Bump undici from 8.10.2 to 8.11.2

[dependabot]

Bumps undici from 8.10.2 to 8.11.2.

Release notes

Sourced from undici's releases.

v8.11.2

What's Changed

• fix: close rejected HTTP/2 WebSocket handshake streams by @​mcollina in nodejs/undici#5873
• fix: avoid reconnecting aborted requests by @​Junaid-PK in nodejs/undici#5846

New Contributors

• @​Junaid-PK made their first contribution in nodejs/undici#5846

Full Changelog: nodejs/undici@v8.11.1...v8.11.2

v8.11.1

What's Changed

• deslopify websocket test by @​KhafraDev in nodejs/undici#5851
• Revert "fix: preserve HTTP/2 for legacy fetch consumers" by @​mcollina in nodejs/undici#5860
• fix websocketstream bugs by @​KhafraDev in nodejs/undici#5863
• fix hang on 3xx response with large body by @​KhafraDev in nodejs/undici#5850
• docs: warn about buffering response bodies by @​mcollina in nodejs/undici#5872
• test: cover native fetch gzip decoding through the legacy bridge by @​mcollina in nodejs/undici#5874

Full Changelog: nodejs/undici@v8.11.0...v8.11.1

v8.11.0

What's Changed

• fix: complete upgrade diagnostics lifecycle by @​BridgeAR in nodejs/undici#5761
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in nodejs/undici#5753
• fix(decompress): join a repeated content-encoding header by @​luantaraschi in nodejs/undici#5664
• fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in nodejs/undici#5663
• build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in nodejs/undici#5784
• build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5785
• fix: selectively re-enable SIMD for ppc64 by @​richardlau in nodejs/undici#5776
• use private fields for brand checks by @​KhafraDev in nodejs/undici#5792
• fix(h2): do not unref a session with open streams by @​kjsik11 in nodejs/undici#5782
• fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in nodejs/undici#5799
• fix issue #5715 by @​KhafraDev in nodejs/undici#5805
• ci: extend macOS Node.js workflow timeout by @​mcollina in nodejs/undici#5775
• fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in nodejs/undici#5777
• fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in nodejs/undici#5788
• test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in nodejs/undici#5790
• fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in nodejs/undici#5779
• docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in nodejs/undici#5781
• dataurl parsing improvements + update WPT by @​KhafraDev in nodejs/undici#5812
• fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in nodejs/undici#5807
• test(h2): stabilize http2-connection by @​ViniciusDev26 in nodejs/undici#5801
• fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in nodejs/undici#5811
• fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in nodejs/undici#5677
• chore: update tests blocking release by @​vwong in nodejs/undici#5828
• build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5824
• fix(deduplicate): settle requests when composed with retry by @​mcollina in nodejs/undici#5817
• fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in nodejs/undici#5819

... (truncated)

Commits

• 7e016ad Bumped v8.11.2 (#5886)
• fcdd5a6 fix: skip reconnecting for aborted requests (#5846)
• dd28c5c fix: close rejected HTTP/2 WebSocket handshake streams (#5873)
• 5e0a2f8 Bumped v8.11.1 (#5871)
• 2b72898 test: cover native fetch gzip decoding through the legacy bridge (#5874)
• 636bf51 docs: warn about buffering response bodies (#5872)
• 8145595 fix hang on 3xx response with large body (#5850)
• f3cbe48 fix websocketstream bugs (#5863)
• 1d4ea0a Revert "fix: preserve HTTP/2 for legacy fetch consumers" (#5860)
• 77d7b3f deslopify websocket test (#5851)
• Additional commits viewable in compare view

[powerfooI]

Fixed the compiled OAuth regression by pinning a single undici 8.11.2 resolution through the root override. The original split (server 8.11.2 / SDK 8.10.2) reproduces Cannot find module './kimi-coding.js' in the standalone Kimi login test; the unified resolution passes without changing OAuth behavior. Added a manifest-alignment assertion and explained the peer-context requirement.

Validation: all 4 standalone tests pass (57 assertions), including both credential stores; formatting, lint, TypeScript, production web build/assets and Bun native checks pass. Local full-suite testing has 274 Unix-socket listen failures and one non-loopback ECONNRESET in this restricted runner, so merging remains gated on full GitHub CI for the published head.