NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #1533 most downloaded on npm
An HTTP/1.1 client, written from scratch for Node.js
Last release 5 days ago
25 Sep 2026
Ships fairly regularly
a new release about every 2 weeks
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
8 years old
309 releases · first in 2018
test: fix flakyness of issue-803 test by @Uzlopak in https://github.com/nodejs/undici/pull/2960
4999fa1 to 577f8eb in /build by @dependabot in https://github.com/nodejs/undici/pull/2974Full Changelog: https://github.com/nodejs/undici/compare/v6.9.0...v6.10.0
feat: add new dispatch compose by @metcoder95 in https://github.com/nodejs/undici/pull/2826
Full Changelog: https://github.com/nodejs/undici/compare/v6.8.0...v6.9.0
One column per quarter.
fix: send correct SNI for proxy connections by @chrros95 in https://github.com/nodejs/undici/pull/2939
8bf9240 to 7bfef1d in /build by @dependabot in https://github.com/nodejs/undici/pull/29377bfef1d to 4999fa1 in /build by @dependabot in https://github.com/nodejs/undici/pull/2946Full Changelog: https://github.com/nodejs/undici/compare/v6.7.1...v6.8.0
fetch: use EOL of os-module by @Uzlopak in https://github.com/nodejs/undici/pull/2915
d3271e4 to 8bf9240 in /build by @dependabot in https://github.com/nodejs/undici/pull/2936Full Changelog: https://github.com/nodejs/undici/compare/v6.7.0...v6.7.1
doc deprecate bodymixin.formData by @KhafraDev in https://github.com/nodejs/undici/pull/2892
s/ dispactgher/dispatcher/ by @steveluscher in https://github.com/nodejs/undici/pull/2807fetch is aborted with null as the AbortSignal's reason by @steveluscher in https://github.com/nodejs/undici/pull/2833Full Changelog: https://github.com/nodejs/undici/compare/v6.6.2...v6.7.0
fix: webidl.brandcheck non strict should throw by @Uzlopak in https://github.com/nodejs/undici/pull/2683
Full Changelog: https://github.com/nodejs/undici/compare/v6.6.1...v6.6.2
CVE-2024-24750, Backpressure request ignored in fetch()
Fixes:
Full Changelog: https://github.com/nodejs/undici/compare/v6.6.0...v6.6.1
add webSocket example by @mertcanaltin in https://github.com/nodejs/undici/pull/2626
Full Changelog: https://github.com/nodejs/undici/compare/v6.5.0...v6.6.0
build(deps-dev): bump jsdom from 23.2.0 to 24.0.0 by @dependabot in https://github.com/nodejs/undici/pull/2632
Full Changelog: https://github.com/nodejs/undici/compare/v6.4.0...v6.5.0
refactor: version cleanup by @tsctx in https://github.com/nodejs/undici/pull/2605
balanced-pool, ca-fingerprint, client-abort tests to node:test by @sosukesuzuki in https://github.com/nodejs/undici/pull/2584client-connect, client-dispatch, client-errors test to node:test by @sosukesuzuki in https://github.com/nodejs/undici/pull/2591Full Changelog: https://github.com/nodejs/undici/compare/v6.3.0...v6.4.0
Clear all timeout on destroy and close by @mcollina in https://github.com/nodejs/undici/pull/2535
@matteo.collina/tspl to 0.1.1 by @sosukesuzuki in https://github.com/nodejs/undici/pull/2576abort-controller.js tests to node:test runner by @sosukesuzuki in https://github.com/nodejs/undici/pull/2564async_hooks.js tests to node:test runner by @sosukesuzuki in https://github.com/nodejs/undici/pull/2568agent.js tests to node:test runner by @sosukesuzuki in https://github.com/nodejs/undici/pull/2566abort-event-emitter.js tests to node:test runnner by @sosukesuzuki in https://github.com/nodejs/undici/pull/2565autoselectfamily.js tests to node:test runner by @sosukesuzuki in https://github.com/nodejs/undici/pull/2570NODE_DEBUG by @metcoder95 in https://github.com/nodejs/undici/pull/2585Full Changelog: https://github.com/nodejs/undici/compare/v6.2.1...v6.3.0
perf: use tree by @tsctx in https://github.com/nodejs/undici/pull/2528
Full Changelog: https://github.com/nodejs/undici/compare/v6.2.0...v6.2.1
Remove FinalizationRegistry from Agent by @mcollina in https://github.com/nodejs/undici/pull/2530
Full Changelog: https://github.com/nodejs/undici/compare/v6.1.0...v6.2.0
fix: more sensible stack trace from dump error by @ronag in https://github.com/nodejs/undici/pull/2503
dispatch by @tsctx in https://github.com/nodejs/undici/pull/2493String#toLowerCase call by @tsctx in https://github.com/nodejs/undici/pull/2516Full Changelog: https://github.com/nodejs/undici/compare/v6.0.1...v6.1.0
fix: stream error timings by @ronag in https://github.com/nodejs/undici/pull/2497
Full Changelog: https://github.com/nodejs/undici/compare/v6.0.0...v6.0.1
16 eol by @ronag in https://github.com/nodejs/undici/pull/2480
parseHeaders by @tsctx in https://github.com/nodejs/undici/pull/2492Full Changelog: https://github.com/nodejs/undici/compare/v5.28.2...v6.0.0
Fix tests in v5.x for Node 20 by @mcollina in https://github.com/nodejs/undici/pull/4104
Full Changelog: https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0
Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).
