Update undici

[joshmgross]

This updates undici to the latest available version, resolving a couple of reported warnings in npm audit.

These issues do not apply to our usage of undici which is purely in tests that we maintain, but it's still good to stay up to date.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 3c2d0f8. Configure here.}

[cursor]

Tests need newer Node

Medium Severity

Upgrading the test-only undici devDependency to v8 makes npm test depend on Node >=22.19.0, because Jest imports undici in __tests__, while engines still allows Node >=16. Environments on Node 16–22.18 that satisfied engines and worked with undici v5 can fail when loading or running tests.

Additional Locations (1)

• package-lock.json#L4965-L4967

 

^{Reviewed by Cursor Bugbot for commit 3c2d0f8. Configure here.}

[joshmgross]

Our tests are run with a newer version of Node, so I'm okay with this.

I do not want to stay on an old version of undici, but I don't want to unnecessarily bump the required version of Node for this package purely for a test dependency. It's likely that we should bump that to a newer version of Node that is LTS, but that's a separate discussion.