Update dependency undici to v6.16.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
undici (source)	6.11.1 -> 6.16.1

---

Release Notes

nodejs/undici (undici)

v6.16.1

Compare Source

v6.16.0

Compare Source

What's Changed

• add index to sequence converter errors by @​KhafraDev in https://github.com/nodejs/undici/pull/3178
• build(deps-dev): bump borp from 0.12.0 to 0.13.0 by @​dependabot in https://github.com/nodejs/undici/pull/3179
• build(deps): bump node from 21-alpine3.19 to 22-alpine3.19 in /build by @​dependabot in https://github.com/nodejs/undici/pull/3180
• build(deps): bump superagent from 8.1.2 to 9.0.2 in /benchmarks by @​dependabot in https://github.com/nodejs/undici/pull/3181
• fix: keep raw header name by @​tsctx in https://github.com/nodejs/undici/pull/3183
• fix(fetch): improve Headers and Request type-compatibility by @​kettanaito in https://github.com/nodejs/undici/pull/1964
• fix 3 mimesniff tests by @​KhafraDev in https://github.com/nodejs/undici/pull/3185
• build(deps): bump hendrikmuhs/ccache-action from 1.2.12 to 1.2.13 by @​dependabot in https://github.com/nodejs/undici/pull/3187
• build(deps): bump codecov/codecov-action from 4.1.1 to 4.3.1 by @​dependabot in https://github.com/nodejs/undici/pull/3191
• build(deps): bump github/codeql-action from 3.24.9 to 3.25.3 by @​dependabot in https://github.com/nodejs/undici/pull/3192
• build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @​dependabot in https://github.com/nodejs/undici/pull/3189
• build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @​dependabot in https://github.com/nodejs/undici/pull/3188
• build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 by @​dependabot in https://github.com/nodejs/undici/pull/3190
• build(deps): bump node from 9459e24 to 487dc5d in /build by @​dependabot in https://github.com/nodejs/undici/pull/3195
• perf: avoid spread in makeRequest() by @​gunjam in https://github.com/nodejs/undici/pull/3193
• refactor: code cleanup by @​tsctx in https://github.com/nodejs/undici/pull/3194
• fix parsing when receiving empty body websocket by @​KhafraDev in https://github.com/nodejs/undici/pull/3205
• fix: MockResponseCallbackOptions type by @​merojosa in https://github.com/nodejs/undici/pull/2951
• docs(proxy): fix typo by @​kanadgupta in https://github.com/nodejs/undici/pull/3207
• fix websocket receiving an invalid utf-8 in close frame by @​KhafraDev in https://github.com/nodejs/undici/pull/3206
• perf: avoid setImmediate if body is reading by @​ronag in https://github.com/nodejs/undici/pull/3210
• fix: request abort signal by @​ronag in https://github.com/nodejs/undici/pull/3209
• fix: remove abort handler on close by @​ronag in https://github.com/nodejs/undici/pull/3211
• fix: pass abort function by @​tsctx in https://github.com/nodejs/undici/pull/3212
• websocket: 200x faster generate mask by @​tsctx in https://github.com/nodejs/undici/pull/3204
• use FinalizationRegistry to cancel the body if response is collected by @​mcollina in https://github.com/nodejs/undici/pull/3199
• websocket: don't clone buffer if it's not needed. by @​tsctx in https://github.com/nodejs/undici/pull/3214
• websocket: use FastBuffer by @​tsctx in https://github.com/nodejs/undici/pull/3213

New Contributors

• @​kettanaito made their first contribution in https://github.com/nodejs/undici/pull/1964
• @​gunjam made their first contribution in https://github.com/nodejs/undici/pull/3193
• @​merojosa made their first contribution in https://github.com/nodejs/undici/pull/2951
• @​kanadgupta made their first contribution in https://github.com/nodejs/undici/pull/3207

Full Changelog: nodejs/undici@v6.15.0...v6.16.0

v6.15.0

Compare Source

What's Changed

• Expose EnvHttpProxyAgent to Node.js core bundle, so it can be turned … by @​mcollina in https://github.com/nodejs/undici/pull/3148
• test: add headerslist copy check by @​tsctx in https://github.com/nodejs/undici/pull/3156
• chore: ensure automated v6 release compared to v6 by @​mweberxyz in https://github.com/nodejs/undici/pull/3149
• fetch: do not leak signal listeners by @​mcollina in https://github.com/nodejs/undici/pull/3158
• fix: request cache mode is not the same as request mode by @​tsibley in https://github.com/nodejs/undici/pull/3151
• fetch: don't re-lowercase HeadersList by @​tsctx in https://github.com/nodejs/undici/pull/3159
• fix casing issue when cloning Headers object by @​KhafraDev in https://github.com/nodejs/undici/pull/3160
• build(deps): bump node from 6d0f18a to db8772d in /build by @​dependabot in https://github.com/nodejs/undici/pull/3163
• fix header cloning bug by @​tsctx in https://github.com/nodejs/undici/pull/3162
• chore: change bench naming for h2 by @​metcoder95 in https://github.com/nodejs/undici/pull/3165
• expose WebSocket related events in node bundle by @​KhafraDev in https://github.com/nodejs/undici/pull/3167
• feat: add support for if-match on retry handler by @​metcoder95 in https://github.com/nodejs/undici/pull/3144
• fix: correct firing order of abort events by @​tsctx in https://github.com/nodejs/undici/pull/3169
• create fast MessageEvent by @​KhafraDev in https://github.com/nodejs/undici/pull/3170
• chore: add explicitly @​fastify/busboy by @​Uzlopak in https://github.com/nodejs/undici/pull/3172
• chore: remove sinon as dev dependency by @​Uzlopak in https://github.com/nodejs/undici/pull/3171
• webidl changes by @​KhafraDev in https://github.com/nodejs/undici/pull/3175
• preserve dictionary key name in webidl errors by @​KhafraDev in https://github.com/nodejs/undici/pull/3176

New Contributors

• @​tsibley made their first contribution in https://github.com/nodejs/undici/pull/3151

Full Changelog: nodejs/undici@v6.14.1...v6.15.0

v6.14.1

Compare Source

What's Changed

• fix: tweak keep-alive timeout implementation by @​mweberxyz in https://github.com/nodejs/undici/pull/3145
• build(deps-dev): bump borp from 0.11.0 to 0.12.0 by @​dependabot in https://github.com/nodejs/undici/pull/3153
• build(deps): bump node from ad255c6 to 6d0f18a in /build by @​dependabot in https://github.com/nodejs/undici/pull/3154
• fix(EnvHttpProxyAgent): prefer lowercase env vars by @​10xLaCroixDrinker in https://github.com/nodejs/undici/pull/3152

Full Changelog: nodejs/undici@v6.14.0...v6.14.1

v6.14.0

Compare Source

What's Changed

• bench: enable benchmarks for h2 by @​metcoder95 in https://github.com/nodejs/undici/pull/3100
• perf: improve performance of isomorphicEncode by @​tsctx in https://github.com/nodejs/undici/pull/3101
• util: remove isReadableAborted by @​Uzlopak in https://github.com/nodejs/undici/pull/3104
• fix(types): The second parameter of EventSource is optional by @​zbinlin in https://github.com/nodejs/undici/pull/3106
• fix: onConnect types by @​ronag in https://github.com/nodejs/undici/pull/3116
• add dispatcher option to EventSource by @​KhafraDev in https://github.com/nodejs/undici/pull/3119
• core: improve parseURL by @​Uzlopak in https://github.com/nodejs/undici/pull/3102
• test: increase coverage by @​Uzlopak in https://github.com/nodejs/undici/pull/3121
• docs: add directions to run docs and benchmarks by @​FatumaA in https://github.com/nodejs/undici/pull/3092
• perf: avoid unnecessary clone by @​tsctx in https://github.com/nodejs/undici/pull/3117
• build(deps-dev): bump borp from 0.10.0 to 0.11.0 by @​dependabot in https://github.com/nodejs/undici/pull/3126
• drop node support for < v18.17.0 by @​KhafraDev in https://github.com/nodejs/undici/pull/3125
• test: improve test and ci performance by @​Uzlopak in https://github.com/nodejs/undici/pull/3135
• Added EnvHttpProxyAgent to support HTTP_PROXY by @​10xLaCroixDrinker in https://github.com/nodejs/undici/pull/2994
• fetch: Change wording of "Body is unusable" error by @​nzakas in https://github.com/nodejs/undici/pull/3105
• perf: use class instead of object literals with getters by @​tsctx in https://github.com/nodejs/undici/pull/3138
• fix: unhandled exception or failing error body by @​ronag in https://github.com/nodejs/undici/pull/3137
• reuse realm for Request/Response by @​KhafraDev in https://github.com/nodejs/undici/pull/3142
• fix(H2-#​3140): abort requets upon GOAWAY by @​metcoder95 in https://github.com/nodejs/undici/pull/3143
• don't store realm on Request/Response by @​KhafraDev in https://github.com/nodejs/undici/pull/3146
• improve: wasm build by @​Uzlopak in https://github.com/nodejs/undici/pull/3074

New Contributors

• @​10xLaCroixDrinker made their first contribution in https://github.com/nodejs/undici/pull/2994
• @​nzakas made their first contribution in https://github.com/nodejs/undici/pull/3105

Full Changelog: nodejs/undici@v6.13.0...v6.14.0

v6.13.0

Compare Source

What's Changed

• build(deps): bump node from 9696b26 to ad255c6 in /build by @​dependabot in https://github.com/nodejs/undici/pull/3073
• test: remove only by @​metcoder95 in https://github.com/nodejs/undici/pull/3077
• fix: defer errors with setImmediate by @​ronag in https://github.com/nodejs/undici/pull/3081
• improve DecoratorHandler by @​Uzlopak in https://github.com/nodejs/undici/pull/3079
• chore: removed unused escapeFormDataName by @​mcollina in https://github.com/nodejs/undici/pull/3084
• Mention option to pass streams into FormData by @​JaoodxD in https://github.com/nodejs/undici/pull/3086
• fetch: improve performance of isValidEncodedURL by @​Uzlopak in https://github.com/nodejs/undici/pull/3090
• optimize utf8Decode by @​Uzlopak in https://github.com/nodejs/undici/pull/3085
• refactor: h2 refactoring by @​metcoder95 in https://github.com/nodejs/undici/pull/3082
• Skip the creation of a transform stream in fetch by @​mcollina in https://github.com/nodejs/undici/pull/3093
• fetch: improve performance of urlHasHttpsScheme by @​Uzlopak in https://github.com/nodejs/undici/pull/3094
• fetch: avoid creation of an intermediary ReadableStream by @​KhafraDev in https://github.com/nodejs/undici/pull/3095
• test: duplicate jest unspecific tests to native runner by @​Uzlopak in https://github.com/nodejs/undici/pull/3075
• build(deps): bump node from ad255c6 to 6d0f18a in /build by @​dependabot in https://github.com/nodejs/undici/pull/3096
• fetch: improve performance of isValidHeaderValue by @​Uzlopak in https://github.com/nodejs/undici/pull/3098
• chore: automate releases with pr by @​mweberxyz in https://github.com/nodejs/undici/pull/3089

New Contributors

• @​github-actions made their first contribution in https://github.com/nodejs/undici/pull/3099

