What's Changed

• fix: sqlite null ref by @ronag in https://github.com/nodejs/undici/pull/4016
• fix: sqlite remove unnecessary parameter by @ronag in https://github.com/nodejs/undici/pull/4017
• feat: sqlite add set and minor cleanup by @ronag in https://github.com/nodejs/undici/pull/4018

Full Changelog: https://github.com/nodejs/undici/compare/v7.2.3...v7.3.0

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

What's Changed

• Fix typo in update cache tests action by @flakey5 in https://github.com/nodejs/undici/pull/4008

Full Changelog: https://github.com/nodejs/undici/compare/v7.2.2...v7.2.3

What's Changed

• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3991
• fix: dual-stack retries infinite loop by @luddd3 in https://github.com/nodejs/undici/pull/4001
• build(deps): bump codecov/codecov-action from 5.0.7 to 5.1.2 by @dependabot in https://github.com/nodejs/undici/pull/3980
• build(deps): bump github/codeql-action from 3.27.0 to 3.28.1 by @dependabot in https://github.com/nodejs/undici/pull/4003
• tests: Update Cache Tests by @github-actions in https://github.com/nodejs/undici/pull/3965
• ReadableStreamFrom pull until cannot on empty enqueu by @KhafraDev in https://github.com/nodejs/undici/pull/4002
• Resolve circular dependency by @mcollina in https://github.com/nodejs/undici/pull/4006

Full Changelog: https://github.com/nodejs/undici/compare/v7.2.1...v7.2.2

What's Changed

• fix(3951): typo on errorede dns lookup by @metcoder95 in https://github.com/nodejs/undici/pull/3956
• feat: add missing error type by @Gigioliva in https://github.com/nodejs/undici/pull/3964
• websocket: improve frame parsing by @tsctx in https://github.com/nodejs/undici/pull/3447
• fix(#3966): account for network errors by @metcoder95 in https://github.com/nodejs/undici/pull/3967
• build(deps-dev): bump @fastify/busboy from 3.1.0 to 3.1.1 by @dependabot in https://github.com/nodejs/undici/pull/3971
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3954
• docs: fix dispatcher stream example links by @luddd3 in https://github.com/nodejs/undici/pull/3972
• fix: undici:request:headers does not indicate completion of a response by @legendecas in https://github.com/nodejs/undici/pull/3974
• build(deps): bump cronometro from 3.0.2 to 4.0.1 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3976
• fix(#3975): do not unref timeout by @metcoder95 in https://github.com/nodejs/undici/pull/3977
• fix: bad response on h2 server by @metcoder95 in https://github.com/nodejs/undici/pull/3978
• build(deps): bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 by @dependabot in https://github.com/nodejs/undici/pull/3981
• build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 by @dependabot in https://github.com/nodejs/undici/pull/3983
• chore: ensure automated v7 release compared to v7 by @trivikr in https://github.com/nodejs/undici/pull/3986
• test: ignore test for CITGM by @metcoder95 in https://github.com/nodejs/undici/pull/3993
• fix: retry flaky test by @metcoder95 in https://github.com/nodejs/undici/pull/3992

New Contributors

• @legendecas made their first contribution in https://github.com/nodejs/undici/pull/3974

Full Changelog: https://github.com/nodejs/undici/compare/v7.2.0...v7.2.1

What's Changed

• fix: dns interceptor undefined function by @luddd3 in https://github.com/nodejs/undici/pull/3958
• More cache fixes by @flakey5 in https://github.com/nodejs/undici/pull/3955
• [Release] v7.2.0 by @github-actions in https://github.com/nodejs/undici/pull/3962

Full Changelog: https://github.com/nodejs/undici/compare/v7.1.1...v7.2.0

What's Changed

• fix: publish undici:client:sendHeaders message on H2 by @fengmk2 in https://github.com/nodejs/undici/pull/3921
• Add support schedule by @mcollina in https://github.com/nodejs/undici/pull/3923
• cache: do not set undefined etag by @mcollina in https://github.com/nodejs/undici/pull/3925
• test: cleanup cache tests by @flakey5 in https://github.com/nodejs/undici/pull/3926
• fix mimetype parser wrong operator by @tsctx in https://github.com/nodejs/undici/pull/3924
• correctly set if-none-match by @mcollina in https://github.com/nodejs/undici/pull/3933
• Add example for request + "Garbage Collection" by @WTCT-TOP in https://github.com/nodejs/undici/pull/3916
• fix: response error interceptor by @Gigioliva in https://github.com/nodejs/undici/pull/3930
• build(deps-dev): bump neostandard from 0.11.9 to 0.12.0 by @dependabot in https://github.com/nodejs/undici/pull/3938
• fix(#3937): respect correct host header by @metcoder95 in https://github.com/nodejs/undici/pull/3940
• fix: handle case no content type by @Gigioliva in https://github.com/nodejs/undici/pull/3931
• support array of headers in WrapHandler by @KhafraDev in https://github.com/nodejs/undici/pull/3941
• build(deps): bump step-security/harden-runner from 2.10.1 to 2.10.2 by @dependabot in https://github.com/nodejs/undici/pull/3911
• test: Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3888
• build(deps-dev): bump @fastify/busboy from 3.0.0 to 3.1.0 by @dependabot in https://github.com/nodejs/undici/pull/3939
• Support SQLite unflagged without useless warnings by @mcollina in https://github.com/nodejs/undici/pull/3947
• docs: enhance documentation by @metcoder95 in https://github.com/nodejs/undici/pull/3945

New Contributors

• @WTCT-TOP made their first contribution in https://github.com/nodejs/undici/pull/3916

Full Changelog: https://github.com/nodejs/undici/compare/v7.1.0...v7.1.1

What's Changed

• Mark http/2 support as stable by @mcollina in https://github.com/nodejs/undici/pull/3893
• test: fix dns interceptor flakiness by @luddd3 in https://github.com/nodejs/undici/pull/3902
• fix(#3901): migrate dns interceptor to new hooks by @metcoder95 in https://github.com/nodejs/undici/pull/3903
• feat(interceptors): migrate decorator handler to new hooks by @metcoder95 in https://github.com/nodejs/undici/pull/3905
• feat: Adjust allowed error codes for detecting node:sqlite by @xconverge in https://github.com/nodejs/undici/pull/3900
• build(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0 by @dependabot in https://github.com/nodejs/undici/pull/3913
• build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.7 by @dependabot in https://github.com/nodejs/undici/pull/3910
• Move Tomas to past collaborators by @delvedor in https://github.com/nodejs/undici/pull/3909
• docs: add advanced usage examples for ProxyAgent by @mertcanaltin in https://github.com/nodejs/undici/pull/3906
• [Release] v7.1.0 by @github-actions in https://github.com/nodejs/undici/pull/3922

