chore(deps-dev): bump undici from 8.0.2 to 8.7.0 in the development-dependencies group across 1 directory

[dependabot]

Bumps the development-dependencies group with 1 update in the / directory: undici.

Updates undici from 8.0.2 to 8.7.0

Release notes

Sourced from undici's releases.

v8.7.0

What's Changed

• test: guard balanced-pool error port lookup by @​mcollina in nodejs/undici#5463
• perf: optimize http/2 request hot path by @​mcollina in nodejs/undici#5483
• fix: do not reject open-ended Range values in simpleRangeHeaderValue by @​spokodev in nodejs/undici#5490
• fix(eventsource): set use-URL-credentials flag by @​Ram-blip in nodejs/undici#5489
• test: deflake connect-timeout watchdog by @​mcollina in nodejs/undici#5197
• docs: correct npm script name and JSON syntax in examples by @​lenoxfernando in nodejs/undici#5496
• fix: reject non-ascii octets in validateCookiePath by @​spokodev in nodejs/undici#5452
• fix(readable): ignore late consume chunks by @​marko1olo in nodejs/undici#5375
• fix(h2): destroy the stream on abort instead of relying on close() by @​staylor in nodejs/undici#5462
• fix: ignore an unparseable Set-Cookie Expires attribute by @​spokodev in nodejs/undici#5488
• docs: add reproduction guide and update bug report template by @​mcollina in nodejs/undici#5451
• fix(h2): guard onResponse against a 'response' event delivered after completion by @​staylor in nodejs/undici#5440
• fix(h2): requeue request on GOAWAY'd session instead of crashing by @​staylor in nodejs/undici#5453
• fix: add static buildDispatch method to RedirectHandler type definition by @​matthieusieben in nodejs/undici#5442
• fix: auto-detect HTTP proxy tunneling by @​mcollina in nodejs/undici#5116

New Contributors

• @​spokodev made their first contribution in nodejs/undici#5490
• @​lenoxfernando made their first contribution in nodejs/undici#5496
• @​staylor made their first contribution in nodejs/undici#5462

Full Changelog: nodejs/undici@v8.6.0...v8.7.0

v8.6.0

What's Changed

• build(deps-dev): bump proxy from 4.0.0 to 4.1.0 by @​dependabot[bot] in nodejs/undici#5433
• update accept-encoding header in fetch by @​KhafraDev in nodejs/undici#5439
• fix: drop response chunks after the response stream is destroyed (#5356) by @​cesarvspr in nodejs/undici#5357
• fix: handle incomplete multi-byte UTF-8 sequences in setEncoding() by @​joecwu in nodejs/undici#5003
• fix(retry): keep flow-control wired to the active connection across resumes by @​bogomya in nodejs/undici#5405
• test: cover connect lookup option by @​vibhor-aggr in nodejs/undici#5411
• test: fail on unexpected reconnect disconnect by @​vibhor-aggr in nodejs/undici#5412
• build(deps-dev): bump esbuild from 0.28.0 to 0.28.1 by @​dependabot[bot] in nodejs/undici#5419
• fix(proxy): fail the request when the CONNECT tunnel drops instead of looping by @​cesarvspr in nodejs/undici#5441
• feat(docs): migrate to doc-kit by @​avivkeller in nodejs/undici#5438
• build(deps-dev): bump undici from 6.25.0 to 6.27.0 by @​dependabot[bot] in nodejs/undici#5445
• fetch: fix issue 4058 by @​KhafraDev in nodejs/undici#5456
• docs: add Interceptors API reference page by @​enjoykumawat in nodejs/undici#5446
• Document H1 keep-alive trust tradeoff by @​mcollina in nodejs/undici#5457
• fix(h2): deliver an early final response to an Expect: 100-continue request by @​jeswr in nodejs/undici#5470
• fix(types): correct deleteCookie attributes by @​Ram-blip in nodejs/undici#5461
• fix(h1): complete paused parser on socket end instead of crashing by @​ronag in nodejs/undici#5474
• build(deps): bump github/codeql-action/init from 4.36.1 to 4.36.2 by @​dependabot[bot] in nodejs/undici#5476
• build(deps): bump github/codeql-action/upload-sarif from 4.36.1 to 4.36.2 by @​dependabot[bot] in nodejs/undici#5481
• build(deps): bump fastify/github-action-merge-dependabot from 3.12.0 to 3.15.0 by @​dependabot[bot] in nodejs/undici#5480
• build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @​dependabot[bot] in nodejs/undici#5478
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in nodejs/undici#5482
• build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by @​trivikr in nodejs/undici#5484

... (truncated)

Commits

• cb4c2f1 Bumped v8.7.0 (#5501)
• a8d1a95 fix: auto-detect HTTP proxy tunneling (#5116)
• cb30e58 fix: add static buildDispatch method to RedirectHandler type definition (#5442)
• 0c08579 fix(h2): requeue request on GOAWAY'd session instead of crashing (#5453)
• e5b3364 fix(h2): guard onResponse against a 'response' event delivered after completi...
• c0007f4 docs: add reproduction guide and update bug report template (#5451)
• e529cab fix: ignore an unparseable Set-Cookie Expires attribute (#5488)
• 754742c fix(h2): destroy the stream on abort instead of relying on close() (#5462)
• db34f5f fix(readable): ignore late consume chunks (#5375)
• 4ea05a8 fix: reject non-ascii octets in validateCookiePath (#5452)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: 7f639db

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml