kAgent twice by [@​ronag](https://github.com/ronag) in [nodejs/undici#2942 - perf: dump immediatly if known size exceeds limit by [@​ronag](https://github.com/ronag) in [nodejs/undici#2882 - build(deps): bump node from `7bfef1d` to `4999fa1` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2946 - try to fix windows failure by [@​ronag](https://github.com/ronag) in [nodejs/undici#2950 - perf: improve parsing form-data by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2944 #### New Contributors - [@​chrros95](https://github.com/chrros95) made their first contribution in [nodejs/undici#2939 **Full Changelog**: nodejs/undici@v6.7.1...v6.8.0 ### [`v6.7.1`](https://github.com/nodejs/undici/releases/tag/v6.7.1) [Compare Source](https://github.com/nodejs/undici/compare/v6.7.0...v6.7.1) #### What's Changed - fetch: use EOL of os-module by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2915 - ci: only send codecov from ubuntu and node by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2914 - tests: improve skip for unix.js tests, remove skipped tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2916 - chore: fix typo in isHistoryNavigation comments by [@​kachick](https://github.com/kachick) in [nodejs/undici#2920 - fix(benchmark): set body correctly by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2918 - chore: increase test coverage to 100% for /lib/api/api-request.js by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2912 - fix: chunksDecode cuts off 3 characters at the end if having BOM by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2922 - docs: clarify URI parsing behavior of ProxyAgent constructor by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2893 - implement sync formdata parser by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2911 - Fix docs links and add examples to sidebar by [@​tastypackets](https://github.com/tastypackets) in [nodejs/undici#2895 - doc: update diagnostics channel request headers type change by [@​jessezhang91](https://github.com/jessezhang91) in [nodejs/undici#2925 - perf: optimize getResolveErrorBodyCallback by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2921 - override request dispatcher from init by [@​matthieusieben](https://github.com/matthieusieben) in [nodejs/undici#2928 - add busboy tests by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2924 - fix(benchmark): make it fair by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2929 - Revert "chore: remove no-simd wasm" by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2935 - build(deps): bump node from `d3271e4` to `8bf9240` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2936 - Flip link between docs and README by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2933 #### New Contributors - [@​kachick](https://github.com/kachick) made their first contribution in [nodejs/undici#2920 - [@​tastypackets](https://github.com/tastypackets) made their first contribution in [nodejs/undici#2895 - [@​jessezhang91](https://github.com/jessezhang91) made their first contribution in [nodejs/undici#2925 - [@​matthieusieben](https://github.com/matthieusieben) made their first contribution in [nodejs/undici#2928 **Full Changelog**: nodejs/undici@v6.7.0...v6.7.1 ### [`v6.7.0`](https://github.com/nodejs/undici/releases/tag/v6.7.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.6.2...v6.7.0) #### What's Changed - test: remove t.diagnostics() calls in push-dont-push.js test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2715 - fix: fix flaky debug test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2714 - fix: HTTP2 tweaks by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2711 - test: improve cookie tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2693 - test: response.url after redirect is set to target url by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2716 - chore: remove mocha and chai by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2696 - test: replace t.pass with t.ok by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2721 - perf: remove redundant operation in FormData by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2726 - Add support for passing iterable objects as headers by [@​JaoodxD](https://github.com/JaoodxD) in [nodejs/undici#2708 - chore: refine esbuild & node detection by [@​mochaaP](https://github.com/mochaaP) in [nodejs/undici#2677 - chore: rephrase some comments by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2717 - test: replace t.type with t.ok and instanceof by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2720 - remove useless options in web streams by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2729 - Let's add superagent to the benchmark. closes [#​2730](https://github.com/nodejs/undici/issues/2730) by [@​eddienubes](https://github.com/eddienubes) in [nodejs/undici#2731 - convert node build to latin1 by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2673 - simplify formData body parsing by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2735 - chore: migrate a batch of tests to node test runner no. 1 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2719 - chore: migrate a batch of tests to node test runner no. 2 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2737 - chore: migrate a batch of tests to node test runner no. 4 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2739 - chore: migrate a batch of tests to node test runner no. 5 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2740 - chore: migrate a batch of tests to node test runner no. 3 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2738 - chore: migrate a batch of tests to node test runner no. 6 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2741 - chore: migrate a batch of tests to node test runner no. 8 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2744 - chore: migrate a batch of tests to node test runner no. 7 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2742 - build(deps-dev): bump cronometro from 2.0.2 to 3.0.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2749 - perf: always use the same prototype Iterator by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2743 - chore: migrate a batch of tests to node test runner no. 9, remove tap by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2746 - chore: remove usage of http-errors in proxy example by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2753 - fix: dont ship wasm files of llhttp via npm by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2752 - fix: handle request body as late as possible by [@​ronag](https://github.com/ronag) in [nodejs/undici#2734 - perf(tree): avoid recursive calls by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2755 - docs: fix favicon by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2758 - chore: use mermaid engine and mermaid in markdown by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2759 - chore: remove sinon dev dependency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2767 - tests: skip test/node-test/debug on node 21.6.2 and windows by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2765 - chore: improve usage of skip in tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2761 - feat: improve mock error breadcrumbs by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2774 - expose MessageEvent in fetch bundle by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2770 - test: always exit with 0 when running in Node's Daily WPT Report CI job by [@​panva](https://github.com/panva) in [nodejs/undici#2778 - fix: add node prefix for util to fix issue in env with min version node 18 by [@​riderx](https://github.com/riderx) in [nodejs/undici#2775 - perf: improve perf of parseRawHeaders by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2781 - fix: make mock-agent.js test more resilient by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2780 - chore: make some test run even without internet connection by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2786 - mock: improve validateReplyParameters by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2783 - perf: improve TernarySearchTree by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2782 - fix: convert HeadersInit to sequence/dictionary correctly by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2784 - chore: improve getFieldValue by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2785 - Add RetryHandler to sidebar by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2797 - Add RetryAgent by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2798 - build(deps): bump step-security/harden-runner from 2.6.0 to 2.7.0 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2690 - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2393 - build(deps): bump actions/upload-artifact from 3.1.3 to 4.3.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2799 - build(deps): bump node from 20-alpine to 21-alpine in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2803 - perf: improve sort algorithm by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2756 - refactor: move web stuff into their own folder by [@​ronag](https://github.com/ronag) in [nodejs/undici#2793 - `s/ dispactgher/dispatcher/` by [@​steveluscher](https://github.com/steveluscher) in [nodejs/undici#2807 - Use paralellelRequests instead of connections to calculate req/sec in benchmarks by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2800 - Split out documentation into separate directory by [@​Ethan-Arrowood](https://github.com/Ethan-Arrowood) in [nodejs/undici#2788 - build(deps): bump fastify/github-action-merge-dependabot from 3.9.1 to 3.10.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2820 - build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.3 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2821 - build(deps): bump github/codeql-action from 3.23.2 to 3.24.4 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2818 - build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2819 - fix: move CNAME and .nojekyll to root by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2822 - remove all fetchParam event handlers by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2823 - feat: refactor ProxyAgent constructor to also accept single URL argument by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2810 - fix: isCTLExcludingHtab by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2790 - refactor: move files into logical folders by [@​ronag](https://github.com/ronag) in [nodejs/undici#2813 - refactor: move fixed-queeu to dispatcher and rm node folder by [@​ronag](https://github.com/ronag) in [nodejs/undici#2827 - chore: create package.json in benchmarks by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2766 - build(deps): bump github/codeql-action from 3.24.4 to 3.24.5 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2829 - chore: use lts for pubish types workflow by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2830 - add dispatcher option to Request by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2831 - fix url referrer wpt by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2832 - refactor: remove own sort logic by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2834 - fix(fetch): prevent crash when `fetch` is aborted with `null` as the `AbortSignal's` `reason` by [@​steveluscher](https://github.com/steveluscher) in [nodejs/undici#2833 - refactor: avoid http2 dynamic dispatch in socket handlers by [@​ronag](https://github.com/ronag) in [nodejs/undici#2839 - build(deps-dev): bump proxy from 1.0.2 to 2.1.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2137 - perf(tree): reduce overhead of build TernarySearchTree by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2840 - webidl: implement resizable arraybuffer checks by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2094 - websocket server only needs to reply with a single subprotocol by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2845 - unite webidl stringification by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2843 - fix: deflake connect-timeout test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2851 - fix: coverage reporting by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2763 - fix: pipelining logic is not relevant for h2 by [@​ronag](https://github.com/ronag) in [nodejs/undici#2850 - processBody doesn't need to return a promise by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2858 - refactor: split client into client-h1/h2 by [@​ronag](https://github.com/ronag) in [nodejs/undici#2848 - ci: fix concurrency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2862 - perf: improve performance of isValidSubprotocol by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2861 - perf: reuse TextDecoder instance by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2863 - chore: restructure benchmarks, use kebab-case by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2864 - cookies: improve perf of toIMFDate by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2867 - cookies: fix validateCookiePath by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2866 - refactor: move out more h2 from core client by [@​ronag](https://github.com/ronag) in [nodejs/undici#2860 - mock: improve test coverage of buildHeadersFromArray by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2872 - fix: remove broken build request hack by [@​ronag](https://github.com/ronag) in [nodejs/undici#2874 - chore: filenames should use kebab-case by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2873 - refactor: split out last h1 specific code from core by [@​ronag](https://github.com/ronag) in [nodejs/undici#2876 - fix: make pipelining limit work for h2 by [@​ronag](https://github.com/ronag) in [nodejs/undici#2875 - fix: http2 doesn't have pipelining queue by [@​ronag](https://github.com/ronag) in [nodejs/undici#2878 - fix: minor connect cleanup by [@​ronag](https://github.com/ronag) in [nodejs/undici#2877 - Request headers types by [@​JaoodxD](https://github.com/JaoodxD) in [nodejs/undici#2879 - ci: remove concurrency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2880 - fix: prefer queueMicrotask by [@​ronag](https://github.com/ronag) in [nodejs/undici#2881 - chore: remove no-simd wasm by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2871 - cookies: improve validateCookieValue by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2883 - cookies: improve validateCookieName by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2884 - Properly parse set-cookie header using http2 by [@​jeanp413](https://github.com/jeanp413) in [nodejs/undici#2886 - doc deprecate bodymixin.formData by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2892 - perf: optimize check invalid field-vchar by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2889 - build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2897 - fix issue 2898 by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2900 - tests: ignore catch block when requiring crypto module by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2901 - websocket: remove dead code in parseCloseBody by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2902 - fix: tests dont need process.exit by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2909 - chore: remove proxyquire by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2906 - chore: remove import-fresh as devDependency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2908 - perf(headers): a single set-cookie by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2903 - websocket: improve .close() by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2865 - feat: add sending data benchmark by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2905 - ci: integrate workflows into nodejs.yml by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2899 #### New Contributors - [@​JaoodxD](https://github.com/JaoodxD) made their first contribution in [nodejs/undici#2708 - [@​eddienubes](https://github.com/eddienubes) made their first contribution in [nodejs/undici#2731 - [@​riderx](https://github.com/riderx) made their first contribution in [nodejs/undici#2775 - [@​steveluscher](https://github.com/steveluscher) made their first contribution in [nodejs/undici#2807 - [@​jeanp413](https://github.com/jeanp413) made their first contribution in [nodejs/undici#2886 **Full Changelog**: nodejs/undici@v6.6.2...v6.7.0 ### [`v6.6.2`](https://github.com/nodejs/undici/releases/tag/v6.6.2) [Compare Source](https://github.com/nodejs/undici/compare/v6.6.1...v6.6.2) #### What's Changed - fix: webidl.brandcheck non strict should throw by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2683 - fix: expose EventSource for nodejs by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2645 - test: more information from debug tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2695 - Fix broken test on linux by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2699 - fix: fix the linux patch by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2703 - test(wpt): mark timed out tests as 'failed' by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2644 - build(deps-dev): bump borp from 0.5.0 to 0.9.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2702 - perf: use insertion sort algorithm by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2706 - fix: run node tests on merge by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2707 #### New Contributors - [@​rossilor95](https://github.com/rossilor95) made their first contribution in [nodejs/undici#2644 **Full Changelog**: nodejs/undici@v6.6.1...v6.6.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/octokit/rest.js). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [undici](https://undici.nodejs.org) ([source](https://github.com/nodejs/undici)) | [`6.9.0` -> `6.11.1`](https://renovatebot.com/diffs/npm/undici/6.9.0/6.11.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/6.9.0/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/6.9.0/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>nodejs/undici (undici)</summary> ### [`v6.11.1`](https://github.com/nodejs/undici/compare/v6.11.0...6df3c738d03dc4014a26640316bf699950d62024) [Compare Source](https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1) ### [`v6.11.0`](https://github.com/nodejs/undici/compare/v6.10.2...ee5f892f3955eaca37730ed30349153ba203e9cd) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0) ### [`v6.10.2`](https://github.com/nodejs/undici/releases/tag/v6.10.2) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.1...v6.10.2) ##### What's Changed - Do not fail test if streams support typed arrays by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2978 - fix(fetch): properly redirect non-ascii location header url by [@​Xvezda](https://github.com/Xvezda) in [nodejs/undici#2971 - perf: Remove double-stringify in setCookie by [@​peterver](https://github.com/peterver) in [nodejs/undici#2980 - \[fix [#​2982](https://github.com/nodejs/undici/issues/2982)] use DispatcherInterceptor type for Dispatcher#Compose by [@​clovis-guillemot](https://github.com/clovis-guillemot) in [nodejs/undici#2983 - fix: make EventSource properties enumerable by [@​MattBidewell](https://github.com/MattBidewell) in [nodejs/undici#2987 - docs: ✏️ fixed benchmark links by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2991 - fix([#​2986](https://github.com/nodejs/undici/issues/2986)): bad start check by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2992 - fix(H2 Client): bind stream 'data' listener only after received 'response' event by [@​St3ffGv4](https://github.com/St3ffGv4) in [nodejs/undici#2985 - feat: added search input by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2993 - chore: validate responses can be consumed without a Content-Length or… by [@​jacob-ebey](https://github.com/jacob-ebey) in [nodejs/undici#2995 - fix error message by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2998 - Revert "perf: reuse TextDecoder instance ([#​2863](https://github.com/nodejs/undici/issues/2863))" by [@​panva](https://github.com/panva) in [nodejs/undici#2999 - test: remove only by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#3001 ##### New Contributors - [@​Xvezda](https://github.com/Xvezda) made their first contribution in [nodejs/undici#2971 - [@​peterver](https://github.com/peterver) made their first contribution in [nodejs/undici#2980 - [@​clovis-guillemot](https://github.com/clovis-guillemot) made their first contribution in [nodejs/undici#2983 - [@​MattBidewell](https://github.com/MattBidewell) made their first contribution in [nodejs/undici#2987 - [@​benhalverson](https://github.com/benhalverson) made their first contribution in [nodejs/undici#2991 - [@​St3ffGv4](https://github.com/St3ffGv4) made their first contribution in [nodejs/undici#2985 - [@​jacob-ebey](https://github.com/jacob-ebey) made their first contribution in [nodejs/undici#2995 **Full Changelog**: nodejs/undici@v6.10.0...v6.10.2 ### [`v6.10.1`](https://github.com/nodejs/undici/compare/v6.10.0...dd3918fee4f90e02fb93ff1bc04e707144041938) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.0...v6.10.1) ### [`v6.10.0`](https://github.com/nodejs/undici/releases/tag/v6.10.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.9.0...v6.10.0) #### What's Changed - test: fix flakyness of issue-803 test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2960 - Cleanup format by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2959 - Chore: run tests daily against node nightly by [@​mweberxyz](https://github.com/mweberxyz) in [nodejs/undici#2969 - fix: fix retry handler option by [@​acommodari](https://github.com/acommodari) in [nodejs/undici#2962 - build(deps): bump node from `4999fa1` to `577f8eb` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2974 - feat(TS): add types for composed dispatchers by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2967 - fix: count for error response and network errors by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2966 #### New Contributors - [@​mweberxyz](https://github.com/mweberxyz) made their first contribution in [nodejs/undici#2969 - [@​acommodari](https://github.com/acommodari) made their first contribution in [nodejs/undici#2962 **Full Changelog**: nodejs/undici@v6.9.0...v6.10.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/X-oss-byte/Nextjs).
