build(deps): bump undici from 8.10.2 to 8.11.0

[dependabot]

Bumps undici from 8.10.2 to 8.11.0.

Release notes

Sourced from undici's releases.

v8.11.0

What's Changed

• fix: complete upgrade diagnostics lifecycle by @​BridgeAR in nodejs/undici#5761
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in nodejs/undici#5753
• fix(decompress): join a repeated content-encoding header by @​luantaraschi in nodejs/undici#5664
• fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in nodejs/undici#5663
• build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in nodejs/undici#5784
• build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5785
• fix: selectively re-enable SIMD for ppc64 by @​richardlau in nodejs/undici#5776
• use private fields for brand checks by @​KhafraDev in nodejs/undici#5792
• fix(h2): do not unref a session with open streams by @​kjsik11 in nodejs/undici#5782
• fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in nodejs/undici#5799
• fix issue #5715 by @​KhafraDev in nodejs/undici#5805
• ci: extend macOS Node.js workflow timeout by @​mcollina in nodejs/undici#5775
• fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in nodejs/undici#5777
• fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in nodejs/undici#5788
• test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in nodejs/undici#5790
• fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in nodejs/undici#5779
• docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in nodejs/undici#5781
• dataurl parsing improvements + update WPT by @​KhafraDev in nodejs/undici#5812
• fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in nodejs/undici#5807
• test(h2): stabilize http2-connection by @​ViniciusDev26 in nodejs/undici#5801
• fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in nodejs/undici#5811
• fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in nodejs/undici#5677
• chore: update tests blocking release by @​vwong in nodejs/undici#5828
• build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5824
• fix(deduplicate): settle requests when composed with retry by @​mcollina in nodejs/undici#5817
• fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in nodejs/undici#5819
• fix(cookies): keep an Expires of 0 when serializing a cookie by @​NgoQuocViet2001 in nodejs/undici#5808
• fix: honor backpressure in decompression interceptor by @​mcollina in nodejs/undici#5829
• fix(h2): validate h2Options.maxConcurrentStreams itself by @​kjsik11 in nodejs/undici#5830
• test(fetch): make pull-dont-push exceed any socket buffer by @​kjsik11 in nodejs/undici#5840
• test(decompress): wait for highWaterMark via readable instead of setImmediate loop by @​kjsik11 in nodejs/undici#5841
• fix(h2): keep the session ref'd while requests are queued by @​kjsik11 in nodejs/undici#5839
• fix cache.addAll and cache.add hanging by @​KhafraDev in nodejs/undici#5844
• fix(retry): settle responses after connection close by @​mcollina in nodejs/undici#5815
• fix(h2): validate response content-length by @​mcollina in nodejs/undici#5816
• fix(redirect): ignore informational responses in history by @​mcollina in nodejs/undici#5813
• fix(websocket): reset the compressed flag when a message completes by @​askalf in nodejs/undici#5827
• fix(h2): keep queued requests alive when the last stream closes by @​kjsik11 in nodejs/undici#5847
• build(deps-dev): bump jest from 30.5.1 to 30.5.2 by @​dependabot[bot] in nodejs/undici#5854
• build(deps-dev): bump fast-check from 4.9.0 to 4.10.1 by @​dependabot[bot] in nodejs/undici#5852
• build(deps): bump uWebSockets.js from v20.70.0 to v20.71.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5856
• build(deps-dev): bump @​metcoder95/https-pem from 1.0.0 to 1.0.1 by @​dependabot[bot] in nodejs/undici#5853

New Contributors

• @​luantaraschi made their first contribution in nodejs/undici#5664
• @​kilisamemarisaaa made their first contribution in nodejs/undici#5781
• @​NgoQuocViet2001 made their first contribution in nodejs/undici#5807
• @​ViniciusDev26 made their first contribution in nodejs/undici#5801

... (truncated)

Commits

• 6e48f48 Bumped v8.11.0 (#5849)
• e084dbd build(deps-dev): bump @​metcoder95/https-pem from 1.0.0 to 1.0.1 (#5853)
• 443a4c0 build(deps): bump uWebSockets.js in /benchmarks (#5856)
• 432a310 build(deps-dev): bump fast-check from 4.9.0 to 4.10.1 (#5852)
• 34eeba6 build(deps-dev): bump jest from 30.5.1 to 30.5.2 (#5854)
• 16395ea fix(h2): keep queued requests alive when the last stream closes (#5847)
• 2bc04d0 fix(websocket): reset the compressed flag when a message completes (#5827)
• cd10be2 fix(redirect): ignore informational responses in history (#5813)
• bdfe59f fix(h2): validate response content-length (#5816)
• 9196a01 fix(retry): settle responses after connection close (#5815)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)