Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: nodejs/undici
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v6.26.0
Choose a base ref
...
head repository: nodejs/undici
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v6.27.0
Choose a head ref
  • 4 commits
  • 16 files changed
  • 6 contributors

Commits on Jun 11, 2026

  1. fix: guard idle socket validation to skip fresh sockets (#5400)

    * fix: guard idle socket validation to skip fresh sockets
    
    References: GHSA-35p6-xmwp-9g52
    Signed-off-by: Matteo Collina <hello@matteocollina.com>
    Co-authored-by: Ulises Gascon <ulisesgascongonzalez@gmail.com>
    
    * test: update issue 810 idle validation expectations
    
    * test: stabilize idle validation coverage
    
    * test: avoid issue 810 hangs on older Node.js
    
    * test: stabilize parser error cleanup
    
    * test: stabilize fetch encoding sockets
    
    * test: use explicit loopback in fetch encoding
    
    * test: use explicit loopback in fetch cookies
    
    * test: use explicit loopback in fetch h2 cookies
    
    ---------
    
    Signed-off-by: Matteo Collina <hello@matteocollina.com>
    Co-authored-by: Ulises Gascon <ulisesgascongonzalez@gmail.com>
    mcollina and UlisesGascon authored Jun 11, 2026
    Configuration menu
    Copy the full SHA
    f4c31d6 View commit details
    Browse the repository at this point in the history
  2. fix(cookies): preserve values and parse SameSite strictly

    Signed-off-by: Matteo Collina <hello@matteocollina.com>
    (cherry picked from commit 5655ea4)
    mcollina committed Jun 11, 2026
    Configuration menu
    Copy the full SHA
    25efa44 View commit details
    Browse the repository at this point in the history

Commits on Jun 15, 2026

  1. Backport WebSocket maxPayloadSize fixes to v7.x (#5423) (#5428)

    * feat: add configurable maxPayloadSize for WebSocket (#4955)
    
    (cherry picked from commit bd91f86)
    
    
    * test: fix flaky permessage-deflate limit timeout (#5229)
    
    (cherry picked from commit 9d82667)
    
    
    * fix(websocket): enforce max payload size across fragments
    
    Account for previously received fragment bytes when checking WebSocket payload size limits, so fragmented messages cannot exceed maxPayloadSize by splitting the payload across frames.
    
    Add coverage for cumulative fragmented payload size enforcement.
    
    
    (cherry picked from commit b4c287b)
    
    
    * websocket: handle empty fragments and stream limits
    
    Treat zero-byte frames as real fragments so fragmented messages can start
    with an empty frame and empty continuations still count toward
    maxFragments.
    
    Pass dispatcher WebSocket limits through to WebSocketStream's parser, add
    regression coverage for WebSocket and WebSocketStream fragment limits, make
    the fragment close tests wait for both endpoints, and fix the Client docs
    typo for maxFragments.
    
    
    (cherry picked from commit c5ed787)
    
    
    ---------
    
    Signed-off-by: Matteo Collina <hello@matteocollina.com>
    Co-authored-by: Matthew Aitken <maitken033380023@gmail.com>
    Co-authored-by: Luigi Pinca <luigipinca@gmail.com>
    Co-authored-by: Ulises Gascon <ulisesgascongonzalez@gmail.com>
    4 people authored Jun 15, 2026
    Configuration menu
    Copy the full SHA
    b7f252e View commit details
    Browse the repository at this point in the history
  2. Bumped v6.27.0 (#5431)

    Co-authored-by: github-actions <github-actions@github.com>
    github-actions[bot] and github-actions authored Jun 15, 2026
    Configuration menu
    Copy the full SHA
    551138c View commit details
    Browse the repository at this point in the history
Loading