#4243: fix: resolve Node.js punycode deprecation warning
Cluster:
OpenClaw Plugin Enhancements
## Summary
Fixes #4184
Resolves the Node.js punycode deprecation warning that appears in gateway logs.
<!-- greptile_comment -->
<h2>Greptile Overview</h2>
<h3>Greptile Summary</h3>
This PR updates dependency resolution to eliminate the Node.js `punycode` deprecation warning seen in gateway logs by overriding `whatwg-url` to `7.1.0` (which uses the userland `punycode.js` implementation). It records the change in `CHANGELOG.md` and updates `pnpm-lock.yaml` accordingly (notably bumping `whatwg-url` and its transitive deps `tr46` and `webidl-conversions`).
<h3>Confidence Score: 4/5</h3>
- This PR is likely safe to merge; it’s a targeted dependency override with limited blast radius, but it changes URL parsing-related transitive deps so it warrants a quick smoke test in the gateway runtime.
- Changes are confined to dependency metadata (package.json overrides + lockfile) and a changelog entry, with no application code modifications. The main risk is subtle behavior differences from the `whatwg-url`/`tr46`/`webidl-conversions` upgrades in codepaths that construct/parse URLs (e.g., node-fetch consumers).
- package.json (overrides), pnpm-lock.yaml (transitive dependency upgrades)
<!-- greptile_other_comments_section -->
<sub>(4/5) You can add custom instructions or style guidelines for the agent [here](https://app.greptile.com/review/github)!</sub>
**Context used:**
- Context from `dashboard` - CLAUDE.md ([source](https://app.greptile.com/review/custom-context?memory=fd949e91-5c3a-4ab5-90a1-cbe184fd6ce8))
- Context from `dashboard` - AGENTS.md ([source](https://app.greptile.com/review/custom-context?memory=0d0c8278-ef8e-4d6c-ab21-f5527e322f13))
<!-- /greptile_comment -->
Most Similar PRs
#8988: fix: resolve security vulnerabilities in dependencies
by fotorpics · 2026-02-04
79.6%
#6352: fix(ux): update gateway token error message UI location
by Glucksberg · 2026-02-01
78.2%
#19619: fix(deps): bump fast-xml-parser override to 5.3.6 to fix DoS vulnerab…
by Ilannuko · 2026-02-18
78.0%
#21000: fix: resolve option collision between browser and cookies set commands
by MisterGuy420 · 2026-02-19
77.7%
#6064: fix(daemon): prefer bundled node from install-cli.sh over system node
by joyshmitz · 2026-02-01
76.9%
#4445: fix: resolve Antigravity "unsupported version" and tool_use schema ...
by harry2690 · 2026-01-30
76.9%
#15852: fix: pass agentId when resolving IRC session paths
by MisterGuy420 · 2026-02-14
76.8%
#11101: fix: handle AbortError and WebSocket 1006 in unhandled rejection ha...
by Nipurn123 · 2026-02-07
76.7%
#3973: fix: enhance npm package integrity checks and include critical files
by YeSuX · 2026-01-29
76.6%
#6039: fix: improve type safety in gateway registration
by Bharadwajreddy1406 · 2026-02-01
76.5%