From bd758e09a2b1a42b02203a8887d0543788e7da73 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 14 Aug 2026 19:06:30 +0000
Subject: [PATCH] chore(deps): update dependency undici to v8 [security]

---
 pnpm-lock.yaml      | 36 +++++++++++++++++++-----------------
 pnpm-workspace.yaml |  6 +++---
 2 files changed, 22 insertions(+), 20 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 50f2718..e7348ff 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -523,8 +523,8 @@ catalogs:
       specifier: npm:@typescript/typescript6@^6.0.2
       version: 6.0.2
     undici:
-      specifier: 7.29.0
-      version: 7.29.0
+      specifier: 8.9.0
+      version: 8.9.0
     use-deep-compare-effect:
       specifier: ^1.8.1
       version: 1.8.1
@@ -1185,7 +1185,7 @@ importers:
         version: 2.2.6
       undici:
         specifier: 'catalog:'
-        version: 7.29.0
+        version: 8.9.0
     devDependencies:
       '@homarr/tsconfig':
         specifier: workspace:^0.1.0
@@ -1540,7 +1540,7 @@ importers:
         version: 19.2.7(react@19.2.7)
       undici:
         specifier: 'catalog:'
-        version: 7.29.0
+        version: 8.9.0
       zod:
         specifier: 'catalog:'
         version: 4.4.3
@@ -1966,7 +1966,7 @@ importers:
         version: link:../image-proxy
       '@homarr/node-unifi':
         specifier: 'catalog:'
-        version: 2.6.0(undici@7.29.0)
+        version: 2.6.0(undici@8.9.0)
       '@homarr/redis':
         specifier: workspace:^0.1.0
         version: link:../redis
@@ -2002,7 +2002,7 @@ importers:
         version: 2.3.0
       undici:
         specifier: 'catalog:'
-        version: 7.29.0
+        version: 8.9.0
       ws:
         specifier: 'catalog:'
         version: 8.21.0
@@ -2307,7 +2307,7 @@ importers:
         version: 2.2.6
       undici:
         specifier: 'catalog:'
-        version: 7.29.0
+        version: 8.9.0
       zod:
         specifier: 'catalog:'
         version: 4.4.3
@@ -7939,6 +7939,7 @@ packages:
   '@xmldom/xmldom@0.8.13':
     resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
     engines: {node: '>=10.0.0'}
+    deprecated: this version has critical issues, please update to the latest version
 
   '@xterm/addon-canvas@0.7.0':
     resolution: {integrity: sha512-LF5LYcfvefJuJ7QotNRdRSPc9YASAVDeoT5uyXS/nZshZXjYplGXRECBGiznwvhNL2I8bq1Lf5MzRwstsYQ2Iw==}
@@ -8919,6 +8920,7 @@ packages:
 
   crypto-js@4.2.0:
     resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
+    deprecated: Active development of CryptoJS has been discontinued. This library is no longer maintained.
 
   crypto-random-string@4.0.0:
     resolution: {integrity: sha512-x8dy3RnvYdlUcPOjkEHqozhiwzKNSq7GcPuXFbnyMOCHxX8V3OgIg/pYuabl2sbUPfIJaeAQB7PMOK8DFIdoRA==}
@@ -14374,14 +14376,14 @@ packages:
     resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
     engines: {node: '>=20.18.1'}
 
-  undici@7.29.0:
-    resolution: {integrity: sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==}
-    engines: {node: '>=20.18.1'}
-
   undici@8.6.0:
     resolution: {integrity: sha512-l2FlC6I510GawyEd1qgcE/okihKrzy+BRTEBlu6T0fdbM9m5yxtIH5Oa3ysRsH0zC4EhmWUEaSDsy2QngBeRlw==}
     engines: {node: '>=22.19.0'}
 
+  undici@8.9.0:
+    resolution: {integrity: sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==}
+    engines: {node: '>=22.19.0'}
+
   unhead@2.1.15:
     resolution: {integrity: sha512-MCt5T90mCWyr3Z6pUCdM9lVRXoMoVBlL7z7U4CYVIiaDiuzad/UCfLuMqz5MeNmpZUgoBCQnrucJimU7EZR+XA==}
 
@@ -17958,11 +17960,11 @@ snapshots:
 
   '@homarr/gridstack@1.12.0': {}
 
-  '@homarr/node-unifi@2.6.0(undici@7.29.0)':
+  '@homarr/node-unifi@2.6.0(undici@8.9.0)':
     dependencies:
       axios: 1.18.1
       eventemitter2: 6.4.9
-      http-cookie-agent: 6.0.8(tough-cookie@5.1.2)(undici@7.29.0)
+      http-cookie-agent: 6.0.8(tough-cookie@5.1.2)(undici@8.9.0)
       tough-cookie: 5.1.2
       ws: 8.21.0
     transitivePeerDependencies:
@@ -24419,12 +24421,12 @@ snapshots:
 
   http-cache-semantics@4.2.0: {}
 
-  http-cookie-agent@6.0.8(tough-cookie@5.1.2)(undici@7.29.0):
+  http-cookie-agent@6.0.8(tough-cookie@5.1.2)(undici@8.9.0):
     dependencies:
       agent-base: 7.1.3
       tough-cookie: 5.1.2
     optionalDependencies:
-      undici: 7.29.0
+      undici: 8.9.0
 
   http-deceiver@1.2.7: {}
 
@@ -28884,10 +28886,10 @@ snapshots:
 
   undici@7.28.0: {}
 
-  undici@7.29.0: {}
-
   undici@8.6.0: {}
 
+  undici@8.9.0: {}
+
   unhead@2.1.15:
     dependencies:
       hookable: 6.1.1
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 8b26fce..9709302 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -180,7 +180,7 @@ catalog:
   turbo: ^2.10.4
   typescript: "npm:@typescript/typescript6@^6.0.2"
   vite: ^8.1.4
-  undici: 7.29.0
+  undici: 8.9.0
   use-deep-compare-effect: ^1.8.1
   video.js: ^8.23.9
   vite-tsconfig-paths: ^6.1.1
@@ -208,8 +208,8 @@ minimumReleaseAgeExclude:
   - turbo@2.9.14
   # Renovate security update: form-data@4.0.6
   - form-data@4.0.6
-  # Renovate security update: undici@7.28.0
-  - undici@7.28.0
+  # Renovate security update: undici@7.28.0 || 8.9.0
+  - undici@7.28.0 || 8.9.0
   # Renovate security update: esbuild@0.28.1
   - esbuild@0.28.1
   # Dependabot security update: better-auth@1.6.22