From c08530f928da1cc1e9724e919fab89912e982082 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 5 Aug 2026 15:34:28 +0200
Subject: [PATCH] chore(deps): bump undici from 7.28.0 to 7.29.0 (#1780)

Fixes CVE-2026-13697 (HIGH).
---
 package-lock.json   | 8 ++++----
 server/package.json | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 703f19b3e..1c50196d6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19640,9 +19640,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
-      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
+      "version": "7.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
+      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
       "license": "MIT",
       "engines": {
         "node": ">=20.18.1"
@@ -21429,7 +21429,7 @@
         "tsx": "^4.21.0",
         "typescript": "^6.0.2",
         "tz-lookup": "^6.1.25",
-        "undici": "^7.0.0",
+        "undici": "^7.29.0",
         "unzipper": "^0.12.3",
         "uuid": "^14.0.0",
         "ws": "^8.21.0",
diff --git a/server/package.json b/server/package.json
index 4194e7d3f..32fe1c8bc 100644
--- a/server/package.json
+++ b/server/package.json
@@ -57,7 +57,7 @@
     "tsx": "^4.21.0",
     "typescript": "^6.0.2",
     "tz-lookup": "^6.1.25",
-    "undici": "^7.0.0",
+    "undici": "^7.29.0",
     "unzipper": "^0.12.3",
     "uuid": "^14.0.0",
     "ws": "^8.21.0",