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0...v7.1.0

What's Changed

• fetch: fix content-encoding order by @tsctx in https://github.com/nodejs/undici/pull/3343
• Add regression test for broken body by @mcollina in https://github.com/nodejs/undici/pull/3346
• build(deps): bump node from 075a5cc to 9af472b in /build by @dependabot in https://github.com/nodejs/undici/pull/3355
• fix: post request signal by @Gigioliva in https://github.com/nodejs/undici/pull/3354
• Revert "fix: post request signal (#3354)" by @ronag in https://github.com/nodejs/undici/pull/3359
• websocket: don't use pooled buffer in mask pool by @tsctx in https://github.com/nodejs/undici/pull/3357
• fix: consider bytes read when dumping by @ronag in https://github.com/nodejs/undici/pull/3360
• refactor: simplify signal handling by @ronag in https://github.com/nodejs/undici/pull/3362
• fix: use explicit flag for when use has interacted with stream by @ronag in https://github.com/nodejs/undici/pull/3361
• Refactor example documentation structure and add CacheableLookup example by @DarkGL in https://github.com/nodejs/undici/pull/3363
• refactor: simplify request error handling by @ronag in https://github.com/nodejs/undici/pull/3364
• fix: ensure onConnect is always called by @ronag in https://github.com/nodejs/undici/pull/3327
• Refactor responseHeader to responseHeaders by @DarkGL in https://github.com/nodejs/undici/pull/3375
• fix: don't override user defined MaxListeners by @fawazahmed0 in https://github.com/nodejs/undici/pull/3372
• fix: forward dispatch return value by @ronag in https://github.com/nodejs/undici/pull/3368
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.11 by @dependabot in https://github.com/nodejs/undici/pull/3382
• build(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in https://github.com/nodejs/undici/pull/3384
• build(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @dependabot in https://github.com/nodejs/undici/pull/3383
• build(deps): bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in https://github.com/nodejs/undici/pull/3381
• fix: throw on retry when payload is consume by downstream by @climba03003 in https://github.com/nodejs/undici/pull/3389
• Remove file by @KhafraDev in https://github.com/nodejs/undici/pull/3367
• build(deps): bump node from 9af472b to 138d0b5 in /build by @dependabot in https://github.com/nodejs/undici/pull/3392
• feat!: upgrade llhttp to 9.2.0 (#2705) by @metcoder95 in https://github.com/nodejs/undici/pull/3388
• websocket: reduce memory usage by @tsctx in https://github.com/nodejs/undici/pull/3393
• feat: implement BodyReadable.bytes by @tsctx in https://github.com/nodejs/undici/pull/3391
• websocket: avoid using Buffer.byteLength by @tsctx in https://github.com/nodejs/undici/pull/3394
• separate whatwg websocket logic from rfc 6455 by @KhafraDev in https://github.com/nodejs/undici/pull/3396
• websocket: add fast-path for string input by @tsctx in https://github.com/nodejs/undici/pull/3395
• Add generic type for opaque object by @jfhr in https://github.com/nodejs/undici/pull/3385
• build(deps): bump node from 138d0b5 to 67225d4 in /build by @dependabot in https://github.com/nodejs/undici/pull/3398
• interceptors: move throwOnError to interceptor by @mertcanaltin in https://github.com/nodejs/undici/pull/3331
• chore!: drop interceptors by @metcoder95 in https://github.com/nodejs/undici/pull/3399
• build(deps-dev): bump @fastify/busboy from 2.1.1 to 3.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3404
• fix: don't call onConnect automatically by @ronag in https://github.com/nodejs/undici/pull/3407
• In CITGM, skip tests that are flaky there by @mcollina in https://github.com/nodejs/undici/pull/3413
• Update esbuild to 0.19.10 by @mcollina in https://github.com/nodejs/undici/pull/3415
• Fix signature of RetryHandler by @JbIPS in https://github.com/nodejs/undici/pull/3416
• docs: fix ToC in CONTRIBUTING.md by @richardlau in https://github.com/nodejs/undici/pull/3420
• Fix fetch duplex docs by @Ethan-Arrowood in https://github.com/nodejs/undici/pull/3422
• fix: restore externalized Node.js dep compatibility by @richardlau in https://github.com/nodejs/undici/pull/3421
• fix: cast falsy servername to null to avoid falsy inequality by @ronag in https://github.com/nodejs/undici/pull/3426
• Add backport action by @mcollina in https://github.com/nodejs/undici/pull/3427
• build(deps): bump node from 67225d4 to 858234a in /build by @dependabot in https://github.com/nodejs/undici/pull/3411
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.15 by @dependabot in https://github.com/nodejs/undici/pull/3432
• build(deps): bump actions/dependency-review-action from 4.3.3 to 4.3.4 by @dependabot in https://github.com/nodejs/undici/pull/3431
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in https://github.com/nodejs/undici/pull/3430
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in https://github.com/nodejs/undici/pull/3428
• build(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 by @dependabot in https://github.com/nodejs/undici/pull/3429
• build(deps): bump superagent from 9.0.2 to 10.0.0 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3439
• build(deps): bump node from 17e6738 to 30c5be9 in /build by @dependabot in https://github.com/nodejs/undici/pull/3443
• docs: use default link of Web Streams API by @trivikr in https://github.com/nodejs/undici/pull/3446
• fix: increased memory in finalization first appearing in v6.16.0 by @snyamathi in https://github.com/nodejs/undici/pull/3445
• test: add test for memory leak by @snyamathi in https://github.com/nodejs/undici/pull/3450
• build: parametrize the location of wasm-opt by @khardix in https://github.com/nodejs/undici/pull/3454
• test: streamline test scripts in regard of without-intl and run more tests for without-intl case by @Uzlopak in https://github.com/nodejs/undici/pull/3453
• feat!: drop throwOnError by @metcoder95 in https://github.com/nodejs/undici/pull/3451
• types: allow non strict HTTPMethod by @Uzlopak in https://github.com/nodejs/undici/pull/3457
• build(deps-dev): bump borp from 0.15.0 to 0.17.0 by @dependabot in https://github.com/nodejs/undici/pull/3424
• remove core isErrored and isReadable by @KhafraDev in https://github.com/nodejs/undici/pull/3459
• use bodyUnusable to check if body is unusable by @KhafraDev in https://github.com/nodejs/undici/pull/3460
• perf: non-recursive implementation of euclidian gcd in balanced pool by @Uzlopak in https://github.com/nodejs/undici/pull/3461
• fix: do validation first before actual business logic, like super() by @Uzlopak in https://github.com/nodejs/undici/pull/3463
• use FinalizationRegistry for cloned response body by @KhafraDev in https://github.com/nodejs/undici/pull/3458
• perf: use isIPv6 for checking if hostname is isIPv6 by @Uzlopak in https://github.com/nodejs/undici/pull/3466
• fix: stripURLForReferrer jsdoc in fetch logic by @Uzlopak in https://github.com/nodejs/undici/pull/3471
• fix: remove kInterceptors in ProxyAgent by @Uzlopak in https://github.com/nodejs/undici/pull/3474
• fix: fix codesmells in retry-handler by @Uzlopak in https://github.com/nodejs/undici/pull/3475
• add autocompletable header types by @KhafraDev in https://github.com/nodejs/undici/pull/3462
• fix: add missing kOriginalDispatch Symbol in mock-logic by @Uzlopak in https://github.com/nodejs/undici/pull/3470
• fix: fix jsdoc in cookies/parse.js by @Uzlopak in https://github.com/nodejs/undici/pull/3469
• fix: remove unnecessary parameters in USVString calls by @Uzlopak in https://github.com/nodejs/undici/pull/3467
• fix: add jsdoc in tree.js, avoiding codesmells by @Uzlopak in https://github.com/nodejs/undici/pull/3476
• perf: set isLowerCase param on all calls of HeadersList.append by @Uzlopak in https://github.com/nodejs/undici/pull/3468
• fix: instantiation of ResponseError, pass headers and data correctly by @Uzlopak in https://github.com/nodejs/undici/pull/3472
• ci: add WPT updater by @Uzlopak in https://github.com/nodejs/undici/pull/3482
• meta: move nightly comment body to issue body by @RedYetiDev in https://github.com/nodejs/undici/pull/3484
• chore: improve jsdoc in cookies by @Uzlopak in https://github.com/nodejs/undici/pull/3478
• chore: improve jsdoc and minor changes in EventSource by @Uzlopak in https://github.com/nodejs/undici/pull/3480
• types: add Autocomplete utility type by @Uzlopak in https://github.com/nodejs/undici/pull/3479
• fix: instantiation of SecureProxyConnectionError should pass options to parent class by @Uzlopak in https://github.com/nodejs/undici/pull/3473
• chore: replace standard and snazzy with neostandard by @Uzlopak in https://github.com/nodejs/undici/pull/3485
• fix: workflow commit user by @tsctx in https://github.com/nodejs/undici/pull/3491
• build(deps): bump node from 30c5be9 to a20e858 in /build by @dependabot in https://github.com/nodejs/undici/pull/3496
• chore: add --noEmit for typescript tests by @Uzlopak in https://github.com/nodejs/undici/pull/3498
• perf: only create wasm buffer if requested by @Uzlopak in https://github.com/nodejs/undici/pull/3499
• fix(types): MockAgent accepts ProxyAgent, EnvHttpProxyAgent and RetryAgent for agent option by @Uzlopak in https://github.com/nodejs/undici/pull/3497
• stricter Headers brand checks in cookies by @KhafraDev in https://github.com/nodejs/undici/pull/3500
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3488
• fix: setEncoding should not throw on body #1125 by @Uzlopak in https://github.com/nodejs/undici/pull/3505
• websocket: set websocket readyState on fail by @KhafraDev in https://github.com/nodejs/undici/pull/3507
• build(deps-dev): bump jsdom from 24.1.3 to 25.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3511
• build(deps): bump wait-on from 7.2.0 to 8.0.0 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3513
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3515
• fix: reduce memory usage in client-h1 by @Uzlopak in https://github.com/nodejs/undici/pull/3510
• fix: refactor fast timers, fix UND_ERR_CONNECT_TIMEOUT on event loop blocking by @Uzlopak in https://github.com/nodejs/undici/pull/3495
• ci: make autobahn workflow reusable workflow, run the autobahn on nightly tests by @Uzlopak in https://github.com/nodejs/undici/pull/3503
• remove third party everything support in fetch by @KhafraDev in https://github.com/nodejs/undici/pull/3502
• remove double validation in webidl by @KhafraDev in https://github.com/nodejs/undici/pull/3516
• test: improve gc detection by @Uzlopak in https://github.com/nodejs/undici/pull/3504
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3519
• populate defaultValues in webidl dict. converter when passing null or undefined by @KhafraDev in https://github.com/nodejs/undici/pull/3518
• change webidl.util.Type return to an enum value by @KhafraDev in https://github.com/nodejs/undici/pull/3520
• set default argument values to undefined instead of {} by @KhafraDev in https://github.com/nodejs/undici/pull/3521
• ci: fix nightly workflow by @Uzlopak in https://github.com/nodejs/undici/pull/3525
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3527
• remove unused symbol by @KhafraDev in https://github.com/nodejs/undici/pull/3530
• fix formdata arg validation by @KhafraDev in https://github.com/nodejs/undici/pull/3529
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 by @dependabot in https://github.com/nodejs/undici/pull/3534
• build(deps): bump hendrikmuhs/ccache-action from 1.2.13 to 1.2.14 by @dependabot in https://github.com/nodejs/undici/pull/3536
• build(deps): bump step-security/harden-runner from 2.9.0 to 2.9.1 by @dependabot in https://github.com/nodejs/undici/pull/3535
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0 by @dependabot in https://github.com/nodejs/undici/pull/3537
• Remove patched DOM types by @eXhumer in https://github.com/nodejs/undici/pull/3533
• chore: minor changes in client-h1, use subarray instead of slice by @Uzlopak in https://github.com/nodejs/undici/pull/3538
• fix: run asserts first if possible by @Uzlopak in https://github.com/nodejs/undici/pull/3541
• build(deps): bump node from a20e858 to a17f484 in /build by @dependabot in https://github.com/nodejs/undici/pull/3542
• chore: noop per file by @Uzlopak in https://github.com/nodejs/undici/pull/3544
• build(deps): bump node from a17f484 to ef7b4bb in /build by @dependabot in https://github.com/nodejs/undici/pull/3547
• chore: rename buildUrl to serializePathWithQuery + jsdoc by @Uzlopak in https://github.com/nodejs/undici/pull/3545
• fix: add jsdoc and do minor changes in utils.js by @Uzlopak in https://github.com/nodejs/undici/pull/3550
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3556
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3561
• feat: jsdoc and minor optimizations in client-h1.js by @Uzlopak in https://github.com/nodejs/undici/pull/3551
• fix: handle websocket closed correctly by @KhafraDev in https://github.com/nodejs/undici/pull/3565
• fix: extract noop everywhere by @Uzlopak in https://github.com/nodejs/undici/pull/3559
• chore: add jsdoc for lib/web/websocket/util.js, minor rewrite of utf8Decode by @Uzlopak in https://github.com/nodejs/undici/pull/3563
• jsdoc: lib/api/readable.js, fix some types by @Uzlopak in https://github.com/nodejs/undici/pull/3567
• fix: use fasttimers for all connection timeouts by @Uzlopak in https://github.com/nodejs/undici/pull/3552
• chore: use 'use strict' in cjs files by @Uzlopak in https://github.com/nodejs/undici/pull/3568
• chore: update typescript testing deps by @Uzlopak in https://github.com/nodejs/undici/pull/3571
• build(deps)!: bump concurrently from 8.2.2 to 9.0.0 in /benchmarks (node < 18 unsupported) by @dependabot in https://github.com/nodejs/undici/pull/3574
• build(deps): bump node from ef7b4bb to 3cb4748 in /build by @dependabot in https://github.com/nodejs/undici/pull/3573
• chore: improve jsdoc of lib/core/tree.js by @Uzlopak in https://github.com/nodejs/undici/pull/3572
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3576
• jsdoc: improve typing of deepClone by @Uzlopak in https://github.com/nodejs/undici/pull/3575
• chore: improve jsdoc of lib/core/constants.js by @Uzlopak in https://github.com/nodejs/undici/pull/3570
• chore: upgrade fixed queue, lint accordingly, add jsdoc by @Uzlopak in https://github.com/nodejs/undici/pull/3577
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3581
• ci: less flaky test/request-timeout.js test by @Uzlopak in https://github.com/nodejs/undici/pull/3580
• chore: remove pluralizer by @Uzlopak in https://github.com/nodejs/undici/pull/3586
• util: rename validateHandler to assertRequestHandler, minor changes in util.js by @Uzlopak in https://github.com/nodejs/undici/pull/3583
• mock: remove Error.captureStackTrace in MockNotMatchedError by @Uzlopak in https://github.com/nodejs/undici/pull/3587
• fix: DRY up lib/core/diagnostics.js by @Uzlopak in https://github.com/nodejs/undici/pull/3585
• fix: husky deprecation warning by @eXhumer in https://github.com/nodejs/undici/pull/3593
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3598
• chore: remove unused pre-commit dependency by @eXhumer in https://github.com/nodejs/undici/pull/3599
• diagnostics-channel: use not deprecated subscribe fn by @Uzlopak in https://github.com/nodejs/undici/pull/3600
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3607
• fetch: make fullyReadBody sync by @Uzlopak in https://github.com/nodejs/undici/pull/3603
• jsdoc: add jsdoc to lib/web/fetch/constants.js by @Uzlopak in https://github.com/nodejs/undici/pull/3597
• fetch: pullAlgorithm passes the async resume function through by @Uzlopak in https://github.com/nodejs/undici/pull/3604
• fix: typo in Client.md by @SkeLLLa in https://github.com/nodejs/undici/pull/3612
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3615
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3622
• fetch: avoid async function in mainFetch to generate response by @Uzlopak in https://github.com/nodejs/undici/pull/3605
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3626
• append crlf to formdata body by @KhafraDev in https://github.com/nodejs/undici/pull/3625
• fix: fire close on failed WebSocket connection by @eXhumer in https://github.com/nodejs/undici/pull/3566
• fix: fire close on failed WebSocket connection by @KhafraDev in https://github.com/nodejs/undici/pull/3628
• handle body errors by @KhafraDev in https://github.com/nodejs/undici/pull/3632
• make cloned request inherit dispatcher by @KhafraDev in https://github.com/nodejs/undici/pull/3631
• Remove symbols from web specs by @KhafraDev in https://github.com/nodejs/undici/pull/3633
• cleanup web symbol removal by @KhafraDev in https://github.com/nodejs/undici/pull/3638
• build(deps): bump mitata from 0.1.14 to 1.0.4 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3641
• feat: implement WebSocketStream by @KhafraDev in https://github.com/nodejs/undici/pull/3560
• export WebSocketStream, add docs and types by @KhafraDev in https://github.com/nodejs/undici/pull/3645
• build(deps): bump node from 3cb4748 to 83b4d7b in /build by @dependabot in https://github.com/nodejs/undici/pull/3621
• feat: add DNS interceptor by @metcoder95 in https://github.com/nodejs/undici/pull/3490
• prefer fail over close the websocket connection in error cases by @KhafraDev in https://github.com/nodejs/undici/pull/3651
• fix: various typos by @NathanBaulch in https://github.com/nodejs/undici/pull/3640
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3634
• test: increase bitness in test/fixtures/*.pem by @LiviaMedeiros in https://github.com/nodejs/undici/pull/3659
• mock: fix mocking of Uint8Array and ArrayBuffers as provided mock-responses by @Uzlopak in https://github.com/nodejs/undici/pull/3662
• test: less flaky timers acceptance test, rework fast timer tests to pass them faster by @Uzlopak in https://github.com/nodejs/undici/pull/3656
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.10 by @dependabot in https://github.com/nodejs/undici/pull/3664
• build(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5 by @dependabot in https://github.com/nodejs/undici/pull/3665
• build(deps): bump fastify/github-action-merge-dependabot from 3.10.1 to 3.10.2 by @dependabot in https://github.com/nodejs/undici/pull/3667
• build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 by @dependabot in https://github.com/nodejs/undici/pull/3668
• ws: move implementation agnostic onFail logic to shared function by @KhafraDev in https://github.com/nodejs/undici/pull/3663
• build(deps): bump step-security/harden-runner from 2.9.1 to 2.10.1 by @dependabot in https://github.com/nodejs/undici/pull/3666
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3669
• fix: add option ignoreTrailingSlash to MockAgent and .intercept() by @Uzlopak in https://github.com/nodejs/undici/pull/3655
• fix: ignore leading and trailing crlfs in formdata body by @KhafraDev in https://github.com/nodejs/undici/pull/3677
• test: add test to ensure full type when parsing multipart/form-data' by @Uzlopak in https://github.com/nodejs/undici/pull/3683
• test: use globalThis.Headers and skip if is missing by @Uzlopak in https://github.com/nodejs/undici/pull/3684
• jsdoc: adds some jsdoc to fetch headers implementation, minor changes by @Uzlopak in https://github.com/nodejs/undici/pull/3687
• feat: check maxHeadersSize on client instantiation and not on Parser instantion by @Uzlopak in https://github.com/nodejs/undici/pull/3654
• test: remove test for issue 1670 by @Uzlopak in https://github.com/nodejs/undici/pull/3690
• replace instanceof in brand checks with isPrototypeOf by @KhafraDev in https://github.com/nodejs/undici/pull/3692
• test: make fetch test independent from internet connection by @Uzlopak in https://github.com/nodejs/undici/pull/3691
• build(deps-dev): bump esbuild from 0.19.12 to 0.24.0 by @dependabot in https://github.com/nodejs/undici/pull/3698
• fix: restructure determineRequestsReferrer to match better spec by @Uzlopak in https://github.com/nodejs/undici/pull/3699
• set ws readyState if closed before connection could be established by @KhafraDev in https://github.com/nodejs/undici/pull/3701
• types: fix return type of WebidlUtil.Type by @Uzlopak in https://github.com/nodejs/undici/pull/3685
• fetch: refactor referrer policy util functions by @Uzlopak in https://github.com/nodejs/undici/pull/3706
• fix: PoolBase kClose and kDestroy should await and not return the Promise by @Uzlopak in https://github.com/nodejs/undici/pull/3716
• fix: data-url set extractValue of collectAnHTTPQuotedString by default to false by @Uzlopak in https://github.com/nodejs/undici/pull/3717
• faster brand check by @tsctx in https://github.com/nodejs/undici/pull/3720
• web: mark as uncloneable when possible by @jazelly in https://github.com/nodejs/undici/pull/3709
• chore(H2): onboard H2 into Undici queueing system by @metcoder95 in https://github.com/nodejs/undici/pull/3707
• http: extract listeners from client-h1 by @Uzlopak in https://github.com/nodejs/undici/pull/3725
• http2: extract listenHandlers and one bugfix by @Uzlopak in https://github.com/nodejs/undici/pull/3722
• feat: http caching by @flakey5 in https://github.com/nodejs/undici/pull/3562
• build(deps-dev): bump borp from 0.17.0 to 0.18.0 by @dependabot in https://github.com/nodejs/undici/pull/3734
• docs: fix broken link in readme by @pastelsky in https://github.com/nodejs/undici/pull/3591
• chore: add jsdoc to lib/web/websocket/constants.js by @Uzlopak in https://github.com/nodejs/undici/pull/3564
• chore: remove redundant async in readable.js by @Uzlopak in https://github.com/nodejs/undici/pull/3643
• fix(types): add missing cache prop to RequestInit by @rindeal in https://github.com/nodejs/undici/pull/3569
• [http-cache] follow up by @Uzlopak in https://github.com/nodejs/undici/pull/3733
• fix(#3736): leaked error event on response body by @metcoder95 in https://github.com/nodejs/undici/pull/3740
• fix: unsafe methods not causing cache purge by @flakey5 in https://github.com/nodejs/undici/pull/3739
• build(deps): bump node from 83b4d7b to f1b4315 in /build by @dependabot in https://github.com/nodejs/undici/pull/3756
• fix filename* parsing by @KhafraDev in https://github.com/nodejs/undici/pull/3768
• fix http2 test by @KhafraDev in https://github.com/nodejs/undici/pull/3769
• add unsafe-url referrerPolicy test by @KhafraDev in https://github.com/nodejs/undici/pull/3772
• chore(docs): add request() example for conditionally reading the body by @styfle in https://github.com/nodejs/undici/pull/3743
• fix: dns interceptor ip ttl by @luddd3 in https://github.com/nodejs/undici/pull/3770
• add node v23 workflow by @tsctx in https://github.com/nodejs/undici/pull/3780
• fix: dns interceptor affinity by @luddd3 in https://github.com/nodejs/undici/pull/3778
• fix aborting Streams by @epistemancering in https://github.com/nodejs/undici/pull/3754
• add tests from cookie package by @KhafraDev in https://github.com/nodejs/undici/pull/3789
• disable failing test by @ronag in https://github.com/nodejs/undici/pull/3782
• fix: http2 queueing by @metcoder95 in https://github.com/nodejs/undici/pull/3761
• test(interceptors): fix dns testing on windows by @metcoder95 in https://github.com/nodejs/undici/pull/3793
• feat: use resolved ports in dns interceptor by @luddd3 in https://github.com/nodejs/undici/pull/3786
• fix: cache by @ronag in https://github.com/nodejs/undici/pull/3804
• fix: assume blocking unless HEAD by @ronag in https://github.com/nodejs/undici/pull/3771
• chore: use common WASM builder by @mhdawson in https://github.com/nodejs/undici/pull/3791
• refactor: silence neostandard import rules error by @jerome-benoit in https://github.com/nodejs/undici/pull/3776
• build(deps): bump actions/dependency-review-action from 4.3.4 to 4.4.0 by @dependabot in https://github.com/nodejs/undici/pull/3797
• build(deps): bump github/codeql-action from 3.26.10 to 3.27.0 by @dependabot in https://github.com/nodejs/undici/pull/3796
• build(deps): bump fastify/github-action-merge-dependabot from 3.10.2 to 3.11.0 by @dependabot in https://github.com/nodejs/undici/pull/3795
• docs: add example using proxy with fetch by @dancastillo in https://github.com/nodejs/undici/pull/3800
• fix: handle Headers in RedirectHandler by @iiAku in https://github.com/nodejs/undici/pull/3777
• Skip debuglog tests by @mcollina in https://github.com/nodejs/undici/pull/3810
• build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in https://github.com/nodejs/undici/pull/3794
• h2: do not emit data after goaway by @mcollina in https://github.com/nodejs/undici/pull/3811
• fix redirect interceptor with FormData body by @KhafraDev in https://github.com/nodejs/undici/pull/3815
• docs: fix broken links in undici webpage by @dancastillo in https://github.com/nodejs/undici/pull/3807
• fix: handle undici Headers and Maps in redirect-handler by @iiAku in https://github.com/nodejs/undici/pull/3819
• fix: handle undefined deref() of WeakRef(socket) by @hochoy in https://github.com/nodejs/undici/pull/3751
• build(deps-dev): bump @sinonjs/fake-timers from 11.3.1 to 12.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3823
• fix: range end is zero-indexed by @DTrombett in https://github.com/nodejs/undici/pull/3826
• lib: more cache fixes by @flakey5 in https://github.com/nodejs/undici/pull/3816
• fix: cache fixes by @ronag in https://github.com/nodejs/undici/pull/3830
• Headers webidl errors by @KhafraDev in https://github.com/nodejs/undici/pull/3833
• Fix goaway by @mcollina in https://github.com/nodejs/undici/pull/3835
• refactor: maxEntriesCount by @ronag in https://github.com/nodejs/undici/pull/3832
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3693
• docs: fix broken links by using absolute path by @dancastillo in https://github.com/nodejs/undici/pull/3820
• fix: memory store by @ronag in https://github.com/nodejs/undici/pull/3834
• Update Dispatch.md to Dispatcher.md by @bcomnes in https://github.com/nodejs/undici/pull/3839
• lib: add nowAbsolute to fast timers by @flakey5 in https://github.com/nodejs/undici/pull/3749
• feat: cache etag support by @flakey5 in https://github.com/nodejs/undici/pull/3758
• feat: support request cache control directives by @flakey5 in https://github.com/nodejs/undici/pull/3658
• Bench updates prior to release by @mcollina in https://github.com/nodejs/undici/pull/3845
• fix(#3817): send servername for SNI on TLS by @metcoder95 in https://github.com/nodejs/undici/pull/3821
• Revert nowAbsolute, add regression test by @mcollina in https://github.com/nodejs/undici/pull/3850
• fix: missing error handler by @ronag in https://github.com/nodejs/undici/pull/3859
• fix: 301 and 302 change method to GET by @DTrombett in https://github.com/nodejs/undici/pull/3862
• feat: sqlite cache store by @flakey5 in https://github.com/nodejs/undici/pull/3657
• fix: sending formdata bodies with http2 by @KhafraDev in https://github.com/nodejs/undici/pull/3863
• Update return type of RetryCallback by @mqayyuum in https://github.com/nodejs/undici/pull/3851
• fix: cleanup sqlite store by @ronag in https://github.com/nodejs/undici/pull/3868
• refactor: sqlite versioning by @ronag in https://github.com/nodejs/undici/pull/3870
• fix: pass down context in onConnect by @DTrombett in https://github.com/nodejs/undici/pull/3858
• fix: cache fixes by @ronag in https://github.com/nodejs/undici/pull/3871
• fix: we can redirect disturbed request body if it's not going to be used by @ronag in https://github.com/nodejs/undici/pull/3873
• perf: only prune if adding new entry by @ronag in https://github.com/nodejs/undici/pull/3872
• fix: Fixed the issue that there is no running request when http2 goaway by @ShenHongFei in https://github.com/nodejs/undici/pull/3875
• feat: new hooks by @ronag in https://github.com/nodejs/undici/pull/3878
• Multiple fixes for SQLiteStore, enable it in CI by @mcollina in https://github.com/nodejs/undici/pull/3881
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3838
• cache: fix stale-while-revalidate and stale-if-error by @flakey5 in https://github.com/nodejs/undici/pull/3865
• refactor: port redirect handler to new hooks by @ronag in https://github.com/nodejs/undici/pull/3879
• Drop node v18 by @mcollina in https://github.com/nodejs/undici/pull/3880
• build(deps-dev): bump borp from 0.18.0 to 0.19.0 by @dependabot in https://github.com/nodejs/undici/pull/3882
• perf: store data as blobs in sql cache by @ronag in https://github.com/nodejs/undici/pull/3885
• test: add cache testing suite by @flakey5 in https://github.com/nodejs/undici/pull/3842
• fix: move statusMessage as optional arg in end by @ronag in https://github.com/nodejs/undici/pull/3886
• fix: port retry to new hooks by @ronag in https://github.com/nodejs/undici/pull/3883
• fix: cache rm unused branch by @ronag in https://github.com/nodejs/undici/pull/3889
• fix: response error interceptor broken by @luddd3 in https://github.com/nodejs/undici/pull/3805
• Make the responseError interceptor backward compatible, add a body property by @mcollina in https://github.com/nodejs/undici/pull/3891
• feat: add support for Timeout and Trailers by @metcoder95 in https://github.com/nodejs/undici/pull/3854
• Correctly parse JSON contentType in responseError interceptor by @mcollina in https://github.com/nodejs/undici/pull/3892

