This is an automated email from the ASF dual-hosted git repository.
thiagoelg pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools.git
The following commit(s) were added to refs/heads/main by this push:
new 3a5557b0546 NO-ISSUE: Upgrade undici to 6.28.0 to address
CVE-2026-16729, CVE-2026-15157, CVE-2026-16728 (#3698)
3a5557b0546 is described below
commit 3a5557b054655f23f4a6919157b38a2234ce8514
Author: Adarsh vk <[email protected]>
AuthorDate: Thu Aug 6 23:59:42 2026 +0530
NO-ISSUE: Upgrade undici to 6.28.0 to address CVE-2026-16729,
CVE-2026-15157, CVE-2026-16728 (#3698)
---
pnpm-lock.yaml | 14 +++++++-------
pnpm-workspace.yaml | 4 ++--
2 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4a3ef510084..93941d2e465 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -25,7 +25,7 @@ overrides:
minimatch@^10: 10.2.1
minimatch@^5: 5.1.9
minimatch@^4: 5.1.9
- undici: ^6.27.0
+ undici: ^6.28.0
uuid: ^11.1.1
picomatch@3: 3.0.2
picomatch@4: 4.0.4
@@ -22807,8 +22807,8 @@ packages:
[email protected]:
resolution: {integrity:
sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
- [email protected]:
- resolution: {integrity:
sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
+ [email protected]:
+ resolution: {integrity:
sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==}
engines: {node: '>=18.17'}
[email protected]:
@@ -32896,7 +32896,7 @@ snapshots:
parse5: 7.3.0
parse5-htmlparser2-tree-adapter: 7.1.0
parse5-parser-stream: 7.1.2
- undici: 6.27.0
+ undici: 6.28.0
whatwg-mimetype: 4.0.0
[email protected]:
@@ -38333,7 +38333,7 @@ snapshots:
semver: 7.8.5
tar: 7.5.21
tinyglobby: 0.2.17
- undici: 6.27.0
+ undici: 6.28.0
which: 6.0.1
[email protected]:
@@ -38658,7 +38658,7 @@ snapshots:
mime: 3.0.0
prettier: 2.8.8
tiny-glob: 0.2.9
- undici: 6.27.0
+ undici: 6.28.0
yargs-parser: 21.1.1
[email protected]: {}
@@ -41917,7 +41917,7 @@ snapshots:
[email protected]: {}
- [email protected]: {}
+ [email protected]: {}
[email protected]: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index af54b339be3..69131b402fe 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -30,9 +30,9 @@ overrides:
"minimatch@^10": "10.2.1"
"minimatch@^5": "5.1.9"
"minimatch@^4": "5.1.9"
- # CVE-2026-1526, CVE-2026-2229, CVE-2026-1528, CVE-2026-1527, CVE-2026-1525,
CVE-2026-2203, CVE-2026-12151, CVE-2026-9679, CVE-2026-11525, CVE-2026-6733:
Fix security vulnerability in undici
+ # CVE-2026-1526, CVE-2026-2229, CVE-2026-1528, CVE-2026-1527, CVE-2026-1525,
CVE-2026-2203, CVE-2026-12151, CVE-2026-9679, CVE-2026-11525, CVE-2026-6733,
CVE-2026-16729, CVE-2026-15157, CVE-2026-16728: Fix security vulnerability in
undici
# Waiting for @openapi-contrib/openapi-schema-to-json-schema to release
patched version
- "undici": "^6.27.0"
+ "undici": "^6.28.0"
# CVE-2026-41907: Fix security vulnerability in uuid
# Transitive dependencies ([email protected], [email protected]) still use
[email protected]
"uuid": "^11.1.1"
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
