build(deps): bump undici from 8.5.0 to 8.7.0

[dependabot]

Bumps undici from 8.5.0 to 8.7.0.

Release notes

Sourced from undici's releases.

v8.7.0

What's Changed

• test: guard balanced-pool error port lookup by @​mcollina in nodejs/undici#5463
• perf: optimize http/2 request hot path by @​mcollina in nodejs/undici#5483
• fix: do not reject open-ended Range values in simpleRangeHeaderValue by @​spokodev in nodejs/undici#5490
• fix(eventsource): set use-URL-credentials flag by @​Ram-blip in nodejs/undici#5489
• test: deflake connect-timeout watchdog by @​mcollina in nodejs/undici#5197
• docs: correct npm script name and JSON syntax in examples by @​lenoxfernando in nodejs/undici#5496
• fix: reject non-ascii octets in validateCookiePath by @​spokodev in nodejs/undici#5452
• fix(readable): ignore late consume chunks by @​marko1olo in nodejs/undici#5375
• fix(h2): destroy the stream on abort instead of relying on close() by @​staylor in nodejs/undici#5462
• fix: ignore an unparseable Set-Cookie Expires attribute by @​spokodev in nodejs/undici#5488
• docs: add reproduction guide and update bug report template by @​mcollina in nodejs/undici#5451
• fix(h2): guard onResponse against a 'response' event delivered after completion by @​staylor in nodejs/undici#5440
• fix(h2): requeue request on GOAWAY'd session instead of crashing by @​staylor in nodejs/undici#5453
• fix: add static buildDispatch method to RedirectHandler type definition by @​matthieusieben in nodejs/undici#5442
• fix: auto-detect HTTP proxy tunneling by @​mcollina in nodejs/undici#5116

New Contributors

• @​spokodev made their first contribution in nodejs/undici#5490
• @​lenoxfernando made their first contribution in nodejs/undici#5496
• @​staylor made their first contribution in nodejs/undici#5462

Full Changelog: nodejs/undici@v8.6.0...v8.7.0

v8.6.0

What's Changed

• build(deps-dev): bump proxy from 4.0.0 to 4.1.0 by @​dependabot[bot] in nodejs/undici#5433
• update accept-encoding header in fetch by @​KhafraDev in nodejs/undici#5439
• fix: drop response chunks after the response stream is destroyed (#5356) by @​cesarvspr in nodejs/undici#5357
• fix: handle incomplete multi-byte UTF-8 sequences in setEncoding() by @​joecwu in nodejs/undici#5003
• fix(retry): keep flow-control wired to the active connection across resumes by @​bogomya in nodejs/undici#5405
• test: cover connect lookup option by @​vibhor-aggr in nodejs/undici#5411
• test: fail on unexpected reconnect disconnect by @​vibhor-aggr in nodejs/undici#5412
• build(deps-dev): bump esbuild from 0.28.0 to 0.28.1 by @​dependabot[bot] in nodejs/undici#5419
• fix(proxy): fail the request when the CONNECT tunnel drops instead of looping by @​cesarvspr in nodejs/undici#5441
• feat(docs): migrate to doc-kit by @​avivkeller in nodejs/undici#5438
• build(deps-dev): bump undici from 6.25.0 to 6.27.0 by @​dependabot[bot] in nodejs/undici#5445
• fetch: fix issue 4058 by @​KhafraDev in nodejs/undici#5456
• docs: add Interceptors API reference page by @​enjoykumawat in nodejs/undici#5446
• Document H1 keep-alive trust tradeoff by @​mcollina in nodejs/undici#5457
• fix(h2): deliver an early final response to an Expect: 100-continue request by @​jeswr in nodejs/undici#5470
• fix(types): correct deleteCookie attributes by @​Ram-blip in nodejs/undici#5461
• fix(h1): complete paused parser on socket end instead of crashing by @​ronag in nodejs/undici#5474
• build(deps): bump github/codeql-action/init from 4.36.1 to 4.36.2 by @​dependabot[bot] in nodejs/undici#5476
• build(deps): bump github/codeql-action/upload-sarif from 4.36.1 to 4.36.2 by @​dependabot[bot] in nodejs/undici#5481
• build(deps): bump fastify/github-action-merge-dependabot from 3.12.0 to 3.15.0 by @​dependabot[bot] in nodejs/undici#5480
• build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @​dependabot[bot] in nodejs/undici#5478
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in nodejs/undici#5482
• build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by @​trivikr in nodejs/undici#5484

... (truncated)

Commits

• cb4c2f1 Bumped v8.7.0 (#5501)
• a8d1a95 fix: auto-detect HTTP proxy tunneling (#5116)
• cb30e58 fix: add static buildDispatch method to RedirectHandler type definition (#5442)
• 0c08579 fix(h2): requeue request on GOAWAY'd session instead of crashing (#5453)
• e5b3364 fix(h2): guard onResponse against a 'response' event delivered after completi...
• c0007f4 docs: add reproduction guide and update bug report template (#5451)
• e529cab fix: ignore an unparseable Set-Cookie Expires attribute (#5488)
• 754742c fix(h2): destroy the stream on abort instead of relying on close() (#5462)
• db34f5f fix(readable): ignore late consume chunks (#5375)
• 4ea05a8 fix: reject non-ascii octets in validateCookiePath (#5452)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

This PR has been inactive for 30 days. It will be closed in 14 days
unless there is new activity. Push a commit or comment to keep it open.

[github-actions]

Closing as stale. Please reopen if you'd like to continue.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.