New Contributors

• @Gigioliva made their first contribution in https://github.com/nodejs/undici/pull/3354
• @fawazahmed0 made their first contribution in https://github.com/nodejs/undici/pull/3372
• @jfhr made their first contribution in https://github.com/nodejs/undici/pull/3385
• @JbIPS made their first contribution in https://github.com/nodejs/undici/pull/3416
• @richardlau made their first contribution in https://github.com/nodejs/undici/pull/3420
• @RedYetiDev made their first contribution in https://github.com/nodejs/undici/pull/3484
• @NathanBaulch made their first contribution in https://github.com/nodejs/undici/pull/3640
• @flakey5 made their first contribution in https://github.com/nodejs/undici/pull/3562
• @pastelsky made their first contribution in https://github.com/nodejs/undici/pull/3591
• @rindeal made their first contribution in https://github.com/nodejs/undici/pull/3569
• @styfle made their first contribution in https://github.com/nodejs/undici/pull/3743
• @luddd3 made their first contribution in https://github.com/nodejs/undici/pull/3770
• @epistemancering made their first contribution in https://github.com/nodejs/undici/pull/3754
• @jerome-benoit made their first contribution in https://github.com/nodejs/undici/pull/3776
• @hochoy made their first contribution in https://github.com/nodejs/undici/pull/3751
• @DTrombett made their first contribution in https://github.com/nodejs/undici/pull/3826
• @bcomnes made their first contribution in https://github.com/nodejs/undici/pull/3839
• @mqayyuum made their first contribution in https://github.com/nodejs/undici/pull/3851
• @ShenHongFei made their first contribution in https://github.com/nodejs/undici/pull/3875

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.2...v7.0.0

What's Changed

• fix: move statusMessage as optional arg in end by @ronag in https://github.com/nodejs/undici/pull/3886
• fix: port retry to new hooks by @ronag in https://github.com/nodejs/undici/pull/3883
• fix: cache rm unused branch by @ronag in https://github.com/nodejs/undici/pull/3889
• fix: response error interceptor broken by @luddd3 in https://github.com/nodejs/undici/pull/3805
• Make the responseError interceptor backward compatible, add a body property by @mcollina in https://github.com/nodejs/undici/pull/3891

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.8...v7.0.0-alpha.9

What's Changed

• Multiple fixes for SQLiteStore, enable it in CI by @mcollina in https://github.com/nodejs/undici/pull/3881
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3838
• cache: fix stale-while-revalidate and stale-if-error by @flakey5 in https://github.com/nodejs/undici/pull/3865
• refactor: port redirect handler to new hooks by @ronag in https://github.com/nodejs/undici/pull/3879
• Drop node v18 by @mcollina in https://github.com/nodejs/undici/pull/3880
• build(deps-dev): bump borp from 0.18.0 to 0.19.0 by @dependabot in https://github.com/nodejs/undici/pull/3882
• perf: store data as blobs in sql cache by @ronag in https://github.com/nodejs/undici/pull/3885
• test: add cache testing suite by @flakey5 in https://github.com/nodejs/undici/pull/3842

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.7...v7.0.0-alpha.8

What's Changed

• fix: missing error handler by @ronag in https://github.com/nodejs/undici/pull/3859
• fix: 301 and 302 change method to GET by @DTrombett in https://github.com/nodejs/undici/pull/3862
• feat: sqlite cache store by @flakey5 in https://github.com/nodejs/undici/pull/3657
• fix: sending formdata bodies with http2 by @KhafraDev in https://github.com/nodejs/undici/pull/3863
• Update return type of RetryCallback by @mqayyuum in https://github.com/nodejs/undici/pull/3851
• fix: cleanup sqlite store by @ronag in https://github.com/nodejs/undici/pull/3868
• refactor: sqlite versioning by @ronag in https://github.com/nodejs/undici/pull/3870
• fix: pass down context in onConnect by @DTrombett in https://github.com/nodejs/undici/pull/3858
• fix: cache fixes by @ronag in https://github.com/nodejs/undici/pull/3871
• fix: we can redirect disturbed request body if it's not going to be used by @ronag in https://github.com/nodejs/undici/pull/3873
• perf: only prune if adding new entry by @ronag in https://github.com/nodejs/undici/pull/3872
• fix: Fixed the issue that there is no running request when http2 goaway by @ShenHongFei in https://github.com/nodejs/undici/pull/3875
• feat: new hooks by @ronag in https://github.com/nodejs/undici/pull/3878

New Contributors

• @mqayyuum made their first contribution in https://github.com/nodejs/undici/pull/3851
• @ShenHongFei made their first contribution in https://github.com/nodejs/undici/pull/3875

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.6...v7.0.0-alpha.7

What's Changed

• Bench updates prior to release by @mcollina in https://github.com/nodejs/undici/pull/3845
• fix(#3817): send servername for SNI on TLS by @metcoder95 in https://github.com/nodejs/undici/pull/3821
• Revert nowAbsolute, add regression test by @mcollina in https://github.com/nodejs/undici/pull/3850

