Skip to content

chore(deps): bump undici from 6.24.0 to 6.27.0#8997

Merged
BridgeAR merged 1 commit into
masterfrom
dependabot/npm_and_yarn/undici-6.27.0
Jun 22, 2026
Merged

chore(deps): bump undici from 6.24.0 to 6.27.0#8997
BridgeAR merged 1 commit into
masterfrom
dependabot/npm_and_yarn/undici-6.27.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps undici from 6.24.0 to 6.27.0.

Release notes

Sourced from undici's releases.

v6.27.0

⚠️ Security Release

This release line addresses 4 security advisories.

Action required: Upgrade to undici 6.27.0 or later.

npm install undici@^6.27.0

Note on patched version: the v6 fixes shipped in v6.27.0, not 6.26.0v6.26.0 contains only the chunked-EOF fix (#5308) and the version bump, none of the security fixes below.

The v6 line is not affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g, GHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the 8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).

Summary

Advisory CVE Severity (CVSS) Fixed in Fix commit
GHSA-vxpw-j846-p89q CVE-2026-12151 High (7.5) 6.27.0 b7f252e7
GHSA-p88m-4jfj-68fv CVE-2026-9679 Moderate (5.9) 6.27.0 25efa447
GHSA-g8m3-5g58-fq7m CVE-2026-11525 Low (3.7) 6.27.0 25efa447
GHSA-35p6-xmwp-9g52 CVE-2026-6733 Low (3.7) 6.27.0 f4c31d60

High severity

WebSocket DoS via fragment count bypass — CVE-2026-12151

GHSA-vxpw-j846-p89q · CWE-400, CWE-770 Fix: b7f252e7 Backport WebSocket maxPayloadSize fixes (#5423, backported to v6 in #5428)

A malicious WebSocket server can stream a large number of small or empty continuation frames. Undici enforced a limit on cumulative payload size but did not limit the number of fragments per message, leading to unbounded memory growth and denial of service. All releases from 6.17.0 onward are affected.

  • Affected: applications using new WebSocket(...) or WebSocketStream against untrusted endpoints.
  • Workaround: none — upgrade is required.

Moderate severity

HTTP header injection via Set-Cookie percent-decoding — CVE-2026-9679

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [undici](https://github.com/nodejs/undici) from 6.24.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.24.0...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependabot dependencies javascript Pull requests that update javascript code semver-patch labels Jun 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 19, 2026 14:35
@dependabot dependabot Bot added semver-patch dependencies javascript Pull requests that update javascript code dependabot labels Jun 19, 2026
@dd-octo-sts

dd-octo-sts Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

Overall package size

Self size: 6.26 MB
Deduped: 7.32 MB
No deduping: 7.32 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 3.1.0 | 101.28 kB | 840.46 kB | | opentracing | 0.14.7 | 194.81 kB | 194.81 kB | | dc-polyfill | 0.1.11 | 25.74 kB | 25.74 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@codecov

codecov Bot commented Jun 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.15%. Comparing base (1e50807) to head (1f697c8).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #8997      +/-   ##
==========================================
- Coverage   92.30%   92.15%   -0.15%     
==========================================
  Files         878      875       -3     
  Lines       50282    50172     -110     
  Branches     9872     9873       +1     
==========================================
- Hits        46412    46236     -176     
- Misses       3870     3936      +66     
Flag Coverage Δ
aiguard-integration-active 41.48% <ø> (?)
aiguard-integration-latest 41.36% <ø> (-0.13%) ⬇️
aiguard-integration-maintenance 41.57% <ø> (ø)
aiguard-macos 34.57% <ø> (-0.08%) ⬇️
aiguard-windows 34.39% <ø> (?)
apm-capabilities-tracing-macos 47.87% <ø> (ø)
apm-capabilities-tracing-ubuntu-active 47.87% <ø> (ø)
apm-capabilities-tracing-ubuntu-latest 47.87% <ø> (ø)
apm-capabilities-tracing-ubuntu-maintenance 48.09% <ø> (ø)
apm-capabilities-tracing-ubuntu-oldest 48.10% <ø> (+0.17%) ⬆️
apm-capabilities-tracing-windows 47.65% <ø> (-0.05%) ⬇️
apm-integrations-aerospike-18-gte.5.2.0 32.99% <ø> (-0.08%) ⬇️
apm-integrations-aerospike-20-gte.5.5.0 33.02% <ø> (-0.08%) ⬇️
apm-integrations-aerospike-22-gte.5.12.1 33.02% <ø> (-0.08%) ⬇️
apm-integrations-aerospike-22-gte.6.0.0 33.02% <ø> (-0.08%) ⬇️
apm-integrations-aerospike-eol- 32.92% <ø> (-0.08%) ⬇️
apm-integrations-child-process 33.94% <ø> (?)
apm-integrations-confluentinc-kafka-javascript-18 40.01% <ø> (-0.08%) ⬇️
apm-integrations-confluentinc-kafka-javascript-20 40.02% <ø> (-0.08%) ⬇️
apm-integrations-confluentinc-kafka-javascript-22 40.03% <ø> (-0.08%) ⬇️
apm-integrations-confluentinc-kafka-javascript-24 ?
apm-integrations-couchbase-18 33.18% <ø> (+0.08%) ⬆️
apm-integrations-couchbase-eol 33.06% <ø> (-0.08%) ⬇️
apm-integrations-dns 32.94% <ø> (-0.08%) ⬇️
apm-integrations-elasticsearch 33.96% <ø> (-0.08%) ⬇️
apm-integrations-http-latest 41.14% <ø> (-0.07%) ⬇️
apm-integrations-http-maintenance 41.23% <ø> (-0.09%) ⬇️
apm-integrations-http-oldest 41.16% <ø> (-0.07%) ⬇️
apm-integrations-http2 38.46% <ø> (+0.08%) ⬆️
apm-integrations-kafkajs-latest 40.10% <ø> (-0.08%) ⬇️
apm-integrations-kafkajs-oldest 40.19% <ø> (+0.02%) ⬆️
apm-integrations-net 33.64% <ø> (-0.08%) ⬇️
apm-integrations-next-11.1.4 36.52% <ø> (ø)
apm-integrations-next-12.3.7 36.52% <ø> (ø)
apm-integrations-next-13.0.0 29.01% <ø> (-0.04%) ⬇️
apm-integrations-next-13.2.0 28.97% <ø> (-0.08%) ⬇️
apm-integrations-next-13.5.11 29.11% <ø> (-0.08%) ⬇️
apm-integrations-next-14.0.0 29.04% <ø> (-0.12%) ⬇️
apm-integrations-next-14.2.35 29.04% <ø> (-0.08%) ⬇️
apm-integrations-next-14.2.6 29.04% <ø> (-0.08%) ⬇️
apm-integrations-next-14.2.7 29.04% <ø> (-0.08%) ⬇️
apm-integrations-next-15.0.0 29.04% <ø> (-0.08%) ⬇️
apm-integrations-next-15.4.0 29.11% <ø> (-0.08%) ⬇️
apm-integrations-next-latest 29.15% <ø> (-0.08%) ⬇️
apm-integrations-oracledb 33.85% <ø> (-0.08%) ⬇️
apm-integrations-prisma-18-gte.6.16.0.and.lt.7.0.0 34.72% <ø> (-0.08%) ⬇️
apm-integrations-prisma-latest-all 34.14% <ø> (-0.08%) ⬇️
