Bump undici from 5.25.2 to 5.26.3

dependabot[bot] commented 8 months ago

Bumps undici from 5.25.2 to 5.26.3.

Release notes

v5.26.3

No release notes provided.

v5.26.2

Security Release, CVE-2023-45143.

v5.26.1

What's Changed

Fix publish undici-types once and for all! by @Ethan-Arrowood in nodejs/undici#2338

Fix node detection omfg by @KhafraDev in nodejs/undici#2341

Full Changelog: https://github.com/nodejs/undici/compare/v5.26.0...v5.26.1

v5.26.0

What's Changed

use npm install instead of npm ci by @Ethan-Arrowood in nodejs/undici#2309

change default header to node by @Ethan-Arrowood in nodejs/undici#2310

chore: change order of the pseudo-headers by @kyrylodolynskyi in nodejs/undici#2308

fix: Agent.Options.factory should accept URL object or string as parameter by @nicole0707 in nodejs/undici#2295

build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by @dependabot in nodejs/undici#2312

test: handle npm ignore-scripts settings by @panva in nodejs/undici#2313

feat: respect --max-http-header-size Node.js flag by @balazsorban44 in nodejs/undici#2234

fix(#2311): End stream after body sent by @metcoder95 in nodejs/undici#2314

disallow setting host header in fetch by @KhafraDev in nodejs/undici#2322

[StepSecurity] ci: Harden GitHub Actions by @step-security-bot in nodejs/undici#2325

fix fetch with coverage enabled by @KhafraDev in nodejs/undici#2330

Fix stuck when using http2 POST Buffer by @binsee in nodejs/undici#2336

fix: 🏷️ add allowH2 to BuildOptions by @binsee in nodejs/undici#2334

fix: 🐛 fix process http2 header by @binsee in nodejs/undici#2332

New Contributors

@kyrylodolynskyi made their first contribution in nodejs/undici#2308

@nicole0707 made their first contribution in nodejs/undici#2295

@balazsorban44 made their first contribution in nodejs/undici#2234

@binsee made their first contribution in nodejs/undici#2336

Full Changelog: https://github.com/nodejs/undici/compare/v5.23.4...v5.26.0

v5.25.3

What's Changed

perf: improve parse-url implementation by @anonrig in nodejs/undici#2286

test: enable websockets inclusion in WPTReport by @panva in nodejs/undici#2284

remove npm run test from pre-commit hook by @dancastillo in nodejs/undici#2296

perf: use @fastify/busboy by @gurgunday in nodejs/undici#2211

Disable finalizationregistry if node code cov by @mcollina in nodejs/undici#2298

New Contributors

@gurgunday made their first contribution in nodejs/undici#2211

... (truncated)

Commits

227b9be 5.26.3
5351f1f include esbuild script in files
12a6218 Bumped v5.26.2
e041de3 Merge pull request from GHSA-wqq4-5wpv-mx2g
c8c80b1 5.26.1
7bcb80c Fix node detection omfg (#2341)
69ea7b9 hopefully this fixes it for good (#2338)
4006aaf Bumped v5.26.0
df97958 fix: 🐛 fix process http2 header (#2332)
b9d8368 fix: 🏷️ add allowH2 to BuildOptions (#2334)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/rstudio/shinyuieditor/network/alerts).

netlify[bot] commented 8 months ago

Deploy Preview for shinyuieditor-storybook failed.

Name	Link
Latest commit	8d9341dd0447e9baf04e5883e4e508657f6d1494
Latest deploy log	https://app.netlify.com/sites/shinyuieditor-storybook/deploys/652d65cb6f40f00008e842c8

nstrayer commented 8 months ago

@dependabot rebase

dependabot[bot] commented 8 months ago

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

rstudio / shinyuieditor