Sourced from undici's\r\nreleases.
\r\n\r\n\r\nv5.28.4
\r\n:warning: Security Release :warning:
\r\n\r\n
\r\n- Fixes https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7\r\nCVE-2024-30260
\r\n- Fixes https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672\r\nCVE-2024-30261
\r\nFull Changelog: https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4
\r\nv5.28.3
\r\n⚠️ Security Release ⚠️
\r\nFixes:
\r\n\r\n
\r\n- CVE-2024-24758\r\nProxy-Authorization header not cleared on cross-origin redirect in\r\nfetch
\r\nFull Changelog: https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3
\r\nv5.28.2
\r\nWhat's Changed
\r\n\r\n
\r\n- fix: remove optional chainning for compatible with Nodejs12 and\r\nbelow by
\r\n@bugb
in nodejs/undici#2470- fix: remove
\r\nnode:
prefix by@tsctx
in nodejs/undici#2471- perf: avoid Headers initialization by
\r\n@tsctx
in nodejs/undici#2468- fix: handle SharedArrayBuffer correctly by
\r\n@tsctx
in nodejs/undici#2466- fix: Add
\r\nnull
type tosignal
in\r\nRequestInit
by@gebsh
in nodejs/undici#2455- fix: correctly handle data URL with hashes. by
\r\n@tsctx
in nodejs/undici#2475- fix: check response for timinginfo allow flag by
\r\n@ToshB
in nodejs/undici#2477- Make call to onBodySent conditional in RetryHandler by
\r\n@MzUgM
in nodejs/undici#2478- refactor: better integrity check by
\r\n@tsctx
in nodejs/undici#2462- fix: Added support for inline URL username:password proxy auth by
\r\n@matt-way
in nodejs/undici#2473- build(deps-dev): bump jsdom from 22.1.0 to 23.0.0 by
\r\n@dependabot
in nodejs/undici#2472- build(deps-dev): bump sinon from 16.1.3 to 17.0.1 by
\r\n@dependabot
in nodejs/undici#2405- build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.1 by
\r\n@dependabot
in nodejs/undici#2396- build(deps): bump actions/setup-node from 3.8.1 to 4.0.0 by
\r\n@dependabot
in nodejs/undici#2395- build(deps): bump step-security/harden-runner from 2.5.0 to 2.6.0 by\r\n
\r\n@dependabot
in\r\nnodejs/undici#2392- build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 by
\r\n@dependabot
in nodejs/undici#2389- build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by
\r\n@dependabot
in nodejs/undici#2302New Contributors
\r\n\r\n
\r\n- \r\n
@bugb
made their\r\nfirst contribution in nodejs/undici#2470- \r\n
@gebsh
made\r\ntheir first contribution in nodejs/undici#2455- \r\n
@ToshB
made\r\ntheir first contribution in nodejs/undici#2477- \r\n
@MzUgM
made\r\ntheir first contribution in nodejs/undici#2478- \r\n
@matt-way
\r\nmade their first contribution in nodejs/undici#2473Full Changelog: https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2
\r\nv5.28.1
\r\nWhat's Changed
\r\n\r\n
\r\n\r\n- perf: Improve
\r\nnormalizeMethod
by@tsctx
in nodejs/undici#2456- fix: dispatch error handling by
\r\n@ronag
in nodejs/undici#2459
... (truncated)
\r\nfb98306
\r\nBumped v5.28.42b39440
\r\nMerge pull request from GHSA-9qxr-qj54-h67264e3402
\r\nMerge pull request from GHSA-m4v8-wqvr-p9f7723c4e7
\r\nRevert "build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)"0e9d54b
\r\nskip failing test due to Node.js changese71cb4c
\r\nBumped v5.28.320c65b8
\r\nFix tests for Node.js v20.11.0 (#2618)8ec52cd
\r\nFix tests for Node.js v21 (#2609)d3aa574
\r\nMerge pull request from GHSA-3787-6prv-h9w39a14e5f
\r\nBumped v5.28.2