Fixes CVE CVE-2025-22150 https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975 (embargoed until 22-01-2025).
Full Changelog: https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5
Fixes https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 CVE-2024-30260
Full Changelog: https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4
CVE-2024-24758 Proxy-Authorization header not cleared on cross-origin redirect in fetch
Fixes:
Full Changelog: https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3
fix: remove optional chainning for compatible with Nodejs12 and below by @bugb in https://github.com/nodejs/undici/pull/2470
node: prefix by @tsctx in https://github.com/nodejs/undici/pull/2471null type to signal in RequestInit by @gebsh in https://github.com/nodejs/undici/pull/2455Full Changelog: https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2
perf: Improve normalizeMethod by @tsctx in https://github.com/nodejs/undici/pull/2456
normalizeMethod by @tsctx in https://github.com/nodejs/undici/pull/2456Full Changelog: https://github.com/nodejs/undici/compare/v5.28.0...v5.28.1
fix(parseHeaders): util.parseHeaders handle correctly array of buffer… by @mdoria12 in https://github.com/nodejs/undici/pull/2398
substring instead of substr by @tsctx in https://github.com/nodejs/undici/pull/2411Headers#set correctly by @tsctx in https://github.com/nodejs/undici/pull/2432Headers#delete correctly by @tsctx in https://github.com/nodejs/undici/pull/2430onHeaders type declaration by @tsctx in https://github.com/nodejs/undici/pull/2444path matching in intercept() by @oliversalzburg in https://github.com/nodejs/undici/pull/2426Full Changelog: https://github.com/nodejs/undici/compare/v5.27.2...v5.28.0
Full Changelog: https://github.com/nodejs/undici/compare/v5.27.1...v5.27.2
Full Changelog: https://github.com/nodejs/undici/compare/v5.27.1...v5.27.2
add regression test by @KhafraDev in https://github.com/nodejs/undici/pull/2376
Full Changelog: https://github.com/nodejs/undici/compare/v5.27.0...v5.27.1
Use sets and reusable TextEncoder/TextDecoder instances by @kibertoad in https://github.com/nodejs/undici/pull/2368
Full Changelog: https://github.com/nodejs/undici/compare/v5.26.5...v5.27.0
Drop race condition in connect-timeout test by @mcollina in https://github.com/nodejs/undici/pull/2360
Full Changelog: https://github.com/nodejs/undici/compare/v5.26.4...v5.26.5
use esbuild define/hooks by @KhafraDev in https://github.com/nodejs/undici/pull/2342
Full Changelog: https://github.com/nodejs/undici/compare/v5.26.3...v5.26.4
Nothing published for this version
Security Release, CVE-2023-45143.
Security Release, CVE-2023-45143.
