Signed-off-by: Ram-blip <[email protected]>

Bumps [ws](https://github.com/websockets/ws) from 8.21.0 to 8.21.1.
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@8.21.0...8.21.1)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 8.21.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Functions bypassed the object guard in processHeader() and were
coerced via template literals without isValidHeaderValue(), allowing
CRLF injection when toString/Symbol.toPrimitive returned embedded
newlines. Validate after coercion on both scalar and array paths.

Signed-off-by: Matteo Collina <[email protected]>

* fix: handle frozen globalThis in setGlobalDispatcher

When Object.freeze(globalThis) is called before undici globals are accessed,
setGlobalDispatcher would throw TypeError because it cannot extend globalThis.

This fix wraps the Object.defineProperty calls in try/catch. When globalThis
is not extensible (frozen), the dispatcher is stored in a module-level
fallback variable instead. getGlobalDispatcher is updated to return the
fallback dispatcher when the globalThis property is not available.

This allows undici to work correctly even when globalThis has been frozen,
which is recommended by Node.js security best practices (CWE-349).

Fixes issue where Object.freeze(globalThis) breaks undici access.

* test: add unit test for frozen globalThis in setGlobalDispatcher

Add comprehensive test coverage for the frozen globalThis fix. Tests verify:
1. setGlobalDispatcher does not throw when globalThis is frozen
2. getGlobalDispatcher continues to return a valid dispatcher
3. The fallback mechanism works correctly when globalThis is not extensible

This addresses the review feedback from mcollina requesting tests.

* test: improve frozen globalThis test coverage

Add comprehensive test cases to ensure all code paths in the frozen globalThis
fix are exercised. Tests verify:
1. setGlobalDispatcher does not throw when globalThis is frozen
2. getGlobalDispatcher returns a valid dispatcher
3. Fallback dispatcher persists across multiple calls

This addresses review feedback requesting tests.

Signed-off-by: Matteo Collina <[email protected]>

Signed-off-by: Matteo Collina <[email protected]>

…rectives

Ref: GHSA-4cwx-7wf7-3272
Signed-off-by: Matteo Collina <[email protected]>

Signed-off-by: Matteo Collina <[email protected]>

Signed-off-by: Ulises Gascon <[email protected]>

Signed-off-by: Matteo Collina <[email protected]>

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>