chore(deps): bump undici from 8.9.0 to 8.10.0

[dependabot]

Bumps undici from 8.9.0 to 8.10.0.

Release notes

Sourced from undici's releases.

v8.10.0

What's Changed

• feat: namespace h2 options by @​metcoder95 in nodejs/undici#5498
• test: update WPT expectations by @​mcollina in nodejs/undici#5587
• test: add cache/dedupe + dns re-dispatch integration tests by @​GiHoon1123 in nodejs/undici#5535
• fix(websocket): support process.unref by @​mcollina in nodejs/undici#5578
• fix(h2): ensure every request settles by @​mcollina in nodejs/undici#5603
• fix(readable): consume a body whose end has already been emitted by @​marko1olo in nodejs/undici#5617
• fix(retry): skip the content-length checkpoint for HEAD and for a 206 without content-range by @​marko1olo in nodejs/undici#5610
• fix: revert idle socket validation to setTimeout(0) to prevent stall on idle event loop by @​marceli1404 in nodejs/undici#5606
• fix(env-http-proxy-agent): match bare IPv6 addresses in no_proxy by @​marko1olo in nodejs/undici#5623
• test: handle aggregate balanced pool errors by @​marko1olo in nodejs/undici#5377
• fix(readable): keep body bytes that arrive after setEncoding() by @​mcollina in nodejs/undici#5620
• fix(socks5): evict unused origin pools by @​Kkartik14 in nodejs/undici#5595
• fix: skip deduplication for upgrade requests by @​Ram-blip in nodejs/undici#5593
• fix(retry): forward informational responses by @​mcollina in nodejs/undici#5625
• fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView reply bodies by @​marko1olo in nodejs/undici#5619
• fix(interceptors): cache() and deduplicate() silently inert on Client/Pool without opts.origin by @​marko1olo in nodejs/undici#5628
• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @​dependabot[bot] in nodejs/undici#5633
• build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 by @​dependabot[bot] in nodejs/undici#5634
• build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @​dependabot[bot] in nodejs/undici#5636
• fix(mock): emit request body lifecycle hooks by @​marko1olo in nodejs/undici#5367
• fix(h2): detach upgrade close handler after GOAWAY by @​pacocartones in nodejs/undici#5641
• fix: retry refused HTTP/2 streams by @​mcollina in nodejs/undici#5598
• fix: preserve DNS origin hostname on sockets by @​cyphercodes in nodejs/undici#5577

New Contributors

• @​marceli1404 made their first contribution in nodejs/undici#5606
• @​Kkartik14 made their first contribution in nodejs/undici#5595
• @​pacocartones made their first contribution in nodejs/undici#5641
• @​cyphercodes made their first contribution in nodejs/undici#5577

Full Changelog: nodejs/undici@v8.9.0...v8.10.0

Commits

• c8d80e6 Bumped v8.10.0 (#5644)
• 66923b4 fix: preserve DNS origin hostname on sockets (#5577)
• 3926499 fix: retry refused HTTP/2 streams (#5598)
• 73d6e9e fix(h2): detach upgrade close handler after GOAWAY (#5641)
• b111adb fix(mock): emit request body lifecycle hooks (#5367)
• ae4a3e3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#5636)
• ec3fbf1 build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.3 (#5634)
• 2151720 build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 (#5633)
• b96a116 fix(interceptors): allow interceptors without opts.origin (#5628)
• a18ef2d fix(mock): non-string path matchers under ignoreTrailingSlash, and DataView r...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

No changeset found

This PR does not add a changeset, so it will not appear in the changelog or trigger a release.

If the change is user-facing, add one:

pnpm changeset

Pick a bump (patch / minor / major) and write the changelog entry in our usual voice ("Added X... Thanks to @you. Closes #123."), then commit the generated .changeset/*.md file.

If this PR is docs-only or a chore that needs no release note, you can ignore this — or run pnpm changeset --empty to record that intentionally.

[github-actions]

nc-review: nothing to raise

Routine dependabot patch bump of undici from 8.9.0 to 8.10.0, within the declared ^8.5.0 range. The diff touches only pnpm-lock.yaml, undici is a transitive HTTP client dependency, and the upstream release notes list bug fixes only with no breaking changes. Nothing to review.

---

_{🔴 blocking · 🟠 a reviewer would ask for a change · ⚪ optional}

_{Automated code review — correctness, security, design, tests, plus duplicates and scope. A human still decides; this is not a substitute for review and is not exhaustive. The required status checks separately cover lint, formatting, types, unused dependencies, the test suite and the build. This bot never merges. Maintainers can rerun with /re-review.}