From f207feae00602083b54aded129998b7e6fa22c17 Mon Sep 17 00:00:00 2001 From: Pete Bacon Darwin Date: Sun, 25 Oct 2026 14:09:56 +0000 Subject: [PATCH] [vite-plugin] Upgrade retained v1 HTTP clients to Undici 7.30.1 --- .changeset/v1-remote-bindings-undici.md | 7 +++++++ pnpm-lock.yaml | 24 +++++++++++++++--------- pnpm-workspace.yaml | 4 ++-- 3 files changed, 24 insertions(+), 11 deletions(-) create mode 100644 .changeset/v1-remote-bindings-undici.md diff --git a/.changeset/v1-remote-bindings-undici.md b/.changeset/v1-remote-bindings-undici.md new file mode 100644 index 0000000000..9b1920fc02 --- /dev/null +++ b/.changeset/v1-remote-bindings-undici.md @@ -0,0 +1,7 @@ +--- +"@cloudflare/vite-plugin": patch +--- + +Prevent malformed token-exchange responses from crashing remote binding startup + +Update the Undici dependency bundled from the retained remote-bindings package to `7.30.1`. Responses with excessive content encodings now reject without a later unhandled stream error when the server closes the connection early. diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 9b66013454..68330ee962 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -40,8 +40,8 @@ catalogs: specifier: 5.8.3 version: 5.8.3 undici: - specifier: 7.29.1 - version: 7.29.1 + specifier: 7.30.1 + version: 7.30.1 vite: specifier: 8.3.4 version: 8.3.4 @@ -57,7 +57,7 @@ catalogs: overrides: '@types/node': 22.15.17 - '@types/node>undici-types': 7.29.1 + '@types/node>undici-types': 7.30.1 patchedDependencies: buffer-equal-constant-time@1.0.1: @@ -268,7 +268,7 @@ importers: version: 5.20261019.2-beta(@types/node@22.15.17) undici: specifier: catalog:default - version: 7.29.1 + version: 7.30.1 ws: specifier: catalog:default version: 8.21.0 @@ -426,7 +426,7 @@ importers: version: 5.8.3 undici: specifier: catalog:default - version: 7.29.1 + version: 7.30.1 vitest: specifier: catalog:default version: 5.0.4(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(msw@2.14.6(@types/node@22.15.17)(typescript@5.8.3))(vite@8.3.4(@types/node@22.15.17)(esbuild@0.28.2)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0)) @@ -7005,8 +7005,8 @@ packages: unconfig-core@7.5.0: resolution: {integrity: sha512-Su3FauozOGP44ZmKdHy2oE6LPjk51M/TRRjHv2HNCWiDvfvCoxC2lno6jevMA91MYAdCdwP05QnWdWpSbncX/w==} - undici-types@7.29.1: - resolution: {integrity: sha512-2xO3p6gANwOmhSFwNy2MMYISbHTtM+K3bY0bqpD1gOGpUPIe+yFXCobxbz0s2jm7E0faMxIFcZUcCKa+N6Ozlg==} + undici-types@7.30.1: + resolution: {integrity: sha512-4CNTj7RmIepmiez9hX5pJzYLi5bv1ZBA6puqC3qYyqluB8zu5uygFc+4iG5Nmcx3fg+6bPFxuEbCrxTa7Yqy3A==} undici@5.28.5: resolution: {integrity: sha512-zICwjrDrcrUE0pyyJc1I2QzBkLM8FINsgOrt6WjA+BgajVq9Nxu2PbFFXUrAggLfDXlZGZBVZYw7WNV5KiBiBA==} @@ -7016,6 +7016,10 @@ packages: resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==} engines: {node: '>=20.18.1'} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} + engines: {node: '>=20.18.1'} + unenv@2.0.0-rc.24: resolution: {integrity: sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==} @@ -9906,7 +9910,7 @@ snapshots: '@types/node@22.15.17': dependencies: - undici-types: 7.29.1 + undici-types: 7.30.1 '@types/pg@8.15.4': dependencies: @@ -12997,7 +13001,7 @@ snapshots: '@quansync/fs': 1.0.0 quansync: 1.0.0 - undici-types@7.29.1: {} + undici-types@7.30.1: {} undici@5.28.5: dependencies: @@ -13005,6 +13009,8 @@ snapshots: undici@7.29.1: {} + undici@7.30.1: {} + unenv@2.0.0-rc.24: dependencies: pathe: 2.0.3 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 669858b68f..65c49c2fc4 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -31,8 +31,8 @@ patchedDependencies: catalog: "@types/node": 22.15.17 typescript: 5.8.3 - undici: 7.29.1 - undici-types: 7.29.1 + undici: 7.30.1 + undici-types: 7.30.1 vitest: 5.0.4 vite: 8.3.4 esbuild: 0.28.2