fix(pi-agent-plugin): bump undici 8.x to >=8.10.2 (CVE-2026-18149, CVE-2026-84933)
Resolves to 8.11.2. Same bump also clears HIGH CVE-2026-84961 / CVE-2026-85152. Fixes: https://app.vanta.com/c/mem0.ai/tests/packages-checked-for-vulnerabilities-v2-records-closed-github-dependabot-medium Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5.5
parent
659df4b07b
commit
cc41823791
@@ -73,7 +73,7 @@
|
||||
"uuid@<11.1.1": ">=11.1.1",
|
||||
"esbuild": ">=0.28.1",
|
||||
"undici@<7.29.1": ">=7.29.1 <8.0.0",
|
||||
"undici@>=8.0.0 <8.9.0": ">=8.9.0 <9.0.0",
|
||||
"undici@>=8.0.0 <8.10.2": ">=8.10.2 <9.0.0",
|
||||
"axios@<1.18.0": ">=1.18.0 <2.0.0",
|
||||
"brace-expansion@>=3.0.0 <5.0.8": ">=5.0.8 <6.0.0",
|
||||
"postcss@<8.5.18": ">=8.5.18 <9.0.0",
|
||||
|
||||
Reference in New Issue
Block a user