From 1357627613c036d5363223ec12ed051357d25adc Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 23 Aug 2026 23:16:33 +0000
Subject: [PATCH] chore(deps): update dependency undici@>=7.0.0 <7.28.0 to v8
 [security]

---
 pnpm-lock.yaml      | 4 +++-
 pnpm-workspace.yaml | 6 +++---
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 50f2718..196c4d9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -613,7 +613,7 @@ overrides:
   shell-quote@<=1.8.4: '>=1.9.0'
   svgo@>=3.0.0 <3.3.4: '>=3.3.4 <4.0.0'
   undici@<6.27.0: '>=6.27.0 <7.0.0'
-  undici@>=7.0.0 <7.28.0: '>=7.28.0 <8.0.0'
+  undici@>=7.0.0 <7.28.0: '>=7.28.0 <9.0.0'
   uuid@<11.1.1: '>=11.1.1'
   webpack-dev-server@<=5.2.5: '>=5.2.6 <6.0.0'
 
@@ -7939,6 +7939,7 @@ packages:
   '@xmldom/xmldom@0.8.13':
     resolution: {integrity: sha512-KRYzxepc14G/CEpEGc3Yn+JKaAeT63smlDr+vjB8jRfgTBBI9wRj/nkQEO+ucV8p8I9bfKLWp37uHgFrbntPvw==}
     engines: {node: '>=10.0.0'}
+    deprecated: this version has critical issues, please update to the latest version
 
   '@xterm/addon-canvas@0.7.0':
     resolution: {integrity: sha512-LF5LYcfvefJuJ7QotNRdRSPc9YASAVDeoT5uyXS/nZshZXjYplGXRECBGiznwvhNL2I8bq1Lf5MzRwstsYQ2Iw==}
@@ -8919,6 +8920,7 @@ packages:
 
   crypto-js@4.2.0:
     resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
+    deprecated: Active development of CryptoJS has been discontinued. This library is no longer maintained.
 
   crypto-random-string@4.0.0:
     resolution: {integrity: sha512-x8dy3RnvYdlUcPOjkEHqozhiwzKNSq7GcPuXFbnyMOCHxX8V3OgIg/pYuabl2sbUPfIJaeAQB7PMOK8DFIdoRA==}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 8b26fce..f06a4db 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -208,8 +208,8 @@ minimumReleaseAgeExclude:
   - turbo@2.9.14
   # Renovate security update: form-data@4.0.6
   - form-data@4.0.6
-  # Renovate security update: undici@7.28.0
-  - undici@7.28.0
+  # Renovate security update: undici@7.28.0 || 8.10.0
+  - undici@7.28.0 || 8.10.0
   # Renovate security update: esbuild@0.28.1
   - esbuild@0.28.1
   # Dependabot security update: better-auth@1.6.22
@@ -266,7 +266,7 @@ overrides:
   "shell-quote@<=1.8.4": ">=1.9.0"
   "svgo@>=3.0.0 <3.3.4": ">=3.3.4 <4.0.0"
   "undici@<6.27.0": ">=6.27.0 <7.0.0"
-  "undici@>=7.0.0 <7.28.0": ">=7.28.0 <8.0.0"
+  "undici@>=7.0.0 <7.28.0": ">=7.28.0 <9.0.0"
   "uuid@<11.1.1": ">=11.1.1"
   "webpack-dev-server@<=5.2.5": ">=5.2.6 <6.0.0"
 patchedDependencies: