fix: update undici to 8.10.0 to resolve CVE-2026-13697 and 4 related CVEs

[independabot-soc2]

Hi, this is independabot — not Lili! You can ask her if you have questions, but she had no hand in generating this PR other than setting up the independabot schedule.

Please merge this PR yourself, if you approve.

BEFORE YOU MERGE

Instructions for resolving the vuln — test to make sure that nothing is broken, check compatibility, etc.

undici is a transitive runtime dependency (@actions/http-client@4.0.1 → undici). The repo already pinned it via an overrides entry, but the floor (>=6.27.0) resolved to the vulnerable 8.5.0. Dependabot could not fix this itself (update_not_possible). Raised the override floor to >=8.9.0; the lock now resolves undici@8.10.0. dist/index.js + sourcemap were regenerated via npm run package, as required by AGENTS.md.

• Dependency: undici 8.5.0 → 8.10.0 (via overrides.undici >=6.27.0 → >=8.9.0)
• Advisories (all patched in 8.9.0):
  • GHSA-4cwx-7wf7-3272 / CVE-2026-13697 (high, 7.4) — cross-user info disclosure + parse-time crash via degenerate private cache directives
  • GHSA-jr45-8vmc-qm54 / CVE-2026-14643 (moderate, 5.9) — cross-user info disclosure via whitespace around = in Cache-Control
  • GHSA-8xcm-r25x-g524 / CVE-2026-16728 (moderate, 4.8) — downstream response desync via retry interceptor
  • GHSA-v3r7-h72x-cjcm / CVE-2026-16729 (moderate, 4.8) — cookie attribute injection
  • GHSA-m8rv-5g2x-5cg5 / CVE-2026-15157 (moderate, 4.2) — CRLF injection via blob-like body type
• Dependabot alerts:
  • https://github.com/warpdotdev/oz-agent-action/security/dependabot/36
  • https://github.com/warpdotdev/oz-agent-action/security/dependabot/38
  • https://github.com/warpdotdev/oz-agent-action/security/dependabot/39
  • https://github.com/warpdotdev/oz-agent-action/security/dependabot/40
  • https://github.com/warpdotdev/oz-agent-action/security/dependabot/41
• Verification:
  • npm audit — no remaining undici finding (npm ls undici → undici@8.10.0)
  • npm run package — bundle rebuilt successfully
  • npm run lint — clean
  • npm run format:check — clean
  • npm test (vitest) — 27/27 passing

Highlight the risky code / where the dependency was used

undici is never imported directly by this repo. It only reaches us through @actions/http-client, which is used by src/index.ts for the Oz API calls, and by @actions/tool-cache for downloading the oz package. Both paths are exercised by plain HTTP GET/POST, so the cache/cookie/retry-interceptor behavior changes in 8.9.0/8.10.0 are unlikely to affect us — but the download-and-install path is the thing worth smoke-testing.

Note that undici@8.x requires node >= 22.19.0; this action targets node24 and .node-version is 24.4.0, so this is unchanged from the pre-existing 8.5.0 resolution.

Special instructions for this PR

• dist/index.js and dist/index.js.map are checked-in build artifacts, so the diff is large. They were produced solely by npm run package on top of the dependency bump — no hand edits.
• Worth a quick e2e sanity run (.github/workflows/test_e2e.yaml) to confirm the oz install + agent run path still works with the rebuilt bundle.
• npm audit still reports unrelated ajv, brace-expansion, and yaml findings. Those have no open Dependabot alerts and are intentionally left out of scope here.

AFTER YOU MERGE

No post-merge steps.

---

Conversation: https://staging.warp.dev/conversation/d2bfa0fb-0e2b-4ff5-906d-5a97e4439614
Run: https://oz.staging.warp.dev/runs/019fd203-b4c4-726c-a82f-9308f3ae9a66

This PR was generated with Oz.