From a5bc9f5fd2e051f35267dab3ac4b941f8a3886ae Mon Sep 17 00:00:00 2001
From: DysektAI <33468668+DysektAI@users.noreply.github.com>
Date: Fri, 23 Oct 2026 22:14:23 -0400
Subject: [PATCH] fix(deps): pin undici content-encoding and EventSource patch

Pins the discord.js transitive undici to exactly 6.29.1, addressing GHSA-xjj6-f33q-929c (high) and GHSA-4qv8-2p9j-2685 (moderate).

Claude-Session: https://claude.ai/code/session_01NrbT7UzDQzESHKsvnJAgps
---
 package-lock.json | 6 +++---
 package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0118c0f..0cf8bc9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1522,9 +1522,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "6.28.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.28.1.tgz",
-      "integrity": "sha512-zWpdTVD54H48CIybL0rWQ3ukpb9d23wM7eH5RtfdmeP70cWHNjtfo7P4vZX+5CoDcO53J4Pu5uXp7lNfjc6DRA==",
+      "version": "6.29.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.29.1.tgz",
+      "integrity": "sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==",
       "license": "MIT",
       "engines": {
         "node": ">=18.17"
diff --git a/package.json b/package.json
index d54ba6b..d36a93d 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "express-rate-limit": "^8.5.2"
   },
   "overrides": {
-    "undici": "^6.28.0",
+    "undici": "6.29.1",
     "ws": "^8.21.0",
     "shell-quote": "1.12.0"
   },