chore(deps): bump undici from 7.28.0 to 8.8.0

[dependabot]

Bumps undici from 7.28.0 to 8.8.0.

Release notes

Sourced from undici's releases.

v8.8.0

What's Changed

• fetch: use ReadableStreamTee for cloning streams by @​KhafraDev in nodejs/undici#5517
• fix(benchmarks): adjust got after v15 upgrade by @​slagiewka in nodejs/undici#5526
• feat(mock): support asynchronous reply options callbacks by @​Develop-KIM in nodejs/undici#5534
• docs: clarify proxy threat model by @​mcollina in nodejs/undici#5530
• docs: clarify MockAgent pool usage by @​vibhor-aggr in nodejs/undici#5542
• docs: clarify parser timeout precision by @​vibhor-aggr in nodejs/undici#5543
• fix: handle flat alternating header arrays in cache normalizeHeaders by @​mcollina in nodejs/undici#5536
• chore(benchmarks): require(esm) on ESM-only packages by @​slagiewka in nodejs/undici#5527
• fix: run idle socket validation off setImmediate instead of setTimeout by @​carlotestor in nodejs/undici#5499
• docs: add custom interceptor example by @​vibhor-aggr in nodejs/undici#5548
• fix(h1): ignore type of service errors by @​mcollina in nodejs/undici#5547
• fix(fetch): convert null init in Response.json by @​Ram-blip in nodejs/undici#5540
• fix(redirect): remove body headers after POST-to-GET by @​Ram-blip in nodejs/undici#5551
• build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @​dependabot[bot] in nodejs/undici#5556
• fix(h2): allow stream-bodied requests to multiplex on a busy session by @​GiHoon1123 in nodejs/undici#5538
• fix(h2): destroy aborted stream synchronously instead of via setImmediate by @​staylor in nodejs/undici#5559
• fix(decompress): skip HEAD responses by @​Ram-blip in nodejs/undici#5564
• ci: build undici with node.js v26 by @​shivarm in nodejs/undici#5237
• docs: clarify top-level request option url fields by @​vibhor-aggr in nodejs/undici#5545
• test: add unexpected disconnect guards to http2 tests by @​Develop-KIM in nodejs/undici#5533
• fix: track origins by client map key in Agent teardown by @​emmayusufu in nodejs/undici#5537
• fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @​jeswr in nodejs/undici#5511
• fix(retry): handle Retry-After zero delay by @​Ram-blip in nodejs/undici#5519
• fix: honor stale-if-error on connection errors during revalidation by @​jeswr in nodejs/undici#5513
• fix: store revalidation-only responses so etag revalidation can engage by @​jeswr in nodejs/undici#5515
• fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @​mcollina in nodejs/undici#5546
• fix(h2): complete request stream on 'end' instead of waiting for 'close' by @​staylor in nodejs/undici#5560
• fix: invalidate Location and Content-Location URIs on unsafe methods by @​jeswr in nodejs/undici#5514
• test: deflake invalid websocket close status test by @​mcollina in nodejs/undici#5550
• refactor: replace tspl with node:test t.plan in connect-timeout tests by @​mcollina in nodejs/undici#5518
• fix(h2): release completed requests from queue by @​staylor in nodejs/undici#5569

New Contributors

• @​Develop-KIM made their first contribution in nodejs/undici#5534
• @​carlotestor made their first contribution in nodejs/undici#5499
• @​GiHoon1123 made their first contribution in nodejs/undici#5538
• @​emmayusufu made their first contribution in nodejs/undici#5537

Full Changelog: nodejs/undici@v8.7.0...v8.8.0

v8.7.0

What's Changed

• test: guard balanced-pool error port lookup by @​mcollina in nodejs/undici#5463
• perf: optimize http/2 request hot path by @​mcollina in nodejs/undici#5483
• fix: do not reject open-ended Range values in simpleRangeHeaderValue by @​spokodev in nodejs/undici#5490
• fix(eventsource): set use-URL-credentials flag by @​Ram-blip in nodejs/undici#5489
• test: deflake connect-timeout watchdog by @​mcollina in nodejs/undici#5197
• docs: correct npm script name and JSON syntax in examples by @​lenoxfernando in nodejs/undici#5496

... (truncated)

Commits

• 1760faa Bumped v8.8.0 (#5575)
• f87273e fix(h2): release completed requests from queue (#5569)
• 1383989 refactor: replace tspl with node:test t.plan in connect-timeout tests (#5518)
• c6d37d2 test: deflake invalid websocket close status test (#5550)
• 1ca0912 fix: invalidate Location and Content-Location URIs on unsafe methods (#5514)
• 87270e4 fix(h2): complete request stream on 'end' instead of waiting for 'close' (#5560)
• 85b35e7 fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefine...
• de01bab fix: store revalidation-only responses so etag revalidation can engage (#5515)
• e1cc0d4 fix: honor stale-if-error on connection errors during revalidation (#5513)
• dc7c044 fix(retry): handle Retry-After zero delay (#5519)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[skvark]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[skvark]

Closing because undici@8.8.0 requires Node >=22.19.0, while githits currently supports ^20.18.1 || >=22.13.0 and validates Node 20 in CI. The fresh compatibility run fails on Node 20 accordingly. Updating to Undici 8 would require a deliberate runtime-support change rather than a routine dependency bump.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.