[Snyk] Security upgrade undici from 6.24.0 to 6.28.1

[sestinj]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• extensions/vscode/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncaught Exception SNYK-JS-UNDICI-19635210	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncaught Exception

[sestinj]

This is a minor version upgrade for undici that primarily includes security fixes and protocol hardening. While there are no API removals, the changes introduce stricter validation that could impact existing code.

Key Changes:

• Stricter Header Validation: The library now performs stricter validation on header values to prevent potential CRLF injection vulnerabilities. Requests with malformed header values that were previously accepted may now be rejected.
• Interceptor Fixes: The retry interceptor now correctly handles Content-Length to prevent potential response desynchronization.

Potential Impact:
Applications that inadvertently send invalid headers or rely on the previous, more lenient parsing behavior may experience new errors after this upgrade. This is a behavioral change that requires verification.

Recommendation:
Review and test any code that generates or forwards HTTP headers to ensure compliance with standard formats. Pay close attention to retry logic if you use custom interceptors.

Source: GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.