Skip to content

Bumped undici version#2666

Merged
jainakanksha-msft merged 2 commits into
mainfrom
akkuUpgradeUndiciVersion
Jul 6, 2026
Merged

Bumped undici version#2666
jainakanksha-msft merged 2 commits into
mainfrom
akkuUpgradeUndiciVersion

Conversation

@jainakanksha-msft

Copy link
Copy Markdown
Member

This pull request primarily updates the undici package to address a security issue. The update is reflected in both the ChangeLog.md and package.json files.

Dependency update for security:

  • Bumped the undici package from version 7.27.2 to 7.28.0 in package.json to address an SFI security item.

Copilot AI review requested due to automatic review settings July 6, 2026 08:07

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the undici dependency version to remediate a reported security finding, ensuring the lockfile resolves to undici@7.28.0 and documenting the change in the changelog.

Changes:

  • Add undici@^7.28.0 to devDependencies in package.json.
  • Update package-lock.json to resolve undici to 7.28.0.
  • Add a changelog entry noting the undici bump for the security item.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
package.json Adds undici@^7.28.0 as a direct devDependency to drive the resolved version.
package-lock.json Updates the resolved undici package metadata to 7.28.0.
ChangeLog.md Documents the undici version bump for the security item.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
Comment on lines 88 to 90
"typescript": "^5.0.3",
"undici": "^7.28.0",
"vsce": "^2.7.0"

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated no new comments.

@jainakanksha-msft jainakanksha-msft merged commit 7457c71 into main Jul 6, 2026
43 checks passed
@jainakanksha-msft jainakanksha-msft deleted the akkuUpgradeUndiciVersion branch July 6, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants