From c5c9daf5a5e9e8efd8c79b751b604925b1260dd3 Mon Sep 17 00:00:00 2001
From: "homarr-renovate[bot]"
 <158783068+homarr-renovate[bot]@users.noreply.github.com>
Date: Sat, 4 Jul 2026 18:11:47 +0000
Subject: [PATCH] chore(deps): update dependency undici to v7.28.0 [security]
 (#6188)

Co-authored-by: homarr-renovate[bot] <158783068+homarr-renovate[bot]@users.noreply.github.com>
---
 pnpm-lock.yaml      | 28 +++++++++++++++++-----------
 pnpm-workspace.yaml |  4 +++-
 2 files changed, 20 insertions(+), 12 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ffdd37d0a..328f59afe 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -520,8 +520,8 @@ catalogs:
       specifier: ^6.0.3
       version: 6.0.3
     undici:
-      specifier: 7.27.2
-      version: 7.27.2
+      specifier: 7.28.0
+      version: 7.28.0
     use-deep-compare-effect:
       specifier: ^1.8.1
       version: 1.8.1
@@ -1151,7 +1151,7 @@ importers:
         version: 2.2.6
       undici:
         specifier: 'catalog:'
-        version: 7.27.2
+        version: 7.28.0
     devDependencies:
       '@homarr/tsconfig':
         specifier: workspace:^0.1.0
@@ -1500,7 +1500,7 @@ importers:
         version: 19.2.7(react@19.2.7)
       undici:
         specifier: 'catalog:'
-        version: 7.27.2
+        version: 7.28.0
       zod:
         specifier: 'catalog:'
         version: 4.4.3
@@ -1923,7 +1923,7 @@ importers:
         version: link:../image-proxy
       '@homarr/node-unifi':
         specifier: 'catalog:'
-        version: 2.6.0(undici@7.27.2)
+        version: 2.6.0(undici@7.28.0)
       '@homarr/redis':
         specifier: workspace:^0.1.0
         version: link:../redis
@@ -1959,7 +1959,7 @@ importers:
         version: 2.2.2
       undici:
         specifier: 'catalog:'
-        version: 7.27.2
+        version: 7.28.0
       ws:
         specifier: 'catalog:'
         version: 8.21.0
@@ -2264,7 +2264,7 @@ importers:
         version: 2.2.6
       undici:
         specifier: 'catalog:'
-        version: 7.27.2
+        version: 7.28.0
       zod:
         specifier: 'catalog:'
         version: 4.4.3
@@ -14662,6 +14662,10 @@ packages:
     resolution: {integrity: sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==}
     engines: {node: '>=20.18.1'}
 
+  undici@7.28.0:
+    resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
+    engines: {node: '>=20.18.1'}
+
   undici@8.5.0:
     resolution: {integrity: sha512-xamtWoB1EshgjpmlXd7GGm2VfdDtw1+rD8uhry8pSNW3If6S8E0m2T2+orSKeZXEn/aPJMviCpDBA65WJt8zhg==}
     engines: {node: '>=22.19.0'}
@@ -18420,11 +18424,11 @@ snapshots:
 
   '@homarr/gridstack@1.12.0': {}
 
-  '@homarr/node-unifi@2.6.0(undici@7.27.2)':
+  '@homarr/node-unifi@2.6.0(undici@7.28.0)':
     dependencies:
       axios: 1.9.0
       eventemitter2: 6.4.9
-      http-cookie-agent: 6.0.8(tough-cookie@5.1.2)(undici@7.27.2)
+      http-cookie-agent: 6.0.8(tough-cookie@5.1.2)(undici@7.28.0)
       tough-cookie: 5.1.2
       ws: 8.21.0
     transitivePeerDependencies:
@@ -24826,12 +24830,12 @@ snapshots:
 
   http-cache-semantics@4.2.0: {}
 
-  http-cookie-agent@6.0.8(tough-cookie@5.1.2)(undici@7.27.2):
+  http-cookie-agent@6.0.8(tough-cookie@5.1.2)(undici@7.28.0):
     dependencies:
       agent-base: 7.1.3
       tough-cookie: 5.1.2
     optionalDependencies:
-      undici: 7.27.2
+      undici: 7.28.0
 
   http-deceiver@1.2.7: {}
 
@@ -29310,6 +29314,8 @@ snapshots:
 
   undici@7.27.2: {}
 
+  undici@7.28.0: {}
+
   undici@8.5.0: {}
 
   unhead@2.1.15:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 82bcb1cb5..b9c150fd7 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -179,7 +179,7 @@ catalog:
   turbo: ^2.10.0
   typescript: ^6.0.3
   vite: ^8.1.0
-  undici: 7.27.2
+  undici: 7.28.0
   use-deep-compare-effect: ^1.8.1
   video.js: ^8.23.9
   vite-tsconfig-paths: ^6.1.1
@@ -205,6 +205,8 @@ minimumReleaseAgeExclude:
   - turbo@2.9.14
   # Renovate security update: form-data@4.0.6
   - form-data@4.0.6
+  # Renovate security update: undici@7.28.0
+  - undici@7.28.0
 overrides:
   "@babel/helpers@<7.26.10": ">=7.29.7"
   "@babel/runtime@<7.26.10": ">=7.29.7"