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [undici](https://undici.nodejs.org) ([source](https://github.com/nodejs/undici)) | [`6.6.2` -> `6.11.1`](https://renovatebot.com/diffs/npm/undici/6.6.2/6.11.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/undici/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/undici/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/undici/6.6.2/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/undici/6.6.2/6.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2024-30260](https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7) ### Impact Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. ### Patches This has been patched in nodejs/undici@6805746. Fixes has been released in v5.28.4 and v6.11.1. ### Workarounds use `fetch()` or disable `maxRedirections`. ### References Linzi Shang reported this. * https://hackerone.com/reports/2408074 * GHSA-3787-6prv-h9w3 #### [CVE-2024-30261](https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672) ### Impact If an attacker can alter the `integrity` option passed to `fetch()`, they can let `fetch()` accept requests as valid even if they have been tampered. ### Patches Fixed in nodejs/undici@d542b8c. Fixes has been released in v5.28.4 and v6.11.1. ### Workarounds Ensure that `integrity` cannot be tampered with. ### References https://hackerone.com/reports/2377760 --- ### Release Notes <details> <summary>nodejs/undici (undici)</summary> ### [`v6.11.1`](https://github.com/nodejs/undici/compare/v6.11.0...6df3c738d03dc4014a26640316bf699950d62024) [Compare Source](https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1) ### [`v6.11.0`](https://github.com/nodejs/undici/compare/v6.10.2...ee5f892f3955eaca37730ed30349153ba203e9cd) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0) ### [`v6.10.2`](https://github.com/nodejs/undici/releases/tag/v6.10.2) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.1...v6.10.2) ##### What's Changed - Do not fail test if streams support typed arrays by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2978 - fix(fetch): properly redirect non-ascii location header url by [@​Xvezda](https://github.com/Xvezda) in [nodejs/undici#2971 - perf: Remove double-stringify in setCookie by [@​peterver](https://github.com/peterver) in [nodejs/undici#2980 - \[fix [#​2982](https://github.com/nodejs/undici/issues/2982)] use DispatcherInterceptor type for Dispatcher#Compose by [@​clovis-guillemot](https://github.com/clovis-guillemot) in [nodejs/undici#2983 - fix: make EventSource properties enumerable by [@​MattBidewell](https://github.com/MattBidewell) in [nodejs/undici#2987 - docs: ✏️ fixed benchmark links by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2991 - fix([#​2986](https://github.com/nodejs/undici/issues/2986)): bad start check by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2992 - fix(H2 Client): bind stream 'data' listener only after received 'response' event by [@​St3ffGv4](https://github.com/St3ffGv4) in [nodejs/undici#2985 - feat: added search input by [@​benhalverson](https://github.com/benhalverson) in [nodejs/undici#2993 - chore: validate responses can be consumed without a Content-Length or… by [@​jacob-ebey](https://github.com/jacob-ebey) in [nodejs/undici#2995 - fix error message by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2998 - Revert "perf: reuse TextDecoder instance ([#​2863](https://github.com/nodejs/undici/issues/2863))" by [@​panva](https://github.com/panva) in [nodejs/undici#2999 - test: remove only by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#3001 ##### New Contributors - [@​Xvezda](https://github.com/Xvezda) made their first contribution in [nodejs/undici#2971 - [@​peterver](https://github.com/peterver) made their first contribution in [nodejs/undici#2980 - [@​clovis-guillemot](https://github.com/clovis-guillemot) made their first contribution in [nodejs/undici#2983 - [@​MattBidewell](https://github.com/MattBidewell) made their first contribution in [nodejs/undici#2987 - [@​benhalverson](https://github.com/benhalverson) made their first contribution in [nodejs/undici#2991 - [@​St3ffGv4](https://github.com/St3ffGv4) made their first contribution in [nodejs/undici#2985 - [@​jacob-ebey](https://github.com/jacob-ebey) made their first contribution in [nodejs/undici#2995 **Full Changelog**: nodejs/undici@v6.10.0...v6.10.2 ### [`v6.10.1`](https://github.com/nodejs/undici/compare/v6.10.0...dd3918fee4f90e02fb93ff1bc04e707144041938) [Compare Source](https://github.com/nodejs/undici/compare/v6.10.0...v6.10.1) ### [`v6.10.0`](https://github.com/nodejs/undici/releases/tag/v6.10.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.9.0...v6.10.0) #### What's Changed - test: fix flakyness of issue-803 test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2960 - Cleanup format by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2959 - Chore: run tests daily against node nightly by [@​mweberxyz](https://github.com/mweberxyz) in [nodejs/undici#2969 - fix: fix retry handler option by [@​acommodari](https://github.com/acommodari) in [nodejs/undici#2962 - build(deps): bump node from `4999fa1` to `577f8eb` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2974 - feat(TS): add types for composed dispatchers by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2967 - fix: count for error response and network errors by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2966 #### New Contributors - [@​mweberxyz](https://github.com/mweberxyz) made their first contribution in [nodejs/undici#2969 - [@​acommodari](https://github.com/acommodari) made their first contribution in [nodejs/undici#2962 **Full Changelog**: nodejs/undici@v6.9.0...v6.10.0 ### [`v6.9.0`](https://github.com/nodejs/undici/releases/tag/v6.9.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.8.0...v6.9.0) #### What's Changed - feat: add new dispatch compose by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2826 - ci: add macos-latest to test-matrix by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2952 - types: align RequestInit.body type with lib.dom.ts by [@​jdufresne](https://github.com/jdufresne) in [nodejs/undici#2956 - ci: pin versions of github actions by [@​UlisesGascon](https://github.com/UlisesGascon) in [nodejs/undici#2957 - fetch: improve output for FormData, Response, Request by [@​mertcanaltin](https://github.com/mertcanaltin) in [nodejs/undici#2955 - perf: optimize collectASequenceOfBytes by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2958 #### New Contributors - [@​jdufresne](https://github.com/jdufresne) made their first contribution in [nodejs/undici#2956 - [@​UlisesGascon](https://github.com/UlisesGascon) made their first contribution in [nodejs/undici#2957 **Full Changelog**: nodejs/undici@v6.8.0...v6.9.0 ### [`v6.8.0`](https://github.com/nodejs/undici/releases/tag/v6.8.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.7.1...v6.8.0) #### What's Changed - fix: send correct SNI for proxy connections by [@​chrros95](https://github.com/chrros95) in [nodejs/undici#2939 - build(deps): bump node from `8bf9240` to `7bfef1d` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2937 - fetch: improve util.inspect output for web specifications by [@​mertcanaltin](https://github.com/mertcanaltin) in [nodejs/undici#2938 - ci: fix broken ci on windows and node v21 because of libuv bug by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2941 - perf: improve getResolveErrorBodyCallback by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2940 - fix: don't assign kAgent twice by [@​ronag](https://github.com/ronag) in [nodejs/undici#2942 - perf: dump immediatly if known size exceeds limit by [@​ronag](https://github.com/ronag) in [nodejs/undici#2882 - build(deps): bump node from `7bfef1d` to `4999fa1` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2946 - try to fix windows failure by [@​ronag](https://github.com/ronag) in [nodejs/undici#2950 - perf: improve parsing form-data by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2944 #### New Contributors - [@​chrros95](https://github.com/chrros95) made their first contribution in [nodejs/undici#2939 **Full Changelog**: nodejs/undici@v6.7.1...v6.8.0 ### [`v6.7.1`](https://github.com/nodejs/undici/releases/tag/v6.7.1) [Compare Source](https://github.com/nodejs/undici/compare/v6.7.0...v6.7.1) #### What's Changed - fetch: use EOL of os-module by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2915 - ci: only send codecov from ubuntu and node by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2914 - tests: improve skip for unix.js tests, remove skipped tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2916 - chore: fix typo in isHistoryNavigation comments by [@​kachick](https://github.com/kachick) in [nodejs/undici#2920 - fix(benchmark): set body correctly by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2918 - chore: increase test coverage to 100% for /lib/api/api-request.js by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2912 - fix: chunksDecode cuts off 3 characters at the end if having BOM by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2922 - docs: clarify URI parsing behavior of ProxyAgent constructor by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2893 - implement sync formdata parser by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2911 - Fix docs links and add examples to sidebar by [@​tastypackets](https://github.com/tastypackets) in [nodejs/undici#2895 - doc: update diagnostics channel request headers type change by [@​jessezhang91](https://github.com/jessezhang91) in [nodejs/undici#2925 - perf: optimize getResolveErrorBodyCallback by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2921 - override request dispatcher from init by [@​matthieusieben](https://github.com/matthieusieben) in [nodejs/undici#2928 - add busboy tests by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2924 - fix(benchmark): make it fair by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2929 - Revert "chore: remove no-simd wasm" by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2935 - build(deps): bump node from `d3271e4` to `8bf9240` in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2936 - Flip link between docs and README by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2933 #### New Contributors - [@​kachick](https://github.com/kachick) made their first contribution in [nodejs/undici#2920 - [@​tastypackets](https://github.com/tastypackets) made their first contribution in [nodejs/undici#2895 - [@​jessezhang91](https://github.com/jessezhang91) made their first contribution in [nodejs/undici#2925 - [@​matthieusieben](https://github.com/matthieusieben) made their first contribution in [nodejs/undici#2928 **Full Changelog**: nodejs/undici@v6.7.0...v6.7.1 ### [`v6.7.0`](https://github.com/nodejs/undici/releases/tag/v6.7.0) [Compare Source](https://github.com/nodejs/undici/compare/v6.6.2...v6.7.0) #### What's Changed - test: remove t.diagnostics() calls in push-dont-push.js test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2715 - fix: fix flaky debug test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2714 - fix: HTTP2 tweaks by [@​metcoder95](https://github.com/metcoder95) in [nodejs/undici#2711 - test: improve cookie tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2693 - test: response.url after redirect is set to target url by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2716 - chore: remove mocha and chai by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2696 - test: replace t.pass with t.ok by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2721 - perf: remove redundant operation in FormData by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2726 - Add support for passing iterable objects as headers by [@​JaoodxD](https://github.com/JaoodxD) in [nodejs/undici#2708 - chore: refine esbuild & node detection by [@​mochaaP](https://github.com/mochaaP) in [nodejs/undici#2677 - chore: rephrase some comments by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2717 - test: replace t.type with t.ok and instanceof by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2720 - remove useless options in web streams by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2729 - Let's add superagent to the benchmark. closes [#​2730](https://github.com/nodejs/undici/issues/2730) by [@​eddienubes](https://github.com/eddienubes) in [nodejs/undici#2731 - convert node build to latin1 by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2673 - simplify formData body parsing by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2735 - chore: migrate a batch of tests to node test runner no. 1 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2719 - chore: migrate a batch of tests to node test runner no. 2 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2737 - chore: migrate a batch of tests to node test runner no. 4 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2739 - chore: migrate a batch of tests to node test runner no. 5 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2740 - chore: migrate a batch of tests to node test runner no. 3 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2738 - chore: migrate a batch of tests to node test runner no. 6 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2741 - chore: migrate a batch of tests to node test runner no. 8 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2744 - chore: migrate a batch of tests to node test runner no. 7 by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2742 - build(deps-dev): bump cronometro from 2.0.2 to 3.0.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2749 - perf: always use the same prototype Iterator by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2743 - chore: migrate a batch of tests to node test runner no. 9, remove tap by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2746 - chore: remove usage of http-errors in proxy example by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2753 - fix: dont ship wasm files of llhttp via npm by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2752 - fix: handle request body as late as possible by [@​ronag](https://github.com/ronag) in [nodejs/undici#2734 - perf(tree): avoid recursive calls by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2755 - docs: fix favicon by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2758 - chore: use mermaid engine and mermaid in markdown by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2759 - chore: remove sinon dev dependency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2767 - tests: skip test/node-test/debug on node 21.6.2 and windows by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2765 - chore: improve usage of skip in tests by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2761 - feat: improve mock error breadcrumbs by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2774 - expose MessageEvent in fetch bundle by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2770 - test: always exit with 0 when running in Node's Daily WPT Report CI job by [@​panva](https://github.com/panva) in [nodejs/undici#2778 - fix: add node prefix for util to fix issue in env with min version node 18 by [@​riderx](https://github.com/riderx) in [nodejs/undici#2775 - perf: improve perf of parseRawHeaders by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2781 - fix: make mock-agent.js test more resilient by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2780 - chore: make some test run even without internet connection by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2786 - mock: improve validateReplyParameters by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2783 - perf: improve TernarySearchTree by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2782 - fix: convert HeadersInit to sequence/dictionary correctly by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2784 - chore: improve getFieldValue by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2785 - Add RetryHandler to sidebar by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2797 - Add RetryAgent by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2798 - build(deps): bump step-security/harden-runner from 2.6.0 to 2.7.0 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2690 - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2393 - build(deps): bump actions/upload-artifact from 3.1.3 to 4.3.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2799 - build(deps): bump node from 20-alpine to 21-alpine in /build by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2803 - perf: improve sort algorithm by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2756 - refactor: move web stuff into their own folder by [@​ronag](https://github.com/ronag) in [nodejs/undici#2793 - `s/ dispactgher/dispatcher/` by [@​steveluscher](https://github.com/steveluscher) in [nodejs/undici#2807 - Use paralellelRequests instead of connections to calculate req/sec in benchmarks by [@​mcollina](https://github.com/mcollina) in [nodejs/undici#2800 - Split out documentation into separate directory by [@​Ethan-Arrowood](https://github.com/Ethan-Arrowood) in [nodejs/undici#2788 - build(deps): bump fastify/github-action-merge-dependabot from 3.9.1 to 3.10.