Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update undici dependency to 5.8.24 due to CVE-2024-30260. #8138

Merged
merged 1 commit into from
Apr 8, 2024

Conversation

DellaBitta
Copy link
Contributor

@DellaBitta DellaBitta commented Apr 7, 2024

Discussion

Update our undici dependency to 5.8.24 due to CVE-2024-30260.

Fixes #8132.

Testing

CI.

API Changes

N/A.

Copy link

changeset-bot bot commented Apr 7, 2024

🦋 Changeset detected

Latest commit: b985462

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 9 packages
Name Type
@firebase/auth-compat Patch
@firebase/firestore Patch
@firebase/functions Patch
@firebase/storage Patch
@firebase/auth Patch
firebase Patch
@firebase/storage-compat Patch
@firebase/firestore-compat Patch
@firebase/functions-compat Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@google-oss-bot
Copy link
Contributor

@google-oss-bot
Copy link
Contributor

@DellaBitta DellaBitta marked this pull request as ready for review April 7, 2024 20:37
Copy link
Contributor

@hsubox76 hsubox76 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for staying on top of this!

@DellaBitta DellaBitta merged commit fe09d83 into master Apr 8, 2024
44 checks passed
@DellaBitta DellaBitta deleted the ddb-undici-update-april-24 branch April 8, 2024 17:33
@google-oss-bot google-oss-bot mentioned this pull request Apr 9, 2024
@firebase firebase locked and limited conversation to collaborators May 9, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update dependency undici
3 participants