fix: bump vitest to 4.1.11 and gondolin's undici to 6.29.0

Addresses GHSA-82fw-gwwq-j7x9 (vitest mocker path traversal) and
GHSA-3wwx-pv8p-q78v (undici 6.x permessage-deflate DoS). Both are
dev/example-only; the shipped coding-agent shrinkwrap is unchanged.
This commit is contained in:
Armin Ronacher 2026-09-29 18:38:07 +02:00
parent 1ff5b6fddf
commit 8eb2bccf26
14 changed files with 83 additions and 83 deletions

View file

@ -42,6 +42,6 @@
},
"devDependencies": {
"@types/node": "22.19.19",
"vitest": "4.1.9"
"vitest": "4.1.11"
}
}