[United Nations] Resolves CVE-2026-25128

[LitoMore]

Description

• Resolve CVE-2026-25128
• Bump all dependencies to the latest

Checklist

• I read the extension guidelines
• I read the documentation about publishing
• I ran npm run build and tested this distribution build in Raycast
• I checked that files in the assets folder are used by the extension itself
• I checked that assets used in the README are located outside the metadata folder if they were not generated with our metadata tool

[raycastbot]

Thank you for the update! 🎉

We're currently experiencing a high volume of incoming requests. As a result, the initial review may take up to 10-15 business days.

[greptile-apps]

Greptile Overview

Greptile Summary

This PR updates all dependencies in the United Nations extension to their latest versions, primarily to address CVE-2026-25128. The key security update is undici from 7.14.0 to 7.19.2, along with updates to @raycast/api, cheerio, fast-xml-parser, got, prettier, and various type definitions.

Key changes:

• Updated undici from 7.14.0 to 7.19.2 (likely the CVE fix)
• Updated cheerio from 1.1.2 to 1.2.0
• Updated @raycast/api from 1.103.6 to 1.104.3
• Updated prettier from 3.6.2 to 3.8.1
• CHANGELOG follows proper format with {PR_MERGE_DATE} placeholder

Note: The CVE identifier CVE-2026-25128 references year 2026, which should be verified as this year hasn't occurred yet. This may be a typo or placeholder that needs correction.

Confidence Score: 4/5

• This PR is safe to merge pending verification of the CVE identifier
• The dependency updates are straightforward and follow standard security patching practices. CHANGELOG format is correct. Only concern is the unusual CVE-2026-25128 identifier that references a future year, which should be verified before merging.
• CHANGELOG.md requires verification of the CVE identifier

Important Files Changed

Filename	Overview
extensions/united-nations/CHANGELOG.md	Added new maintenance entry with correct format and placeholder date
extensions/united-nations/package.json	Updated all dependencies to latest versions including security patches
extensions/united-nations/package-lock.json	Lockfile updated with dependency version bumps, notably undici 7.14.0→7.19.2 for CVE fix

[greptile-apps]

_{3 files reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

[0xdhrv]

Looks good to me, approved 🔥

[github-actions]

Published to the Raycast Store:
https://raycast.com/litomore/united-nations

[raycastbot]

🎉 🎉 🎉

We've rewarded your Raycast account with some credits. You will soon be able to exchange them for some swag.