From 7e689e075419324088e7775a8ebc32767eecf875 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 10 Feb 2026 20:49:57 +0000
Subject: [PATCH] Bump undici and @actions/http-client

Bumps [undici](https://github.com/nodejs/undici) and [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client). These dependencies needed to be updated together.

Updates `undici` from 5.29.0 to 6.23.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.29.0...v6.23.0)

Updates `@actions/http-client` from 3.0.1 to 3.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.23.0
  dependency-type: indirect
- dependency-name: "@actions/http-client"
  dependency-version: 3.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 49 +++++++++++++++--------------------------------
 1 file changed, 15 insertions(+), 34 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index db2b586..40d7467 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -42,12 +42,12 @@
          }
       },
       "node_modules/@actions/http-client": {
-         "version": "3.0.1",
-         "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.1.tgz",
-         "integrity": "sha512-SbGS8c/vySbNO3kjFgSW77n83C4MQx/Yoe+b1hAdpuvfHxnkHzDq2pWljUpAA56Si1Gae/7zjeZsV0CYjmLo/w==",
+         "version": "3.0.2",
+         "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
+         "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
          "dependencies": {
             "tunnel": "^0.0.6",
-            "undici": "^5.28.5"
+            "undici": "^6.23.0"
          }
       },
       "node_modules/@actions/io": {
@@ -577,14 +577,6 @@
             "tslib": "^2.4.0"
          }
       },
-      "node_modules/@fastify/busboy": {
-         "version": "2.1.1",
-         "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
-         "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
-         "engines": {
-            "node": ">=14"
-         }
-      },
       "node_modules/@isaacs/cliui": {
          "version": "8.0.2",
          "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -4100,14 +4092,11 @@
          }
       },
       "node_modules/undici": {
-         "version": "5.29.0",
-         "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
-         "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
-         "dependencies": {
-            "@fastify/busboy": "^2.0.0"
-         },
+         "version": "6.23.0",
+         "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
+         "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g==",
          "engines": {
-            "node": ">=14.0"
+            "node": ">=18.17"
          }
       },
       "node_modules/undici-types": {
@@ -4463,12 +4452,12 @@
          }
       },
       "@actions/http-client": {
-         "version": "3.0.1",
-         "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.1.tgz",
-         "integrity": "sha512-SbGS8c/vySbNO3kjFgSW77n83C4MQx/Yoe+b1hAdpuvfHxnkHzDq2pWljUpAA56Si1Gae/7zjeZsV0CYjmLo/w==",
+         "version": "3.0.2",
+         "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-3.0.2.tgz",
+         "integrity": "sha512-JP38FYYpyqvUsz+Igqlc/JG6YO9PaKuvqjM3iGvaLqFnJ7TFmcLyy2IDrY0bI0qCQug8E9K+elv5ZNfw62ZJzA==",
          "requires": {
             "tunnel": "^0.0.6",
-            "undici": "^5.28.5"
+            "undici": "^6.23.0"
          }
       },
       "@actions/io": {
@@ -4854,11 +4843,6 @@
             "tslib": "^2.4.0"
          }
       },
-      "@fastify/busboy": {
-         "version": "2.1.1",
-         "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
-         "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA=="
-      },
       "@isaacs/cliui": {
          "version": "8.0.2",
          "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
@@ -7383,12 +7367,9 @@
          "optional": true
       },
       "undici": {
-         "version": "5.29.0",
-         "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
-         "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
-         "requires": {
-            "@fastify/busboy": "^2.0.0"
-         }
+         "version": "6.23.0",
+         "resolved": "https://registry.npmjs.org/undici/-/undici-6.23.0.tgz",
+         "integrity": "sha512-VfQPToRA5FZs/qJxLIinmU59u0r7LXqoJkCzinq3ckNJp3vKEh7jTWN589YQ5+aoAC/TGRLyJLCPKcLQbM8r9g=="
       },
       "undici-types": {
          "version": "7.16.0",