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.5...v7.0.0-alpha.6

What's Changed

• docs: fix broken links by using absolute path by @dancastillo in https://github.com/nodejs/undici/pull/3820
• fix: memory store by @ronag in https://github.com/nodejs/undici/pull/3834
• Update Dispatch.md to Dispatcher.md by @bcomnes in https://github.com/nodejs/undici/pull/3839
• lib: add nowAbsolute to fast timers by @flakey5 in https://github.com/nodejs/undici/pull/3749
• feat: cache etag support by @flakey5 in https://github.com/nodejs/undici/pull/3758
• feat: support request cache control directives by @flakey5 in https://github.com/nodejs/undici/pull/3658

New Contributors

• @bcomnes made their first contribution in https://github.com/nodejs/undici/pull/3839

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.4...v7.0.0-alpha.5

What's Changed

• fix filename* parsing by @KhafraDev in https://github.com/nodejs/undici/pull/3768
• fix http2 test by @KhafraDev in https://github.com/nodejs/undici/pull/3769
• add unsafe-url referrerPolicy test by @KhafraDev in https://github.com/nodejs/undici/pull/3772
• chore(docs): add request() example for conditionally reading the body by @styfle in https://github.com/nodejs/undici/pull/3743
• fix: dns interceptor ip ttl by @luddd3 in https://github.com/nodejs/undici/pull/3770
• add node v23 workflow by @tsctx in https://github.com/nodejs/undici/pull/3780
• fix: dns interceptor affinity by @luddd3 in https://github.com/nodejs/undici/pull/3778
• fix aborting Streams by @epistemancering in https://github.com/nodejs/undici/pull/3754
• add tests from cookie package by @KhafraDev in https://github.com/nodejs/undici/pull/3789
• disable failing test by @ronag in https://github.com/nodejs/undici/pull/3782
• fix: http2 queueing by @metcoder95 in https://github.com/nodejs/undici/pull/3761
• test(interceptors): fix dns testing on windows by @metcoder95 in https://github.com/nodejs/undici/pull/3793
• feat: use resolved ports in dns interceptor by @luddd3 in https://github.com/nodejs/undici/pull/3786
• fix: cache by @ronag in https://github.com/nodejs/undici/pull/3804
• fix: assume blocking unless HEAD by @ronag in https://github.com/nodejs/undici/pull/3771
• chore: use common WASM builder by @mhdawson in https://github.com/nodejs/undici/pull/3791
• refactor: silence neostandard import rules error by @jerome-benoit in https://github.com/nodejs/undici/pull/3776
• build(deps): bump actions/dependency-review-action from 4.3.4 to 4.4.0 by @dependabot in https://github.com/nodejs/undici/pull/3797
• build(deps): bump github/codeql-action from 3.26.10 to 3.27.0 by @dependabot in https://github.com/nodejs/undici/pull/3796
• build(deps): bump fastify/github-action-merge-dependabot from 3.10.2 to 3.11.0 by @dependabot in https://github.com/nodejs/undici/pull/3795
• docs: add example using proxy with fetch by @dancastillo in https://github.com/nodejs/undici/pull/3800
• fix: handle Headers in RedirectHandler by @iiAku in https://github.com/nodejs/undici/pull/3777
• Skip debuglog tests by @mcollina in https://github.com/nodejs/undici/pull/3810
• build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.3 by @dependabot in https://github.com/nodejs/undici/pull/3794
• h2: do not emit data after goaway by @mcollina in https://github.com/nodejs/undici/pull/3811
• fix redirect interceptor with FormData body by @KhafraDev in https://github.com/nodejs/undici/pull/3815
• docs: fix broken links in undici webpage by @dancastillo in https://github.com/nodejs/undici/pull/3807
• fix: handle undici Headers and Maps in redirect-handler by @iiAku in https://github.com/nodejs/undici/pull/3819
• fix: handle undefined deref() of WeakRef(socket) by @hochoy in https://github.com/nodejs/undici/pull/3751
• build(deps-dev): bump @sinonjs/fake-timers from 11.3.1 to 12.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3823
• fix: range end is zero-indexed by @DTrombett in https://github.com/nodejs/undici/pull/3826
• lib: more cache fixes by @flakey5 in https://github.com/nodejs/undici/pull/3816
• fix: cache fixes by @ronag in https://github.com/nodejs/undici/pull/3830
• Headers webidl errors by @KhafraDev in https://github.com/nodejs/undici/pull/3833
• Fix goaway by @mcollina in https://github.com/nodejs/undici/pull/3835
• refactor: maxEntriesCount by @ronag in https://github.com/nodejs/undici/pull/3832
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3693

New Contributors

• @styfle made their first contribution in https://github.com/nodejs/undici/pull/3743
• @luddd3 made their first contribution in https://github.com/nodejs/undici/pull/3770
• @epistemancering made their first contribution in https://github.com/nodejs/undici/pull/3754
• @jerome-benoit made their first contribution in https://github.com/nodejs/undici/pull/3776
• @hochoy made their first contribution in https://github.com/nodejs/undici/pull/3751
• @DTrombett made their first contribution in https://github.com/nodejs/undici/pull/3826

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.3...v7.0.0-alpha.4

What's Changed

• fetch: refactor referrer policy util functions by @Uzlopak in https://github.com/nodejs/undici/pull/3706
• fix: PoolBase kClose and kDestroy should await and not return the Promise by @Uzlopak in https://github.com/nodejs/undici/pull/3716
• fix: data-url set extractValue of collectAnHTTPQuotedString by default to false by @Uzlopak in https://github.com/nodejs/undici/pull/3717
• faster brand check by @tsctx in https://github.com/nodejs/undici/pull/3720
• web: mark as uncloneable when possible by @jazelly in https://github.com/nodejs/undici/pull/3709
• chore(H2): onboard H2 into Undici queueing system by @metcoder95 in https://github.com/nodejs/undici/pull/3707
• http: extract listeners from client-h1 by @Uzlopak in https://github.com/nodejs/undici/pull/3725
• http2: extract listenHandlers and one bugfix by @Uzlopak in https://github.com/nodejs/undici/pull/3722
• feat: http caching by @flakey5 in https://github.com/nodejs/undici/pull/3562
• build(deps-dev): bump borp from 0.17.0 to 0.18.0 by @dependabot in https://github.com/nodejs/undici/pull/3734
• docs: fix broken link in readme by @pastelsky in https://github.com/nodejs/undici/pull/3591
• chore: add jsdoc to lib/web/websocket/constants.js by @Uzlopak in https://github.com/nodejs/undici/pull/3564
• chore: remove redundant async in readable.js by @Uzlopak in https://github.com/nodejs/undici/pull/3643
• fix(types): add missing cache prop to RequestInit by @rindeal in https://github.com/nodejs/undici/pull/3569
• [http-cache] follow up by @Uzlopak in https://github.com/nodejs/undici/pull/3733
• fix(#3736): leaked error event on response body by @metcoder95 in https://github.com/nodejs/undici/pull/3740
• fix: unsafe methods not causing cache purge by @flakey5 in https://github.com/nodejs/undici/pull/3739
• build(deps): bump node from 83b4d7b to f1b4315 in /build by @dependabot in https://github.com/nodejs/undici/pull/3756

New Contributors

• @flakey5 made their first contribution in https://github.com/nodejs/undici/pull/3562
• @pastelsky made their first contribution in https://github.com/nodejs/undici/pull/3591
• @rindeal made their first contribution in https://github.com/nodejs/undici/pull/3569

Full Changelog: https://github.com/nodejs/undici/compare/v7.0.0-alpha.2...v7.0.0-alpha.3

