From 905acacc1628e0f68bdfd65214cc50388dbe0e96 Mon Sep 17 00:00:00 2001
From: Alessandro Bollini <alessandro.bollini@metreeca.com>
Date: Mon, 2 Nov 2026 18:53:46 +0100
Subject: [PATCH] task: upgrade undici to 8.12.3

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md      | 4 ++++
 package-lock.json | 8 ++++----
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c3881a02..ba2e56ff 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased](https://github.com/metreeca/keep/compare/v0.12.2...HEAD)
 
+### Security
+
+- Upgrade `undici` to `8.12.3` (GHSA-xjj6-f33q-929c, GHSA-2m5v-pch6-74hx, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm): development dependency, no consumer impact
+
 ## [0.12.2](https://github.com/metreeca/keep/compare/v0.12.1...v0.12.2) - 2026-10-22
 
 ### Fixed
diff --git a/package-lock.json b/package-lock.json
index e0660714..3218d507 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,5 +1,5 @@
 {
-  "name": "Keep",
+  "name": "keep",
   "version": "0.12.2",
   "lockfileVersion": 3,
   "requires": true,
@@ -5594,9 +5594,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "8.10.2",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.10.2.tgz",
-      "integrity": "sha512-/y4/bH9YNU5hi9NIrpOuvGXFcxrj3CMrV+/AYpowAYTpHn8gX/XPFjNy766FPoYY0miQhdW977JFWKGNhBdwyQ==",
+      "version": "8.12.3",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.12.3.tgz",
+      "integrity": "sha512-+fdndUTwBP86cVjihTp21hZHo7d6oj1c/47XPA3lL8mM0XHs+C4EkcjmgRsFnFk2f/UONGDy9ItBItmXsLOQHw==",
       "dev": true,
       "license": "MIT",
       "engines": {