fix(coding-agent): update undici to 8.9.0 and brace-expansion to 5.0.9 for npm audit advisories

Resolves GHSA-8xcm-r25x-g524, GHSA-4cwx-7wf7-3272, GHSA-m8rv-5g2x-5cg5,
GHSA-jr45-8vmc-qm54, GHSA-v3r7-h72x-cjcm, and GHSA-rgw5-rvv9-x895.
undici 8.10.0 is blocked by the npm min-release-age gate; 8.9.0 is the
first fixed 8.x release. Reviewed undici 8.6.0-8.9.0 release notes
against http-dispatcher usage; no breaking changes. Adds an AGENTS.md
rule requiring changelog review for future undici updates.
This commit is contained in:
Mario Zechner 2026-08-04 10:50:44 +02:00
parent cd20a8d2e5
commit 221a842c13
6 changed files with 27 additions and 25 deletions

View file

@ -61,7 +61,7 @@
"proper-lockfile": "4.1.2",
"semver": "7.8.0",
"typebox": "1.3.7",
"undici": "8.5.0",
"undici": "8.9.0",
"yaml": "2.9.0"
},
"overrides": {