chore(deps-dev): bump undici from 8.10.0 to 8.11.2 in /cloudflare-og-worker

[dependabot]

Bumps undici from 8.10.0 to 8.11.2.

Release notes

Sourced from undici's releases.

v8.11.2

What's Changed

• fix: close rejected HTTP/2 WebSocket handshake streams by @​mcollina in nodejs/undici#5873
• fix: avoid reconnecting aborted requests by @​Junaid-PK in nodejs/undici#5846

New Contributors

• @​Junaid-PK made their first contribution in nodejs/undici#5846

Full Changelog: nodejs/undici@v8.11.1...v8.11.2

v8.11.1

What's Changed

• deslopify websocket test by @​KhafraDev in nodejs/undici#5851
• Revert "fix: preserve HTTP/2 for legacy fetch consumers" by @​mcollina in nodejs/undici#5860
• fix websocketstream bugs by @​KhafraDev in nodejs/undici#5863
• fix hang on 3xx response with large body by @​KhafraDev in nodejs/undici#5850
• docs: warn about buffering response bodies by @​mcollina in nodejs/undici#5872
• test: cover native fetch gzip decoding through the legacy bridge by @​mcollina in nodejs/undici#5874

Full Changelog: nodejs/undici@v8.11.0...v8.11.1

v8.11.0

What's Changed

• fix: complete upgrade diagnostics lifecycle by @​BridgeAR in nodejs/undici#5761
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.21.0 by @​dependabot[bot] in nodejs/undici#5753
• fix(decompress): join a repeated content-encoding header by @​luantaraschi in nodejs/undici#5664
• fix(cookies): keep a cookie named proto in getCookies by @​luantaraschi in nodejs/undici#5663
• build(deps-dev): bump jest from 30.5.0 to 30.5.1 by @​dependabot[bot] in nodejs/undici#5784
• build(deps): bump got from 15.1.0 to 16.0.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5785
• fix: selectively re-enable SIMD for ppc64 by @​richardlau in nodejs/undici#5776
• use private fields for brand checks by @​KhafraDev in nodejs/undici#5792
• fix(h2): do not unref a session with open streams by @​kjsik11 in nodejs/undici#5782
• fix(h2): avoid pool fan-out during ALPN negotiation by @​mcollina in nodejs/undici#5799
• fix issue #5715 by @​KhafraDev in nodejs/undici#5805
• ci: extend macOS Node.js workflow timeout by @​mcollina in nodejs/undici#5775
• fix(env-http-proxy-agent): NO_PROXY wildcard semantics by @​mcollina in nodejs/undici#5777
• fix(h2): do not replay a request whose response already started after GOAWAY by @​kjsik11 in nodejs/undici#5788
• test: skip HTTP/2 churn test on Node.js 25 on all platforms by @​kjsik11 in nodejs/undici#5790
• fix(proxy-agent): preserve repeated iterable headers by @​GiHoon1123 in nodejs/undici#5779
• docs(errors): document ProxyConnectionError (UND_ERR_PRX_CONN) by @​kilisamemarisaaa in nodejs/undici#5781
• dataurl parsing improvements + update WPT by @​KhafraDev in nodejs/undici#5812
• fix(decompress): treat inherited Object.prototype names as unsupported encodings by @​NgoQuocViet2001 in nodejs/undici#5807
• test(h2): stabilize http2-connection by @​ViniciusDev26 in nodejs/undici#5801
• fix: preserve HTTP/2 for non-upgrade legacy requests by @​mcollina in nodejs/undici#5811
• fix: skip drain dispatch for clientTtl-evicted clients in PoolBase by @​vwong in nodejs/undici#5677
• chore: update tests blocking release by @​vwong in nodejs/undici#5828
• build(deps): bump uWebSockets.js from v20.68.0 to v20.70.0 in /benchmarks by @​dependabot[bot] in nodejs/undici#5824
• fix(deduplicate): settle requests when composed with retry by @​mcollina in nodejs/undici#5817
• fix(cache): do not report aborted on successful cache hits by @​Yahiro025 in nodejs/undici#5819

... (truncated)

Commits

• 7e016ad Bumped v8.11.2 (#5886)
• fcdd5a6 fix: skip reconnecting for aborted requests (#5846)
• dd28c5c fix: close rejected HTTP/2 WebSocket handshake streams (#5873)
• 5e0a2f8 Bumped v8.11.1 (#5871)
• 2b72898 test: cover native fetch gzip decoding through the legacy bridge (#5874)
• 636bf51 docs: warn about buffering response bodies (#5872)
• 8145595 fix hang on 3xx response with large body (#5850)
• f3cbe48 fix websocketstream bugs (#5863)
• 1d4ea0a Revert "fix: preserve HTTP/2 for legacy fetch consumers" (#5860)
• 77d7b3f deslopify websocket test (#5851)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[claude]

Review: lockfile-only Dependabot bump of undici 8.10.0 → 8.11.2 in cloudflare-og-worker (dev dependency, transitive via the test tooling). It touches one package-lock.json entry (version, resolved URL, integrity hash) and nothing else.

• Code quality: the change is minimal. dev: true and the engines field are unchanged.
• Bugs and security: the release range contains only patch-level fixes (HTTP/2, WebSocket handshake, aborted-request reconnect, 3xx-body hang, decompress and cookie edge cases). I found no breaking changes. The package is not shipped in the Worker runtime, so production exposure is nil.
• Performance: no impact.
• Tests: no new tests are needed. CI for the worker (build and tests) passing is enough to confirm the bump.
• Repo conventions: a changelog fragment isn't needed for a dev-only lockfile bump.

LGTM once CI is green.