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2820 - build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.3 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2821 - build(deps): bump github/codeql-action from 3.23.2 to 3.24.4 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2818 - build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2819 - fix: move CNAME and .nojekyll to root by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2822 - remove all fetchParam event handlers by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2823 - feat: refactor ProxyAgent constructor to also accept single URL argument by [@​rossilor95](https://github.com/rossilor95) in [nodejs/undici#2810 - fix: isCTLExcludingHtab by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2790 - refactor: move files into logical folders by [@​ronag](https://github.com/ronag) in [nodejs/undici#2813 - refactor: move fixed-queeu to dispatcher and rm node folder by [@​ronag](https://github.com/ronag) in [nodejs/undici#2827 - chore: create package.json in benchmarks by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2766 - build(deps): bump github/codeql-action from 3.24.4 to 3.24.5 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2829 - chore: use lts for pubish types workflow by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2830 - add dispatcher option to Request by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2831 - fix url referrer wpt by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2832 - refactor: remove own sort logic by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2834 - fix(fetch): prevent crash when `fetch` is aborted with `null` as the `AbortSignal's` `reason` by [@​steveluscher](https://github.com/steveluscher) in [nodejs/undici#2833 - refactor: avoid http2 dynamic dispatch in socket handlers by [@​ronag](https://github.com/ronag) in [nodejs/undici#2839 - build(deps-dev): bump proxy from 1.0.2 to 2.1.1 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2137 - perf(tree): reduce overhead of build TernarySearchTree by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2840 - webidl: implement resizable arraybuffer checks by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2094 - websocket server only needs to reply with a single subprotocol by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2845 - unite webidl stringification by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2843 - fix: deflake connect-timeout test by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2851 - fix: coverage reporting by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2763 - fix: pipelining logic is not relevant for h2 by [@​ronag](https://github.com/ronag) in [nodejs/undici#2850 - processBody doesn't need to return a promise by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2858 - refactor: split client into client-h1/h2 by [@​ronag](https://github.com/ronag) in [nodejs/undici#2848 - ci: fix concurrency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2862 - perf: improve performance of isValidSubprotocol by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2861 - perf: reuse TextDecoder instance by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2863 - chore: restructure benchmarks, use kebab-case by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2864 - cookies: improve perf of toIMFDate by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2867 - cookies: fix validateCookiePath by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2866 - refactor: move out more h2 from core client by [@​ronag](https://github.com/ronag) in [nodejs/undici#2860 - mock: improve test coverage of buildHeadersFromArray by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2872 - fix: remove broken build request hack by [@​ronag](https://github.com/ronag) in [nodejs/undici#2874 - chore: filenames should use kebab-case by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2873 - refactor: split out last h1 specific code from core by [@​ronag](https://github.com/ronag) in [nodejs/undici#2876 - fix: make pipelining limit work for h2 by [@​ronag](https://github.com/ronag) in [nodejs/undici#2875 - fix: http2 doesn't have pipelining queue by [@​ronag](https://github.com/ronag) in [nodejs/undici#2878 - fix: minor connect cleanup by [@​ronag](https://github.com/ronag) in [nodejs/undici#2877 - Request headers types by [@​JaoodxD](https://github.com/JaoodxD) in [nodejs/undici#2879 - ci: remove concurrency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2880 - fix: prefer queueMicrotask by [@​ronag](https://github.com/ronag) in [nodejs/undici#2881 - chore: remove no-simd wasm by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2871 - cookies: improve validateCookieValue by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2883 - cookies: improve validateCookieName by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2884 - Properly parse set-cookie header using http2 by [@​jeanp413](https://github.com/jeanp413) in [nodejs/undici#2886 - doc deprecate bodymixin.formData by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2892 - perf: optimize check invalid field-vchar by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2889 - build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by [@​dependabot](https://github.com/dependabot) in [nodejs/undici#2897 - fix issue 2898 by [@​KhafraDev](https://github.com/KhafraDev) in [nodejs/undici#2900 - tests: ignore catch block when requiring crypto module by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2901 - websocket: remove dead code in parseCloseBody by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2902 - fix: tests dont need process.exit by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2909 - chore: remove proxyquire by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2906 - chore: remove import-fresh as devDependency by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2908 - perf(headers): a single set-cookie by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2903 - websocket: improve .close() by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2865 - feat: add sending data benchmark by [@​tsctx](https://github.com/tsctx) in [nodejs/undici#2905 - ci: integrate workflows into nodejs.yml by [@​Uzlopak](https://github.com/Uzlopak) in [nodejs/undici#2899 #### New Contributors - [@​JaoodxD](https://github.com/JaoodxD) made their first contribution in [nodejs/undici#2708 - [@​eddienubes](https://github.com/eddienubes) made their first contribution in [nodejs/undici#2731 - [@​riderx](https://github.com/riderx) made their first contribution in [nodejs/undici#2775 - [@​steveluscher](https://github.com/steveluscher) made their first contribution in [nodejs/undici#2807 - [@​jeanp413](https://github.com/jeanp413) made their first contribution in [nodejs/undici#2886 **Full Changelog**: nodejs/undici@v6.6.2...v6.7.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/toeverything/AFFiNE). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoiY2FuYXJ5In0=-->
…o v1.10.0 (#728) This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | action | minor | `v1.9.0` -> `v1.10.0` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/actions/create-github-app-token/badge)](https://securityscorecards.dev/viewer/?uri=github.com/actions/create-github-app-token) | --- ### Release Notes <details> <summary>actions/create-github-app-token (actions/create-github-app-token)</summary> ### [`v1.10.0`](https://github.com/actions/create-github-app-token/releases/tag/v1.10.0) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.3...v1.10.0) ##### Features - **`private-key`:** escaped newlines will be replaced ([#​132](https://github.com/actions/create-github-app-token/issues/132)) ([9d23fb9](https://github.com/actions/create-github-app-token/commit/9d23fb93dd620572046d85c7c1032b488c12514f)) ### [`v1.9.3`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.3) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.2...v1.9.3) ##### Bug Fixes - **deps:** bump undici from 6.10.2 to 6.11.1 ([#​125](https://github.com/actions/create-github-app-token/issues/125)) ([3c223c7](https://github.com/actions/create-github-app-token/commit/3c223c7336e276235eb843dd4e6ad42147199cbf)), closes [#​3024](https://github.com/actions/create-github-app-token/issues/3024) [nodejs/undici#3044](https://github.com/nodejs/undici/issues/3044) [#​3023](https://github.com/actions/create-github-app-token/issues/3023) [nodejs/undici#3025](https://github.com/nodejs/undici/issues/3025) [nodejs/undici#3024](https://github.com/nodejs/undici/issues/3024) [nodejs/undici#3034](https://github.com/nodejs/undici/issues/3034) [nodejs/undici#3038](https://github.com/nodejs/undici/issues/3038) [nodejs/undici#2947](https://github.com/nodejs/undici/issues/2947) [nodejs/undici#3040](https://github.com/nodejs/undici/issues/3040) [nodejs/undici#3036](https://github.com/nodejs/undici/issues/3036) [nodejs/undici#3041](https://github.com/nodejs/undici/issues/3041) [#​3024](https://github.com/actions/create-github-app-token/issues/3024) [#​3041](https://github.com/actions/create-github-app-token/issues/3041) [#​3036](https://github.com/actions/create-github-app-token/issues/3036) ### [`v1.9.2`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.2) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.1...v1.9.2) ##### Bug Fixes - **deps:** bump the production-dependencies group with 1 update ([#​123](https://github.com/actions/create-github-app-token/issues/123)) ([beea7b8](https://github.com/actions/create-github-app-token/commit/beea7b860ac0b14ca14258aca701da842aa65e30)), closes [nodejs/undici#2978](https://github.com/nodejs/undici/issues/2978) [nodejs/undici#2971](https://github.com/nodejs/undici/issues/2971) [nodejs/undici#2980](https://github.com/nodejs/undici/issues/2980) [#​2982](https://github.com/actions/create-github-app-token/issues/2982) [nodejs/undici#2983](https://github.com/nodejs/undici/issues/2983) [nodejs/undici#2987](https://github.com/nodejs/undici/issues/2987) [nodejs/undici#2991](https://github.com/nodejs/undici/issues/2991) [#​2986](https://github.com/actions/create-github-app-token/issues/2986) [nodejs/undici#2992](https://github.com/nodejs/undici/issues/2992) [nodejs/undici#2985](https://github.com/nodejs/undici/issues/2985) [nodejs/undici#2993](https://github.com/nodejs/undici/issues/2993) [nodejs/undici#2995](https://github.com/nodejs/undici/issues/2995) [nodejs/undici#2998](https://github.com/nodejs/undici/issues/2998) [#​2863](https://github.com/actions/create-github-app-token/issues/2863) [nodejs/undici#2999](https://github.com/nodejs/undici/issues/2999) [nodejs/undici#3001](https://github.com/nodejs/undici/issues/3001) [nodejs/undici#2971](https://github.com/nodejs/undici/issues/2971) [nodejs/undici#2980](https://github.com/nodejs/undici/issues/2980) [nodejs/undici#2983](https://github.com/nodejs/undici/issues/2983) [nodejs/undici#2987](https://github.com/nodejs/undici/issues/2987) [nodejs/undici#2991](https://github.com/nodejs/undici/issues/2991) [nodejs/undici#2985](https://github.com/nodejs/undici/issues/2985) [nodejs/undici#2995](https://github.com/nodejs/undici/issues/2995) [nodejs/undici#2960](https://github.com/nodejs/undici/issues/2960) [nodejs/undici#2959](https://github.com/nodejs/undici/issues/2959) [nodejs/undici#2969](https://github.com/nodejs/undici/issues/2969) [nodejs/undici#2962](https://github.com/nodejs/undici/issues/2962) [nodejs/undici#2974](https://github.com/nodejs/undici/issues/2974) [nodejs/undici#2967](https://github.com/nodejs/undici/issues/2967) [nodejs/undici#2966](https://github.com/nodejs/undici/issues/2966) [nodejs/undici#2969](https://github.com/nodejs/undici/issues/2969) [nodejs/undici#2962](https://github.com/nodejs/undici/issues/2962) [nodejs/undici#2826](https://github.com/nodejs/undici/issues/2826) [nodejs/undici#2952](https://github.com/nodejs/undici/issues/2952) [#​3001](https://github.com/actions/create-github-app-token/issues/3001) [#​2863](https://github.com/actions/create-github-app-token/issues/2863) [#​2999](https://github.com/actions/create-github-app-token/issues/2999) [#​2998](https://github.com/actions/create-github-app-token/issues/2998) [#​2993](https://github.com/actions/create-github-app-token/issues/2993) [#​2986](https://github.com/actions/create-github-app-token/issues/2986) [#​2992](https://github.com/actions/create-github-app-token/issues/2992) [#​2991](https://github.com/actions/create-github-app-token/issues/2991) [#​2987](https://github.com/actions/create-github-app-token/issues/2987) ### [`v1.9.1`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.1) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.0...v1.9.1) ##### Bug Fixes - clarify `owner` input description ([#​118](https://github.com/actions/create-github-app-token/issues/118)) ([d9bc169](https://github.com/actions/create-github-app-token/commit/d9bc16919cdbdb07543eb732aa872437384e296f)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjMxMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJzZW12ZXI6bm9uZSJdfQ==--> Co-authored-by: mazi-renovate[bot] <161091290+mazi-renovate[bot]@users.noreply.github.com>
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | action | minor | `v1.9.0` -> `v1.10.0` | | [actions/setup-go](https://github.com/actions/setup-go) | action | patch | `v5.0.0` -> `v5.0.1` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | action | minor | `v0.15.11` -> `v0.16.0` | | [defenseunicorns/zarf](https://github.com/defenseunicorns/zarf) | | minor | `v0.32.5` -> `v0.33.2` | | [github/codeql-action](https://github.com/github/codeql-action) | action | patch | `v3.25.3` -> `v3.25.6` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | minor | `v5.0.0` -> `v5.1.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | action | patch | `v2.3.1` -> `v2.3.3` | --- ### Release Notes <details> <summary>actions/create-github-app-token (actions/create-github-app-token)</summary> ### [`v1.10.0`](https://github.com/actions/create-github-app-token/releases/tag/v1.10.0) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.3...v1.10.0) ##### Features - **`private-key`:** escaped newlines will be replaced ([#​132](https://github.com/actions/create-github-app-token/issues/132)) ([9d23fb9](https://github.com/actions/create-github-app-token/commit/9d23fb93dd620572046d85c7c1032b488c12514f)) ### [`v1.9.3`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.3) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.2...v1.9.3) ##### Bug Fixes - **deps:** bump undici from 6.10.2 to 6.11.1 ([#​125](https://github.com/actions/create-github-app-token/issues/125)) ([3c223c7](https://github.com/actions/create-github-app-token/commit/3c223c7336e276235eb843dd4e6ad42147199cbf)), closes [#​3024](https://github.com/actions/create-github-app-token/issues/3024) [nodejs/undici#3044](https://github.com/nodejs/undici/issues/3044) [#​3023](https://github.com/actions/create-github-app-token/issues/3023) [nodejs/undici#3025](https://github.com/nodejs/undici/issues/3025) [nodejs/undici#3024](https://github.com/nodejs/undici/issues/3024) [nodejs/undici#3034](https://github.com/nodejs/undici/issues/3034) [nodejs/undici#3038](https://github.com/nodejs/undici/issues/3038) [nodejs/undici#2947](https://github.com/nodejs/undici/issues/2947) [nodejs/undici#3040](https://github.com/nodejs/undici/issues/3040) [nodejs/undici#3036](https://github.com/nodejs/undici/issues/3036) [nodejs/undici#3041](https://github.com/nodejs/undici/issues/3041) [#​3024](https://github.com/actions/create-github-app-token/issues/3024) [#​3041](https://github.com/actions/create-github-app-token/issues/3041) [#​3036](https://github.com/actions/create-github-app-token/issues/3036) ### [`v1.9.2`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.2) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.1...v1.9.2) ##### Bug Fixes - **deps:** bump the production-dependencies group with 1 update ([#​123](https://github.com/actions/create-github-app-token/issues/123)) ([beea7b8](https://github.com/actions/create-github-app-token/commit/beea7b860ac0b14ca14258aca701da842aa65e30)), closes [nodejs/undici#2978](https://github.com/nodejs/undici/issues/2978) [nodejs/undici#2971](https://github.com/nodejs/undici/issues/2971) [nodejs/undici#2980](https://github.com/nodejs/undici/issues/2980) [#​2982](https://github.com/actions/create-github-app-token/issues/2982) [nodejs/undici#2983](https://github.com/nodejs/undici/issues/2983) [nodejs/undici#2987](https://github.com/nodejs/undici/issues/2987) [nodejs/undici#2991](https://github.com/nodejs/undici/issues/2991) [#​2986](https://github.com/actions/create-github-app-token/issues/2986) [nodejs/undici#2992](https://github.com/nodejs/undici/issues/2992) [nodejs/undici#2985](https://github.com/nodejs/undici/issues/2985) [nodejs/undici#2993](https://github.com/nodejs/undici/issues/2993) [nodejs/undici#2995](https://github.com/nodejs/undici/issues/2995) [nodejs/undici#2998](https://github.com/nodejs/undici/issues/2998) [#​2863](https://github.com/actions/create-github-app-token/issues/2863) [nodejs/undici#2999](https://github.com/nodejs/undici/issues/2999) [nodejs/undici#3001](https://github.com/nodejs/undici/issues/3001) [nodejs/undici#2971](https://github.com/nodejs/undici/issues/2971) [nodejs/undici#2980](https://github.com/nodejs/undici/issues/2980) [nodejs/undici#2983](https://github.com/nodejs/undici/issues/2983) [nodejs/undici#2987](https://github.com/nodejs/undici/issues/2987) [nodejs/undici#2991](https://github.com/nodejs/undici/issues/2991) [nodejs/undici#2985](https://github.com/nodejs/undici/issues/2985) [nodejs/undici#2995](https://github.com/nodejs/undici/issues/2995) [nodejs/undici#2960](https://github.com/nodejs/undici/issues/2960) [nodejs/undici#2959](https://github.com/nodejs/undici/issues/2959) [nodejs/undici#2969](https://github.com/nodejs/undici/issues/2969) [nodejs/undici#2962](https://github.com/nodejs/undici/issues/2962) [nodejs/undici#2974](https://github.com/nodejs/undici/issues/2974) [nodejs/undici#2967](https://github.com/nodejs/undici/issues/2967) [nodejs/undici#2966](https://github.com/nodejs/undici/issues/2966) [nodejs/undici#2969](https://github.com/nodejs/undici/issues/2969) [nodejs/undici#2962](https://github.com/nodejs/undici/issues/2962) [nodejs/undici#2826](https://github.com/nodejs/undici/issues/2826) [nodejs/undici#2952](https://github.com/nodejs/undici/issues/2952) [#​3001](https://github.com/actions/create-github-app-token/issues/3001) [#​2863](https://github.com/actions/create-github-app-token/issues/2863) [#​2999](https://github.com/actions/create-github-app-token/issues/2999) [#​2998](https://github.com/actions/create-github-app-token/issues/2998) [#​2993](https://github.com/actions/create-github-app-token/issues/2993) [#​2986](https://github.com/actions/create-github-app-token/issues/2986) [#​2992](https://github.com/actions/create-github-app-token/issues/2992) [#​2991](https://github.com/actions/create-github-app-token/issues/2991) [#​2987](https://github.com/actions/create-github-app-token/issues/2987) ### [`v1.9.1`](https://github.com/actions/create-github-app-token/releases/tag/v1.9.1) [Compare