build(deps): bump undici and @sveltejs/kit

[dependabot[bot]]

Bumps undici to 5.26.3 and updates ancestor dependency @sveltejs/kit. These dependencies need to be updated together.

Updates undici from 5.25.2 to 5.26.3

Release notes

Sourced from undici's releases.

v5.26.3

No release notes provided.

v5.26.2

Security Release, CVE-2023-45143.

v5.26.1

What's Changed

• Fix publish undici-types once and for all! by @​Ethan-Arrowood in nodejs/undici#2338
• Fix node detection omfg by @​KhafraDev in nodejs/undici#2341

Full Changelog: https://github.com/nodejs/undici/compare/v5.26.0...v5.26.1

v5.26.0

What's Changed

• use npm install instead of npm ci by @​Ethan-Arrowood in nodejs/undici#2309
• change default header to node by @​Ethan-Arrowood in nodejs/undici#2310
• chore: change order of the pseudo-headers by @​kyrylodolynskyi in nodejs/undici#2308
• fix: Agent.Options.factory should accept URL object or string as parameter by @​nicole0707 in nodejs/undici#2295
• build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by @​dependabot in nodejs/undici#2312
• test: handle npm ignore-scripts settings by @​panva in nodejs/undici#2313
• feat: respect --max-http-header-size Node.js flag by @​balazsorban44 in nodejs/undici#2234
• fix(#2311): End stream after body sent by @​metcoder95 in nodejs/undici#2314
• disallow setting host header in fetch by @​KhafraDev in nodejs/undici#2322
• [StepSecurity] ci: Harden GitHub Actions by @​step-security-bot in nodejs/undici#2325
• fix fetch with coverage enabled by @​KhafraDev in nodejs/undici#2330
• Fix stuck when using http2 POST Buffer by @​binsee in nodejs/undici#2336
• fix: 🏷️ add allowH2 to BuildOptions by @​binsee in nodejs/undici#2334
• fix: 🐛 fix process http2 header by @​binsee in nodejs/undici#2332

New Contributors

• @​kyrylodolynskyi made their first contribution in nodejs/undici#2308
• @​nicole0707 made their first contribution in nodejs/undici#2295
• @​balazsorban44 made their first contribution in nodejs/undici#2234
• @​binsee made their first contribution in nodejs/undici#2336

Full Changelog: https://github.com/nodejs/undici/compare/v5.23.4...v5.26.0

v5.25.3

What's Changed

• perf: improve parse-url implementation by @​anonrig in nodejs/undici#2286
• test: enable websockets inclusion in WPTReport by @​panva in nodejs/undici#2284
• remove npm run test from pre-commit hook by @​dancastillo in nodejs/undici#2296
• perf: use @​fastify/busboy by @​gurgunday in nodejs/undici#2211
• Disable finalizationregistry if node code cov by @​mcollina in nodejs/undici#2298

New Contributors

• @​gurgunday made their first contribution in nodejs/undici#2211

... (truncated)

Commits

• 227b9be 5.26.3
• 5351f1f include esbuild script in files
• 12a6218 Bumped v5.26.2
• e041de3 Merge pull request from GHSA-wqq4-5wpv-mx2g
• c8c80b1 5.26.1
• 7bcb80c Fix node detection omfg (#2341)
• 69ea7b9 hopefully this fixes it for good (#2338)
• 4006aaf Bumped v5.26.0
• df97958 fix: 🐛 fix process http2 header (#2332)
• b9d8368 fix: 🏷️ add allowH2 to BuildOptions (#2334)
• Additional commits viewable in compare view

Updates @sveltejs/kit from 1.25.1 to 1.26.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​1.26.0

Minor Changes

• feat: infer route parameter type from matcher's guard check if applicable (#10755)

Patch Changes

• fix: basic mime type handling for prerendered pages in preview (#10851)

• chore: use just a single library (mrmime) for mime type handling (#10851)

• chore: bump undici to address security issue (#10885)

• fix: follow whatwg fetch spec for handling redirect loops (#10857)

• fix: use window.fetch in load functions to allow libraries to patch it (#10009)

• chore(deps): update dependency undici to ~5.26.0 (#10860)

@​sveltejs/kit@​1.25.2

Patch Changes

• fix: correctly update $page.url.hash when navigating history (#10843)

• fix: strip virtual module prefix from error messages (#10776)

• fix: cancel ongoing navigation when the browser back button is hit to prevent an incorrect page from being rendered (#10727)

• fix: only remove Vite manifest when copying files (#10782)

Changelog

Sourced from @​sveltejs/kit's changelog.

1.26.0

Minor Changes

• feat: infer route parameter type from matcher's guard check if applicable (#10755)

Patch Changes

• fix: basic mime type handling for prerendered pages in preview (#10851)

• chore: use just a single library (mrmime) for mime type handling (#10851)

• chore: bump undici to address security issue (#10885)

• fix: follow whatwg fetch spec for handling redirect loops (#10857)

• fix: use window.fetch in load functions to allow libraries to patch it (#10009)

• chore(deps): update dependency undici to ~5.26.0 (#10860)

1.25.2

Patch Changes

• fix: correctly update $page.url.hash when navigating history (#10843)

• fix: strip virtual module prefix from error messages (#10776)

• fix: cancel ongoing navigation when the browser back button is hit to prevent an incorrect page from being rendered (#10727)

• fix: only remove Vite manifest when copying files (#10782)

Commits

• 8ac89e8 Version Packages (#10852)
• ee4db0d chore: bump undici to address security issue (#10885)
• 0381fee fix: basic mime type handling for prerendered pages in preview (#10851)
• 5a4dbe3 Infer route parameter type from matcher's guard check if applicable (#10755)
• 6dd025c chore(deps): update dependency undici to ~5.26.0 (#10860)
• be2c8a8 fix: follow whatwg fetch spec for handling redirect loops (#10857)
• 67812ed fix: use window.fetch in load functions to allow libraries to patch it (#...
• c4a5f6c Version Packages (#10784)
• 9bc6e62 fix: popstate navigation wasn't cancelling ongoing navigation() calls whe...
• f8aacaf fix: correctly update $page.url.hash when navigating history (#10843)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ucsdds3/ds3-site/network/alerts).

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
ds3-site	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 18, 2023 5:51pm