Release notes

Sourced from undici's releases.

\n
v5.19.1
\n
⚠️ Security Release ⚠️
\n
\n
Regular Expression Denial of Service in Headers with CVE-2023-24807
\n
CRLF Injection in Nodejs ‘undici’ via host with CVE-2023-23936
\n
\n
This release is part of the Node.js security release train: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/
\n
v5.19.0
\n
What's Changed
\n
\n
fix(fetch): raise AbortSignal max event listeners by @KhafraDev in nodejs/undici#1910
\n
fix: content-disposition header parsing by @climba03003 in nodejs/undici#1911
\n
fix: remove test by @KhafraDev in nodejs/undici#1916
\n
feat: add Headers.prototype.getSetCookie by @KhafraDev in nodejs/undici#1915
\n
fix(headers): clone getSetCookie list & add getSetCookie type by @KhafraDev in nodejs/undici#1917
\n
doc(mock): update out-of-date reply documentation by @p9f in nodejs/undici#1913
\n
fix(types): add missing keepAlive params by @SkeLLLa in nodejs/undici#1918
\n
Make the fetch() abort test pass locally, on Linux and Mac, Node 18/19. by @mcollina in nodejs/undici#1927
\n
\n
New Contributors
\n
\n
@climba03003 made their first contribution in nodejs/undici#1911
\n
@p9f made their first contribution in nodejs/undici#1913
\n
\n
Full Changelog: https://github.com/nodejs/undici/compare/v5.18.0...v5.19.0
\n
v5.18.0
\n
What's Changed
\n
\n
Add ability to set TCP keepalive by @xconverge in nodejs/undici#1904
\n
use faster timers by @ronag in nodejs/undici#1908
\n
fix: ensure header value is a string by @ronag in nodejs/undici#1899
\n
\n
Full Changelog: https://github.com/nodejs/undici/compare/v5.17.1...v5.18.0
\n
v5.17.1
\n
What's Changed
\n
\n
fix: bad buffer slice (https://github.com/nodejs/undici/commit/d2be675575512794dcd41b9683b209fc15368154)
\n
\n
Full Changelog: https://github.com/nodejs/undici/compare/v5.17.0...v5.17.1
\n
v5.17.0
\n
What's Changed
\n
\n
fix(wpts): Blob is a global getter in >=v19.x.x by @KhafraDev in nodejs/undici#1880
\n
doc: fix anchor links dispatcher.stream by @RafaelGSS in nodejs/undici#1881
\n
wpt: make runner more resilient by @KhafraDev in nodejs/undici#1884
\n
Make test pass in v19.x by @mcollina in nodejs/undici#1879
\n
Correct the type of DispatchOptions["headers"] by @pan93412 in nodejs/undici#1896
\n
perf(content-type parser): faster string collector by @KhafraDev in nodejs/undici#1894
\n
feat: expose content-type parser by @KhafraDev in nodejs/undici#1895
\n
fix(types): Update DispatchOptions type for missing "blocking" by @xconverge in nodejs/undici#1889
\n
\n\n

... (truncated)

Commits

984d53b Bumped v5.19.1
6c32c0f lint fixes
f2324e5 Merge pull request from GHSA-r6ch-mqf9-qc9w
a2eff05 Merge pull request from GHSA-5r9g-qh6m-jxff
f5c89e5 Bumped v5.19.0
f7c6c6a Make the fetch() abort test pass locally, on Linux and Mac, Node 18 and 19 (#...
aebb232 fix(types): add missing keepAlive params (#1918)
e155c6d doc(mock): update out-of-date reply documentation (#1913)
87fa734 fix(headers): clone getSetCookie list & add getSetCookie type (#1917)
ba5ef44 feat: add Headers.prototype.getSetCookie (#1915)
Additional commits viewable in compare view

\n
\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.10.0&new-version=5.19.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n

Dependabot commands and options

\n
\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/iamnbutler/iamnbutler.github.io/network/alerts).\n\n

