(tinkerpop) branch master updated: bump undici from 6.28.0 to 6.29.1 in gremlin-javascript

[spmallette]

This is an automated email from the ASF dual-hosted git repository.

spmallette pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tinkerpop.git


The following commit(s) were added to refs/heads/master by this push:
     new d8296983a7 bump undici from 6.28.0 to 6.29.1 in gremlin-javascript
d8296983a7 is described below

commit d8296983a785f39b7a14b85627210a1b6366c4e8
Author: Stephen Mallette <stepm...@amazon.com>
AuthorDate: Tue Oct 27 19:56:08 2026 +0000

    bump undici from 6.28.0 to 6.29.1 in gremlin-javascript
    
    undici 6.29.0/6.29.1 is a security release fixing several CVEs,
    including a TLS certificate validation bypass (CVE-2026-109383)
    in Agent option handling that is relevant to the JS driver's
    custom undici dispatcher.
    
    Assisted-by: Kiro:claude-opus-4.8
---
 gremlin-js/gremlin-javascript/package.json | 2 +-
 gremlin-js/package-lock.json               | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/gremlin-js/gremlin-javascript/package.json 
b/gremlin-js/gremlin-javascript/package.json
index d5fb44a997..3bd96d9fcd 100644
--- a/gremlin-js/gremlin-javascript/package.json
+++ b/gremlin-js/gremlin-javascript/package.json
@@ -53,7 +53,7 @@
     "antlr4ng": "3.0.16",
     "buffer": "^6.0.3",
     "eventemitter3": "^5.0.1",
-    "undici": "6.28.0"
+    "undici": "6.29.1"
   },
   "optionalDependencies": {
     "@aws-sdk/credential-providers": "^3.967.0",
diff --git a/gremlin-js/package-lock.json b/gremlin-js/package-lock.json
index cb902a2311..876b31ce95 100644
--- a/gremlin-js/package-lock.json
+++ b/gremlin-js/package-lock.json
@@ -19,7 +19,7 @@
         "antlr4ng": "3.0.16",
         "buffer": "^6.0.3",
         "eventemitter3": "^5.0.1",
-        "undici": "6.28.0"
+        "undici": "^6.29.1"
       },
       "devDependencies": {
         "@cucumber/cucumber": "~13.0.0",
@@ -73,9 +73,9 @@
       }
     },
     "gremlin-javascript/node_modules/undici": {
-      "version": "6.28.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.28.0.tgz";,
-      "integrity": 
"sha512-LIY910g9TI13YS95lrMFrs8Rm/u/irgHeTWoKCoteeJ04CUJ92eEfj0rVn+7VKMPBpUPiUoBKfhNyLI23EE/KA==",
+      "version": "6.29.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.29.1.tgz";,
+      "integrity": 
"sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==",
       "license": "MIT",
       "engines": {
         "node": ">=18.17"