Skip to content

[Port dspace-9_x] Bump undici, brace-expansion and dompurify - #6330

Merged
tdonohue merged 3 commits into
DSpace:dspace-9_xfrom
tdonohue:port_6318_6319_6320_to_9x
Oct 5, 2026
Merged

tdonohue merged 3 commits into
DSpace:dspace-9_xfrom
tdonohue:port_6318_6319_6320_to_9x

Conversation

@tdonohue

@tdonohue tdonohue commented Oct 5, 2026

Copy link
Copy Markdown
Member

Description

Manual backport of #6318, #6319, and #6320 to dspace-9_x branch. These are all minor security updates to dependencies.

Bumps [undici](https://github.com/nodejs/undici) from 6.28.0 to 6.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.28.0...v6.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.29.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@tdonohue tdonohue added this to the 9.5 milestone Oct 5, 2026
@tdonohue tdonohue added dependencies Pull requests that update a dependency file 1 APPROVAL pull request only requires a single approval to merge labels Oct 5, 2026
@tdonohue
tdonohue force-pushed the port_6318_6319_6320_to_9x branch from 71d08fa to 649f56a Compare October 5, 2026 21:00
dependabot Bot added 2 commits October 5, 2026 16:06
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.18...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.15 to 3.4.16.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.16)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@tdonohue
tdonohue force-pushed the port_6318_6319_6320_to_9x branch from 649f56a to f8004ec Compare October 5, 2026 21:06
@tdonohue
tdonohue merged commit ce033a9 into DSpace:dspace-9_x Oct 5, 2026
20 of 26 checks passed
@tdonohue
tdonohue deleted the port_6318_6319_6320_to_9x branch October 5, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1 APPROVAL pull request only requires a single approval to merge dependencies Pull requests that update a dependency file

Projects

Development

Successfully merging this pull request may close these issues.

1 participant