chore(deps): update dependency undici to v8.11.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
undici (source)	8.10.2 → 8.11.0

---

Release Notes

nodejs/undici (undici)

v8.11.0

Compare Source

What's Changed

• fix: complete upgrade diagnostics lifecycle by @​BridgeAR in #​5761
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in #​5753
• fix(decompress): join a repeated content-encoding header by @​luantaraschi in #​5664
• fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in #​5663
• build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in #​5784
• build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in #​5785
• fix: selectively re-enable SIMD for ppc64 by @​richardlau in #​5776
• use private fields for brand checks by @​KhafraDev in #​5792
• fix(h2): do not unref a session with open streams by @​kjsik11 in #​5782
• fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in #​5799
• fix issue #​5715 by @​KhafraDev in #​5805
• ci: extend macOS Node.js workflow timeout by @​mcollina in #​5775
• fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in #​5777
• fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in #​5788
• test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in #​5790
• fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in #​5779
• docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in #​5781
• dataurl parsing improvements + update WPT by @​KhafraDev in #​5812
• fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in #​5807
• test(h2): stabilize http2-connection by @​ViniciusDev26 in #​5801
• fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in #​5811
• fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in #​5677
• chore: update tests blocking release by @​vwong in #​5828
• build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in #​5824
• fix(deduplicate): settle requests when composed with retry by @​mcollina in #​5817
• fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in #​5819
• fix(cookies): keep an Expires of 0 when serializing a cookie by @​NgoQuocViet2001 in #​5808
• fix: honor backpressure in decompression interceptor by @​mcollina in #​5829
• fix(h2): validate h2Options.maxConcurrentStreams itself by @​kjsik11 in #​5830
• test(fetch): make pull-dont-push exceed any socket buffer by @​kjsik11 in #​5840
• test(decompress): wait for highWaterMark via readable instead of setImmediate loop by @​kjsik11 in #​5841
• fix(h2): keep the session ref'd while requests are queued by @​kjsik11 in #​5839
• fix cache.addAll and cache.add hanging by @​KhafraDev in #​5844
• fix(retry): settle responses after connection close by @​mcollina in #​5815
• fix(h2): validate response content-length by @​mcollina in #​5816
• fix(redirect): ignore informational responses in history by @​mcollina in #​5813
• fix(websocket): reset the compressed flag when a message completes by @​askalf in #​5827
• fix(h2): keep queued requests alive when the last stream closes by @​kjsik11 in #​5847
• build(deps-dev): bump jest from 30.5.1 to 30.5.2 by @​dependabot[bot] in #​5854
• build(deps-dev): bump fast-check from 4.9.0 to 4.10.1 by @​dependabot[bot] in #​5852
• build(deps): bump uWebSockets.js from v20.70.0 to v20.71.0 in /benchmarks by @​dependabot[bot] in #​5856
• build(deps-dev): bump @​metcoder95/https-pem from 1.0.0 to 1.0.1 by @​dependabot[bot] in #​5853

New Contributors

• @​luantaraschi made their first contribution in #​5664
• @​kilisamemarisaaa made their first contribution in #​5781
• @​NgoQuocViet2001 made their first contribution in #​5807
• @​ViniciusDev26 made their first contribution in #​5801
• @​vwong made their first contribution in #​5677
• @​Yahiro025 made their first contribution in #​5819
• @​askalf made their first contribution in #​5827

Full Changelog: nodejs/undici@v8.10.2...v8.11.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 08ca05df-88af-4fa4-ab3f-2cb27cf6cbd2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	undici@​8.10.2 ⏵ 8.11.0			+1

View full report

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/node-modules/urllib@922

commit: 61c9fce

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.77%. Comparing base (9d183f2) to head (61c9fce).

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #922      +/-   ##
==========================================
+ Coverage   94.23%   94.77%   +0.53%     
==========================================
  Files          10       10              
  Lines         746      746              
  Branches      235      235              
==========================================
+ Hits          703      707       +4     
+ Misses         40       36       -4     
  Partials        3        3              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.