From 63cfc833213c7f50b41245430c2e8639fb2bbab3 Mon Sep 17 00:00:00 2001 From: generall Date: Sun, 15 Feb 2026 16:14:35 +0100 Subject: [PATCH 1/3] audit fix --- pnpm-workspace.yaml | 33 ++++++++++++++++++++++++++++++--- 1 file changed, 30 insertions(+), 3 deletions(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index dde5909..e2ffcca 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,4 +1,31 @@ packages: - - "packages/js-client-rest" - - "packages/js-client-grpc" - - "packages/qdrant-js" + - packages/js-client-rest + - packages/js-client-grpc + - packages/qdrant-js + +overrides: + brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12' + brace-expansion@>=2.0.0 <=2.0.1: '>=2.0.2' + braces@<3.0.3: '>=3.0.3' + diff@>=4.0.0 <4.0.4: '>=4.0.4' + esbuild@<=0.24.2: '>=0.25.0' + get-func-name@<2.0.1: '>=2.0.1' + glob@>=10.2.0 <10.5.0: '>=10.5.0' + js-yaml@>=4.0.0 <4.1.1: '>=4.1.1' + lodash@>=4.0.0 <=4.17.22: '>=4.17.23' + micromatch@<4.0.8: '>=4.0.8' + nanoid@<3.3.8: '>=3.3.8' + postcss@<8.4.31: '>=8.4.31' + undici@<5.29.0: '>=5.29.0' + undici@<6.23.0: '>=6.23.0' + vite@<4.5.10: '>=4.5.10' + vite@<4.5.11: '>=4.5.11' + vite@<4.5.12: '>=4.5.12' + vite@<4.5.13: '>=4.5.13' + vite@<=4.5.13: '>=4.5.14' + vite@<=4.5.5: '>=4.5.6' + vite@<=5.4.19: '>=5.4.20' + vite@>=4.0.0 <4.5.4: '>=4.5.4' + vite@>=4.0.0 <=4.5.1: '>=4.5.2' + vite@>=4.0.0 <=4.5.2: '>=4.5.3' + vite@>=4.0.0 <=4.5.3: '>=4.5.4' From 08d28a9cf10e806c63cb1ca694a807ef9df428e8 Mon Sep 17 00:00:00 2001 From: generall Date: Sun, 15 Feb 2026 16:28:57 +0100 Subject: [PATCH 2/3] Revert "audit fix" This reverts commit 6f88ec20b482ae5d6751147502e32dd9650f0133. --- pnpm-workspace.yaml | 33 +++------------------------------ 1 file changed, 3 insertions(+), 30 deletions(-) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index e2ffcca..dde5909 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,31 +1,4 @@ packages: - - packages/js-client-rest - - packages/js-client-grpc - - packages/qdrant-js - -overrides: - brace-expansion@>=1.0.0 <=1.1.11: '>=1.1.12' - brace-expansion@>=2.0.0 <=2.0.1: '>=2.0.2' - braces@<3.0.3: '>=3.0.3' - diff@>=4.0.0 <4.0.4: '>=4.0.4' - esbuild@<=0.24.2: '>=0.25.0' - get-func-name@<2.0.1: '>=2.0.1' - glob@>=10.2.0 <10.5.0: '>=10.5.0' - js-yaml@>=4.0.0 <4.1.1: '>=4.1.1' - lodash@>=4.0.0 <=4.17.22: '>=4.17.23' - micromatch@<4.0.8: '>=4.0.8' - nanoid@<3.3.8: '>=3.3.8' - postcss@<8.4.31: '>=8.4.31' - undici@<5.29.0: '>=5.29.0' - undici@<6.23.0: '>=6.23.0' - vite@<4.5.10: '>=4.5.10' - vite@<4.5.11: '>=4.5.11' - vite@<4.5.12: '>=4.5.12' - vite@<4.5.13: '>=4.5.13' - vite@<=4.5.13: '>=4.5.14' - vite@<=4.5.5: '>=4.5.6' - vite@<=5.4.19: '>=5.4.20' - vite@>=4.0.0 <4.5.4: '>=4.5.4' - vite@>=4.0.0 <=4.5.1: '>=4.5.2' - vite@>=4.0.0 <=4.5.2: '>=4.5.3' - vite@>=4.0.0 <=4.5.3: '>=4.5.4' + - "packages/js-client-rest" + - "packages/js-client-grpc" + - "packages/qdrant-js" From 286329d89017999b10bb9fdecb29c09d116eb485 Mon Sep 17 00:00:00 2001 From: generall Date: Sun, 15 Feb 2026 16:41:19 +0100 Subject: [PATCH 3/3] undici major upgrade --- .npmrc | 2 +- packages/js-client-rest/package.json | 2 +- pnpm-lock.yaml | 12 ++++++------ 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.npmrc b/.npmrc index fdeaabd..1fe715b 100644 --- a/.npmrc +++ b/.npmrc @@ -1,7 +1,7 @@ loglevel = warn save-exact = true engine-strict = true -node-version=20.0.0 +node-version=20.18.1 strict-peer-dependencies = true auto-install-peers = true lockfile = true diff --git a/packages/js-client-rest/package.json b/packages/js-client-rest/package.json index 7e5e47f..5e2fcd7 100644 --- a/packages/js-client-rest/package.json +++ b/packages/js-client-rest/package.json @@ -55,7 +55,7 @@ }, "dependencies": { "@qdrant/openapi-typescript-fetch": "1.2.6", - "undici": "^6.23.0" + "undici": "^7.22.0" }, "devDependencies": { "@rollup/plugin-commonjs": "^24.1.0", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3dcb41f..bef8484 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -88,8 +88,8 @@ importers: specifier: '>=4.7' version: 5.0.4 undici: - specifier: ^6.23.0 - version: 6.23.0 + specifier: ^7.22.0 + version: 7.22.0 devDependencies: '@rollup/plugin-commonjs': specifier: ^24.1.0 @@ -1803,9 +1803,9 @@ packages: resolution: {integrity: sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==} engines: {node: '>=14.0'} - undici@6.23.0: - resolution: {integrity: sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==} - engines: {node: '>=18.17'} + undici@7.22.0: + resolution: {integrity: sha512-RqslV2Us5BrllB+JeiZnK4peryVTndy9Dnqq62S3yYRRTj0tFQCwEniUy2167skdGOy3vqRzEvl1Dm4sV2ReDg==} + engines: {node: '>=20.18.1'} uri-js@4.4.1: resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==} @@ -3455,7 +3455,7 @@ snapshots: dependencies: '@fastify/busboy': 2.1.0 - undici@6.23.0: {} + undici@7.22.0: {} uri-js@4.4.1: dependencies: