[Snyk] Upgrade undici from 5.28.4 to 5.29.0

[hashim21223445]

Snyk has created this PR to upgrade undici from 5.28.4 to 5.29.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released 5 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	140	Proof of Concept
	Insecure Randomness SNYK-JS-UNDICI-8641354	140	Proof of Concept
	Incorrect Authorization SNYK-JS-VITE-9653016	140	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELHELPERS-9397697	140	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BABELRUNTIME-10044504	140	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SOLIDJS-8743940	140	Proof of Concept
	Access Control Bypass SNYK-JS-VITE-9576207	140	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	140	Proof of Concept
	Predictable Value Range from Previous Values SNYK-JS-FORMDATA-10841150	140	Proof of Concept
	Improper Handling of Unexpected Data Type SNYK-JS-ONHEADERS-10773729	140	No Known Exploit
	Incorrect Authorization SNYK-JS-VITE-9512410	140	Mature
	Information Exposure SNYK-JS-VITE-9685035	140	Proof of Concept
	Directory Traversal SNYK-JS-VITE-9919777	140	Proof of Concept
	Missing Release of Memory after Effective Lifetime SNYK-JS-UNDICI-10176064	140	Proof of Concept

Release notes

Package name: undici

• 5.29.0 - 2025-03-19
  

  What's Changed

  • Fix tests in v5.x for Node 20 by @ mcollina in #4104
  • Removed clients with unrecoverable errors from the Pool #4088

  Full Changelog: v5.28.5...v5.29.0

• 5.28.5 - 2025-01-16
  

  ⚠️ Security Release ⚠️

  Fixes CVE CVE-2025-22150 GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

  Full Changelog: v5.28.4...v5.28.5

• 5.28.4 - 2024-04-02

from undici GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
package.json	0% smaller

[snyk-io]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)