@depup/serverless 4.33.0-depup.0 → 4.33.1-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/serverless
 
 | Field | Value |
 |-------|-------|
-| Original | [serverless](https://www.npmjs.com/package/serverless) @ 4.33.0 |
-| Processed | 2026-03-17 |
+| Original | [serverless](https://www.npmjs.com/package/serverless) @ 4.33.1 |
+| Processed | 2026-03-31 |
 | Smoke test | failed |
 | Deps updated | 2 |
 
@@ -22,8 +22,8 @@ npm install @depup/serverless
 
 | Dependency | From | To |
 |------------|------|-----|
-| axios | ^1.13.5 | ^1.13.6 |
-| rimraf | ^5.0.10 | ^6.1.3 |
+| rimraf | 5.0.10 | ^6.1.3 |
+| undici | 6.24.1 | ^7.24.6 |
 
 ---
 

package/binary.js

@@ -1,8 +1,7 @@
 const os = require('os')
-const { configureProxy } = require('axios-proxy-builder')
-const axios = require('axios')
+const { ProxyAgent } = require('undici')
 
-const { existsSync, mkdirSync, rmSync, createWriteStream } = require('fs')
+const { existsSync, mkdirSync, rmSync, writeFileSync } = require('fs')
 const { join } = require('path')
 const { spawnSync } = require('child_process')
 
@@ -13,6 +12,55 @@ const error = (msg) => {
   process.exit(1)
 }
 
+const formatHostName = (hostname) => hostname.replace(/^\.*/, '.').toLowerCase()
+
+const parseNoProxyZone = (zone) => {
+  zone = zone.trim()
+  const zoneParts = zone.split(':', 2)
+  const zoneHost = formatHostName(zoneParts[0])
+  const zonePort = zoneParts[1]
+  const hasPort = zone.indexOf(':') > -1
+  return { hostname: zoneHost, port: zonePort, hasPort }
+}
+
+const shouldBypassProxy = (requestURL) => {
+  const noProxy = process.env.NO_PROXY || process.env.no_proxy || ''
+  if (noProxy === '*') return true
+  if (noProxy === '') return false
+
+  const port =
+    requestURL.port || (requestURL.protocol === 'https:' ? '443' : '80')
+  const hostname = formatHostName(requestURL.hostname)
+
+  return noProxy
+    .split(',')
+    .map(parseNoProxyZone)
+    .some((noProxyZone) => {
+      const isMatchedAt = hostname.indexOf(noProxyZone.hostname)
+      const hostnameMatched =
+        isMatchedAt > -1 &&
+        isMatchedAt === hostname.length - noProxyZone.hostname.length
+      if (noProxyZone.hasPort) {
+        return port === noProxyZone.port && hostnameMatched
+      }
+      return hostnameMatched
+    })
+}
+
+const getProxyUrl = (url) => {
+  const requestURL = new URL(url)
+
+  if (shouldBypassProxy(requestURL)) return null
+
+  if (requestURL.protocol === 'http:') {
+    return process.env.HTTP_PROXY || process.env.http_proxy || null
+  }
+  if (requestURL.protocol === 'https:') {
+    return process.env.HTTPS_PROXY || process.env.https_proxy || null
+  }
+  return null
+}
+
 class Binary {
   constructor(name, url, version, config) {
     const errors = []
@@ -87,7 +135,7 @@ class Binary {
     }
   }
 
-  install(fetchOptions, suppressLogs = false) {
+  install(suppressLogs = false) {
     if (this.exists()) {
       if (!suppressLogs) {
         console.error(
@@ -117,19 +165,20 @@ class Binary {
       this.removeBinary()
     })
 
-    return axios({ ...fetchOptions, url: this.url, responseType: 'stream' })
+    const proxyUrl = getProxyUrl(this.url)
+    const fetchOptions = proxyUrl
+      ? { dispatcher: new ProxyAgent(proxyUrl) }
+      : {}
+
+    return fetch(this.url, fetchOptions)
       .then((res) => {
-        return new Promise((resolve, reject) => {
-          const writeStream = createWriteStream(this.binaryPath, {
-            mode: 0o755,
-          })
-          res.data.pipe(writeStream)
-          writeStream.on('error', (err) => {
-            writeStream.close()
-            reject(err)
-          })
-          writeStream.on('close', () => resolve())
-        })
+        if (!res.ok) {
+          throw new Error(`HTTP ${res.status}: ${res.statusText}`)
+        }
+        return res.arrayBuffer()
+      })
+      .then((buffer) => {
+        writeFileSync(this.binaryPath, Buffer.from(buffer), { mode: 0o755 })
       })
       .then(() => {
         if (!suppressLogs) {
@@ -142,10 +191,8 @@ class Binary {
       })
   }
 
-  run(fetchOptions) {
-    const promise = !this.exists()
-      ? this.install(fetchOptions, true)
-      : Promise.resolve()
+  run() {
+    const promise = !this.exists() ? this.install(true) : Promise.resolve()
 
     promise
       .then(() => {
@@ -213,10 +260,7 @@ const getBinary = () => {
 
 const install = async () => {
   const binary = getBinary()
-
-  const proxy = configureProxy(binary.url)
-
-  return binary.install(proxy, true) // Suppresses logs from binary-install
+  return binary.install(true) // Suppresses logs from binary-install
 }
 
 const run = async () => {

package/changes.json

@@ -1,14 +1,14 @@
 {
   "bumped": {
-    "axios": {
-      "from": "^1.13.5",
-      "to": "^1.13.6"
-    },
     "rimraf": {
-      "from": "^5.0.10",
+      "from": "5.0.10",
       "to": "^6.1.3"
+    },
+    "undici": {
+      "from": "6.24.1",
+      "to": "^7.24.6"
     }
   },
-  "timestamp": "2026-03-17T18:44:29.233Z",
+  "timestamp": "2026-03-31T20:18:59.027Z",
   "totalUpdated": 2
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@depup/serverless",
-  "version": "4.33.0-depup.0",
-  "description": "[DepUp] Dependency-bumped version of serverless",
+  "version": "4.33.1-depup.0",
+  "description": "serverless with all dependencies updated to latest",
   "main": "index.js",
   "scripts": {
     "lint": "eslint",
@@ -10,10 +10,12 @@
     "prettier:fix": "prettier -w . --ignore-path ../../.prettierignore"
   },
   "keywords": [
+    "serverless",
     "depup",
-    "dependency-bumped",
-    "updated-deps",
-    "serverless"
+    "updated-dependencies",
+    "security",
+    "latest",
+    "patched"
   ],
   "author": "Serverless Inc.",
   "repository": {
@@ -25,30 +27,28 @@
     "sls": "run.js"
   },
   "dependencies": {
-    "axios": "^1.13.6",
-    "axios-proxy-builder": "^0.1.2",
     "rimraf": "^6.1.3",
-    "xml2js": "0.6.2"
+    "undici": "^7.24.6"
   },
   "devDependencies": {},
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=18.17.0"
   },
   "depup": {
     "changes": {
-      "axios": {
-        "from": "^1.13.5",
-        "to": "^1.13.6"
-      },
       "rimraf": {
-        "from": "^5.0.10",
+        "from": "5.0.10",
         "to": "^6.1.3"
+      },
+      "undici": {
+        "from": "6.24.1",
+        "to": "^7.24.6"
       }
     },
     "depsUpdated": 2,
     "originalPackage": "serverless",
-    "originalVersion": "4.33.0",
-    "processedAt": "2026-03-17T18:44:30.856Z",
+    "originalVersion": "4.33.1",
+    "processedAt": "2026-03-31T20:19:00.348Z",
     "smokeTest": "failed"
   }
 }