Source](https://github.com/actions/create-github-app-token/compare/v1.9.0...v1.9.1) ##### Bug Fixes - clarify `owner` input description ([#​118](https://github.com/actions/create-github-app-token/issues/118)) ([d9bc169](https://github.com/actions/create-github-app-token/commit/d9bc16919cdbdb07543eb732aa872437384e296f)) </details> <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v5.0.1`](https://github.com/actions/setup-go/releases/tag/v5.0.1) [Compare Source](https://github.com/actions/setup-go/compare/v5.0.0...v5.0.1) #### What's Changed - Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by [@​dependabot](https://github.com/dependabot) , [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [actions/setup-go#465 - Update documentation with latest V5 release notes by [@​ab](https://github.com/ab) in [actions/setup-go#459 - Update version documentation by [@​178inaba](https://github.com/178inaba) in [actions/setup-go#458 - Documentation update of `actions/setup-go` to v5 by [@​chenrui333](https://github.com/chenrui333) in [actions/setup-go#449 #### New Contributors - [@​ab](https://github.com/ab) made their first contribution in [actions/setup-go#459 **Full Changelog**: actions/setup-go@v5.0.0...v5.0.1 </details> <details> <summary>anchore/sbom-action (anchore/sbom-action)</summary> ### [`v0.16.0`](https://github.com/anchore/sbom-action/releases/tag/v0.16.0): v0.16 [Compare Source](https://github.com/anchore/sbom-action/compare/v0.15.11...v0.16.0) #### Changes in v0.16.0 - Update Syft to v1.4.1 ([#​465](https://github.com/anchore/sbom-action/issues/465)) - Update GitHub artifact client ([#​463](https://github.com/anchore/sbom-action/issues/463)) \[[kzantow](https://github.com/kzantow)] </details> <details> <summary>defenseunicorns/zarf (defenseunicorns/zarf)</summary> ### [`v0.33.2`](https://github.com/defenseunicorns/zarf/releases/tag/v0.33.2) [Compare Source](https://github.com/defenseunicorns/zarf/compare/v0.33.1...v0.33.2) ##### What's Changed - fix: schema integration by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2463 - docs: add contributor covenant code of conduct by [@​salaxander](https://github.com/salaxander) in [zarf-dev/zarf#2462 - docs: fix casing on code of conduct badge by [@​salaxander](https://github.com/salaxander) in [zarf-dev/zarf#2466 - fix(deps): update github.com/anchore/clio digest to [`3c4abf8`](https://github.com/defenseunicorns/zarf/commit/3c4abf8) by [@​renovate](https://github.com/renovate) in [zarf-dev/zarf#2424 - fix: update docker media type in registry by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2476 - fix: adds GetVariableConfig function for packager by [@​decleaver](https://github.com/decleaver) in [zarf-dev/zarf#2475 - test: add tests for remove copies from components to enable refactoring by [@​phillebaba](https://github.com/phillebaba) in [zarf-dev/zarf#2473 - fix!: do not uninstall helm chart after failed install or upgrade by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2456 - feat: inspect --list-images by [@​Noxsios](https://github.com/Noxsios) in [zarf-dev/zarf#2478 - refactor: remove copies from components to a filter by [@​phillebaba](https://github.com/phillebaba) in [zarf-dev/zarf#2474 - chore: add support.md by [@​schristoff](https://github.com/schristoff) in [zarf-dev/zarf#2480 - chore: add a check for go mod tidy by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2481 - fix: use correct sha256 checksum for arm64 injector binary by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2483 - fix: simplify go mod tidy check by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2482 ##### New Contributors - [@​salaxander](https://github.com/salaxander) made their first contribution in [zarf-dev/zarf#2462 - [@​phillebaba](https://github.com/phillebaba) made their first contribution in [zarf-dev/zarf#2473 - [@​schristoff](https://github.com/schristoff) made their first contribution in [zarf-dev/zarf#2480 **Full Changelog**: zarf-dev/zarf@v0.33.1...v0.33.2 ### [`v0.33.1`](https://github.com/defenseunicorns/zarf/releases/tag/v0.33.1) [Compare Source](https://github.com/defenseunicorns/zarf/compare/v0.33.0...v0.33.1) #### What's Changed - fix: add redirect so old zarf base link is compatiable by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2432 - ci: pin third-party gh actions by hash by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2433 - docs: add redirect for examples by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2438 - docs: update contributing and pre-commit by [@​Noxsios](https://github.com/Noxsios) in [zarf-dev/zarf#2439 - ci: fix revive image ref in lint workflow by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2436 - fix: filter on running pods when finding an image for injector pod by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2415 - fix: readme dead links by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2442 - fix: differential package create with non local sources by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2444 - refactor: move variables into separate package by [@​Racer159](https://github.com/Racer159) in [zarf-dev/zarf#2414 - ci: add top level workflow permission to commitlint by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2449 - ci: remove unused env var from codeql workflow by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2450 - chore: cleanup root level files and add SPDX check for Go files by [@​Noxsios](https://github.com/Noxsios) in [zarf-dev/zarf#2431 - feat: config to enable resilient registry by [@​Michael-Kruggel](https://github.com/Michael-Kruggel) in [zarf-dev/zarf#2440 - docs: init package clarity and cleanup by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2447 - ci: compare cves to main by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2448 - test: unpin version in bigbang extension test by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2459 - fix: broken schema from unexpanded embedded variables by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2458 - fix: error on create if an index sha is used by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2429 #### New Contributors - [@​Michael-Kruggel](https://github.com/Michael-Kruggel) made their first contribution in [zarf-dev/zarf#2440 **Full Changelog**: zarf-dev/zarf@v0.33.0...v0.33.1 ### [`v0.33.0`](https://github.com/defenseunicorns/zarf/releases/tag/v0.33.0) [Compare Source](https://github.com/defenseunicorns/zarf/compare/v0.32.6...v0.33.0) #### What's Changed - fix: update deprecated syft packages command to syft scan by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2399 - chore: move helpers to defenseunicorns/pkg by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2402 - fix(deps): update github.com/anchore/clio digest to [`fb5fc4c`](https://github.com/defenseunicorns/zarf/commit/fb5fc4c) by [@​renovate](https://github.com/renovate) in [zarf-dev/zarf#2366 - feat(tools): add yq by [@​zachariahmiller](https://github.com/zachariahmiller) in [zarf-dev/zarf#2406 - chore: switch to use oci lib in defenseunicorns/pkg by [@​AustinAbro321](https://github.com/AustinAbro321) in [zarf-dev/zarf#2404 - fix(deps): update module github.com/defenseunicorns/pkg/helpers to v1 by [@​renovate](https://github.com/renovate) in [zarf-dev/zarf#2411 - fix: use env var for PR title in commitlint workflow to prevent untrusted script injection by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2418 - fix: use default GITHUB_TOKEN for ossf/scorecard-action by [@​bburky](https://github.com/bburky) in [zarf-dev/zarf#2416 - fix: remove duplicate logic for writing image layers to disk concurrently by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2409 - feat: add option to skip cosign lookup during find images by [@​Racer159](https://github.com/Racer159) in [zarf-dev/zarf#2427 - feat: