[dependabot]

Bumps undici from 8.9.0 to 8.11.2.

Release notes

Sourced from undici's releases.

v8.11.2

What's Changed

• fix: close rejected HTTP/2 WebSocket handshake streams by @​mcollina in nodejs/undici#5873
• fix: avoid reconnecting aborted requests by @​Junaid-PK in nodejs/undici#5846

New Contributors

• @​Junaid-PK made their first contribution in nodejs/undici#5846

Full Changelog: nodejs/undici@v8.11.1...v8.11.2

v8.11.1

What's Changed

• deslopify websocket test by @​KhafraDev in nodejs/undici#5851
• Revert "fix: preserve HTTP/2 for legacy fetch consumers" by @​mcollina in nodejs/undici#5860
• fix websocketstream bugs by @​KhafraDev in nodejs/undici#5863
• fix hang on 3xx response with large body by @​KhafraDev in nodejs/undici#5850
• docs: warn about buffering response bodies by @​mcollina in nodejs/undici#5872
• test: cover native fetch gzip decoding through the legacy bridge by @​mcollina in nodejs/undici#5874

Full Changelog: nodejs/undici@v8.11.0...v8.11.1

v8.11.0

What's Changed

• fix: complete upgrade diagnostics lifecycle by @​BridgeAR in nodejs/undici#5761
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in nodejs/undici#5753
• fix(decompress): join a repeated content-encoding header by @​luantaraschi in nodejs/undici#5664
• fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in nodejs/undici#5663
• build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in nodejs/undici#5784
• build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5785
• fix: selectively re-enable SIMD for ppc64 by @​richardlau in nodejs/undici#5776
• use private fields for brand checks by @​KhafraDev in nodejs/undici#5792
• fix(h2): do not unref a session with open streams by @​kjsik11 in nodejs/undici#5782
• fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in nodejs/undici#5799
• fix issue #5715 by @​KhafraDev in nodejs/undici#5805
• ci: extend macOS Node.js workflow timeout by @​mcollina in nodejs/undici#5775
• fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in nodejs/undici#5777
• fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in nodejs/undici#5788
• test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in nodejs/undici#5790
• fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in nodejs/undici#5779
• docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in nodejs/undici#5781
• dataurl parsing improvements + update WPT by @​KhafraDev in nodejs/undici#5812
• fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in nodejs/undici#5807
• test(h2): stabilize http2-connection by @​ViniciusDev26 in nodejs/undici#5801
• fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in nodejs/undici#5811
• fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in nodejs/undici#5677
• chore: update tests blocking release by @​vwong in nodejs/undici#5828
• build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5824
• fix(deduplicate): settle requests when composed with retry by @​mcollina in nodejs/undici#5817
• fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in nodejs/undici#5819

... (truncated)

Commits

• 7e016ad Bumped v8.11.2 (#5886)
• fcdd5a6 fix: skip reconnecting for aborted requests (#5846)
• dd28c5c fix: close rejected HTTP/2 WebSocket handshake streams (#5873)
• 5e0a2f8 Bumped v8.11.1 (#5871)
• 2b72898 test: cover native fetch gzip decoding through the legacy bridge (#5874)
• 636bf51 docs: warn about buffering response bodies (#5872)
• 8145595 fix hang on 3xx response with large body (#5850)
• f3cbe48 fix websocketstream bugs (#5863)
• 1d4ea0a Revert "fix: preserve HTTP/2 for legacy fetch consumers" (#5860)
• 77d7b3f deslopify websocket test (#5851)
• Additional commits viewable in compare view

[greptile-apps]

PR author is in the excluded authors list.

[changeset-bot]

⚠️ No Changeset found

Latest commit: c4a294e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

🟢 Tier 1 — Trivial

Docs, images, lock files, or a low-risk dependency bump (patch-level, or a minor bump of a non-OpenTelemetry dependency). No functional code changes detected.

Why this tier:

• Bot author: dependabot[bot]

Review process: Auto-merge once CI passes. No human review required.
SLA: Resolves automatically.

Stats

• Production files changed: 0
• Production lines changed: 0
• Branch: dependabot/npm_and_yarn/undici-8.10.2
• Author: dependabot[bot]

To override this classification, remove the review/tier-1 label and apply a different review/tier-* label. Manual overrides are preserved on subsequent pushes.