Update http-cookie-agent and undici

Apparently the undici update includes two security fixes (GHSA-9qxr-qj54-h672 [1], GHSA-m4v8-wqvr-p9f7 [2]), though it doesn’t sound like either of them could have affected m3api users. npm i {http-cookie-agent,undici}@latest [1]: GHSA-9qxr-qj54-h672 [2]: GHSA-m4v8-wqvr-p9f7
lucaswerkmeister · Apr 9, 2024 · f3f8bdc · f3f8bdc
1 parent 53f2726
commit f3f8bdc
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 14 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -29,9 +29,9 @@
 		"node": ">=18.2.0"
 	},
 	"dependencies": {
-		"http-cookie-agent": "^6.0.1",
+		"http-cookie-agent": "^6.0.3",
 		"tough-cookie": "^4.1.3",
-		"undici": "^6.9.0"
+		"undici": "^6.12.0"
 	},
 	"devDependencies": {
 		"@sinonjs/fake-timers": "^11.2.2",