Commit 87f7e12
fix: update undici override to ^6.24.1 to resolve all security advisories
Updates the undici override from ^6.23.0 to ^6.24.1, resolving:
- CVE-2026-2229: Unhandled Exception in WebSocket (server_max_window_bits)
- CVE-2026-1528: Malicious WebSocket 64-bit length overflow
- CVE-2026-1526: Unbounded Memory Consumption (permessage-deflate)
- CVE-2026-1525: HTTP Request/Response Smuggling
- CVE-2026-1527: CRLF Injection via upgrade option
Keeps @actions/github at v6.0.1 to avoid ESM-only breakage from v9.0.0.
Co-Authored-By: David Konigsberg <davidakonigsberg@gmail.com>1 parent fed7ad1 commit 87f7e12
2 files changed
Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
38 | | - | |
| 38 | + | |
39 | 39 | | |
40 | 40 | | |
0 commit comments