@vercel/build-utils 13.33.0 → 13.33.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @vercel/build-utils
 
+## 13.33.1
+
+### Patch Changes
+
+- def07fc: Migrate `@vercel/client` and `@vercel/build-utils` from `node-fetch` to native `fetch`. This removes the last `url.parse()` usage from the CLI bundle, which triggered a `DEP0169` DeprecationWarning on Node 24 (visible in the standalone binary during `vercel deploy`).
+
+  BREAKING CHANGE (`@vercel/client`): the `agent?: http.Agent` option was replaced with `dispatcher?: FetchDispatcher` (an undici dispatcher, e.g. `undici.ProxyAgent`), since native `fetch` does not support Node.js HTTP agents. The CLI now threads its proxy-aware dispatcher through automatically, so `HTTP_PROXY`/`HTTPS_PROXY` behavior is unchanged for CLI users.
+
 ## 13.33.0
 
 ### Minor Changes

package/dist/file-ref.js

@@ -32,7 +32,7 @@ __export(file_ref_exports, {
 });
 module.exports = __toCommonJS(file_ref_exports);
 var import_assert = __toESM(require("assert"));
-var import_node_fetch = __toESM(require("node-fetch"));
+var import_stream = require("stream");
 var import_multistream = __toESM(require("multistream"));
 var import_async_retry = __toESM(require("async-retry"));
 var import_async_sema = __toESM(require("async-sema"));
@@ -97,16 +97,18 @@ class FileRef {
     try {
       return await (0, import_async_retry.default)(
         async () => {
-          const resp = await (0, import_node_fetch.default)(url);
-          if (!resp.ok) {
+          const resp = await fetch(url);
+          if (!resp.ok || !resp.body) {
             const error = new BailableError(
               `download: ${resp.status} ${resp.statusText} for ${url}`
             );
             if (resp.status === 403)
               error.bail = true;
+            await resp.body?.cancel().catch(() => {
+            });
             throw error;
           }
-          return resp.body;
+          return import_stream.Readable.fromWeb(resp.body);
         },
         { factor: 1, retries: 3 }
       );