From ff3e088cbb643ea09b9b8d1f570b709efa244dfc Mon Sep 17 00:00:00 2001
From: Linus Rath <139418639+rathlinus@users.noreply.github.com>
Date: Mon, 26 Oct 2026 14:06:37 +0100
Subject: [PATCH] fix: update undici to 7.30.1 for a decompression denial of
 service (GHSA-xjj6-f33q-929c)

---
 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9a3b2d1d6..a347bdde7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -47,7 +47,7 @@
         "react-dom": "^19.2.5",
         "sharp": "^0.35.4",
         "tailwind-merge": "^3.4.0",
-        "undici": "^7.29.1",
+        "undici": "^7.30.1",
         "zustand": "^5.0.12"
       },
       "devDependencies": {
@@ -9653,9 +9653,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.29.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz",
-      "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==",
+      "version": "7.30.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.1.tgz",
+      "integrity": "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"
diff --git a/package.json b/package.json
index 5cfcd8773..350215110 100644
--- a/package.json
+++ b/package.json
@@ -76,7 +76,7 @@
     "react-dom": "^19.2.5",
     "sharp": "^0.35.4",
     "tailwind-merge": "^3.4.0",
-    "undici": "^7.29.1",
+    "undici": "^7.30.1",
     "zustand": "^5.0.12"
   },
   "devDependencies": {