","dependabot[bot]","documentNavigation","repo","iamnbutler/iamnbutler.github.io","repoId","ownerId","user:1714999","site","nexthub","private","admin","settings","triage","starred","stars",0,"watchers","watching","pinned","notify","views",[423,424,425,426,427,428,429,430,431,432,433,434,435],"navigation",{"_308":309,"_386":387,"_388":389,"_390":391,"_392":393,"_394":395,"_89":396},"sources",[],"meta",{"_254":380,"_381":382,"_383":384,"_297":22,"_260":348,"_385":22,"_302":303,"_304":24},"branches",[324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379],"tags",[322,323],"cloneUrl","https://git.nexthub.sh/iamnbutler/iamnbutler.github.io.git","v18.0.0","v19.0.0","14-2","2017.3","add-gpui-extended-context-post","add-post-tags","backblaze-assets","dependabot/npm_and_yarn/defu-6.1.6","dependabot/npm_and_yarn/devalue-5.8.1","dependabot/npm_and_yarn/h3-1.15.10","dependabot/npm_and_yarn/multi-04ca55b44c","dependabot/npm_and_yarn/picomatch-2.3.2","dependabot/npm_and_yarn/postcss-8.5.14","dependabot/npm_and_yarn/rollup-4.59.0","dependabot/npm_and_yarn/smol-toml-1.6.1","dependabot/npm_and_yarn/svelte-5.55.7","dependabot/npm_and_yarn/svgo-4.0.1","dependabot/npm_and_yarn/vite-6.4.2","fix-backblaze-integration","fix-backblaze-issue-take2","glfs-test","global-tags","gpui-ui-post","import-and-sort","integrate-data-repo","lists","main","mellow-fjord/site-reliability-cleanup","nate-journal","revert-34-fix-backblaze-integration","tiny-search-2","unified-feed","update-nuxt","v-11","v-12","v-13","v-14","v-15","v-16","v-18","v-19","v-20","v-21","v-3","v-4","v11-newsprint","v14-1","v14-effect","v18","v19/add-mh-2","v21","v23","v5-04-21-06","v5-static","v8","v8_js","v9","v9-2020-eleventy","Personal Site","owner","iamnbutler","section","","empty","pins",[407,408,409],"documents",{"_404":405,"_406":303},"code",{"_23":402,"_403":64},"automations",{"_399":400,"_401":-5},"delivery",{"_397":303,"_398":-5},"ckQnXds0_OG2x4LL3veMKJ2xpXN","releases","applications","workflows",2,"deployments",822,"changes","counts",{},"total",{"_247":403,"_411":421,"_43":403,"_413":422,"_306":276,"_415":22,"_416":276,"_417":64},{"_247":418,"_411":419,"_43":418,"_413":420,"_306":276,"_415":22,"_416":276,"_417":303},{"_247":410,"_411":412,"_43":410,"_413":414,"_306":276,"_415":22,"_416":276,"_417":303},"issues","name","Issues","filters",{},"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_247":403,"_411":421,"_43":403,"_413":466,"_306":276,"_415":22,"_416":276},{"_247":418,"_411":419,"_43":418,"_413":465,"_306":276,"_415":22,"_416":276},{"_247":410,"_411":412,"_43":410,"_413":464,"_306":276,"_415":22,"_416":276},{"_247":461,"_411":462,"_43":461,"_413":463,"_306":22,"_415":22,"_416":276},{"_247":458,"_411":459,"_43":458,"_413":460,"_306":22,"_415":22,"_416":276},{"_247":399,"_411":456,"_43":392,"_413":457,"_306":22,"_415":22,"_416":276},{"_247":401,"_411":453,"_43":454,"_413":455,"_306":22,"_415":22,"_416":276},{"_247":397,"_411":451,"_43":397,"_413":452,"_306":22,"_415":22,"_416":276},{"_247":447,"_411":448,"_43":449,"_413":450,"_306":22,"_415":22,"_416":276},{"_247":388,"_411":445,"_43":388,"_413":446,"_306":22,"_415":22,"_416":22},{"_247":442,"_411":443,"_43":442,"_413":444,"_306":22,"_415":22,"_416":22},{"_247":439,"_411":440,"_43":439,"_413":441,"_306":22,"_415":22,"_416":22},{"_247":436,"_411":437,"_43":436,"_413":438,"_306":22,"_415":22,"_416":22},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user",[],"now",1794435009542,"sidebar","expanded"]