Skip to content

Commit fc43a99

Browse files
philIipmeta-codesync[bot]
authored andcommitted
upgrade undici from 5.29.0 to 6.23.0
Summary: Upgrade the undici devDependency in react-native/dev-middleware from ^5.29.0 to ^6.23.0 to address security vulnerabilities. undici v6 drops the fastify/busboy dependency and requires Node.js >= 18, which is already satisfied by the engine requirements. The API surface used (Agent, request) remains compatible. Changelog: [Internal] Reviewed By: robhogan Differential Revision: D93298172
1 parent 66a7057 commit fc43a99

3 files changed

Lines changed: 5 additions & 12 deletions

File tree

packages/dev-middleware/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@
4747
"devDependencies": {
4848
"@react-native/debugger-shell": "0.85.0-main",
4949
"selfsigned": "^4.0.0",
50-
"undici": "^5.29.0",
50+
"undici": "^6.23.0",
5151
"wait-for-expect": "^3.0.2"
5252
},
5353
"engines": {

yarn.lock

Lines changed: 4 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1211,11 +1211,6 @@
12111211
dependencies:
12121212
cross-spawn "^7.0.3"
12131213

1214-
"@fastify/busboy@^2.0.0":
1215-
version "2.1.1"
1216-
resolved "https://registry.yarnpkg.com/@fastify/busboy/-/busboy-2.1.1.tgz#b9da6a878a371829a0502c9b6c1c143ef6663f4d"
1217-
integrity sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==
1218-
12191214
"@hapi/hoek@^9.0.0", "@hapi/hoek@^9.3.0":
12201215
version "9.3.0"
12211216
resolved "https://registry.yarnpkg.com/@hapi/hoek/-/hoek-9.3.0.tgz#8368869dcb735be2e7f5cb7647de78e167a251fb"
@@ -9043,12 +9038,10 @@ undici-types@~6.21.0:
90439038
resolved "https://registry.yarnpkg.com/undici-types/-/undici-types-6.21.0.tgz#691d00af3909be93a7faa13be61b3a5b50ef12cb"
90449039
integrity sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==
90459040

9046-
undici@^5.29.0:
9047-
version "5.29.0"
9048-
resolved "https://registry.yarnpkg.com/undici/-/undici-5.29.0.tgz#419595449ae3f2cdcba3580a2e8903399bd1f5a3"
9049-
integrity sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==
9050-
dependencies:
9051-
"@fastify/busboy" "^2.0.0"
9041+
undici@^6.23.0:
9042+
version "6.23.0"
9043+
resolved "https://registry.yarnpkg.com/undici/-/undici-6.23.0.tgz#7953087744d9095a96f115de3140ca3828aff3a4"
9044+
integrity sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==
90529045

90539046
unicode-canonical-property-names-ecmascript@^2.0.0:
90549047
version "2.0.0"

0 commit comments

Comments
 (0)