build(deps): bump undici from 8.5.0 to 8.8.0

[dependabot]

Bumps undici from 8.5.0 to 8.8.0.

Release notes

Sourced from undici's releases.

v8.8.0

What's Changed

• fetch: use ReadableStreamTee for cloning streams by @​KhafraDev in nodejs/undici#5517
• fix(benchmarks): adjust got after v15 upgrade by @​slagiewka in nodejs/undici#5526
• feat(mock): support asynchronous reply options callbacks by @​Develop-KIM in nodejs/undici#5534
• docs: clarify proxy threat model by @​mcollina in nodejs/undici#5530
• docs: clarify MockAgent pool usage by @​vibhor-aggr in nodejs/undici#5542
• docs: clarify parser timeout precision by @​vibhor-aggr in nodejs/undici#5543
• fix: handle flat alternating header arrays in cache normalizeHeaders by @​mcollina in nodejs/undici#5536
• chore(benchmarks): require(esm) on ESM-only packages by @​slagiewka in nodejs/undici#5527
• fix: run idle socket validation off setImmediate instead of setTimeout by @​carlotestor in nodejs/undici#5499
• docs: add custom interceptor example by @​vibhor-aggr in nodejs/undici#5548
• fix(h1): ignore type of service errors by @​mcollina in nodejs/undici#5547
• fix(fetch): convert null init in Response.json by @​Ram-blip in nodejs/undici#5540
• fix(redirect): remove body headers after POST-to-GET by @​Ram-blip in nodejs/undici#5551
• build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @​dependabot[bot] in nodejs/undici#5556
• fix(h2): allow stream-bodied requests to multiplex on a busy session by @​GiHoon1123 in nodejs/undici#5538
• fix(h2): destroy aborted stream synchronously instead of via setImmediate by @​staylor in nodejs/undici#5559
• fix(decompress): skip HEAD responses by @​Ram-blip in nodejs/undici#5564
• ci: build undici with node.js v26 by @​shivarm in nodejs/undici#5237
• docs: clarify top-level request option url fields by @​vibhor-aggr in nodejs/undici#5545
• test: add unexpected disconnect guards to http2 tests by @​Develop-KIM in nodejs/undici#5533
• fix: track origins by client map key in Agent teardown by @​emmayusufu in nodejs/undici#5537
• fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @​jeswr in nodejs/undici#5511
• fix(retry): handle Retry-After zero delay by @​Ram-blip in nodejs/undici#5519
• fix: honor stale-if-error on connection errors during revalidation by @​jeswr in nodejs/undici#5513
• fix: store revalidation-only responses so etag revalidation can engage by @​jeswr in nodejs/undici#5515
• fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @​mcollina in nodejs/undici#5546
• fix(h2): complete request stream on 'end' instead of waiting for 'close' by @​staylor in nodejs/undici#5560
• fix: invalidate Location and Content-Location URIs on unsafe methods by @​jeswr in nodejs/undici#5514
• test: deflake invalid websocket close status test by @​mcollina in nodejs/undici#5550
• refactor: replace tspl with node:test t.plan in connect-timeout tests by @​mcollina in nodejs/undici#5518
• fix(h2): release completed requests from queue by @​staylor in nodejs/undici#5569

New Contributors

• @​Develop-KIM made their first contribution in nodejs/undici#5534
• @​carlotestor made their first contribution in nodejs/undici#5499
• @​GiHoon1123 made their first contribution in nodejs/undici#5538
• @​emmayusufu made their first contribution in nodejs/undici#5537

Full Changelog: nodejs/undici@v8.7.0...v8.8.0

v8.7.0

What's Changed

• test: guard balanced-pool error port lookup by @​mcollina in nodejs/undici#5463
• perf: optimize http/2 request hot path by @​mcollina in nodejs/undici#5483
• fix: do not reject open-ended Range values in simpleRangeHeaderValue by @​spokodev in nodejs/undici#5490
• fix(eventsource): set use-URL-credentials flag by @​Ram-blip in nodejs/undici#5489
• test: deflake connect-timeout watchdog by @​mcollina in nodejs/undici#5197
• docs: correct npm script name and JSON syntax in examples by @​lenoxfernando in nodejs/undici#5496

... (truncated)

Commits

• 1760faa Bumped v8.8.0 (#5575)
• f87273e fix(h2): release completed requests from queue (#5569)
• 1383989 refactor: replace tspl with node:test t.plan in connect-timeout tests (#5518)
• c6d37d2 test: deflake invalid websocket close status test (#5550)
• 1ca0912 fix: invalidate Location and Content-Location URIs on unsafe methods (#5514)
• 87270e4 fix(h2): complete request stream on 'end' instead of waiting for 'close' (#5560)
• 85b35e7 fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefine...
• de01bab fix: store revalidation-only responses so etag revalidation can engage (#5515)
• e1cc0d4 fix: honor stale-if-error on connection errors during revalidation (#5513)
• dc7c044 fix(retry): handle Retry-After zero delay (#5519)
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	undici@​8.5.0 ⏵ 8.8.0	-6		+1

View full report