From bbbfcfea0762a56eb3750af42d5abb2622c7540c Mon Sep 17 00:00:00 2001 From: Harsh Vardhan Gupta Date: Fri, 26 Jun 2026 15:32:09 +0530 Subject: [PATCH] fix(deps): bump undici to >=6.27.0 (CVE-2026-12151) (#5861) --- integrations/openclaw/package.json | 3 ++- integrations/openclaw/pnpm-lock.yaml | 11 ++++++----- integrations/openclaw/pnpm-workspace.yaml | 1 + integrations/pi-agent-plugin/package.json | 1 + integrations/pi-agent-plugin/pnpm-lock.yaml | 11 ++++++----- integrations/pi-agent-plugin/pnpm-workspace.yaml | 1 + mem0-ts/package.json | 3 ++- mem0-ts/pnpm-lock.yaml | 11 ++++++----- mem0-ts/pnpm-workspace.yaml | 1 + 9 files changed, 26 insertions(+), 17 deletions(-) diff --git a/integrations/openclaw/package.json b/integrations/openclaw/package.json index 10b619896..18218b38a 100644 --- a/integrations/openclaw/package.json +++ b/integrations/openclaw/package.json @@ -71,7 +71,8 @@ "picomatch@<2.3.2": "^2.3.2", "@qdrant/js-client-rest": "^1.18.0", "uuid@<11.1.1": ">=11.1.1", - "esbuild": ">=0.28.1" + "esbuild": ">=0.28.1", + "undici@<6.27.0": ">=6.27.0 <8.0.0" } } } diff --git a/integrations/openclaw/pnpm-lock.yaml b/integrations/openclaw/pnpm-lock.yaml index 50ba8208d..78678bb2e 100644 --- a/integrations/openclaw/pnpm-lock.yaml +++ b/integrations/openclaw/pnpm-lock.yaml @@ -13,6 +13,7 @@ overrides: '@qdrant/js-client-rest': ^1.18.0 uuid@<11.1.1: '>=11.1.1' esbuild: '>=0.28.1' + undici@<6.27.0: '>=6.27.0 <8.0.0' importers: @@ -1996,9 +1997,9 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@6.26.0: - resolution: {integrity: sha512-4yqz8a3n5HmGTlsbADNtr/dJlhkh/55Rq798G6ibiULcXbDtaLpTl1pvdqcbFfeoj3iSi52lePFM7h9H21cw/A==} - engines: {node: '>=18.17'} + undici@7.28.0: + resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==} + engines: {node: '>=20.18.1'} util-deprecate@1.0.2: resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==} @@ -2509,7 +2510,7 @@ snapshots: dependencies: '@qdrant/openapi-typescript-fetch': 1.2.6 typescript: 5.9.3 - undici: 6.26.0 + undici: 7.28.0 '@qdrant/openapi-typescript-fetch@1.2.6': {} @@ -4063,7 +4064,7 @@ snapshots: undici-types@6.21.0: {} - undici@6.26.0: {} + undici@7.28.0: {} util-deprecate@1.0.2: {} diff --git a/integrations/openclaw/pnpm-workspace.yaml b/integrations/openclaw/pnpm-workspace.yaml index 36d887e42..e71e343c4 100644 --- a/integrations/openclaw/pnpm-workspace.yaml +++ b/integrations/openclaw/pnpm-workspace.yaml @@ -21,3 +21,4 @@ overrides: "@qdrant/js-client-rest": "^1.18.0" "uuid@<11.1.1": ">=11.1.1" "esbuild": ">=0.28.1" + "undici@<6.27.0": ">=6.27.0 <8.0.0" diff --git a/integrations/pi-agent-plugin/package.json b/integrations/pi-agent-plugin/package.json index 682bf1f72..f7f268c0b 100644 --- a/integrations/pi-agent-plugin/package.json +++ b/integrations/pi-agent-plugin/package.json @@ -74,6 +74,7 @@ "form-data@<4.0.6": ">=4.0.6", "uuid@<11.1.1": ">=11.1.1", "esbuild": ">=0.28.1", + "undici@<6.27.0": ">=6.27.0 <8.0.0", "undici@>=8.0.0 <8.5.0": ">=8.5.0" } } diff --git a/integrations/pi-agent-plugin/pnpm-lock.yaml b/integrations/pi-agent-plugin/pnpm-lock.yaml index 041a9ee56..248cc9739 100644 --- a/integrations/pi-agent-plugin/pnpm-lock.yaml +++ b/integrations/pi-agent-plugin/pnpm-lock.yaml @@ -8,6 +8,7 @@ overrides: form-data@<4.0.6: '>=4.0.6' uuid@<11.1.1: '>=11.1.1' esbuild: '>=0.28.1' + undici@<6.27.0: '>=6.27.0 <8.0.0' undici@>=8.0.0 <8.5.0: '>=8.5.0' importers: @@ -2351,9 +2352,9 @@ packages: undici-types@7.24.6: resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==} - undici@6.26.0: - resolution: {integrity: sha512-4yqz8a3n5HmGTlsbADNtr/dJlhkh/55Rq798G6ibiULcXbDtaLpTl1pvdqcbFfeoj3iSi52lePFM7h9H21cw/A==} - engines: {node: '>=18.17'} + undici@7.28.0: + resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==} + engines: {node: '>=20.18.1'} undici@8.5.0: resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==} @@ -3202,7 +3203,7 @@ snapshots: dependencies: '@qdrant/openapi-typescript-fetch': 1.2.6 typescript: 6.0.3 - undici: 6.26.0 + undici: 7.28.0 '@qdrant/openapi-typescript-fetch@1.2.6': {} @@ -4894,7 +4895,7 @@ snapshots: undici-types@7.24.6: {} - undici@6.26.0: {} + undici@7.28.0: {} undici@8.5.0: {} diff --git a/integrations/pi-agent-plugin/pnpm-workspace.yaml b/integrations/pi-agent-plugin/pnpm-workspace.yaml index c7dec97ab..b9f73a8e9 100644 --- a/integrations/pi-agent-plugin/pnpm-workspace.yaml +++ b/integrations/pi-agent-plugin/pnpm-workspace.yaml @@ -5,4 +5,5 @@ overrides: "form-data@<4.0.6": ">=4.0.6" "uuid@<11.1.1": ">=11.1.1" "esbuild": ">=0.28.1" + "undici@<6.27.0": ">=6.27.0 <8.0.0" "undici@>=8.0.0 <8.5.0": ">=8.5.0" diff --git a/mem0-ts/package.json b/mem0-ts/package.json index 3b83eaf5e..91e4c2e3d 100644 --- a/mem0-ts/package.json +++ b/mem0-ts/package.json @@ -156,7 +156,8 @@ "tar-fs@>=2.0.0 <2.1.4": "^2.1.4", "glob@>=10.2.0 <10.5.0": "^10.5.0", "@modelcontextprotocol/sdk": "^1.25.4", - "esbuild": ">=0.28.1" + "esbuild": ">=0.28.1", + "undici@<6.27.0": ">=6.27.0 <8.0.0" } } } diff --git a/mem0-ts/pnpm-lock.yaml b/mem0-ts/pnpm-lock.yaml index de81a63bd..a2c094030 100644 --- a/mem0-ts/pnpm-lock.yaml +++ b/mem0-ts/pnpm-lock.yaml @@ -23,6 +23,7 @@ overrides: glob@>=10.2.0 <10.5.0: ^10.5.0 '@modelcontextprotocol/sdk': ^1.25.4 esbuild: '>=0.28.1' + undici@<6.27.0: '>=6.27.0 <8.0.0' importers: @@ -2925,9 +2926,9 @@ packages: undici-types@6.21.0: resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==} - undici@6.26.0: - resolution: {integrity: sha512-4yqz8a3n5HmGTlsbADNtr/dJlhkh/55Rq798G6ibiULcXbDtaLpTl1pvdqcbFfeoj3iSi52lePFM7h9H21cw/A==} - engines: {node: '>=18.17'} + undici@7.28.0: + resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==} + engines: {node: '>=20.18.1'} update-browserslist-db@1.2.3: resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==} @@ -3747,7 +3748,7 @@ snapshots: dependencies: '@qdrant/openapi-typescript-fetch': 1.2.6 typescript: 5.5.4 - undici: 6.26.0 + undici: 7.28.0 '@qdrant/openapi-typescript-fetch@1.2.6': {} @@ -6113,7 +6114,7 @@ snapshots: undici-types@6.21.0: {} - undici@6.26.0: {} + undici@7.28.0: {} update-browserslist-db@1.2.3(browserslist@4.28.2): dependencies: diff --git a/mem0-ts/pnpm-workspace.yaml b/mem0-ts/pnpm-workspace.yaml index 46081328f..df3b89724 100644 --- a/mem0-ts/pnpm-workspace.yaml +++ b/mem0-ts/pnpm-workspace.yaml @@ -24,3 +24,4 @@ overrides: "glob@>=10.2.0 <10.5.0": "^10.5.0" "@modelcontextprotocol/sdk": "^1.25.4" "esbuild": ">=0.28.1" + "undici@<6.27.0": ">=6.27.0 <8.0.0"