apm-integrations-restify 35.09% <ø> (-0.08%) ⬇️
apm-integrations-sharedb 32.35% <ø> (-0.08%) ⬇️
apm-integrations-tedious 33.26% <ø> (?)
appsec-express 50.95% <ø> (-0.04%) ⬇️
appsec-fastify 47.68% <ø> (-0.08%) ⬇️
appsec-integration-active 36.08% <ø> (ø)
appsec-integration-latest 36.08% <ø> (ø)
appsec-integration-maintenance 36.14% <ø> (ø)
appsec-integration-oldest 36.14% <ø> (ø)
appsec-kafka 40.22% <ø> (-0.12%) ⬇️
appsec-ldapjs 39.75% <ø> (-0.07%) ⬇️
appsec-lodash 39.67% <ø> (-0.07%) ⬇️
appsec-macos ?
appsec-mongodb-core 43.87% <ø> (-0.06%) ⬇️
appsec-mongoose 44.71% <ø> (-0.06%) ⬇️
appsec-mysql 46.95% <ø> (-0.11%) ⬇️
appsec-next-latest-11.1.4 27.27% <ø> (-0.07%) ⬇️
appsec-next-latest-12.3.7 27.66% <ø> (ø)
appsec-next-latest-13.0.0 29.07% <ø> (-0.08%) ⬇️
appsec-next-latest-13.2.0 29.09% <ø> (-0.08%) ⬇️
appsec-next-latest-13.5.11 29.19% <ø> (-0.08%) ⬇️
appsec-next-latest-14.0.0 29.11% <ø> (-0.08%) ⬇️
appsec-next-latest-14.2.35 29.11% <ø> (-0.08%) ⬇️
appsec-next-latest-14.2.6 29.11% <ø> (-0.08%) ⬇️
appsec-next-latest-14.2.7 29.11% <ø> (-0.08%) ⬇️
appsec-next-latest-15.0.0 29.11% <ø> (-0.08%) ⬇️
appsec-next-latest-latest 29.15% <ø> (-0.08%) ⬇️
appsec-next-oldest-11.1.4 27.32% <ø> (-0.08%) ⬇️
appsec-next-oldest-12.3.7 29.13% <ø> (-0.08%) ⬇️
appsec-next-oldest-13.0.0 29.13% <ø> (?)
appsec-next-oldest-13.2.0 29.39% <ø> (-0.08%) ⬇️
appsec-next-oldest-13.5.11 29.49% <ø> (-0.08%) ⬇️
appsec-next-oldest-14.0.0 29.42% <ø> (-0.08%) ⬇️
appsec-next-oldest-14.2.35 29.42% <ø> (-0.08%) ⬇️
appsec-next-oldest-14.2.6 29.42% <ø> (-0.08%) ⬇️
appsec-next-oldest-14.2.7 29.42% <ø> (-0.08%) ⬇️
appsec-next-oldest-15.0.0 29.42% <ø> (-0.08%) ⬇️
appsec-next-oldest-latest 27.86% <ø> (ø)
appsec-node-serialize 38.98% <ø> (-0.07%) ⬇️
appsec-passport 42.61% <ø> (-0.07%) ⬇️
appsec-postgres 46.68% <ø> (-0.06%) ⬇️
appsec-sourcing 38.39% <ø> (-0.07%) ⬇️
appsec-stripe 40.45% <ø> (-0.07%) ⬇️
appsec-template 39.22% <ø> (-0.07%) ⬇️
appsec-ubuntu 57.22% <ø> (-0.06%) ⬇️
appsec-windows 56.95% <ø> (-0.08%) ⬇️
debugger-ubuntu-active 43.52% <ø> (ø)
debugger-ubuntu-latest 43.52% <ø> (ø)
debugger-ubuntu-maintenance 43.64% <ø> (ø)
debugger-ubuntu-oldest 43.95% <ø> (-0.05%) ⬇️
instrumentations-instrumentation-ai 45.15% <ø> (ø)
instrumentations-instrumentation-aws-sdk ?
instrumentations-instrumentation-bluebird 27.41% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-body-parser 35.56% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-child_process 33.31% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-connect 48.04% <ø> (ø)
instrumentations-instrumentation-cookie-parser 29.32% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-couchbase-18 ?
instrumentations-instrumentation-couchbase-eol 45.83% <ø> (ø)
instrumentations-instrumentation-crypto 27.46% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-express 29.53% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-express-mongo-sanitize 29.43% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-express-multi-version 41.47% <ø> (ø)
instrumentations-instrumentation-express-session 35.34% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-fastify 48.04% <ø> (ø)
