From c0bfb7883a0b93444d5723aec42b2103a452dc29 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 28 Oct 2026 09:13:46 +0000
Subject: [PATCH] fix(deps): raise the release-it undici override to 7.30.1

undici 7.18.0-7.30.0 crashes the process on a response carrying more
than five content codings (CVE-2026-109869 / GHSA-xjj6-f33q-929c).
release-it pins undici exactly at 7.29.0, so the existing parent-scoped
override is the only way to move it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011ya3spf9t3bpNJmV8qDy7J
---
 mcp-server/package-lock.json | 36 +++---------------------------------
 mcp-server/package.json      |  2 +-
 2 files changed, 4 insertions(+), 34 deletions(-)

diff --git a/mcp-server/package-lock.json b/mcp-server/package-lock.json
index d9c714b..071e98c 100644
--- a/mcp-server/package-lock.json
+++ b/mcp-server/package-lock.json
@@ -3216,9 +3216,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -3240,9 +3237,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -3264,9 +3258,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -3288,9 +3279,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -5016,9 +5004,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.29.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz",
-      "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==",
+      "version": "7.30.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.1.tgz",
+      "integrity": "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -5279,9 +5267,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5299,9 +5284,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5319,9 +5301,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5339,9 +5318,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5359,9 +5335,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -5379,9 +5352,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
diff --git a/mcp-server/package.json b/mcp-server/package.json
index 886e182..96f93a1 100644
--- a/mcp-server/package.json
+++ b/mcp-server/package.json
@@ -77,7 +77,7 @@
   },
   "overrides": {
     "release-it": {
-      "undici": "7.29.1"
+      "undici": "7.30.1"
     }
   }
 }