Skip to content

chore(deps): Bump undici from 6.23.0 to 6.25.0#614

Merged
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/undici-6.24.0
May 22, 2026
Merged

chore(deps): Bump undici from 6.23.0 to 6.25.0#614
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/undici-6.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 14, 2026

Copy link
Copy Markdown
Contributor

Bumps undici from 6.23.0 to 6.25.0.

Release notes

Sourced from undici's releases.

v6.25.0

What's Changed

Full Changelog: nodejs/undici@v6.24.1...v6.25.0

v6.24.1

Full Changelog: nodejs/undici@v6.24.0...v6.24.1

v6.24.0

Undici v6.24.0 Security Release Notes (LTS)

This release backports fixes for security vulnerabilities affecting the v6 line.

Upgrade guidance

All users on v6 should upgrade to v6.24.0 or later.

Fixed advisories

Not applicable to v6

Affected and patched ranges (v6)

References

... (truncated)

Commits
  • 3420499 Bumped v6.25.0 (#5029)
  • d7a1e55 feat: add configurable maxPayloadSize for WebSocket (#4955)
  • a9d1848 Do not mark v6.x releases as latest
  • 0126586 Ignore local agent configuration files
  • c0cf656 Bumped v6.24.1
  • f5a9f0c Fix v6 release workflow branch targeting
  • af2cb8f wqremove maxDecompressedMessageSize (#4891)
  • 8873c94 Bumped v6.24.0
  • 411bd01 test(websocket): use node:assert for Node 18 compatibility
  • 844bf59 test: fix http2 lint regressions in backport
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Mar 14, 2026

Copy link
Copy Markdown
Contributor Author

A newer version of undici exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@crazy-max

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [undici](https://github.com/nodejs/undici) from 6.23.0 to 6.25.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.23.0...v6.25.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.24.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): Bump undici from 6.23.0 to 6.24.0 chore(deps): Bump undici from 6.23.0 to 6.25.0 May 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/undici-6.24.0 branch from dbec173 to 1b54296 Compare May 22, 2026 12:00
@crazy-max crazy-max merged commit b83758a into master May 22, 2026
41 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/undici-6.24.0 branch May 22, 2026 12:04
hoodnoah added a commit to hoodnoah/certmanager-porkbun-webhook that referenced this pull request Jun 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/metadata-action](https://github.com/docker/metadata-action) | action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>

### [`v6.1.0`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

[Compare Source](docker/metadata-action@v6...v6.1.0)

- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#&#8203;613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#&#8203;658](docker/metadata-action#658) [#&#8203;630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#&#8203;617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#&#8203;620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#&#8203;623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#&#8203;621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#&#8203;629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#&#8203;639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#&#8203;619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#&#8203;626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#&#8203;649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#&#8203;657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#&#8203;614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#&#8203;637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

### [`v6.0.0`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

[Compare Source](docker/metadata-action@v6...v6)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#&#8203;588](docker/metadata-action#588)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;599](docker/metadata-action#599)
- Bump [@&#8203;actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#&#8203;597](docker/metadata-action#597)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#&#8203;604](docker/metadata-action#604)
- Bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#&#8203;600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#&#8203;603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

### [`v6`](docker/metadata-action@v5.10.0...v6)

[Compare Source](docker/metadata-action@v5.10.0...v6)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMTcuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIxNy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: hoodn <hood.noah@gmail.com>
Reviewed-on: https://gitea.k3s.noah-hood.io/hoodn/certmanager-porkbun-webhook/pulls/10
Co-authored-by: renovate-bot <renovate-bot@example.local>
Co-committed-by: renovate-bot <renovate-bot@example.local>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Jun 11, 2026
##### [\`v6.1.0\`](https://github.com/docker/metadata-action/releases/tag/v6.1.0)

- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.79.0 to 0.90.0 in [#613](docker/metadata-action#613)
- Bump brace-expansion from 1.1.12 to 5.0.6 in [#658](docker/metadata-action#658) [#630](docker/metadata-action#630)
- Bump csv-parse from 6.1.0 to 6.2.1 in [#617](docker/metadata-action#617)
- Bump fast-xml-parser from 5.4.2 to 5.8.0 in [#620](docker/metadata-action#620)
- Bump flatted from 3.3.3 to 3.4.2 in [#623](docker/metadata-action#623)
- Bump glob from 10.3.15 to 10.5.0 in [#621](docker/metadata-action#621)
- Bump handlebars from 4.7.8 to 4.7.9 in [#629](docker/metadata-action#629)
- Bump lodash from 4.17.23 to 4.18.1 in [#639](docker/metadata-action#639)
- Bump moment-timezone from 0.6.0 to 0.6.1 in [#619](docker/metadata-action#619)
- Bump picomatch from 4.0.3 to 4.0.4 in [#626](docker/metadata-action#626)
- Bump postcss from 8.5.6 to 8.5.10 in [#649](docker/metadata-action#649)
- Bump tar from 6.2.1 to 7.5.15 in [#657](docker/metadata-action#657)
- Bump undici from 6.23.0 to 6.25.0 in [#614](docker/metadata-action#614)
- Bump vite from 7.3.1 to 7.3.2 in [#637](docker/metadata-action#637)

**Full Changelog**: <docker/metadata-action@v6.0.0...v6.1.0>

---
##### [\`v6.0.0\`](https://github.com/docker/metadata-action/releases/tag/v6.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#605](docker/metadata-action#605)
- List inputs now preserve `#` inside values while still supporting full-line `#` comments by [@crazy-max](https://github.com/crazy-max) in [#607](docker/metadata-action#607)
- Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#602](docker/metadata-action#602)
- Bump lodash from 4.17.21 to 4.17.23 in [#588](docker/metadata-action#588)
- Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#599](docker/metadata-action#599)
- Bump [@actions/github](https://github.com/actions/github) from 6.0.1 to 9.0.0 in [#597](docker/metadata-action#597)
- Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.68.0 to 0.79.0 in [#604](docker/metadata-action#604)
- Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#600](docker/metadata-action#600)
- Bump semver from 7.7.3 to 7.7.4 in [#603](docker/metadata-action#603)

**Full Changelog**: <docker/metadata-action@v5.10.0...v6.0.0>

---
##### [\`v6\`](docker/metadata-action@v5.10.0...v6.0.0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant