Skip to content

[Port dspace-10_x] Bump undici, brace-expansion and dompurify - #6329

Merged
tdonohue merged 3 commits into
DSpace:dspace-10_xfrom
tdonohue:port_6318_6319_6320_to_10x
Oct 5, 2026
Merged

tdonohue merged 3 commits into
DSpace:dspace-10_xfrom
tdonohue:port_6318_6319_6320_to_10x

Conversation

@tdonohue

@tdonohue tdonohue commented Oct 5, 2026

Copy link
Copy Markdown
Member

Description

Manual backport of #6318, #6319, and #6320 to dspace-10_x branch. These are all minor security updates to dependencies.

dependabot Bot added 3 commits October 5, 2026 15:47
Bumps [undici](https://github.com/nodejs/undici) from 6.28.0 to 6.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.28.0...v6.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.29.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.18...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.15 to 3.4.16.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.16)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@tdonohue tdonohue added this to the 10.2 milestone Oct 5, 2026
@tdonohue tdonohue added the dependencies Pull requests that update a dependency file label Oct 5, 2026
@tdonohue tdonohue added the 1 APPROVAL pull request only requires a single approval to merge label Oct 5, 2026
@tdonohue
tdonohue merged commit cf17e5f into DSpace:dspace-10_x Oct 5, 2026
22 of 24 checks passed
@tdonohue
tdonohue deleted the port_6318_6319_6320_to_10x branch October 5, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1 APPROVAL pull request only requires a single approval to merge dependencies Pull requests that update a dependency file

Projects

Development

Successfully merging this pull request may close these issues.

1 participant