deps: Bump dio from 5.9.2 to 5.11.1

[dependabot]

Bumps dio from 5.9.2 to 5.11.1.

Release notes

Sourced from dio's releases.

dio 5.11.1

What's new

• Fix response stream not propagating backpressure to the underlying socket. When a consumer paused the stream, the source subscription was never paused, so the network kept buffering response data into memory, risking OOM on constrained platforms.
• Make the badCertificateCallback pinning test deterministic by pinning a fingerprint that cannot match the served certificate, instead of relying on badssl.com hosts serving different certificates.
• Fix NoSuchMethodError when using a class that implements Interceptor instead of extends Interceptor. The interceptor pipeline was calling private dispatch methods that only exist on Interceptor subclasses, breaking any class using interface implementation.

dio 5.11.0

What's new

• Add query and queryUri convenience methods for the HTTP QUERY method defined in RFC 10008, which allows a request body for safe, idempotent queries.
• Fix FusedTransformer (the default transformer) throwing a FormatException on an empty response body when a custom responseDecoder is set. It now returns an empty result, consistent with SyncTransformer and BackgroundTransformer.
• Fix concurrent requests hanging or reporting uncaught errors when an interceptor shares a failing Future, such as in request deduplication.

dio 5.10.0

What's new

• Fix FormData.readAsBytes excessive memory usage with large payloads by replacing the O(n²) reduce+spread approach with a pre-allocated Uint8List.
• Fix request hanging indefinitely when async interceptor callbacks throw without calling the handler.
• Fix HttpException: Connection closed before full header was received being reported as DioExceptionType.unknown.
• Add transformTimeout to bound long-running response transformations, including background JSON decoding. On web, timeout handling is best-effort because synchronous JavaScript work cannot be preempted.
• Fix FormData.clone() dropping boundaryName and camelCaseContentDisposition, so a retried multipart request now keeps the original options instead of silently falling back to the defaults.
• Fix QueuedInterceptor stalling its queue forever when the active request is cancelled while its callback is still pending (never calls next/resolve/reject), which blocked every subsequent request routed through the interceptor.
• Fix ErrorInterceptorHandler.reject(..., true) not continuing to following error interceptors in queued interceptors.

Commits

• 4684e29 🔖 dio v5.11.1
• 96b10c7 🔖 web_adapter v2.2.2
• 6d18c7c 🔖 http2_adapter v2.9.0
• debe58c ✨ Deprecate misspelled handshakeTimout in favor of handshakeTimeout (#2595)
• 6c1033e 🐛 Expose supportedProtocols on ConnectionManager to fix fallback for RFC-stri...
• 6d39187 💚 Fail web test runs on the first failing compiler round (#2594)
• a3238c3 fix(dio): support classes that implement Interceptor (#2591)
• fd1cca0 fix(web): classify XHR timeout by connection phase (#2593)
• 83fd107 💚 Adopt CI to Flutter 3.47 (#2592)
• a553f46 Update README for clarity and remove star history (#2589)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.