Fix publish undici-types once and for all! by @Ethan-Arrowood in https://github.com/nodejs/undici/pull/2338
Full Changelog: https://github.com/nodejs/undici/compare/v5.26.0...v5.26.1
use npm install instead of npm ci by @Ethan-Arrowood in https://github.com/nodejs/undici/pull/2309
node by @Ethan-Arrowood in https://github.com/nodejs/undici/pull/2310--max-http-header-size Node.js flag by @balazsorban44 in https://github.com/nodejs/undici/pull/2234Full Changelog: https://github.com/nodejs/undici/compare/v5.23.4...v5.26.0
Nothing published for this version
perf: improve parse-url implementation by @anonrig in https://github.com/nodejs/undici/pull/2286
Full Changelog: https://github.com/nodejs/undici/compare/v5.25.2...v5.25.3
Add Khaf to releasers by @mcollina in https://github.com/nodejs/undici/pull/2276
Full Changelog: https://github.com/nodejs/undici/compare/v5.25.1...v5.25.2
Add publish types script by @Ethan-Arrowood in https://github.com/nodejs/undici/pull/2273
Full Changelog: https://github.com/nodejs/undici/compare/v5.25.0...v5.25.1
fix: h2 without body by @metcoder95 in https://github.com/nodejs/undici/pull/2258
Full Changelog: https://github.com/nodejs/undici/compare/v5.24.0...v5.25.0
feat: Add H2 support by @metcoder95 in https://github.com/nodejs/undici/pull/2061
Full Changelog: https://github.com/nodejs/undici/compare/v5.23.0...v5.24.0
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
bump engines to node >= 16 by @ronag in https://github.com/nodejs/undici/pull/2119
autoselectfamily on platforms without IPv6 support by @LiviaMedeiros in https://github.com/nodejs/undici/pull/2197addAbortListener where applicable by @atlowChemi in https://github.com/nodejs/undici/pull/2195Full Changelog: https://github.com/nodejs/undici/compare/v5.22.1...v5.23.0
Cache storage by @KhafraDev in https://github.com/nodejs/undici/pull/2076
Full Changelog: https://github.com/nodejs/undici/compare/v5.22.0...v5.22.1
build(deps-dev): bump tsd from 0.27.0 to 0.28.1 by @dependabot in https://github.com/nodejs/undici/pull/2042
Full Changelog: https://github.com/nodejs/undici/compare/v5.21.2...v5.22.0
Content disposition parsing by @KhafraDev in https://github.com/nodejs/undici/pull/2051
Full Changelog: https://github.com/nodejs/undici/compare/v5.21.1...v5.21.2
Fix typo in kPipelining symbol by @andrewfecenko in https://github.com/nodejs/undici/pull/2005
undefined error cause by @aduh95 in https://github.com/nodejs/undici/pull/2006Full Changelog: https://github.com/nodejs/undici/compare/v5.21.0...v5.21.1
workflow: add scorecard.yml by @RafaelGSS in https://github.com/nodejs/undici/pull/1942
Full Changelog: https://github.com/nodejs/undici/compare/v5.20.0...v5.21.0
perf: improve cookie parsing performance by @KhafraDev in https://github.com/nodejs/undici/pull/1931
Full Changelog: https://github.com/nodejs/undici/compare/v5.19.1...v5.20.0
Regular Expression Denial of Service in Headers with CVE-2023-24807
This release is part of the Node.js security release train: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/
fix(fetch): raise AbortSignal max event listeners by @KhafraDev in https://github.com/nodejs/undici/pull/1910
Full Changelog: https://github.com/nodejs/undici/compare/v5.18.0...v5.19.0
Add ability to set TCP keepalive by @xconverge in https://github.com/nodejs/undici/pull/1904
Full Changelog: https://github.com/nodejs/undici/compare/v5.17.1...v5.18.0
## What's Changed * fix: bad buffer slice (https://github.com/nodejs/undici/commit/d2be675575512794dcd41b9683b209fc15368154) Full Changelog: https://g
Full Changelog: https://github.com/nodejs/undici/compare/v5.17.0...v5.17.1
fix(wpts): Blob is a global getter in >=v19.x.x by @KhafraDev in https://github.com/nodejs/undici/pull/1880
Full Changelog: https://github.com/nodejs/undici/compare/v5.16.0...v5.17.0
Add feature to specify custom headers for proxies by @Sebmaster in https://github.com/nodejs/undici/pull/1877
Full Changelog: https://github.com/nodejs/undici/compare/v5.15.2...v5.16.0
Nothing published for this version
fix(websocket): simplify typedarray copying by @KhafraDev in https://github.com/nodejs/undici/pull/1854
Full Changelog: https://github.com/nodejs/undici/compare/v5.15.0...v5.15.1
Your coding agent can read these notes before it upgrades. Set up the MCP server →