Update dependency undici to v8.7.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
undici (source)	8.5.0 → 8.7.0

---

Release Notes

nodejs/undici (undici)

v8.7.0

Compare Source

What's Changed

• test: guard balanced-pool error port lookup by @​mcollina in #​5463
• perf: optimize http/2 request hot path by @​mcollina in #​5483
• fix: do not reject open-ended Range values in simpleRangeHeaderValue by @​spokodev in #​5490
• fix(eventsource): set use-URL-credentials flag by @​Ram-blip in #​5489
• test: deflake connect-timeout watchdog by @​mcollina in #​5197
• docs: correct npm script name and JSON syntax in examples by @​lenoxfernando in #​5496
• fix: reject non-ascii octets in validateCookiePath by @​spokodev in #​5452
• fix(readable): ignore late consume chunks by @​marko1olo in #​5375
• fix(h2): destroy the stream on abort instead of relying on close() by @​staylor in #​5462
• fix: ignore an unparseable Set-Cookie Expires attribute by @​spokodev in #​5488
• docs: add reproduction guide and update bug report template by @​mcollina in #​5451
• fix(h2): guard onResponse against a 'response' event delivered after completion by @​staylor in #​5440
• fix(h2): requeue request on GOAWAY'd session instead of crashing by @​staylor in #​5453
• fix: add static buildDispatch method to RedirectHandler type definition by @​matthieusieben in #​5442
• fix: auto-detect HTTP proxy tunneling by @​mcollina in #​5116

New Contributors

• @​spokodev made their first contribution in #​5490
• @​lenoxfernando made their first contribution in #​5496
• @​staylor made their first contribution in #​5462

Full Changelog: nodejs/undici@v8.6.0...v8.7.0

v8.6.0

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/Rome)

• Branch creation
  • Between 12:00 AM and 06:59 AM, only on Sunday and Saturday (* 0-6 * * 6,0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 6 workspace projects
? Verifying lockfile against supply-chain policies (1108 entries)...
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 14, reused 0, downloaded 0, added 0
Progress: resolved 19, reused 0, downloaded 0, added 0
Progress: resolved 20, reused 0, downloaded 0, added 0
Progress: resolved 21, reused 0, downloaded 0, added 0
Progress: resolved 22, reused 0, downloaded 0, added 0
Progress: resolved 23, reused 0, downloaded 0, added 0
Progress: resolved 24, reused 0, downloaded 0, added 0
✓ Lockfile passes supply-chain policies (1108 entries in 9.9s)
Progress: resolved 25, reused 0, downloaded 0, added 0
Progress: resolved 181, reused 0, downloaded 0, added 0
Progress: resolved 188, reused 0, downloaded 0, added 0
Progress: resolved 327, reused 0, downloaded 0, added 0
Progress: resolved 541, reused 0, downloaded 0, added 0
Progress: resolved 635, reused 0, downloaded 0, added 0
Progress: resolved 717, reused 0, downloaded 0, added 0
Progress: resolved 822, reused 0, downloaded 0, added 0
[ERR_PNPM_STRICT_MIN_RELEASE_AGE_REQUIRES_SAVE] minimumReleaseAgeStrict cannot be combined with --no-save: approval would require writing to minimumReleaseAgeExclude in pnpm-workspace.yaml, which --no-save prevents.

Drop --no-save so the exclude list can be persisted, or set minimumReleaseAgeStrict: false to let the install proceed without prompting (the lockfile would still trigger the auto-collect on the next normal install).