Full Changelog: nodejs/undici@v6.12.0...v6.13.0

v6.12.0

Compare Source

What's Changed

• fix: broken test by @​tsctx in https://github.com/nodejs/undici/pull/3045
• fix: http2 header parsing by @​climba03003 in https://github.com/nodejs/undici/pull/3047
• types: fix Request.refererPolicy and RequestInit.refererPolicy are incompatible by @​zbinlin in https://github.com/nodejs/undici/pull/3039
• fix(types): onHeaders always takes headers as an array of buffer by @​ronag in https://github.com/nodejs/undici/pull/3050
• fix: ProxyAgent causes request.headers.host to be forcibly reset by @​1zilc in https://github.com/nodejs/undici/pull/3026
• fallback to Buffer.isUtf8 on platforms without icu by @​KhafraDev in https://github.com/nodejs/undici/pull/3006
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.9 by @​dependabot in https://github.com/nodejs/undici/pull/3037
• build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.5 by @​dependabot in https://github.com/nodejs/undici/pull/3035
• build(deps): bump node from 577f8eb to 87524df in /build by @​dependabot in https://github.com/nodejs/undici/pull/3055
• build(deps): bump node from 87524df to 9696b26 in /build by @​dependabot in https://github.com/nodejs/undici/pull/3058
• fetch: Block ports 4190 & 6679 by @​KhafraDev in https://github.com/nodejs/undici/pull/3059
• test: activate testing for interceptors and cache by @​Uzlopak in https://github.com/nodejs/undici/pull/3061
• cache: improve test coverage by @​Uzlopak in https://github.com/nodejs/undici/pull/3063
• feat: modernize fuzzing by @​Uzlopak in https://github.com/nodejs/undici/pull/3060
• fix: request abort by @​ronag in https://github.com/nodejs/undici/pull/3056
• fix: signal handling by @​ronag in https://github.com/nodejs/undici/pull/3053
• fix(H2): handle goaway properly by @​metcoder95 in https://github.com/nodejs/undici/pull/3057
• test: client, set body to null if bigger than CHUNK_LIMIT by @​Uzlopak in https://github.com/nodejs/undici/pull/3064
• mock: improve mock interceptor by @​Uzlopak in https://github.com/nodejs/undici/pull/3062
• fix: bad client destroy on servername change by @​ronag in https://github.com/nodejs/undici/pull/3066
• perf: improve isBlobLike by @​Uzlopak in https://github.com/nodejs/undici/pull/3070
• test: add sanity check for llhttp wasm files by @​Uzlopak in https://github.com/nodejs/undici/pull/3068

New Contributors

• @​zbinlin made their first contribution in https://github.com/nodejs/undici/pull/3039
• @​1zilc made their first contribution in https://github.com/nodejs/undici/pull/3026

Full Changelog: nodejs/undici@v6.11.1...v6.12.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[karinathomasbbc]

ATI seems to be logging okay on opera mini:

Actually undici seems to be used in the nextjs app, however it looks like opera mini is surpressing console logging I've tried to inject? The preview env when visiting from Chrome on mac seems to log the fetch output of ATI, but looking at server:console in opera mini I get no output

I get this when I visit https://www.bbc.com/pidgin on Opera Mini on my Samsung Flip 😭

[karinathomasbbc]

I get this when I visit https://www.bbc.com/pidgin on Opera Mini on my Samsung Flip 😭

Same for the preview environment - albeit it doesn't have this PR deployed at the moment, but I would expect to see something else instead of ECMAScript errors (at the very least, the error itself!)

[karinathomasbbc]

ATI seems to be logging okay on opera mini:

Was this via the Opera mini emulator, or a phone?

[HarveyPeachey]

ATI seems to be logging okay on opera mini:

Was this via the Opera mini emulator, or a phone?

This was with my Oppo android phone, I also combined debug fetch code I created here to get console debugging output. I think this dependency is only running on NextJS powered pages, as the lockfile file only references the NextJS app using it, so any page served by the express serve should be business as usual. However, when I visited a live page powered by next, I wasn't getting any console output both with this dep update, and on the latest branch

[amoore108]

I'm pretty comfortable with just merging this as as @HarveyPeachey says its just used in the Next.js app.

It'll require much more thorough testing once we do the node-fetch removal and use undici across both apps.