fix(deps): update dependency undici to v8.11.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
undici (source)	8.10.2 → 8.11.2

---

Release Notes

nodejs/undici (undici)

v8.11.2

Compare Source

What's Changed

• fix: close rejected HTTP/2 WebSocket handshake streams by @​mcollina in #​5873
• fix: avoid reconnecting aborted requests by @​Junaid-PK in #​5846

New Contributors

• @​Junaid-PK made their first contribution in #​5846

Full Changelog: nodejs/undici@v8.11.1...v8.11.2

v8.11.1

Compare Source

What's Changed

• deslopify websocket test by @​KhafraDev in #​5851
• Revert "fix: preserve HTTP/2 for legacy fetch consumers" by @​mcollina in #​5860
• fix websocketstream bugs by @​KhafraDev in #​5863
• fix hang on 3xx response with large body by @​KhafraDev in #​5850
• docs: warn about buffering response bodies by @​mcollina in #​5872
• test: cover native fetch gzip decoding through the legacy bridge by @​mcollina in #​5874

Full Changelog: nodejs/undici@v8.11.0...v8.11.1

v8.11.0

Compare Source

What's Changed

• fix: complete upgrade diagnostics lifecycle by @​BridgeAR in #​5761
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in #​5753
• fix(decompress): join a repeated content-encoding header by @​luantaraschi in #​5664
• fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in #​5663
• build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in #​5784
• build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in #​5785
• fix: selectively re-enable SIMD for ppc64 by @​richardlau in #​5776
• use private fields for brand checks by @​KhafraDev in #​5792
• fix(h2): do not unref a session with open streams by @​kjsik11 in #​5782
• fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in #​5799
• fix issue #​5715 by @​KhafraDev in #​5805
• ci: extend macOS Node.js workflow timeout by @​mcollina in #​5775
• fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in #​5777
• fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in #​5788
• test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in #​5790
• fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in #​5779
• docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in #​5781
• dataurl parsing improvements + update WPT by @​KhafraDev in #​5812
• fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in #​5807
• test(h2): stabilize http2-connection by @​ViniciusDev26 in #​5801
• fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in #​5811
• fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in #​5677
• chore: update tests blocking release by @​vwong in #​5828
• build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in #​5824
• fix(deduplicate): settle requests when composed with retry by @​mcollina in #​5817
• fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in #​5819
• fix(cookies): keep an Expires of 0 when serializing a cookie by @​NgoQuocViet2001 in #​5808
• fix: honor backpressure in decompression interceptor by @​mcollina in #​5829
• fix(h2): validate h2Options.maxConcurrentStreams itself by @​kjsik11 in #​5830
• test(fetch): make pull-dont-push exceed any socket buffer by @​kjsik11 in #​5840
• test(decompress): wait for highWaterMark via readable instead of setImmediate loop by @​kjsik11 in #​5841
• fix(h2): keep the session ref'd while requests are queued by @​kjsik11 in #​5839
• fix cache.addAll and cache.add hanging by @​KhafraDev in #​5844
• fix(retry): settle responses after connection close by @​mcollina in #​5815
• fix(h2): validate response content-length by @​mcollina in #​5816
• fix(redirect): ignore informational responses in history by @​mcollina in #​5813
• fix(websocket): reset the compressed flag when a message completes by @​askalf in #​5827
• fix(h2): keep queued requests alive when the last stream closes by @​kjsik11 in #​5847
• build(deps-dev): bump jest from 30.5.1 to 30.5.2 by @​dependabot[bot] in #​5854
• build(deps-dev): bump fast-check from 4.9.0 to 4.10.1 by @​dependabot[bot] in #​5852
• build(deps): bump uWebSockets.js from v20.70.0 to v20.71.0 in /benchmarks by @​dependabot[bot] in #​5856
• build(deps-dev): bump @​metcoder95/https-pem from 1.0.0 to 1.0.1 by @​dependabot[bot] in #​5853

New Contributors

• @​luantaraschi made their first contribution in #​5664
• @​kilisamemarisaaa made their first contribution in #​5781
• @​NgoQuocViet2001 made their first contribution in #​5807
• @​ViniciusDev26 made their first contribution in #​5801
• @​vwong made their first contribution in #​5677
• @​Yahiro025 made their first contribution in #​5819
• @​askalf made their first contribution in #​5827

Full Changelog: nodejs/undici@v8.10.2...v8.11.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🎉 This PR is included in version 5.0.48 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