From 975658b4be82daaa31a3ed77977ca507588e2947 Mon Sep 17 00:00:00 2001 From: sudacode Date: Fri, 23 Oct 2026 19:18:24 -0700 Subject: [PATCH] build(deps): bump electron to 43.8.3, undici to 7.30.1 and follow-redirects to 1.16.1 - Resolve new high-severity audit advisories blocking CI - Add changelog fragment for patched dependencies --- bun.lock | 13 +++++++------ changes/patched-electron-undici-follow-redirects.md | 4 ++++ package.json | 7 ++++--- 3 files changed, 15 insertions(+), 9 deletions(-) create mode 100644 changes/patched-electron-undici-follow-redirects.md diff --git a/bun.lock b/bun.lock index 5ca649f2..01b147e0 100644 --- a/bun.lock +++ b/bun.lock @@ -19,12 +19,12 @@ "@electron/asar": "3.4.1", "@types/node": "^24.10.0", "@types/ws": "^8.18.1", - "electron": "43.7.7", + "electron": "43.8.3", "electron-builder": "26.16.1", "esbuild": "^0.25.12", "prettier": "^3.8.1", "typescript": "^5.9.3", - "undici": "7.29.1", + "undici": "7.30.1", }, }, }, @@ -37,6 +37,7 @@ "brace-expansion": "5.0.11", "electron-builder-squirrel-windows": "26.16.1", "fast-uri": "3.1.7", + "follow-redirects": "1.16.1", "form-data": "4.0.6", "ip-address": "10.2.0", "js-yaml": "4.3.2", @@ -45,7 +46,7 @@ "picomatch": "4.0.4", "tar": "7.5.21", "tmp": "0.2.7", - "undici": "7.29.1", + "undici": "7.30.1", }, "packages": { "@discordjs/collection": ["@discordjs/collection@2.1.1", "", {}, "sha512-LiSusze9Tc7qF03sLCujF5iZp7K+vRNEDBZ86FT9aQAv3vxMLihUvKvpsCWiQ2DJq1tVckopKm1rxomgNUc9hg=="], @@ -304,7 +305,7 @@ "ejs": ["ejs@3.1.10", "", { "dependencies": { "jake": "^10.8.5" }, "bin": { "ejs": "bin/cli.js" } }, "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA=="], - "electron": ["electron@43.7.7", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-y0pg+KhWLAkW2Ts2njkFFNFl3KtB1FmbUp9Te9i+R2Og2v1fcI/I6MADJ7jvnzB5UKdt+U+0EUoCnVL79xMPMA=="], + "electron": ["electron@43.8.3", "", { "dependencies": { "@electron-internal/extract-zip": "^1.0.1", "@electron/get": "^5.0.0", "@types/node": "^24.9.0" }, "bin": { "electron": "cli.js", "install-electron": "install.js" } }, "sha512-KgvSm3bHXz96hSXzqxyRjLeli80rIdszbDQFKlRSfckmGazTPCH/CxUN31Dp9c5rFKTQSNf9gPJRWl1yWNB3pA=="], "electron-builder": ["electron-builder@26.16.1", "", { "dependencies": { "app-builder-lib": "26.16.1", "builder-util": "26.16.0", "builder-util-runtime": "9.7.0", "chalk": "^4.1.2", "ci-info": "^4.2.0", "dmg-builder": "26.16.1", "fs-extra": "^10.1.0", "lazy-val": "^1.0.5", "simple-update-notifier": "2.0.0", "yargs": "^17.6.2" }, "bin": { "electron-builder": "./cli.js", "install-app-deps": "./install-app-deps.js" } }, "sha512-LrLK65QX5PUYYODXqp23FKrV7CILTtVY7mrJckNknO9jLNSMiqFkKbSMiDRw4CjOADMPVDdWLxY4mezOZWswxg=="], @@ -350,7 +351,7 @@ "filelist": ["filelist@1.0.6", "", { "dependencies": { "minimatch": "^5.0.1" } }, "sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA=="], - "follow-redirects": ["follow-redirects@1.16.0", "", {}, "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw=="], + "follow-redirects": ["follow-redirects@1.16.1", "", { "peerDependencies": { "debug": "*" }, "optionalPeers": ["debug"] }, "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg=="], "form-data": ["form-data@4.0.6", "", { "dependencies": { "asynckit": "^0.4.0", "combined-stream": "^1.0.8", "es-set-tostringtag": "^2.1.0", "hasown": "^2.0.4", "mime-types": "^2.1.35" } }, "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ=="], @@ -616,7 +617,7 @@ "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="], - "undici": ["undici@7.29.1", "", {}, "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q=="], + "undici": ["undici@7.30.1", "", {}, "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg=="], "undici-types": ["undici-types@7.16.0", "", {}, "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw=="], diff --git a/changes/patched-electron-undici-follow-redirects.md b/changes/patched-electron-undici-follow-redirects.md new file mode 100644 index 00000000..11954c4e --- /dev/null +++ b/changes/patched-electron-undici-follow-redirects.md @@ -0,0 +1,4 @@ +type: fixed +area: dependencies + +- Updated Electron to 43.8.3 and undici to 7.30.1, and pinned follow-redirects to 1.16.1, to resolve new security advisories. diff --git a/package.json b/package.json index 1f6359c7..ca138b9d 100644 --- a/package.json +++ b/package.json @@ -93,6 +93,7 @@ "brace-expansion": "5.0.11", "electron-builder-squirrel-windows": "26.16.1", "fast-uri": "3.1.7", + "follow-redirects": "1.16.1", "form-data": "4.0.6", "ip-address": "10.2.0", "js-yaml": "4.3.2", @@ -101,7 +102,7 @@ "picomatch": "4.0.4", "tar": "7.5.21", "tmp": "0.2.7", - "undici": "7.29.1" + "undici": "7.30.1" }, "keywords": [ "anki", @@ -130,12 +131,12 @@ "@electron/asar": "3.4.1", "@types/node": "^24.10.0", "@types/ws": "^8.18.1", - "electron": "43.7.7", + "electron": "43.8.3", "electron-builder": "26.16.1", "esbuild": "^0.25.12", "prettier": "^3.8.1", "typescript": "^5.9.3", - "undici": "7.29.1" + "undici": "7.30.1" }, "build": { "appId": "com.sudacode.SubMiner",