chore(deps): update dependency undici@>=6.0.0 to ^6.21.2 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
undici@>=6.0.0 (source)	^6.21.1 -> ^6.21.2

GitHub Vulnerability Alerts

CVE-2025-47279

Impact

Applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, then they can cause a memory leak.

Patches

This has been patched in https://github.com/nodejs/undici/pull/4088.

Workarounds

If a webhook fails, avoid keep calling it repeatedly.

References

Reported as: https://github.com/nodejs/undici/issues/3895

---

Release Notes

nodejs/undici (undici@>=6.0.0)

v6.21.2

Compare Source

What's Changed

• fix(types): add missing DNS interceptor by @​slagiewka in https://github.com/nodejs/undici/pull/4024
• [v6.x] fix wpts on windows by @​mcollina in https://github.com/nodejs/undici/pull/4093
• Removed clients with unrecoverable errors from the Pool https://github.com/nodejs/undici/pull/4088

New Contributors

• @​slagiewka made their first contribution in https://github.com/nodejs/undici/pull/4024

Full Changelog: nodejs/undici@v6.21.1...v6.21.2

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for brilliant-pasca-3e80ec canceled.

Name	Link
🔨 Latest commit	c23c63d
🔍 Latest deploy log	https://app.netlify.com/projects/brilliant-pasca-3e80ec/deploys/6877d3f00d32bf00080b4251

[github-actions]

🚀 Performance Test Results

Test Configuration:

• VUs: 4
• Duration: 1m0s

Test Metrics:

• Requests/s: 44.63
• Iterations/s: 14.90
• Failed Requests: 0.00% (0 of 2683)

📜 Logs

> [email protected] run-tests:testenv /home/runner/work/rafiki/rafiki/test/performance
> ./scripts/run-tests.sh -e test "-k" "-q" "--vus" "4" "--duration" "1m"

Cloud Nine GraphQL API is up: http://localhost:3101/graphql
Cloud Nine Wallet Address is up: http://localhost:3100/
Happy Life Bank Address is up: http://localhost:4100/
cloud-nine-wallet-test-backend already set
cloud-nine-wallet-test-auth already set
happy-life-bank-test-backend already set
happy-life-bank-test-auth already set
     data_received..................: 969 kB 16 kB/s
     data_sent......................: 2.1 MB 34 kB/s
     http_req_blocked...............: avg=6.24µs   min=2.09µs  med=4.97µs   max=738.72µs p(90)=5.93µs   p(95)=6.39µs  
     http_req_connecting............: avg=341ns    min=0s      med=0s       max=379.62µs p(90)=0s       p(95)=0s      
     http_req_duration..............: avg=88.97ms  min=6.57ms  med=75.67ms  max=517.86ms p(90)=148.68ms p(95)=172.49ms
       { expected_response:true }...: avg=88.97ms  min=6.57ms  med=75.67ms  max=517.86ms p(90)=148.68ms p(95)=172.49ms
     http_req_failed................: 0.00%  ✓ 0         ✗ 2683
     http_req_receiving.............: avg=85.75µs  min=21.06µs med=75.75µs  max=888.81µs p(90)=113.16µs p(95)=149.8µs 
     http_req_sending...............: avg=36.05µs  min=9.93µs  med=26.98µs  max=2.44ms   p(90)=38.68µs  p(95)=53.31µs 
     http_req_tls_handshaking.......: avg=0s       min=0s      med=0s       max=0s       p(90)=0s       p(95)=0s      
     http_req_waiting...............: avg=88.85ms  min=6.42ms  med=75.56ms  max=517.79ms p(90)=148.6ms  p(95)=172.38ms
     http_reqs......................: 2683   44.629253/s
     iteration_duration.............: avg=268.04ms min=139.2ms med=255.51ms max=1.04s    p(90)=332.28ms p(95)=367.35ms
     iterations.....................: 896    14.904141/s
     vus............................: 4      min=4       max=4 
     vus_max........................: 4      min=4       max=4