allow chart deploy overrides ALPHA by [@​naveensrinivasan](https://github.com/naveensrinivasan) in [zarf-dev/zarf#2403 - chore: update pull_request_template.md by [@​Noxsios](https://github.com/Noxsios) in [zarf-dev/zarf#2428 - ci: pin k3s image version in k3d github action by [@​lucasrod16](https://github.com/lucasrod16) in [zarf-dev/zarf#2430 - feat(docs): port docs to starlight by [@​Noxsios](https://github.com/Noxsios) in [zarf-dev/zarf#2315 #### New Contributors - [@​zachariahmiller](https://github.com/zachariahmiller) made their first contribution in [zarf-dev/zarf#2406 - [@​bburky](https://github.com/bburky) made their first contribution in [zarf-dev/zarf#2416 **Full Changelog**: zarf-dev/zarf@v0.32.6...v0.33.0 ### [`v0.32.6`](https://github.com/defenseunicorns/zarf/releases/tag/v0.32.6) [Compare Source](https://github.com/defenseunicorns/zarf/compare/v0.32.5...v0.32.6) #### \[0.32.6] - 2024-03-22 > trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~[@​Noxsios](https://github.com/Noxsios) ##### 🚀 Features - \[**ALPHA**] feat: package generation ALPHA by [@​andrewg-xyz](https://github.com/andrewg-xyz) in [#​2269](https://github.com/defenseunicorns/zarf/pull/2269) - *(lib)* feat(lib): configurable log file location by [@​Noxsios](https://github.com/Noxsios) in [#​2380](https://github.com/defenseunicorns/zarf/pull/2380) - \[**BREAKING**] feat!: filter package components with strategy interface by [@​Noxsios](https://github.com/Noxsios) in [#​2321](https://github.com/defenseunicorns/zarf/pull/2321) ##### 🐛 Bug Fixes - fix: refactor create stages into separate lib by [@​lucasrod16](https://github.com/lucasrod16) in [#​2223](https://github.com/defenseunicorns/zarf/pull/2223) - fix: handle registry caBundle as a multiline string by [@​AbrohamLincoln](https://github.com/AbrohamLincoln) in [#​2381](https://github.com/defenseunicorns/zarf/pull/2381) - *(regression)* fix: populate `p.sbomViewFiles` on `deploy` and `mirror` by [@​lucasrod16](https://github.com/lucasrod16) in [#​2386](https://github.com/defenseunicorns/zarf/pull/2386) - fix: allow absolute paths for differential packages by [@​AustinAbro321](https://github.com/AustinAbro321) in [#​2397](https://github.com/defenseunicorns/zarf/pull/2397) - fix: hotfix skeleton publish by [@​Noxsios](https://github.com/Noxsios) in [#​2398](https://github.com/defenseunicorns/zarf/pull/2398) ##### 🚜 Refactor - refactor: split helpers/exec libs by [@​Racer159](https://github.com/Racer159) in [#​2379](https://github.com/defenseunicorns/zarf/pull/2379) ##### 🧪 Testing - test: data injection flake by [@​lucasrod16](https://github.com/lucasrod16) in [#​2361](https://github.com/defenseunicorns/zarf/pull/2361) ##### ⚙️ Miscellaneous Tasks - ci: add commitlint workflow and update contributing guide by [@​lucasrod16](https://github.com/lucasrod16) in [#​2391](https://github.com/defenseunicorns/zarf/pull/2391) ##### 🛡️ Security - *(release)* build: create PRs on `homebrew-tap` by [@​Noxsios](https://github.com/Noxsios) in [#​2385](https://github.com/defenseunicorns/zarf/pull/2385) **Full Changelog**: zarf-dev/zarf@v0.32.5...v0.32.6 </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.25.6`](https://github.com/github/codeql-action/compare/v3.25.5...v3.25.6) [Compare Source](https://github.com/github/codeql-action/compare/v3.25.5...v3.25.6) ### [`v3.25.5`](https://github.com/github/codeql-action/compare/v3.25.4...v3.25.5) [Compare Source](https://github.com/github/codeql-action/compare/v3.25.4...v3.25.5) ### [`v3.25.4`](https://github.com/github/codeql-action/compare/v3.25.3...v3.25.4) [Compare Source](https://github.com/github/codeql-action/compare/v3.25.3...v3.25.4) </details> <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v5.1.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v5.1.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0) #### Important This version changes the default behavior of `latest` to `~> v1`. The next major of this action (v6), will change this to `~> v2`, and will be launched together with GoReleaser v2. #### What's Changed - docs: bump actions to latest major by [@​crazy-max](https://github.com/crazy-max) in [goreleaser/goreleaser-action#435 - chore(deps): bump docker/bake-action from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#436 - chore(deps): bump codecov/codecov-action from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#437 - chore(deps): bump actions/setup-go from 4 to 5 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#443 - chore(deps): bump actions/upload-artifact from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#444 - Delete .kodiak.toml by [@​vedantmgoyal9](https://github.com/vedantmgoyal9) in [goreleaser/goreleaser-action#446 - chore(deps): bump codecov/codecov-action from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#448 - chore(deps): bump ip from 2.0.0 to 2.0.1 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#450 - Upgrade setup-go action version in README by [@​kishaningithub](https://github.com/kishaningithub) in [goreleaser/goreleaser-action#455 - chore(deps): bump tar from 6.1.14 to 6.2.1 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#456 - chore: use corepack to install yarn by [@​crazy-max](https://github.com/crazy-max) in [goreleaser/goreleaser-action#458 - feat: lock this major version of the action to use '~> v1' as 'latest' by [@​caarlos0](https://github.com/caarlos0) in [goreleaser/goreleaser-action#461 - chore(deps): bump semver from 7.6.0 to 7.6.2 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#462 - chore(deps): bump [@​actions/http-client](https://github.com/actions/http-client) from 2.2.0 to 2.2.1 by [@​dependabot](https://github.com/dependabot) in [goreleaser/goreleaser-action#451 #### New Contributors - [@​vedantmgoyal9](https://github.com/vedantmgoyal9) made their first contribution in [goreleaser/goreleaser-action#446 **Full Changelog**: goreleaser/goreleaser-action@v5.0.0...v5.1.0 </details> <details> <summary>ossf/scorecard-action (ossf/scorecard-action)</summary> ### [`v2.3.3`](https://github.com/ossf/scorecard-action/releases/tag/v2.3.3) [Compare Source](https://github.com/ossf/scorecard-action/compare/v2.3.2...v2.3.3) > \[!NOTE]\ > There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag #### What's Changed - 🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by [@​spencerschrock](https://github.com/spencerschrock) in [ossf/scorecard-action#1366 - 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by [@​spencerschrock](https://github.com/spencerschrock) in [ossf/scorecard-action#1374 - 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by [@​spencerschrock](https://github.com/spencerschrock) in [ossf/scorecard-action#1377 For a full changelist of what these include, see the [v5.0.0-rc1](https://github.com/ossf/scorecard/releases/tag/v5.0.0-rc1) and [v5.0.0-rc2](https://github.com/ossf/scorecard/releases/tag/v5.0.0-rc2) release notes. ##### Documentation - 📖 Move token discussion out of main README. by [@​spencerschrock](https://github.com/spencerschrock) in [ossf/scorecard-action#1279 - 📖 link to `ossf/scorecard` workflow instead of maintaining an example by [@​spencerschrock](https://github.com/spencerschrock) in [ossf/scorecard-action#1352 - 📖 update api links to new scorecard.dev site by [@​spencerschrock](https://github.com/spencerschrock) in [ossf/scorecard-action#1376 **Full Changelog**: ossf/scorecard-action@v2.3.1...v2.3.3 ### [`v2.3.2`](https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2) [Compare Source](https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 12pm every weekday,before 11am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/defenseunicorns/maru-runner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInN1cHBvcnQtZGVwcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This relates to...
Rationale
The fetch function behaves differently from major web browsers(chrome, safari, firefox etc), and even CURL (with
-L
option).Here is a minimal reproducible URL I made: https://non-ascii-location-header.sys.workers.dev/redirect
Worker code
By accessing the address at https://non-ascii-location-header.sys.workers.dev/redirect directly
or https://non-ascii-location-header.sys.workers.dev/ first and then making a fetch request to the /redirect path using the developer tools leads to reaching https://non-ascii-location-header.sys.workers.dev/%EC%95%88%EB%85%95
which shows
pathname /%EC%95%88%EB%85%95
as a result.However, using undici fetch function does not behave in the same way.
This issue can also be observed at chrome web store: https://chromewebstore.google.com/detail/gbgmenmdglilmbmemagekpeaodajbeei
I do not have an in-depth understanding of the fetch standard, so if this PR request violates the standard in any way, please feel free to close it.
Thank you.
Changes
Features
Bug Fixes
Breaking Changes and Deprecations
Status