From 9d44ac73f65c487094c55b73c3a6dc26f44a9787 Mon Sep 17 00:00:00 2001 From: Anastasiia Derendeeva Date: Tue, 6 Oct 2026 12:16:47 +0000 Subject: [PATCH] chore: override undici to ^7.29.1 for CVE fixes --- LICENSE-THIRD-PARTY | 2 +- overrides/LICENSE-THIRD-PARTY | 2 +- .../sagemaker.series/package-lock.json | 8 ++++---- .../sagemaker.series/remote/package-lock.json | 6 +++--- .../package-lock.json | 8 ++++---- .../remote/package-lock.json | 6 +++--- .../web-embedded.series/package-lock.json | 8 ++++---- .../web-embedded.series/remote/package-lock.json | 6 +++--- .../web-server.series/package-lock.json | 8 ++++---- .../web-server.series/remote/package-lock.json | 6 +++--- patches/common/finding-override-form-data.diff | 4 ++-- patches/common/finding-override-tar.diff | 4 ++-- patches/common/finding-override-undici.diff | 16 ++++++++-------- 13 files changed, 42 insertions(+), 42 deletions(-) diff --git a/LICENSE-THIRD-PARTY b/LICENSE-THIRD-PARTY index 2817fc7..8cea52b 100644 --- a/LICENSE-THIRD-PARTY +++ b/LICENSE-THIRD-PARTY @@ -9553,7 +9553,7 @@ THE SOFTWARE. ****************************** undici -7.29.0 +7.29.1 MIT License Copyright (c) Matteo Collina and Undici contributors diff --git a/overrides/LICENSE-THIRD-PARTY b/overrides/LICENSE-THIRD-PARTY index 2817fc7..8cea52b 100644 --- a/overrides/LICENSE-THIRD-PARTY +++ b/overrides/LICENSE-THIRD-PARTY @@ -9553,7 +9553,7 @@ THE SOFTWARE. ****************************** undici -7.29.0 +7.29.1 MIT License Copyright (c) Matteo Collina and Undici contributors diff --git a/package-lock-overrides/sagemaker.series/package-lock.json b/package-lock-overrides/sagemaker.series/package-lock.json index ccbdab0..fd349d5 100644 --- a/package-lock-overrides/sagemaker.series/package-lock.json +++ b/package-lock-overrides/sagemaker.series/package-lock.json @@ -63,7 +63,7 @@ "ssh2": "^1.16.0", "tar": "^7.5.19", "tas-client": "0.3.1", - "undici": "^7.29.0", + "undici": "^7.29.1", "vscode-oniguruma": "1.7.0", "vscode-regexpp": "^3.1.0", "vscode-textmate": "^9.3.2", @@ -18629,9 +18629,9 @@ "dev": true }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/sagemaker.series/remote/package-lock.json b/package-lock-overrides/sagemaker.series/remote/package-lock.json index c288564..7170fbf 100644 --- a/package-lock-overrides/sagemaker.series/remote/package-lock.json +++ b/package-lock-overrides/sagemaker.series/remote/package-lock.json @@ -1375,9 +1375,9 @@ "license": "Unlicense" }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/web-embedded-with-terminal.series/package-lock.json b/package-lock-overrides/web-embedded-with-terminal.series/package-lock.json index b7d192f..69ab009 100644 --- a/package-lock-overrides/web-embedded-with-terminal.series/package-lock.json +++ b/package-lock-overrides/web-embedded-with-terminal.series/package-lock.json @@ -61,7 +61,7 @@ "playwright-core": "1.59.1", "ssh2": "^1.16.0", "tas-client": "0.3.1", - "undici": "^7.29.0", + "undici": "^7.29.1", "vscode-oniguruma": "1.7.0", "vscode-regexpp": "^3.1.0", "vscode-textmate": "^9.3.2", @@ -18597,9 +18597,9 @@ "dev": true }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/web-embedded-with-terminal.series/remote/package-lock.json b/package-lock-overrides/web-embedded-with-terminal.series/remote/package-lock.json index 91fd948..0055451 100644 --- a/package-lock-overrides/web-embedded-with-terminal.series/remote/package-lock.json +++ b/package-lock-overrides/web-embedded-with-terminal.series/remote/package-lock.json @@ -1328,9 +1328,9 @@ "license": "Unlicense" }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/web-embedded.series/package-lock.json b/package-lock-overrides/web-embedded.series/package-lock.json index b7d192f..69ab009 100644 --- a/package-lock-overrides/web-embedded.series/package-lock.json +++ b/package-lock-overrides/web-embedded.series/package-lock.json @@ -61,7 +61,7 @@ "playwright-core": "1.59.1", "ssh2": "^1.16.0", "tas-client": "0.3.1", - "undici": "^7.29.0", + "undici": "^7.29.1", "vscode-oniguruma": "1.7.0", "vscode-regexpp": "^3.1.0", "vscode-textmate": "^9.3.2", @@ -18597,9 +18597,9 @@ "dev": true }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/web-embedded.series/remote/package-lock.json b/package-lock-overrides/web-embedded.series/remote/package-lock.json index 91fd948..0055451 100644 --- a/package-lock-overrides/web-embedded.series/remote/package-lock.json +++ b/package-lock-overrides/web-embedded.series/remote/package-lock.json @@ -1328,9 +1328,9 @@ "license": "Unlicense" }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/web-server.series/package-lock.json b/package-lock-overrides/web-server.series/package-lock.json index c71b3eb..fb144dc 100644 --- a/package-lock-overrides/web-server.series/package-lock.json +++ b/package-lock-overrides/web-server.series/package-lock.json @@ -62,7 +62,7 @@ "playwright-core": "1.59.1", "ssh2": "^1.16.0", "tas-client": "0.3.1", - "undici": "^7.29.0", + "undici": "^7.29.1", "vscode-oniguruma": "1.7.0", "vscode-regexpp": "^3.1.0", "vscode-textmate": "^9.3.2", @@ -18628,9 +18628,9 @@ "dev": true }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/package-lock-overrides/web-server.series/remote/package-lock.json b/package-lock-overrides/web-server.series/remote/package-lock.json index e4174a2..e84da4a 100644 --- a/package-lock-overrides/web-server.series/remote/package-lock.json +++ b/package-lock-overrides/web-server.series/remote/package-lock.json @@ -1375,9 +1375,9 @@ "license": "Unlicense" }, "node_modules/undici": { - "version": "7.29.0", - "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz", - "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==", + "version": "7.29.1", + "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz", + "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==", "license": "MIT", "engines": { "node": ">=20.18.1" diff --git a/patches/common/finding-override-form-data.diff b/patches/common/finding-override-form-data.diff index c9f3c9f..cbcb36c 100644 --- a/patches/common/finding-override-form-data.diff +++ b/patches/common/finding-override-form-data.diff @@ -12,8 +12,8 @@ Index: code-editor-src/package.json "ws": "^7.5.11" }, "@github/copilot": "^1.0.43", -- "undici": "^7.29.0" -+ "undici": "^7.29.0", +- "undici": "^7.29.1" ++ "undici": "^7.29.1", + "form-data": "^4.0.6" }, "repository": { diff --git a/patches/common/finding-override-tar.diff b/patches/common/finding-override-tar.diff index 68ad7dd..09b213a 100644 --- a/patches/common/finding-override-tar.diff +++ b/patches/common/finding-override-tar.diff @@ -35,8 +35,8 @@ Index: code-editor-src/remote/package.json "uuid": "^14.0.0", "ip-address": "^10.3.1", "@github/copilot": "^1.0.43", -- "undici": "^7.29.0" -+ "undici": "^7.29.0", +- "undici": "^7.29.1" ++ "undici": "^7.29.1", + "tar": "^7.5.19" } } diff --git a/patches/common/finding-override-undici.diff b/patches/common/finding-override-undici.diff index d834c09..6a344f6 100644 --- a/patches/common/finding-override-undici.diff +++ b/patches/common/finding-override-undici.diff @@ -1,10 +1,10 @@ -Override undici to ^7.29.0. -Regenerate: scripts/patches/apply-override.sh --patch common/finding-override-undici.diff --override direct:undici=^7.29.0 --override global:undici=^7.29.0 --override remote/package.json@global:undici=^7.29.0 -Remove when upstream Code-OSS updates undici to >= 7.29.0. +Override undici to ^7.29.1. +Regenerate: scripts/patches/apply-override.sh --patch common/finding-override-undici.diff --override direct:undici=^7.29.1 --override global:undici=^7.29.1 --override remote/package.json@global:undici=^7.29.1 +Remove when upstream Code-OSS updates undici to >= 7.29.1. @generated -@generator: scripts/patches/apply-override.sh --patch common/finding-override-undici.diff --override 'direct:undici=^7.29.0' --override 'global:undici=^7.29.0' --override 'remote/package.json@global:undici=^7.29.0' -@override-package: undici@^7.29.0 +@generator: scripts/patches/apply-override.sh --patch common/finding-override-undici.diff --override 'direct:undici=^7.29.1' --override 'global:undici=^7.29.1' --override 'remote/package.json@global:undici=^7.29.1' +@override-package: undici@^7.29.1 Index: code-editor-src/package.json =================================================================== @@ -15,7 +15,7 @@ Index: code-editor-src/package.json "ssh2": "^1.16.0", "tas-client": "0.3.1", - "undici": "^7.24.0", -+ "undici": "^7.29.0", ++ "undici": "^7.29.1", "vscode-oniguruma": "1.7.0", "vscode-regexpp": "^3.1.0", "vscode-textmate": "^9.3.2", @@ -25,7 +25,7 @@ Index: code-editor-src/package.json }, - "@github/copilot": "^1.0.43" + "@github/copilot": "^1.0.43", -+ "undici": "^7.29.0" ++ "undici": "^7.29.1" }, "repository": { "type": "git", @@ -39,6 +39,6 @@ Index: code-editor-src/remote/package.json "ip-address": "^10.3.1", - "@github/copilot": "^1.0.43" + "@github/copilot": "^1.0.43", -+ "undici": "^7.29.0" ++ "undici": "^7.29.1" } }