What's Changed

• fetch: fix content-encoding order by @tsctx in https://github.com/nodejs/undici/pull/3343
• Add regression test for broken body by @mcollina in https://github.com/nodejs/undici/pull/3346
• build(deps): bump node from 075a5cc to 9af472b in /build by @dependabot in https://github.com/nodejs/undici/pull/3355
• fix: post request signal by @Gigioliva in https://github.com/nodejs/undici/pull/3354
• Revert "fix: post request signal (#3354)" by @ronag in https://github.com/nodejs/undici/pull/3359
• websocket: don't use pooled buffer in mask pool by @tsctx in https://github.com/nodejs/undici/pull/3357
• fix: consider bytes read when dumping by @ronag in https://github.com/nodejs/undici/pull/3360
• refactor: simplify signal handling by @ronag in https://github.com/nodejs/undici/pull/3362
• fix: use explicit flag for when use has interacted with stream by @ronag in https://github.com/nodejs/undici/pull/3361
• Refactor example documentation structure and add CacheableLookup example by @DarkGL in https://github.com/nodejs/undici/pull/3363
• refactor: simplify request error handling by @ronag in https://github.com/nodejs/undici/pull/3364
• fix: ensure onConnect is always called by @ronag in https://github.com/nodejs/undici/pull/3327
• Refactor responseHeader to responseHeaders by @DarkGL in https://github.com/nodejs/undici/pull/3375
• fix: don't override user defined MaxListeners by @fawazahmed0 in https://github.com/nodejs/undici/pull/3372
• fix: forward dispatch return value by @ronag in https://github.com/nodejs/undici/pull/3368
• build(deps): bump github/codeql-action from 3.25.7 to 3.25.11 by @dependabot in https://github.com/nodejs/undici/pull/3382
• build(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in https://github.com/nodejs/undici/pull/3384
• build(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @dependabot in https://github.com/nodejs/undici/pull/3383
• build(deps): bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in https://github.com/nodejs/undici/pull/3381
• fix: throw on retry when payload is consume by downstream by @climba03003 in https://github.com/nodejs/undici/pull/3389
• Remove file by @KhafraDev in https://github.com/nodejs/undici/pull/3367
• build(deps): bump node from 9af472b to 138d0b5 in /build by @dependabot in https://github.com/nodejs/undici/pull/3392
• feat!: upgrade llhttp to 9.2.0 (#2705) by @metcoder95 in https://github.com/nodejs/undici/pull/3388
• websocket: reduce memory usage by @tsctx in https://github.com/nodejs/undici/pull/3393
• feat: implement BodyReadable.bytes by @tsctx in https://github.com/nodejs/undici/pull/3391
• websocket: avoid using Buffer.byteLength by @tsctx in https://github.com/nodejs/undici/pull/3394
• separate whatwg websocket logic from rfc 6455 by @KhafraDev in https://github.com/nodejs/undici/pull/3396
• websocket: add fast-path for string input by @tsctx in https://github.com/nodejs/undici/pull/3395
• Add generic type for opaque object by @jfhr in https://github.com/nodejs/undici/pull/3385
• build(deps): bump node from 138d0b5 to 67225d4 in /build by @dependabot in https://github.com/nodejs/undici/pull/3398
• interceptors: move throwOnError to interceptor by @mertcanaltin in https://github.com/nodejs/undici/pull/3331
• chore!: drop interceptors by @metcoder95 in https://github.com/nodejs/undici/pull/3399
• build(deps-dev): bump @fastify/busboy from 2.1.1 to 3.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3404
• fix: don't call onConnect automatically by @ronag in https://github.com/nodejs/undici/pull/3407
• In CITGM, skip tests that are flaky there by @mcollina in https://github.com/nodejs/undici/pull/3413
• Update esbuild to 0.19.10 by @mcollina in https://github.com/nodejs/undici/pull/3415
• Fix signature of RetryHandler by @JbIPS in https://github.com/nodejs/undici/pull/3416
• docs: fix ToC in CONTRIBUTING.md by @richardlau in https://github.com/nodejs/undici/pull/3420
• Fix fetch duplex docs by @Ethan-Arrowood in https://github.com/nodejs/undici/pull/3422
• fix: restore externalized Node.js dep compatibility by @richardlau in https://github.com/nodejs/undici/pull/3421
• fix: cast falsy servername to null to avoid falsy inequality by @ronag in https://github.com/nodejs/undici/pull/3426
• Add backport action by @mcollina in https://github.com/nodejs/undici/pull/3427
• build(deps): bump node from 67225d4 to 858234a in /build by @dependabot in https://github.com/nodejs/undici/pull/3411
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.15 by @dependabot in https://github.com/nodejs/undici/pull/3432
• build(deps): bump actions/dependency-review-action from 4.3.3 to 4.3.4 by @dependabot in https://github.com/nodejs/undici/pull/3431
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in https://github.com/nodejs/undici/pull/3430
• build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in https://github.com/nodejs/undici/pull/3428
• build(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 by @dependabot in https://github.com/nodejs/undici/pull/3429
• build(deps): bump superagent from 9.0.2 to 10.0.0 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3439
• build(deps): bump node from 17e6738 to 30c5be9 in /build by @dependabot in https://github.com/nodejs/undici/pull/3443
• docs: use default link of Web Streams API by @trivikr in https://github.com/nodejs/undici/pull/3446
• fix: increased memory in finalization first appearing in v6.16.0 by @snyamathi in https://github.com/nodejs/undici/pull/3445
• test: add test for memory leak by @snyamathi in https://github.com/nodejs/undici/pull/3450
• build: parametrize the location of wasm-opt by @khardix in https://github.com/nodejs/undici/pull/3454
• test: streamline test scripts in regard of without-intl and run more tests for without-intl case by @Uzlopak in https://github.com/nodejs/undici/pull/3453
• feat!: drop throwOnError by @metcoder95 in https://github.com/nodejs/undici/pull/3451
• types: allow non strict HTTPMethod by @Uzlopak in https://github.com/nodejs/undici/pull/3457
• build(deps-dev): bump borp from 0.15.0 to 0.17.0 by @dependabot in https://github.com/nodejs/undici/pull/3424
• remove core isErrored and isReadable by @KhafraDev in https://github.com/nodejs/undici/pull/3459
• use bodyUnusable to check if body is unusable by @KhafraDev in https://github.com/nodejs/undici/pull/3460
• perf: non-recursive implementation of euclidian gcd in balanced pool by @Uzlopak in https://github.com/nodejs/undici/pull/3461
• fix: do validation first before actual business logic, like super() by @Uzlopak in https://github.com/nodejs/undici/pull/3463
• use FinalizationRegistry for cloned response body by @KhafraDev in https://github.com/nodejs/undici/pull/3458
• perf: use isIPv6 for checking if hostname is isIPv6 by @Uzlopak in https://github.com/nodejs/undici/pull/3466
• fix: stripURLForReferrer jsdoc in fetch logic by @Uzlopak in https://github.com/nodejs/undici/pull/3471
• fix: remove kInterceptors in ProxyAgent by @Uzlopak in https://github.com/nodejs/undici/pull/3474
• fix: fix codesmells in retry-handler by @Uzlopak in https://github.com/nodejs/undici/pull/3475
• add autocompletable header types by @KhafraDev in https://github.com/nodejs/undici/pull/3462
• fix: add missing kOriginalDispatch Symbol in mock-logic by @Uzlopak in https://github.com/nodejs/undici/pull/3470
• fix: fix jsdoc in cookies/parse.js by @Uzlopak in https://github.com/nodejs/undici/pull/3469
• fix: remove unnecessary parameters in USVString calls by @Uzlopak in https://github.com/nodejs/undici/pull/3467
• fix: add jsdoc in tree.js, avoiding codesmells by @Uzlopak in https://github.com/nodejs/undici/pull/3476
• perf: set isLowerCase param on all calls of HeadersList.append by @Uzlopak in https://github.com/nodejs/undici/pull/3468
• fix: instantiation of ResponseError, pass headers and data correctly by @Uzlopak in https://github.com/nodejs/undici/pull/3472
• ci: add WPT updater by @Uzlopak in https://github.com/nodejs/undici/pull/3482
• meta: move nightly comment body to issue body by @RedYetiDev in https://github.com/nodejs/undici/pull/3484
• chore: improve jsdoc in cookies by @Uzlopak in https://github.com/nodejs/undici/pull/3478
• chore: improve jsdoc and minor changes in EventSource by @Uzlopak in https://github.com/nodejs/undici/pull/3480
• types: add Autocomplete utility type by @Uzlopak in https://github.com/nodejs/undici/pull/3479
• fix: instantiation of SecureProxyConnectionError should pass options to parent class by @Uzlopak in https://github.com/nodejs/undici/pull/3473
• chore: replace standard and snazzy with neostandard by @Uzlopak in https://github.com/nodejs/undici/pull/3485
• fix: workflow commit user by @tsctx in https://github.com/nodejs/undici/pull/3491
• build(deps): bump node from 30c5be9 to a20e858 in /build by @dependabot in https://github.com/nodejs/undici/pull/3496
• chore: add --noEmit for typescript tests by @Uzlopak in https://github.com/nodejs/undici/pull/3498
• perf: only create wasm buffer if requested by @Uzlopak in https://github.com/nodejs/undici/pull/3499
• fix(types): MockAgent accepts ProxyAgent, EnvHttpProxyAgent and RetryAgent for agent option by @Uzlopak in https://github.com/nodejs/undici/pull/3497
• stricter Headers brand checks in cookies by @KhafraDev in https://github.com/nodejs/undici/pull/3500
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3488
• fix: setEncoding should not throw on body #1125 by @Uzlopak in https://github.com/nodejs/undici/pull/3505
• websocket: set websocket readyState on fail by @KhafraDev in https://github.com/nodejs/undici/pull/3507
• build(deps-dev): bump jsdom from 24.1.3 to 25.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3511
• build(deps): bump wait-on from 7.2.0 to 8.0.0 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3513
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3515
• fix: reduce memory usage in client-h1 by @Uzlopak in https://github.com/nodejs/undici/pull/3510
• fix: refactor fast timers, fix UND_ERR_CONNECT_TIMEOUT on event loop blocking by @Uzlopak in https://github.com/nodejs/undici/pull/3495
• ci: make autobahn workflow reusable workflow, run the autobahn on nightly tests by @Uzlopak in https://github.com/nodejs/undici/pull/3503
• remove third party everything support in fetch by @KhafraDev in https://github.com/nodejs/undici/pull/3502
• remove double validation in webidl by @KhafraDev in https://github.com/nodejs/undici/pull/3516
• test: improve gc detection by @Uzlopak in https://github.com/nodejs/undici/pull/3504
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3519
• populate defaultValues in webidl dict. converter when passing null or undefined by @KhafraDev in https://github.com/nodejs/undici/pull/3518
• change webidl.util.Type return to an enum value by @KhafraDev in https://github.com/nodejs/undici/pull/3520
• set default argument values to undefined instead of {} by @KhafraDev in https://github.com/nodejs/undici/pull/3521
• ci: fix nightly workflow by @Uzlopak in https://github.com/nodejs/undici/pull/3525
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3527
• remove unused symbol by @KhafraDev in https://github.com/nodejs/undici/pull/3530
• fix formdata arg validation by @KhafraDev in https://github.com/nodejs/undici/pull/3529
• build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 by @dependabot in https://github.com/nodejs/undici/pull/3534
• build(deps): bump hendrikmuhs/ccache-action from 1.2.13 to 1.2.14 by @dependabot in https://github.com/nodejs/undici/pull/3536
• build(deps): bump step-security/harden-runner from 2.9.0 to 2.9.1 by @dependabot in https://github.com/nodejs/undici/pull/3535
• build(deps): bump actions/upload-artifact from 4.3.4 to 4.4.0 by @dependabot in https://github.com/nodejs/undici/pull/3537
• Remove patched DOM types by @eXhumer in https://github.com/nodejs/undici/pull/3533
• chore: minor changes in client-h1, use subarray instead of slice by @Uzlopak in https://github.com/nodejs/undici/pull/3538
• fix: run asserts first if possible by @Uzlopak in https://github.com/nodejs/undici/pull/3541
• build(deps): bump node from a20e858 to a17f484 in /build by @dependabot in https://github.com/nodejs/undici/pull/3542
• chore: noop per file by @Uzlopak in https://github.com/nodejs/undici/pull/3544
• build(deps): bump node from a17f484 to ef7b4bb in /build by @dependabot in https://github.com/nodejs/undici/pull/3547
• chore: rename buildUrl to serializePathWithQuery + jsdoc by @Uzlopak in https://github.com/nodejs/undici/pull/3545
• fix: add jsdoc and do minor changes in utils.js by @Uzlopak in https://github.com/nodejs/undici/pull/3550
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3556
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3561
• feat: jsdoc and minor optimizations in client-h1.js by @Uzlopak in https://github.com/nodejs/undici/pull/3551
• fix: handle websocket closed correctly by @KhafraDev in https://github.com/nodejs/undici/pull/3565
• fix: extract noop everywhere by @Uzlopak in https://github.com/nodejs/undici/pull/3559
• chore: add jsdoc for lib/web/websocket/util.js, minor rewrite of utf8Decode by @Uzlopak in https://github.com/nodejs/undici/pull/3563
• jsdoc: lib/api/readable.js, fix some types by @Uzlopak in https://github.com/nodejs/undici/pull/3567
• fix: use fasttimers for all connection timeouts by @Uzlopak in https://github.com/nodejs/undici/pull/3552
• chore: use 'use strict' in cjs files by @Uzlopak in https://github.com/nodejs/undici/pull/3568
• chore: update typescript testing deps by @Uzlopak in https://github.com/nodejs/undici/pull/3571
• build(deps)!: bump concurrently from 8.2.2 to 9.0.0 in /benchmarks (node < 18 unsupported) by @dependabot in https://github.com/nodejs/undici/pull/3574
• build(deps): bump node from ef7b4bb to 3cb4748 in /build by @dependabot in https://github.com/nodejs/undici/pull/3573
• chore: improve jsdoc of lib/core/tree.js by @Uzlopak in https://github.com/nodejs/undici/pull/3572
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3576
• jsdoc: improve typing of deepClone by @Uzlopak in https://github.com/nodejs/undici/pull/3575
• chore: improve jsdoc of lib/core/constants.js by @Uzlopak in https://github.com/nodejs/undici/pull/3570
• chore: upgrade fixed queue, lint accordingly, add jsdoc by @Uzlopak in https://github.com/nodejs/undici/pull/3577
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3581
• ci: less flaky test/request-timeout.js test by @Uzlopak in https://github.com/nodejs/undici/pull/3580
• chore: remove pluralizer by @Uzlopak in https://github.com/nodejs/undici/pull/3586
• util: rename validateHandler to assertRequestHandler, minor changes in util.js by @Uzlopak in https://github.com/nodejs/undici/pull/3583
• mock: remove Error.captureStackTrace in MockNotMatchedError by @Uzlopak in https://github.com/nodejs/undici/pull/3587
• fix: DRY up lib/core/diagnostics.js by @Uzlopak in https://github.com/nodejs/undici/pull/3585
• fix: husky deprecation warning by @eXhumer in https://github.com/nodejs/undici/pull/3593
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3598
• chore: remove unused pre-commit dependency by @eXhumer in https://github.com/nodejs/undici/pull/3599
• diagnostics-channel: use not deprecated subscribe fn by @Uzlopak in https://github.com/nodejs/undici/pull/3600
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3607
• fetch: make fullyReadBody sync by @Uzlopak in https://github.com/nodejs/undici/pull/3603
• jsdoc: add jsdoc to lib/web/fetch/constants.js by @Uzlopak in https://github.com/nodejs/undici/pull/3597
• fetch: pullAlgorithm passes the async resume function through by @Uzlopak in https://github.com/nodejs/undici/pull/3604
• fix: typo in Client.md by @SkeLLLa in https://github.com/nodejs/undici/pull/3612
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3615
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3622
• fetch: avoid async function in mainFetch to generate response by @Uzlopak in https://github.com/nodejs/undici/pull/3605
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3626
• append crlf to formdata body by @KhafraDev in https://github.com/nodejs/undici/pull/3625
• fix: fire close on failed WebSocket connection by @eXhumer in https://github.com/nodejs/undici/pull/3566
• fix: fire close on failed WebSocket connection by @KhafraDev in https://github.com/nodejs/undici/pull/3628
• handle body errors by @KhafraDev in https://github.com/nodejs/undici/pull/3632
• make cloned request inherit dispatcher by @KhafraDev in https://github.com/nodejs/undici/pull/3631
• Remove symbols from web specs by @KhafraDev in https://github.com/nodejs/undici/pull/3633
• cleanup web symbol removal by @KhafraDev in https://github.com/nodejs/undici/pull/3638
• build(deps): bump mitata from 0.1.14 to 1.0.4 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3641
• feat: implement WebSocketStream by @KhafraDev in https://github.com/nodejs/undici/pull/3560
• export WebSocketStream, add docs and types by @KhafraDev in https://github.com/nodejs/undici/pull/3645
• build(deps): bump node from 3cb4748 to 83b4d7b in /build by @dependabot in https://github.com/nodejs/undici/pull/3621
• feat: add DNS interceptor by @metcoder95 in https://github.com/nodejs/undici/pull/3490
• prefer fail over close the websocket connection in error cases by @KhafraDev in https://github.com/nodejs/undici/pull/3651
• fix: various typos by @NathanBaulch in https://github.com/nodejs/undici/pull/3640
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3634
• test: increase bitness in test/fixtures/*.pem by @LiviaMedeiros in https://github.com/nodejs/undici/pull/3659
• mock: fix mocking of Uint8Array and ArrayBuffers as provided mock-responses by @Uzlopak in https://github.com/nodejs/undici/pull/3662
• test: less flaky timers acceptance test, rework fast timer tests to pass them faster by @Uzlopak in https://github.com/nodejs/undici/pull/3656
• build(deps): bump github/codeql-action from 3.26.6 to 3.26.10 by @dependabot in https://github.com/nodejs/undici/pull/3664
• build(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5 by @dependabot in https://github.com/nodejs/undici/pull/3665
• build(deps): bump fastify/github-action-merge-dependabot from 3.10.1 to 3.10.2 by @dependabot in https://github.com/nodejs/undici/pull/3667
• build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 by @dependabot in https://github.com/nodejs/undici/pull/3668
• ws: move implementation agnostic onFail logic to shared function by @KhafraDev in https://github.com/nodejs/undici/pull/3663
• build(deps): bump step-security/harden-runner from 2.9.1 to 2.10.1 by @dependabot in https://github.com/nodejs/undici/pull/3666
• Update WPT by @github-actions in https://github.com/nodejs/undici/pull/3669
• fix: add option ignoreTrailingSlash to MockAgent and .intercept() by @Uzlopak in https://github.com/nodejs/undici/pull/3655
• fix: ignore leading and trailing crlfs in formdata body by @KhafraDev in https://github.com/nodejs/undici/pull/3677
• test: add test to ensure full type when parsing multipart/form-data' by @Uzlopak in https://github.com/nodejs/undici/pull/3683
• test: use globalThis.Headers and skip if is missing by @Uzlopak in https://github.com/nodejs/undici/pull/3684
• jsdoc: adds some jsdoc to fetch headers implementation, minor changes by @Uzlopak in https://github.com/nodejs/undici/pull/3687
• feat: check maxHeadersSize on client instantiation and not on Parser instantion by @Uzlopak in https://github.com/nodejs/undici/pull/3654
• test: remove test for issue 1670 by @Uzlopak in https://github.com/nodejs/undici/pull/3690
• replace instanceof in brand checks with isPrototypeOf by @KhafraDev in https://github.com/nodejs/undici/pull/3692
• test: make fetch test independent from internet connection by @Uzlopak in https://github.com/nodejs/undici/pull/3691
• build(deps-dev): bump esbuild from 0.19.12 to 0.24.0 by @dependabot in https://github.com/nodejs/undici/pull/3698
• fix: restructure determineRequestsReferrer to match better spec by @Uzlopak in https://github.com/nodejs/undici/pull/3699
• set ws readyState if closed before connection could be established by @KhafraDev in https://github.com/nodejs/undici/pull/3701
• types: fix return type of WebidlUtil.Type by @Uzlopak in https://github.com/nodejs/undici/pull/3685

New Contributors

• @Gigioliva made their first contribution in https://github.com/nodejs/undici/pull/3354
• @fawazahmed0 made their first contribution in https://github.com/nodejs/undici/pull/3372
• @jfhr made their first contribution in https://github.com/nodejs/undici/pull/3385
• @JbIPS made their first contribution in https://github.com/nodejs/undici/pull/3416
• @richardlau made their first contribution in https://github.com/nodejs/undici/pull/3420
• @RedYetiDev made their first contribution in https://github.com/nodejs/undici/pull/3484
• @NathanBaulch made their first contribution in https://github.com/nodejs/undici/pull/3640

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.2...v7.0.0-alpha.2

What's Changed

• [v6.x] fix(retry): settle exposed body on terminal failure by @mcollina in #5778
• Backport upgrade diagnostics lifecycle fixes to v6.x by @BridgeAR in #5833
• test: synchronize the issue-3356 body timeout by @BridgeAR in #5834

Full Changelog: v6.28.1...v6.29.0

⚠️ Security fixes

High severity

• GHSA-rfgv-xxqx-mfg5: a WebSocket server could select a subprotocol when none was requested, causing an uncaught TypeError that could terminate the process. Undici now rejects the handshake with protocol error 1002. Fixed by 2af0faf8.