instrumentations-instrumentation-fetch ?
instrumentations-instrumentation-fs 27.18% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-generic-pool 27.04% <ø> (ø)
instrumentations-instrumentation-hono 28.62% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-http 37.89% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-http-client-options 37.49% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-kafkajs 48.75% <ø> (ø)
instrumentations-instrumentation-knex 27.40% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-koa 45.71% <ø> (ø)
instrumentations-instrumentation-light-my-request 35.20% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-mongoose 28.51% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-multer ?
instrumentations-instrumentation-mysql2 33.35% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-openai-lifecycle 45.82% <ø> (ø)
instrumentations-instrumentation-otel-sdk-trace 25.25% <ø> (ø)
instrumentations-instrumentation-passport 39.15% <ø> (-0.07%) ⬇️
instrumentations-instrumentation-passport-http 38.84% <ø> (-0.07%) ⬇️
instrumentations-instrumentation-passport-local 39.30% <ø> (-0.07%) ⬇️
instrumentations-instrumentation-pg 33.07% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-promise 27.36% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-promise-js 27.36% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-q 27.39% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-restify 47.30% <ø> (ø)
instrumentations-instrumentation-router 43.37% <ø> (ø)
instrumentations-instrumentation-stripe 27.89% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-url 27.29% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-when 27.37% <ø> (-0.08%) ⬇️
instrumentations-instrumentation-zlib 27.34% <ø> (-0.08%) ⬇️
instrumentations-integration-esbuild-0.16.12-active 24.64% <ø> (ø)
instrumentations-integration-esbuild-0.16.12-latest 24.64% <ø> (?)
instrumentations-integration-esbuild-0.16.12-maintenance 18.64% <ø> (ø)
instrumentations-integration-esbuild-0.16.12-oldest 18.63% <ø> (ø)
instrumentations-integration-esbuild-latest-active 24.64% <ø> (ø)
instrumentations-integration-esbuild-latest-latest ?
instrumentations-integration-esbuild-latest-maintenance 18.64% <ø> (ø)
instrumentations-integration-esbuild-latest-oldest 18.63% <ø> (?)
llmobs-ai 35.07% <ø> (-0.07%) ⬇️
llmobs-bedrock ?
llmobs-google-genai 35.88% <ø> (-0.07%) ⬇️
llmobs-langchain 34.75% <ø> (-0.06%) ⬇️
llmobs-openai-latest 39.38% <ø> (-0.07%) ⬇️
llmobs-openai-oldest 39.46% <ø> (-0.07%) ⬇️
llmobs-sdk-active 43.41% <ø> (-0.08%) ⬇️
llmobs-sdk-latest 43.41% <ø> (-0.08%) ⬇️
llmobs-sdk-maintenance 43.51% <ø> (-0.08%) ⬇️
llmobs-sdk-oldest 43.50% <ø> (-0.08%) ⬇️
llmobs-vertex-ai 35.50% <ø> (-0.08%) ⬇️
master-coverage 92.15% <ø> (?)
openfeature-macos 37.39% <ø> (-0.01%) ⬇️
openfeature-ubuntu 37.53% <ø> (ø)
openfeature-unit-active 49.95% <ø> (ø)
openfeature-unit-latest 49.95% <ø> (ø)
openfeature-unit-maintenance 50.32% <ø> (ø)
openfeature-unit-oldest 50.32% <ø> (ø)
openfeature-windows 37.22% <ø> (-0.06%) ⬇️
platform-core 45.98% <ø> (ø)
