From 97da02c14938ebf6afe3555664a18e19e935f9cf Mon Sep 17 00:00:00 2001 From: Aaron Perez Date: Thu, 9 Jul 2026 00:07:29 -0500 Subject: [PATCH] security: pin undici to ^7.28.0 in skyvern-frontend (fixes 2 HIGH alerts) (#6958) Co-authored-by: claude[bot] Co-authored-by: Claude Sonnet 4.6 Co-authored-by: Shuchang Zheng --- skyvern-frontend/package-lock.json | 20 ++++++++++---------- skyvern-frontend/package.json | 3 ++- 2 files changed, 12 insertions(+), 11 deletions(-) diff --git a/skyvern-frontend/package-lock.json b/skyvern-frontend/package-lock.json index 293d60a38..2a30ccf36 100644 --- a/skyvern-frontend/package-lock.json +++ b/skyvern-frontend/package-lock.json @@ -7219,6 +7219,16 @@ } } }, + "node_modules/jsdom/node_modules/undici": { + "version": "7.28.0", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz", + "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=20.18.1" + } + }, "node_modules/json-buffer": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz", @@ -9815,16 +9825,6 @@ "node": ">=14.17" } }, - "node_modules/undici": { - "version": "7.25.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.25.0.tgz", - "integrity": "sha512-xXnp4kTyor2Zq+J1FfPI6Eq3ew5h6Vl0F/8d9XU5zZQf1tX9s2Su1/3PiMmUANFULpmksxkClamIZcaUqryHsQ==", - "dev": true, - "license": "MIT", - "engines": { - "node": ">=20.18.1" - } - }, "node_modules/undici-types": { "version": "6.21.0", "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz", diff --git a/skyvern-frontend/package.json b/skyvern-frontend/package.json index 1ee29e4cd..bcf9d0a37 100644 --- a/skyvern-frontend/package.json +++ b/skyvern-frontend/package.json @@ -129,6 +129,7 @@ }, "@types/node": "$@types/node", "protobufjs": ">=7.5.8", - "qs": ">=6.15.2" + "qs": ">=6.15.2", + "undici": "^7.28.0" } }