Medium severity

• GHSA-3wwx-pv8p-q78v: a malformed permessage-deflate payload exceeding the configured decompression limit could emit an unhandled zlib error and terminate the process. Undici now destroys the inflater after reaching the limit. Fixed by 07c60d9c.

Low severity

• GHSA-r53p-7pc4-xj5r: the retry interceptor could concatenate a resumed response with inconsistent framing into downstream output, enabling response splitting or corruption. Undici now validates Content-Range against the original response framing before resuming. Fixed by ce31bc82.

What's Changed

• perf: reduce EventSourceStream parser allocations (#5032) by @mcollina in #5647
• [v6.x] perf(h1): drop idle-socket timer floor with a ref'd setImmediate (#5707) by @mcollina in #5770

Full Changelog: v6.28.0...v6.28.1

⚠️ Security fixes

• GHSA-m8rv-5g2x-5cg5: a malicious type property on a duck-typed blob-like HTTP/1.1 request body could inject CRLF sequences into the generated content-type header. Undici now coerces and validates the value before adding it to the request. Fixed by 740a0b7c.
• GHSA-8xcm-r25x-g524: the retry interceptor could expose a stale Content-Length after resuming a partial response, potentially causing downstream response desynchronization, hangs, or corruption. Undici now rejects partial responses whose Content-Length is inconsistent with Content-Range. Fixed by cba3a52a, with corrected fixtures in 4fd5a0c6.
• GHSA-v3r7-h72x-cjcm: unsanitized domain and unparsed values passed to setCookie() could inject cookie attributes. Undici now validates cookie domains, paths, and unparsed attributes more strictly. Fixed by af748404.

GHSA-4cwx-7wf7-3272 and GHSA-jr45-8vmc-qm54 affect the cache interceptor in Undici v7 and v8; Undici v6 is not in their affected version ranges.

Full Changelog: v6.27.0...v6.28.0

⚠️ Security Release

This release line addresses 4 security advisories.

Action required: Upgrade to undici 6.27.0 or later.

npm install undici@^6.27.0

Note on patched version: the v6 fixes shipped in v6.27.0, not 6.26.0
— v6.26.0 contains only the chunked-EOF fix (#5308) and the version bump, none
of the security fixes below.

The v6 line is not affected by the SOCKS5 advisories (GHSA-vmh5-mc38-953g,
GHSA-hm92-r4w5-c3mj), the shared-cache disclosure (GHSA-pr7r-676h-xcf6), or the
8.x-only WebSocket regression (GHSA-38rv-x7px-6hhq).

Summary

Advisory	CVE	Severity (CVSS)	Fixed in	Fix commit
GHSA-vxpw-j846-p89q	CVE-2026-12151	High (7.5)	6.27.0	b7f252e7
GHSA-p88m-4jfj-68fv	CVE-2026-9679	Moderate (5.9)	6.27.0	25efa447
GHSA-g8m3-5g58-fq7m	CVE-2026-11525	Low (3.7)	6.27.0	25efa447
GHSA-35p6-xmwp-9g52	CVE-2026-6733	Low (3.7)	6.27.0	f4c31d60

---

High severity

WebSocket DoS via fragment count bypass — CVE-2026-12151

GHSA-vxpw-j846-p89q · CWE-400, CWE-770
Fix: b7f252e7 Backport WebSocket maxPayloadSize fixes (#5423, backported to v6 in #5428)

A malicious WebSocket server can stream a large number of small or empty
continuation frames. Undici enforced a limit on cumulative payload size but did
not limit the number of fragments per message, leading to unbounded memory
growth and denial of service. All releases from 6.17.0 onward are affected.

• Affected: applications using new WebSocket(...) or WebSocketStream
  against untrusted endpoints.
• Workaround: none — upgrade is required.

---

Moderate severity

HTTP header injection via Set-Cookie percent-decoding — CVE-2026-9679

GHSA-p88m-4jfj-68fv · CWE-93
Fix: 25efa447 fix(cookies): preserve values and parse SameSite strictly

parseSetCookie applied percent-decoding to cookie values, turning encoded
sequences like %0D%0A and %00 into literal bytes, contrary to RFC 6265 §5.4
and browser behavior. Applications forwarding parsed Set-Cookie values into
response headers were exposed to header injection, enabling session fixation,
open redirects, and cache poisoning.

• Workaround: sanitize values before forwarding — strip or reject CR, LF,
  NUL, ;, and =.

---

Low severity

Set-Cookie SameSite attribute downgrade — CVE-2026-11525

GHSA-g8m3-5g58-fq7m · CWE-183
Fix: 25efa447 fix(cookies): preserve values and parse SameSite strictly

The cookie parser accepted SameSite values containing Strict, Lax, or
None as substrings rather than requiring exact matches per RFC 6265. Values
like SameSite=NoneOfYourBusiness parsed as None, and SameSite=StrictLax
parsed as Lax, silently weakening cookie security policies for apps that
forward parsed attributes.

HTTP response queue poisoning via keep-alive socket reuse — CVE-2026-6733

GHSA-35p6-xmwp-9g52 · CWE-367 (TOCTOU race condition)
Fix: f4c31d60 fix: guard idle socket validation to skip fresh sockets (#5400)

An attacker controlling an upstream HTTP/1.1 server could inject unsolicited
responses onto idle keep-alive sockets. On socket reuse, the injected response
was associated with a new request, delivering responses to the wrong requests.

• Requirements: attacker-controlled/compromised upstream and active
  keep-alive reuse.
• Workaround: disable keep-alive reuse with keepAliveTimeout: 0 on the
  Client or Pool.

---

Release contents & deliberate backports

v6.27.0 is a security-only release — every change in it is one of the fixes
above, backported to the v6.x maintenance line on purpose:

• #5428 — backport of the WebSocket maxPayloadSize fragment-count / cumulative-size limits to v6.x (CVE-2026-12151; this is the v6 counterpart of the v7 backport #5423).
• #5400 — idle-socket-validation fix for the queue-poisoning issue (CVE-2026-6733).

The cookie fix (25efa447,
covering both CVE-2026-9679 and CVE-2026-11525) was applied directly to the v6.x
branch. Full changelog:
v6.26.0...v6.27.0.

---

Credits

Per-advisory credits (as recorded in each GHSA):

• CVE-2026-12151 — reported by @lpinca & @Nadav0077; reviewed by @UlisesGascon.
• CVE-2026-9679 — reported by @tndud042713; fixed by @mcollina; reviewed by @KhafraDev & @UlisesGascon.
• CVE-2026-11525 — fixed by @mcollina; reviewed by @UlisesGascon.
• CVE-2026-6733 — fixed by @mcollina; verified by @UlisesGascon.

What's Changed

• fix: validate EOF for chunked h1 responses by @mcollina in https://github.com/nodejs/undici/pull/5308

Full Changelog: https://github.com/nodejs/undici/compare/v6.25.0...v6.26.0

What's Changed

Full Changelog: https://github.com/nodejs/undici/compare/v6.24.1...v6.25.0

Full Changelog: https://github.com/nodejs/undici/compare/v6.24.0...v6.24.1

Undici v6.24.0 Security Release Notes (LTS)

This release backports fixes for security vulnerabilities affecting the v6 line.

Upgrade guidance

All users on v6 should upgrade to v6.24.0 or later.

Fixed advisories

• GHSA-2mjp-6q6p-2qxm / CVE-2026-1525 (Medium)
  Inconsistent interpretation of HTTP requests (request/response smuggling class issue).

• GHSA-f269-vfmq-vjvj / CVE-2026-1528 (High)
  Malicious WebSocket 64-bit frame length handling could crash the client.

• GHSA-4992-7rv2-5pvq / CVE-2026-1527 (Medium)
  CRLF injection via the upgrade option.

• GHSA-v9p9-hfj2-hcw8 / CVE-2026-2229 (High)
  Unhandled exception from invalid server_max_window_bits in WebSocket permessage-deflate negotiation.

• GHSA-vrm6-8vpv-qv8q / CVE-2026-1526 (High)
  Unbounded memory consumption in WebSocket permessage-deflate decompression.

Not applicable to v6

• GHSA-phc3-fgpg-7m6h / CVE-2026-2581 affects >= 7.17.0 < 7.24.0 only.

Affected and patched ranges (v6)

• CVE-2026-1525: affected < 6.24.0, patched 6.24.0
• CVE-2026-1528: affected >= 6.0.0 < 6.24.0, patched 6.24.0
• CVE-2026-1527: affected < 6.24.0, patched 6.24.0
• CVE-2026-2229: affected < 6.24.0, patched 6.24.0
• CVE-2026-1526: affected < 6.24.0, patched 6.24.0

References

• GitHub Security Advisories: https://github.com/nodejs/undici/security/advisories
• NVD CVE-2026-1525: https://nvd.nist.gov/vuln/detail/CVE-2026-1525
• NVD CVE-2026-1528: https://nvd.nist.gov/vuln/detail/CVE-2026-1528
• NVD CVE-2026-1527: https://nvd.nist.gov/vuln/detail/CVE-2026-1527
• NVD CVE-2026-2229: https://nvd.nist.gov/vuln/detail/CVE-2026-2229
• NVD CVE-2026-1526: https://nvd.nist.gov/vuln/detail/CVE-2026-1526

⚠️ Security Release

This fixes https://github.com/nodejs/undici/security/advisories/GHSA-g9mf-h72j-4rw9 and CVE-2026-22036.

Full Changelog: https://github.com/nodejs/undici/compare/v6.22.0...v6.23.0

What's Changed

• fix: fix wrong stream canceled up after cloning (v6) by @snyamathi in https://github.com/nodejs/undici/pull/4414
• [Backport v6.x] fix: fix EnvHttpProxyAgent for the Node.js bundle by @github-actions[bot] in https://github.com/nodejs/undici/pull/4432
• feat(ProxyAgent): match Curl behavior in HTTP->HTTP Proxy connections (#4180) by @metcoder95 in https://github.com/nodejs/undici/pull/4433
• feat(ProxyAgent) improve Curl-y behavior in HTTP->HTTP Proxy connections (#4180) (#4340) by @metcoder95 in https://github.com/nodejs/undici/pull/4445
• Backport 4472 to v6.x by @Uzlopak in https://github.com/nodejs/undici/pull/4480

Full Changelog: https://github.com/nodejs/undici/compare/v6.21.3...v6.22.0

What's Changed

• [Backport v6.x] append crlf to formdata body by @github-actions in https://github.com/nodejs/undici/pull/4210

Full Changelog: https://github.com/nodejs/undici/compare/v6.21.2...v6.21.3

What's Changed

• fix(types): add missing DNS interceptor by @slagiewka in https://github.com/nodejs/undici/pull/4024
• [v6.x] fix wpts on windows by @mcollina in https://github.com/nodejs/undici/pull/4093
• Removed clients with unrecoverable errors from the Pool https://github.com/nodejs/undici/pull/4088

New Contributors

• @slagiewka made their first contribution in https://github.com/nodejs/undici/pull/4024

Full Changelog: https://github.com/nodejs/undici/compare/v6.21.1...v6.21.2

⚠️ Security Release ⚠️

Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).

What's Changed

• fix(#3736): back-port 183f8e9 to v6.x by @ggoodman in https://github.com/nodejs/undici/pull/3855
• fix(#3817): send servername for SNI on TLS (#3821) [backport] by @metcoder95 in https://github.com/nodejs/undici/pull/3864
• fix: sending formdata bodies with http2 (#3863) [backport] by @metcoder95 in https://github.com/nodejs/undici/pull/3866
• [Backport v6.x] fix: Fixed the issue that there is no running request when http2 goaway by @github-actions in https://github.com/nodejs/undici/pull/3877
• types: [backport] Update return type of RetryCallback (#3851) by @metcoder95 in https://github.com/nodejs/undici/pull/3876

Full Changelog: https://github.com/nodejs/undici/compare/v6.21.0...v6.21.1

What's Changed

• [Backport v6.x] web: mark as uncloneable when possible (#3709) by @jazelly in https://github.com/nodejs/undici/pull/3744
• [Backport v6.x] fetch: fix content-encoding order by @github-actions in https://github.com/nodejs/undici/pull/3764
• [Backport v6.x] fix: handle undefined deref() of WeakRef(socket) by @github-actions in https://github.com/nodejs/undici/pull/3822
• [Backport v6.x] fix: range end is zero-indexed by @github-actions in https://github.com/nodejs/undici/pull/3827

Full Changelog: https://github.com/nodejs/undici/compare/v6.20.1...v6.21.0

What's Changed

• [Backport v6.x] jsdoc: add jsdoc to lib/web/fetch/constants.js by @github-actions in https://github.com/nodejs/undici/pull/3710
• [Backport v6.x] feat: implement BodyReadable.bytes by @github-actions in https://github.com/nodejs/undici/pull/3711
• fix: add more expectsPayload methods by @ronag in https://github.com/nodejs/undici/pull/3715
• [Backport v6.x] chore(H2): onboard H2 into Undici queueing system (#3707) by @Uzlopak in https://github.com/nodejs/undici/pull/3724
• [Backport v6.x] fix: PoolBase kClose and kDestroy should await and not return the Promise by @github-actions in https://github.com/nodejs/undici/pull/3723
• [Backport v6.x] fix: extract noop everywhere by @Uzlopak in https://github.com/nodejs/undici/pull/3727

Full Changelog: https://github.com/nodejs/undici/compare/v6.20.0...v6.20.1

What's Changed

• Remove patched dom types (v6.x branch) by @eXhumer in https://github.com/nodejs/undici/pull/3531
• docs(Backport v6.x): Fix signature of RetryHandler by @github-actions in https://github.com/nodejs/undici/pull/3594
• deps(dev): update @types/node by @metcoder95 in https://github.com/nodejs/undici/pull/3618
• fix: throw on retry when payload is consume by downstream by @github-actions in https://github.com/nodejs/undici/pull/3596
• feat(Backport v6.x): move throwOnError to interceptor by @github-actions in https://github.com/nodejs/undici/pull/3595
• [Backport v6.x] fix: reduce memory usage in client-h1 by @github-actions in https://github.com/nodejs/undici/pull/3672
• [Backport v6.x] fix: refactor fast timers, fix UND_ERR_CONNECT_TIMEOUT on event loop blocking by @github-actions in https://github.com/nodejs/undici/pull/3673
• [Backport v6.x] fix: run asserts first if possible by @github-actions in https://github.com/nodejs/undici/pull/3674
• [Backport v6.x] fix: use fasttimers for all connection timeouts by @github-actions in https://github.com/nodejs/undici/pull/3675
• [Backport v6.x] ci: less flaky test/request-timeout.js test by @github-actions in https://github.com/nodejs/undici/pull/3678
• [Backport v6.x] test: less flaky timers acceptance test, rework fast timer tests to pass them faster by @github-actions in https://github.com/nodejs/undici/pull/3679
• [Backport v6.x] ignore leading and trailing crlfs in formdata body by @github-actions in https://github.com/nodejs/undici/pull/3681
• [Backport v6.x] mock: fix mocking of Uint8Array and ArrayBuffers as provided mock-responses by @github-actions in https://github.com/nodejs/undici/pull/3689
• [Backport v6.x] handle body errors by @Uzlopak in https://github.com/nodejs/undici/pull/3700

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.8...v6.20.0

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.7...v6.19.8

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.6...v6.19.7

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.5...v6.19.6

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.4...v6.19.5

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.3...v6.19.4

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.2...v6.19.3

What's Changed

• fix #3337 by @KhafraDev in https://github.com/nodejs/undici/pull/3338
• build: use husky as husky install is deprecated by @jazelly in https://github.com/nodejs/undici/pull/3340
• fix: interceptors.d.ts has no default export by @Uzlopak in https://github.com/nodejs/undici/pull/3332

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.1...v6.19.2

What's Changed

• don't append empty origin by @KhafraDev in https://github.com/nodejs/undici/pull/3335

Full Changelog: https://github.com/nodejs/undici/compare/v6.19.0...v6.19.1

What's Changed

• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/nodejs/undici/pull/3305
• build(deps): bump codecov/codecov-action from 4.3.1 to 4.4.1 by @dependabot in https://github.com/nodejs/undici/pull/3303
• build(deps): bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in https://github.com/nodejs/undici/pull/3304
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.7 by @dependabot in https://github.com/nodejs/undici/pull/3306
• build(deps): bump node from 9e8f45f to dd7e693 in /build by @dependabot in https://github.com/nodejs/undici/pull/3309
• build(deps): bump node from dd7e693 to e6d4495 in /build by @dependabot in https://github.com/nodejs/undici/pull/3313
• remove websocket experimental warning by @KhafraDev in https://github.com/nodejs/undici/pull/3311
• perf: optimization of request instantiation by @tsctx in https://github.com/nodejs/undici/pull/3107
• perf: convert object to params by @DarkGL in https://github.com/nodejs/undici/pull/3302
• build(deps-dev): bump borp from 0.14.0 to 0.15.0 by @dependabot in https://github.com/nodejs/undici/pull/3320
• build(deps-dev): bump c8 from 9.1.0 to 10.0.0 by @dependabot in https://github.com/nodejs/undici/pull/3321
• fix: add missing error classes to types by @maxbeatty in https://github.com/nodejs/undici/pull/3316
• export interceptor to type def file by @jakecastelli in https://github.com/nodejs/undici/pull/3318
• build(deps): bump node from e6d4495 to 075a5cc in /build by @dependabot in https://github.com/nodejs/undici/pull/3326
• doc: clearify the behaviour of bodyTimeout in the request by @jakecastelli in https://github.com/nodejs/undici/pull/3324
• feature: support pre-shared sessions by @tastypackets in https://github.com/nodejs/undici/pull/3325

New Contributors

• @maxbeatty made their first contribution in https://github.com/nodejs/undici/pull/3316
• @jakecastelli made their first contribution in https://github.com/nodejs/undici/pull/3318

Full Changelog: https://github.com/nodejs/undici/compare/v6.18.2...v6.19.0

What's Changed

• don't use internal header state for cookies by @KhafraDev in https://github.com/nodejs/undici/pull/3295
• build(deps-dev): bump borp from 0.13.0 to 0.14.0 by @dependabot in https://github.com/nodejs/undici/pull/3298
• fix: retry on body support by @metcoder95 in https://github.com/nodejs/undici/pull/3294

Full Changelog: https://github.com/nodejs/undici/compare/v6.18.1...v6.18.2

What's Changed

• docs: Update references to dispatcher in docs by @haikyuu in https://github.com/nodejs/undici/pull/3281
• fix: compatibility for global headers by @tsctx in https://github.com/nodejs/undici/pull/3286
• websocket: pre-calculated length by @tsctx in https://github.com/nodejs/undici/pull/3284
• ci: fix autobahn workflow by @Uzlopak in https://github.com/nodejs/undici/pull/3291
• revert: "websocket: pre-calculated length" by @KhafraDev in https://github.com/nodejs/undici/pull/3290
• websocket: use FixedQueue instead of Set by @tsctx in https://github.com/nodejs/undici/pull/3283

New Contributors

• @haikyuu made their first contribution in https://github.com/nodejs/undici/pull/3281

Full Changelog: https://github.com/nodejs/undici/compare/v6.18.0...v6.18.1

What's Changed

• permessage-deflate decompression support in websocket by @KhafraDev in https://github.com/nodejs/undici/pull/3263
• fix: Fix server closing in tests. by @ShogunPanda in https://github.com/nodejs/undici/pull/3279

Full Changelog: https://github.com/nodejs/undici/compare/v6.17.0...v6.18.0

What's Changed

• fetch: fix captureStackTrace by @Uzlopak in https://github.com/nodejs/undici/pull/3227
• fetch: fix wpt test request-upload.any.js by @Uzlopak in https://github.com/nodejs/undici/pull/3234
• websocket: don't clone buffer by @tsctx in https://github.com/nodejs/undici/pull/3240
• Remove unecessary async from writeBuffer by @DarkGL in https://github.com/nodejs/undici/pull/3245
• refactor websocket control frame handling by @KhafraDev in https://github.com/nodejs/undici/pull/3241
• fix parsing continuation frames in websocket by @KhafraDev in https://github.com/nodejs/undici/pull/3247
• ci: node nightly test should use node 23 by @Uzlopak in https://github.com/nodejs/undici/pull/3248
• Add test to verify if the connection is correctly aborted on cancel by @mcollina in https://github.com/nodejs/undici/pull/3219
• Autobahn suite by @KhafraDev in https://github.com/nodejs/undici/pull/3251
• websocket: fix 6 autobahn tests by @KhafraDev in https://github.com/nodejs/undici/pull/3254
• websocket: checkout correct commit in autobahn workflow by @Uzlopak in https://github.com/nodejs/undici/pull/3258
• Cleanup websocket by @KhafraDev in https://github.com/nodejs/undici/pull/3257
• websocket: autobahn workflow should fail on error by @Uzlopak in https://github.com/nodejs/undici/pull/3259
• add bodymixin bytes by @KhafraDev in https://github.com/nodejs/undici/pull/3262
• perf: avoid buffer cloning by @tsctx in https://github.com/nodejs/undici/pull/3264
• feat: dump interceptor by @metcoder95 in https://github.com/nodejs/undici/pull/3118
• use private properties in Headers by @KhafraDev in https://github.com/nodejs/undici/pull/3269
• Revert "websocket: autobahn workflow should fail on error" by @Uzlopak in https://github.com/nodejs/undici/pull/3270
• build(deps): bump node from 487dc5d to 9e8f45f in /build by @dependabot in https://github.com/nodejs/undici/pull/3271

New Contributors

• @DarkGL made their first contribution in https://github.com/nodejs/undici/pull/3245

Full Changelog: https://github.com/nodejs/undici/compare/v6.16.1...v6.17.0

What's Changed

• fix some typos by @Uzlopak in https://github.com/nodejs/undici/pull/3217
• websocket: move codeblock in parseCloseBody by @Uzlopak in https://github.com/nodejs/undici/pull/3215
• fetch: enable wpt test request-referrer.any.js by @Uzlopak in https://github.com/nodejs/undici/pull/3223
• fetch: wpt add /fetch/api/resources/cache.py to server.mjs by @Uzlopak in https://github.com/nodejs/undici/pull/3225
• add pipe support for wpt server by @KhafraDev in https://github.com/nodejs/undici/pull/3228
• test: reduce the number of requests in fire-and-forget.js by @tsctx in https://github.com/nodejs/undici/pull/3229
• ci: add node 22 in ci test matrix, use 22 for coverage by @Uzlopak in https://github.com/nodejs/undici/pull/3226
• fetch: don't set an invalid origin header by @KhafraDev in https://github.com/nodejs/undici/pull/3235
• fail wpt runner if expected failures does not match actual by @KhafraDev in https://github.com/nodejs/undici/pull/3236
• fix: ignore content-length when dumping HEAD by @ronag in https://github.com/nodejs/undici/pull/3222

Full Changelog: https://github.com/nodejs/undici/compare/v6.16.0...v6.16.1

What's Changed

• add index to sequence converter errors by @KhafraDev in https://github.com/nodejs/undici/pull/3178
• build(deps-dev): bump borp from 0.12.0 to 0.13.0 by @dependabot in https://github.com/nodejs/undici/pull/3179
• build(deps): bump node from 21-alpine3.19 to 22-alpine3.19 in /build by @dependabot in https://github.com/nodejs/undici/pull/3180
• build(deps): bump superagent from 8.1.2 to 9.0.2 in /benchmarks by @dependabot in https://github.com/nodejs/undici/pull/3181
• fix: keep raw header name by @tsctx in https://github.com/nodejs/undici/pull/3183
• fix(fetch): improve Headers and Request type-compatibility by @kettanaito in https://github.com/nodejs/undici/pull/1964
• fix 3 mimesniff tests by @KhafraDev in https://github.com/nodejs/undici/pull/3185
• build(deps): bump hendrikmuhs/ccache-action from 1.2.12 to 1.2.13 by @dependabot in https://github.com/nodejs/undici/pull/3187
• build(deps): bump codecov/codecov-action from 4.1.1 to 4.3.1 by @dependabot in https://github.com/nodejs/undici/pull/3191
• build(deps): bump github/codeql-action from 3.24.9 to 3.25.3 by @dependabot in https://github.com/nodejs/undici/pull/3192
• build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in https://github.com/nodejs/undici/pull/3189
• build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in https://github.com/nodejs/undici/pull/3188
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 by @dependabot in https://github.com/nodejs/undici/pull/3190
• build(deps): bump node from 9459e24 to 487dc5d in /build by @dependabot in https://github.com/nodejs/undici/pull/3195
• perf: avoid spread in makeRequest() by @gunjam in https://github.com/nodejs/undici/pull/3193
• refactor: code cleanup by @tsctx in https://github.com/nodejs/undici/pull/3194
• fix parsing when receiving empty body websocket by @KhafraDev in https://github.com/nodejs/undici/pull/3205
• fix: MockResponseCallbackOptions type by @merojosa in https://github.com/nodejs/undici/pull/2951
• docs(proxy): fix typo by @kanadgupta in https://github.com/nodejs/undici/pull/3207
• fix websocket receiving an invalid utf-8 in close frame by @KhafraDev in https://github.com/nodejs/undici/pull/3206
• perf: avoid setImmediate if body is reading by @ronag in https://github.com/nodejs/undici/pull/3210
• fix: request abort signal by @ronag in https://github.com/nodejs/undici/pull/3209
• fix: remove abort handler on close by @ronag in https://github.com/nodejs/undici/pull/3211
• fix: pass abort function by @tsctx in https://github.com/nodejs/undici/pull/3212
• websocket: 200x faster generate mask by @tsctx in https://github.com/nodejs/undici/pull/3204
• use FinalizationRegistry to cancel the body if response is collected by @mcollina in https://github.com/nodejs/undici/pull/3199
• websocket: don't clone buffer if it's not needed. by @tsctx in https://github.com/nodejs/undici/pull/3214
• websocket: use FastBuffer by @tsctx in https://github.com/nodejs/undici/pull/3213

New Contributors

• @kettanaito made their first contribution in https://github.com/nodejs/undici/pull/1964
• @gunjam made their first contribution in https://github.com/nodejs/undici/pull/3193
• @merojosa made their first contribution in https://github.com/nodejs/undici/pull/2951
• @kanadgupta made their first contribution in https://github.com/nodejs/undici/pull/3207

Full Changelog: https://github.com/nodejs/undici/compare/v6.15.0...v6.16.0

What's Changed

• Expose EnvHttpProxyAgent to Node.js core bundle, so it can be turned … by @mcollina in https://github.com/nodejs/undici/pull/3148
• test: add headerslist copy check by @tsctx in https://github.com/nodejs/undici/pull/3156
• chore: ensure automated v6 release compared to v6 by @mweberxyz in https://github.com/nodejs/undici/pull/3149
• fetch: do not leak signal listeners by @mcollina in https://github.com/nodejs/undici/pull/3158
• fix: request cache mode is not the same as request mode by @tsibley in https://github.com/nodejs/undici/pull/3151
• fetch: don't re-lowercase HeadersList by @tsctx in https://github.com/nodejs/undici/pull/3159
• fix casing issue when cloning Headers object by @KhafraDev in https://github.com/nodejs/undici/pull/3160
• build(deps): bump node from 6d0f18a to db8772d in /build by @dependabot in https://github.com/nodejs/undici/pull/3163
• fix header cloning bug by @tsctx in https://github.com/nodejs/undici/pull/3162
• chore: change bench naming for h2 by @metcoder95 in https://github.com/nodejs/undici/pull/3165
• expose WebSocket related events in node bundle by @KhafraDev in https://github.com/nodejs/undici/pull/3167
• feat: add support for if-match on retry handler by @metcoder95 in https://github.com/nodejs/undici/pull/3144
• fix: correct firing order of abort events by @tsctx in https://github.com/nodejs/undici/pull/3169
• create fast MessageEvent by @KhafraDev in https://github.com/nodejs/undici/pull/3170
• chore: add explicitly @fastify/busboy by @Uzlopak in https://github.com/nodejs/undici/pull/3172
• chore: remove sinon as dev dependency by @Uzlopak in https://github.com/nodejs/undici/pull/3171
• webidl changes by @KhafraDev in https://github.com/nodejs/undici/pull/3175
• preserve dictionary key name in webidl errors by @KhafraDev in https://github.com/nodejs/undici/pull/3176

New Contributors

• @tsibley made their first contribution in https://github.com/nodejs/undici/pull/3151

Full Changelog: https://github.com/nodejs/undici/compare/v6.14.1...v6.15.0

What's Changed

• fix: tweak keep-alive timeout implementation by @mweberxyz in https://github.com/nodejs/undici/pull/3145
• build(deps-dev): bump borp from 0.11.0 to 0.12.0 by @dependabot in https://github.com/nodejs/undici/pull/3153
• build(deps): bump node from ad255c6 to 6d0f18a in /build by @dependabot in https://github.com/nodejs/undici/pull/3154
• fix(EnvHttpProxyAgent): prefer lowercase env vars by @10xLaCroixDrinker in https://github.com/nodejs/undici/pull/3152

Full Changelog: https://github.com/nodejs/undici/compare/v6.14.0...v6.14.1

What's Changed

• bench: enable benchmarks for h2 by @metcoder95 in https://github.com/nodejs/undici/pull/3100
• perf: improve performance of isomorphicEncode by @tsctx in https://github.com/nodejs/undici/pull/3101
• util: remove isReadableAborted by @Uzlopak in https://github.com/nodejs/undici/pull/3104
• fix(types): The second parameter of EventSource is optional by @zbinlin in https://github.com/nodejs/undici/pull/3106
• fix: onConnect types by @ronag in https://github.com/nodejs/undici/pull/3116
• add dispatcher option to EventSource by @KhafraDev in https://github.com/nodejs/undici/pull/3119
• core: improve parseURL by @Uzlopak in https://github.com/nodejs/undici/pull/3102
• test: increase coverage by @Uzlopak in https://github.com/nodejs/undici/pull/3121
• docs: add directions to run docs and benchmarks by @FatumaA in https://github.com/nodejs/undici/pull/3092
• perf: avoid unnecessary clone by @tsctx in https://github.com/nodejs/undici/pull/3117
• build(deps-dev): bump borp from 0.10.0 to 0.11.0 by @dependabot in https://github.com/nodejs/undici/pull/3126
• drop node support for < v18.17.0 by @KhafraDev in https://github.com/nodejs/undici/pull/3125
• test: improve test and ci performance by @Uzlopak in https://github.com/nodejs/undici/pull/3135
• Added EnvHttpProxyAgent to support HTTP_PROXY by @10xLaCroixDrinker in https://github.com/nodejs/undici/pull/2994
• fetch: Change wording of "Body is unusable" error by @nzakas in https://github.com/nodejs/undici/pull/3105
• perf: use class instead of object literals with getters by @tsctx in https://github.com/nodejs/undici/pull/3138
• fix: unhandled exception or failing error body by @ronag in https://github.com/nodejs/undici/pull/3137
• reuse realm for Request/Response by @KhafraDev in https://github.com/nodejs/undici/pull/3142
• fix(H2-#3140): abort requets upon GOAWAY by @metcoder95 in https://github.com/nodejs/undici/pull/3143
• don't store realm on Request/Response by @KhafraDev in https://github.com/nodejs/undici/pull/3146
• improve: wasm build by @Uzlopak in https://github.com/nodejs/undici/pull/3074

New Contributors

• @10xLaCroixDrinker made their first contribution in https://github.com/nodejs/undici/pull/2994
• @nzakas made their first contribution in https://github.com/nodejs/undici/pull/3105

Full Changelog: https://github.com/nodejs/undici/compare/v6.13.0...v6.14.0

What's Changed

• build(deps): bump node from 9696b26 to ad255c6 in /build by @dependabot in https://github.com/nodejs/undici/pull/3073
• test: remove only by @metcoder95 in https://github.com/nodejs/undici/pull/3077
• fix: defer errors with setImmediate by @ronag in https://github.com/nodejs/undici/pull/3081
• improve DecoratorHandler by @Uzlopak in https://github.com/nodejs/undici/pull/3079
• chore: removed unused escapeFormDataName by @mcollina in https://github.com/nodejs/undici/pull/3084
• Mention option to pass streams into FormData by @JaoodxD in https://github.com/nodejs/undici/pull/3086
• fetch: improve performance of isValidEncodedURL by @Uzlopak in https://github.com/nodejs/undici/pull/3090
• optimize utf8Decode by @Uzlopak in https://github.com/nodejs/undici/pull/3085
• refactor: h2 refactoring by @metcoder95 in https://github.com/nodejs/undici/pull/3082
• Skip the creation of a transform stream in fetch by @mcollina in https://github.com/nodejs/undici/pull/3093
• fetch: improve performance of urlHasHttpsScheme by @Uzlopak in https://github.com/nodejs/undici/pull/3094
• fetch: avoid creation of an intermediary ReadableStream by @KhafraDev in https://github.com/nodejs/undici/pull/3095
• test: duplicate jest unspecific tests to native runner by @Uzlopak in https://github.com/nodejs/undici/pull/3075
• build(deps): bump node from ad255c6 to 6d0f18a in /build by @dependabot in https://github.com/nodejs/undici/pull/3096
• fetch: improve performance of isValidHeaderValue by @Uzlopak in https://github.com/nodejs/undici/pull/3098
• chore: automate releases with pr by @mweberxyz in https://github.com/nodejs/undici/pull/3089

New Contributors

• @github-actions made their first contribution in https://github.com/nodejs/undici/pull/3099

Full Changelog: https://github.com/nodejs/undici/compare/v6.12.0...v6.13.0

What's Changed

• fix: broken test by @tsctx in https://github.com/nodejs/undici/pull/3045
• fix: http2 header parsing by @climba03003 in https://github.com/nodejs/undici/pull/3047
• types: fix Request.refererPolicy and RequestInit.refererPolicy are incompatible by @zbinlin in https://github.com/nodejs/undici/pull/3039
• fix(types): onHeaders always takes headers as an array of buffer by @ronag in https://github.com/nodejs/undici/pull/3050
• fix: ProxyAgent causes request.headers.host to be forcibly reset by @1zilc in https://github.com/nodejs/undici/pull/3026
• fallback to Buffer.isUtf8 on platforms without icu by @KhafraDev in https://github.com/nodejs/undici/pull/3006
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.9 by @dependabot in https://github.com/nodejs/undici/pull/3037
• build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.5 by @dependabot in https://github.com/nodejs/undici/pull/3035
• build(deps): bump node from 577f8eb to 87524df in /build by @dependabot in https://github.com/nodejs/undici/pull/3055
• build(deps): bump node from 87524df to 9696b26 in /build by @dependabot in https://github.com/nodejs/undici/pull/3058
• fetch: Block ports 4190 & 6679 by @KhafraDev in https://github.com/nodejs/undici/pull/3059
• test: activate testing for interceptors and cache by @Uzlopak in https://github.com/nodejs/undici/pull/3061
• cache: improve test coverage by @Uzlopak in https://github.com/nodejs/undici/pull/3063
• feat: modernize fuzzing by @Uzlopak in https://github.com/nodejs/undici/pull/3060
• fix: request abort by @ronag in https://github.com/nodejs/undici/pull/3056
• fix: signal handling by @ronag in https://github.com/nodejs/undici/pull/3053
• fix(H2): handle goaway properly by @metcoder95 in https://github.com/nodejs/undici/pull/3057
• test: client, set body to null if bigger than CHUNK_LIMIT by @Uzlopak in https://github.com/nodejs/undici/pull/3064
• mock: improve mock interceptor by @Uzlopak in https://github.com/nodejs/undici/pull/3062
• fix: bad client destroy on servername change by @ronag in https://github.com/nodejs/undici/pull/3066
• perf: improve isBlobLike by @Uzlopak in https://github.com/nodejs/undici/pull/3070
• test: add sanity check for llhttp wasm files by @Uzlopak in https://github.com/nodejs/undici/pull/3068

New Contributors

• @zbinlin made their first contribution in https://github.com/nodejs/undici/pull/3039
• @1zilc made their first contribution in https://github.com/nodejs/undici/pull/3026

Full Changelog: https://github.com/nodejs/undici/compare/v6.11.1...v6.12.0

:warning: Security Release ⚠️

What's Changed

• Fixes https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 CVE-2024-30260
• Fixes https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 CVE-2024-30261
• Revert "fix: don't leak internal class (#3024)" by @mcollina in https://github.com/nodejs/undici/pull/3044

Full Changelog: https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1

What's Changed

• refactor(#3023): Pass headers as array instead by @metcoder95 in https://github.com/nodejs/undici/pull/3025
• fix: don't leak internal class by @ronag in https://github.com/nodejs/undici/pull/3024
• build(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 by @dependabot in https://github.com/nodejs/undici/pull/3034
• build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by @dependabot in https://github.com/nodejs/undici/pull/3038
• build(deps-dev): bump borp from 0.9.1 to 0.10.0 by @dependabot in https://github.com/nodejs/undici/pull/2947
• missing commits by @ronag in https://github.com/nodejs/undici/pull/3040
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in https://github.com/nodejs/undici/pull/3036
• fix: regexp pattern by @tsctx in https://github.com/nodejs/undici/pull/3041

Full Changelog: https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0

What's Changed

• Do not fail test if streams support typed arrays by @mcollina in https://github.com/nodejs/undici/pull/2978
• fix(fetch): properly redirect non-ascii location header url by @Xvezda in https://github.com/nodejs/undici/pull/2971
• perf: Remove double-stringify in setCookie by @peterver in https://github.com/nodejs/undici/pull/2980
• [fix #2982] use DispatcherInterceptor type for Dispatcher#Compose by @clovis-guillemot in https://github.com/nodejs/undici/pull/2983
• fix: make EventSource properties enumerable by @MattBidewell in https://github.com/nodejs/undici/pull/2987
• docs: ✏️ fixed benchmark links by @benhalverson in https://github.com/nodejs/undici/pull/2991
• fix(#2986): bad start check by @metcoder95 in https://github.com/nodejs/undici/pull/2992
• fix(H2 Client): bind stream 'data' listener only after received 'response' event by @St3ffGv4 in https://github.com/nodejs/undici/pull/2985
• feat: added search input by @benhalverson in https://github.com/nodejs/undici/pull/2993
• chore: validate responses can be consumed without a Content-Length or… by @jacob-ebey in https://github.com/nodejs/undici/pull/2995
• fix error message by @KhafraDev in https://github.com/nodejs/undici/pull/2998
• Revert "perf: reuse TextDecoder instance (#2863)" by @panva in https://github.com/nodejs/undici/pull/2999
• test: remove only by @metcoder95 in https://github.com/nodejs/undici/pull/3001

New Contributors

• @Xvezda made their first contribution in https://github.com/nodejs/undici/pull/2971
• @peterver made their first contribution in https://github.com/nodejs/undici/pull/2980
• @clovis-guillemot made their first contribution in https://github.com/nodejs/undici/pull/2983
• @MattBidewell made their first contribution in https://github.com/nodejs/undici/pull/2987
• @benhalverson made their first contribution in https://github.com/nodejs/undici/pull/2991
• @St3ffGv4 made their first contribution in https://github.com/nodejs/undici/pull/2985
• @jacob-ebey made their first contribution in https://github.com/nodejs/undici/pull/2995

Full Changelog: https://github.com/nodejs/undici/compare/v6.10.0...v6.10.2

Full Changelog: https://github.com/nodejs/undici/compare/v6.10.0...v6.10.1