platform-esbuild 47.00% <ø> (ø)
platform-instrumentations-misc 29.36% <ø> (ø)
platform-integration-active ?
platform-integration-latest 46.65% <ø> (+0.04%) ⬆️
platform-integration-maintenance 46.70% <ø> (ø)
platform-integration-oldest 46.90% <ø> (ø)
platform-shimmer 47.05% <ø> (ø)
platform-unit-guardrails 44.04% <ø> (ø)
platform-webpack ?
plugins-aws-durable-execution-sdk-js 32.73% <ø> (-0.07%) ⬇️
plugins-axios 35.31% <ø> (ø)
plugins-azure-cosmos 35.78% <ø> (-0.08%) ⬇️
plugins-azure-event-hubs 34.64% <ø> (ø)
plugins-azure-service-bus 35.12% <ø> (ø)
plugins-body-parser 36.33% <ø> (ø)
plugins-bullmq 39.40% <ø> (-0.08%) ⬇️
plugins-cassandra 33.47% <ø> (?)
plugins-cookie 40.47% <ø> (ø)
plugins-cookie-parser 40.30% <ø> (ø)
plugins-crypto 42.36% <ø> (ø)
plugins-dd-trace-api 33.18% <ø> (-0.08%) ⬇️
plugins-express-mongo-sanitize 40.35% <ø> (ø)
plugins-express-session 40.22% <ø> (ø)
plugins-fastify 37.66% <ø> (-0.08%) ⬇️
plugins-fetch 33.89% <ø> (-0.08%) ⬇️
plugins-fs 33.60% <ø> (-0.08%) ⬇️
plugins-generic-pool 39.79% <ø> (ø)
plugins-google-cloud-pubsub 41.28% <ø> (-0.07%) ⬇️
plugins-grpc 36.38% <ø> (-0.08%) ⬇️
plugins-handlebars 40.35% <ø> (ø)
plugins-hapi 35.45% <ø> (-0.08%) ⬇️
plugins-hono 35.78% <ø> (-0.08%) ⬇️
plugins-ioredis ?
plugins-jest 27.10% <ø> (ø)
plugins-knex 39.83% <ø> (ø)
plugins-langgraph 32.20% <ø> (-0.08%) ⬇️
plugins-ldapjs 38.81% <ø> (ø)
plugins-light-my-request 39.93% <ø> (ø)
plugins-limitd-client 27.78% <ø> (?)
plugins-lodash 39.97% <ø> (?)
plugins-mariadb 34.98% <ø> (-0.02%) ⬇️
plugins-memcached 33.54% <ø> (-0.08%) ⬇️
plugins-microgateway-core 34.55% <ø> (-0.08%) ⬇️
plugins-modelcontextprotocol-sdk 32.16% <ø> (-0.08%) ⬇️
plugins-moleculer ?
plugins-mongodb ?
plugins-mongodb-core 35.28% <ø> (-0.08%) ⬇️
plugins-mongoose 34.17% <ø> (-0.08%) ⬇️
plugins-multer 40.27% <ø> (ø)
plugins-mysql 34.46% <ø> (-0.09%) ⬇️
plugins-mysql2 34.80% <ø> (-0.08%) ⬇️
plugins-nats 36.18% <ø> (-0.08%) ⬇️
plugins-node-serialize 40.49% <ø> (ø)
plugins-opensearch 33.41% <ø> (-0.08%) ⬇️
plugins-passport-http 40.09% <ø> (ø)
plugins-pino 29.65% <ø> (-0.08%) ⬇️
plugins-postgres 34.51% <ø> (-0.22%) ⬇️
plugins-process 42.36% <ø> (ø)
plugins-pug 40.47% <ø> (ø)
plugins-redis 34.13% <ø> (-0.02%) ⬇️
plugins-router 38.04% <ø> (-0.08%) ⬇️
plugins-sequelize 39.75% <ø> (ø)
plugins-test-and-upstream-amqp10 33.68% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-amqplib 39.03% <ø> (+0.08%) ⬆️
plugins-test-and-upstream-apollo 34.65% <ø> (-0.07%) ⬇️
plugins-test-and-upstream-avsc 33.57% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-bunyan 28.87% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-connect 36.17% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-graphql 35.87% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-koa 35.68% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-protobufjs 33.80% <ø> (-0.08%) ⬇️
plugins-test-and-upstream-rhea 39.00% <ø> (-0.08%) ⬇️
plugins-undici 34.39% <ø> (-0.07%) ⬇️
plugins-url 42.36% <ø> (ø)
plugins-valkey 33.63% <ø> (-0.07%) ⬇️
plugins-vm 42.36% <ø> (ø)
plugins-winston 29.51% <ø> (-0.08%) ⬇️
plugins-ws 36.92% <ø> (-0.08%) ⬇️
profiling-macos 43.07% <ø> (-0.02%) ⬇️
profiling-ubuntu 43.46% <ø> (-0.07%) ⬇️
profiling-windows 40.75% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-aws-sdk 32.91% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-bedrockruntime 31.81% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-client 36.20% <ø> (ø)
serverless-aws-sdk-latest-dynamodb 33.74% <ø> (?)
serverless-aws-sdk-latest-eventbridge 26.83% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-kinesis ?
serverless-aws-sdk-latest-lambda 34.25% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-s3 32.16% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-serverless-peer-service 39.12% <ø> (-0.08%) ⬇️
serverless-aws-sdk-latest-sns 38.01% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-sqs 37.63% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-stepfunctions 32.82% <ø> (-0.07%) ⬇️
serverless-aws-sdk-latest-util 46.39% <ø> (ø)
serverless-aws-sdk-oldest-aws-sdk 33.03% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-bedrockruntime 31.91% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-client 36.76% <ø> (ø)
serverless-aws-sdk-oldest-dynamodb 33.89% <ø> (?)
serverless-aws-sdk-oldest-eventbridge 26.91% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-kinesis ?
serverless-aws-sdk-oldest-lambda 34.35% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-s3 32.29% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-serverless-peer-service 39.21% <ø> (-0.08%) ⬇️
serverless-aws-sdk-oldest-sns 38.11% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-sqs 37.71% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-stepfunctions 32.93% <ø> (-0.07%) ⬇️
serverless-aws-sdk-oldest-util 47.13% <ø> (ø)
serverless-azure-durable-functions 36.74% <ø> (+0.15%) ⬆️
serverless-azure-functions-eventhubs 38.22% <ø> (ø)
serverless-azure-functions-servicebus 38.28% <ø> (ø)
serverless-lambda 34.22% <ø> (-0.10%) ⬇️
test-optimization-cucumber-latest-7.0.0 49.91% <ø> (+0.11%) ⬆️
test-optimization-cucumber-latest-latest 52.64% <ø> (+0.11%) ⬆️
test-optimization-cucumber-oldest-7.0.0 49.99% <ø> (?)
test-optimization-cypress-latest-12.0.0-commonJS 49.25% <ø> (+0.44%) ⬆️
test-optimization-cypress-latest-12.0.0-esm 48.96% <ø> (-0.19%) ⬇️
test-optimization-cypress-latest-14.5.4-commonJS 47.15% <ø> (-1.88%) ⬇️
test-optimization-cypress-latest-14.5.4-esm 47.76% <ø> (+0.35%) ⬆️
test-optimization-cypress-latest-latest-commonJS 49.27% <ø> (-0.11%) ⬇️
test-optimization-cypress-latest-latest-esm 49.58% <ø> (+0.04%) ⬆️
test-optimization-cypress-oldest-12.0.0-commonJS 48.57% <ø> (-0.63%) ⬇️
test-optimization-cypress-oldest-12.0.0-esm 49.36% <ø> (+0.38%) ⬆️
test-optimization-cypress-oldest-14.5.4-commonJS 48.55% <ø> (-0.56%) ⬇️
test-optimization-cypress-oldest-14.5.4-esm 48.84% <ø> (-0.30%) ⬇️
test-optimization-jest-latest-latest 55.35% <ø> (+0.08%) ⬆️
test-optimization-jest-latest-oldest 54.27% <ø> (+0.08%) ⬆️
test-optimization-jest-oldest-latest 55.39% <ø> (+2.57%) ⬆️
test-optimization-jest-oldest-oldest 54.28% <ø> (+0.08%) ⬆️
test-optimization-mocha-latest-latest 53.59% <ø> (+0.08%) ⬆️
test-optimization-mocha-latest-oldest 51.14% <ø> (+0.08%) ⬆️
test-optimization-mocha-oldest-latest 53.70% <ø> (+0.08%) ⬆️
test-optimization-mocha-oldest-oldest 51.13% <ø> (+0.06%) ⬆️
test-optimization-playwright-latest-latest-playwright-active-test-span 44.22% <ø> (+0.27%) ⬆️
test-optimization-playwright-latest-latest-playwright-atr 42.84% <ø> (-0.14%) ⬇️
test-optimization-playwright-latest-latest-playwright-efd 43.27% <ø> (+0.06%) ⬆️
test-optimization-playwright-latest-latest-playwright-final-status 43.33% <ø> (+0.08%) ⬆️
test-optimization-playwright-latest-latest-playwright-impacted-tests 42.82% <ø> (?)
test-optimization-playwright-latest-latest-playwright-reporting 42.88% <ø> (+0.08%) ⬆️
test-optimization-playwright-latest-latest-playwright-test-management 44.49% <ø> (+0.10%) ⬆️
test-optimization-playwright-latest-oldest-playwright-active-test-span 44.03% <ø> (+0.27%) ⬆️
test-optimization-playwright-latest-oldest-playwright-atr ?
test-optimization-playwright-latest-oldest-playwright-efd 43.22% <ø> (+0.09%) ⬆️
test-optimization-playwright-latest-oldest-playwright-final-status 43.29% <ø> (+0.13%) ⬆️
test-optimization-playwright-latest-oldest-playwright-impacted-tests 42.74% <ø> (?)
test-optimization-playwright-latest-oldest-playwright-reporting 42.70% <ø> (?)
test-optimization-playwright-latest-oldest-playwright-test-management 44.44% <ø> (+0.10%) ⬆️
test-optimization-playwright-oldest-latest-playwright-active-test-span 44.30% <ø> (+0.10%) ⬆️
test-optimization-playwright-oldest-latest-playwright-atr 42.92% <ø> (+0.08%) ⬆️
test-optimization-playwright-oldest-latest-playwright-efd 43.34% <ø> (+0.08%) ⬆️
test-optimization-playwright-oldest-latest-playwright-final-status 43.41% <ø> (+0.08%) ⬆️
test-optimization-playwright-oldest-latest-playwright-impacted-tests ?
test-optimization-playwright-oldest-latest-playwright-reporting 43.25% <ø> (+0.39%) ⬆️
test-optimization-playwright-oldest-latest-playwright-test-management 44.57% <ø> (+0.11%) ⬆️
test-optimization-playwright-oldest-oldest-playwright-active-test-span 44.12% <ø> (+0.27%) ⬆️
test-optimization-playwright-oldest-oldest-playwright-atr 43.01% <ø> (+0.10%) ⬆️
test-optimization-playwright-oldest-oldest-playwright-efd 43.28% <ø> (+0.09%) ⬆️
test-optimization-playwright-oldest-oldest-playwright-final-status 43.35% <ø> (?)
test-optimization-playwright-oldest-oldest-playwright-impacted-tests 42.83% <ø> (ø)
test-optimization-playwright-oldest-oldest-playwright-reporting 42.76% <ø> (+0.09%) ⬆️
test-optimization-playwright-oldest-oldest-playwright-test-management 44.52% <ø> (+0.10%) ⬆️
test-optimization-selenium-latest 45.18% <ø> (+0.06%) ⬆️
test-optimization-selenium-oldest 44.76% <ø> (+0.07%) ⬆️
test-optimization-testopt-active 48.27% <ø> (+0.12%) ⬆️
test-optimization-testopt-latest 48.27% <ø> (+0.12%) ⬆️
test-optimization-testopt-maintenance 48.25% <ø> (+0.13%) ⬆️
test-optimization-testopt-oldest 49.36% <ø> (+0.10%) ⬆️
test-optimization-vitest-latest 50.80% <ø> (+2.76%) ⬆️
test-optimization-vitest-oldest 48.02% <ø> (+0.96%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Jun 19, 2026

Copy link
Copy Markdown

Pipelines  Tests

Fix all issues with BitsAI

⚠️ Warnings

🚦 1 Pipeline job failed

Pull Request Title | conventional-commit   View in Datadog   GitHub Actions

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 1f697c8 | Docs | Datadog PR Page | Give us feedback!

@pr-commenter

pr-commenter Bot commented Jun 19, 2026

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2026-06-19 14:47:52

Comparing candidate commit 1f697c8 in PR branch dependabot/npm_and_yarn/undici-6.27.0 with baseline commit 1e50807 in branch master.

📊 Benchmarking dashboard

Found 0 performance improvements and 0 performance regressions! Performance is the same for 1950 metrics, 15 unstable metrics.

Explanation

This is an A/B test comparing a candidate commit's performance against that of a baseline commit. Performance changes are noted in the tables below as:

  • 🟩 = significantly better candidate vs. baseline
  • 🟥 = significantly worse candidate vs. baseline

We compute a confidence interval (CI) over the relative difference of means between metrics from the candidate and baseline commits, considering the baseline as the reference.

If the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD), the change is considered significant.

Feel free to reach out to #apm-benchmarking-platform on Slack if you have any questions.

More details about the CI and significant changes

You can imagine this CI as a range of values that is likely to contain the true difference of means between the candidate and baseline commits.

CIs of the difference of means are often centered around 0%, because often changes are not that big:

---------------------------------(------|---^--------)-------------------------------->
                              -0.6%    0%  0.3%     +1.2%
                                 |          |        |
         lower bound of the CI --'          |        |
sample mean (center of the CI) -------------'        |
         upper bound of the CI ----------------------'

As described above, a change is considered significant if the CI is entirely outside the configured SIGNIFICANT_IMPACT_THRESHOLD (or the deprecated UNCONFIDENCE_THRESHOLD).

For instance, for an execution time metric, this confidence interval indicates a significantly worse performance:

----------------------------------------|---------|---(---------^---------)---------->
                                       0%        1%  1.3%      2.2%      3.1%
                                                  |   |         |         |
       significant impact threshold --------------'   |         |         |
                      lower bound of CI --------------'         |         |
       sample mean (center of the CI) --------------------------'         |
                      upper bound of CI ----------------------------------'

Unstable benchmarks

These benchmarks have a confidence interval too wide to call a change; treat them as noise rather than signal.

scenario:appsec-appsec-enabled-24

  • unstable execution_time [-149559.570µs; +147921.937µs] or [-5.720%; +5.657%]

scenario:appsec-appsec-enabled-26

  • unstable execution_time [-174.390ms; +178.939ms] or [-7.041%; +7.225%]

scenario:appsec-control-20

  • unstable execution_time [-142.471ms; +121.924ms] or [-8.310%; +7.111%]

scenario:appsec-control-24

  • unstable execution_time [-97305.536µs; +99171.636µs] or [-8.145%; +8.301%]

scenario:appsec-control-26

  • unstable execution_time [-93.710ms; +100.064ms] or [-7.967%; +8.507%]

scenario:dogstatsd-with-tags-20

  • unstable cpu_user_time [-148.163ms; +419.989ms] or [-2.966%; +8.406%]
  • unstable execution_time [-146.537ms; +418.100ms] or [-2.887%; +8.238%]

scenario:log-with-debug-20

  • unstable max_rss_usage [-8.518MB; +5.046MB] or [-7.375%; +4.369%]

scenario:plugin-graphql-long-with-depth-and-collapse-off-24

  • unstable cpu_user_time [-373.550ms; +302.979ms] or [-8.268%; +6.706%]
  • unstable execution_time [-396.498ms; +316.135ms] or [-8.247%; +6.576%]
  • unstable max_rss_usage [-44.156MB; +33.336MB] or [-8.067%; +6.091%]

scenario:plugin-graphql-long-with-depth-off-20

  • unstable max_rss_usage [-9.157MB; +11.346MB] or [-6.589%; +8.164%]

scenario:plugin-graphql-long-with-depth-off-26

  • unstable max_rss_usage [-14.508MB; +3.758MB] or [-8.893%; +2.304%]

scenario:plugin-graphql-long-with-depth-on-max-20

  • unstable max_rss_usage [-5.309MB; +13.797MB] or [-3.362%; +8.737%]

scenario:spans-finish-later-26

  • unstable max_rss_usage [-4.075MB; +26.282MB] or [-2.437%; +15.722%]

@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@BridgeAR
BridgeAR merged commit 632fbea into master Jun 22, 2026
811 of 812 checks passed
@BridgeAR
BridgeAR deleted the dependabot/npm_and_yarn/undici-6.27.0 branch June 22, 2026 22:40
dd-octo-sts Bot pushed a commit that referenced this pull request Jun 23, 2026
Bumps [undici](https://github.com/nodejs/undici) from 6.24.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.24.0...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts dd-octo-sts Bot mentioned this pull request Jun 23, 2026
cbasitodx pushed a commit that referenced this pull request Jun 24, 2026
Bumps [undici](https://github.com/nodejs/undici) from 6.24.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.24.0...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dd-octo-sts dd-octo-sts Bot mentioned this pull request Jun 26, 2026
pabloerhard pushed a commit that referenced this pull request Jun 26, 2026
Bumps [undici](https://github.com/nodejs/undici) from 6.24.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v6.24.0...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies javascript Pull requests that update javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant