[dependabot]

Bumps the dev-minor-patch group with 2 updates: ky and undici.

Updates ky from 2.1.0 to 2.2.0

Release notes

Sourced from ky's releases.

v2.2.0

[!NOTE] In init hooks, options.headers now has lowercase names. Read and delete headers with lowercase names, for example delete options.headers.authorization.

Improvements

• Add maxResponseSize option 0d59458
  • Limits the response body size in bytes, counted after decompression. Exceeding it throws the new ResponseSizeError.
• Let beforeRetry hooks change options for the next attempts (#885) 242c327
  • Return {options: {...}} to change onUploadProgress, onDownloadProgress, timeout, fetch, or throwHttpErrors. For example, retry a failed upload without upload progress.
• Respect Retry-After and rate-limit headers when retry.shouldRetry returns true d1c921f
• Run beforeError hooks for errors thrown while reading the response body 323b98f 50c3810
  • A connection that drops while .json(), .text(), etc. reads the body is now a NetworkError.
• Support onUploadProgress and streamed Request bodies in Bun and Deno 83c711c
• Validate options and report clear errors 3ded2aa
  • Invalid options now throw a TypeError that names the option, instead of being silently ignored or failing later with an internal error. This includes null, non-array hooks, and invalid timeout and retry values.
  • Invalid options and errors thrown by init hooks now reject the returned promise instead of throwing synchronously.
• Improve TypeScript types 51b3177 52b8f93 f4886ca 481f6f7
  • Accept readonly arrays and explicit undefined for all options, allow custom error names, and fix the .clone() and .bytes() return types.

Fixes

• Fix aborts and timeouts in many edge cases e1b088e 2f0a3fb 7c1272b 82fa84c 3f0e330
  • User aborts and timeouts now also cancel requests returned from hooks, interrupt pending hooks and body reads, and are no longer reported as NetworkError and retried in Chromium. totalTimeout is now enforced when the response or body arrives after the deadline.
• Fix searchParams with a Request input dropping its body and options such as credentials b4bdecc 4e0bf0b
• Fix option merging in .extend() and init hooks e06d351 0655b9d c5dc4e6 88e2432
  • Class instances, such as an undici Agent as dispatcher or a Date in json, are no longer turned into plain objects. Header names are now matched case-insensitively. Changes made in .extend() callbacks and init hooks no longer leak into other requests.
• Fix many replaceOption() edge cases cc9b5a3 d6e049a deb5a33
• Fix parseJson being ignored by response.clone().json() and when using onDownloadProgress c6c5dbf 015ef95
• Fix progress events, including wrong totalBytes for compressed responses and missing response properties with onDownloadProgress d89c8c8 e893f16 de278ae
• Fix onUploadProgress breaking uploads without request stream support, and keepalive and no-cors requests 6520f64 06ebf18
• Fix fetch: window.fetch throwing "Illegal invocation" in browsers 92ef60e
• Fix isTimeoutError() and the other type guards matching unrelated errors with the same name d636438
• Fix request on Ky errors being an internal clone instead of the request that was sent 619c427 ec3d17f

---

sindresorhus/ky@v2.1.0...v2.2.0

Commits

• 3541888 2.2.0
• 242c327 Let a beforeRetry hook change per-attempt options
• d9ddb03 Fix CI
• d93adf8 Run the browser tests and static checks once in CI
• a5ed57b Refactor
• 7f0137d Report the sent request for a hook's response, and finish the cross-realm and...
• 13c8da5 Stop surfacing progress callback errors
• 55599c8 Run beforeError for a beforeRetry abort and share the body-wrapping check
• 3ded2aa Tweaks
• 692c435 Restore the retry-only marker condition and cover the remaining cases
• Additional commits viewable in compare view

Updates undici from 8.12.2 to 8.12.3

Release notes

Sourced from undici's releases.

v8.12.3

What's Changed

• ci: use Python 3.14 for the WPT server on macOS by @​mrityunjay-pandey in nodejs/undici#6029
• build(deps-dev): bump neostandard from 0.13.0 to 0.14.0 by @​dependabot[bot] in nodejs/undici#6006
• build(deps-dev): bump eslint from 9.39.4 to 10.12.0 by @​dependabot[bot] in nodejs/undici#5967
• docs: document the options of interceptors.cache() by @​qodelicious in nodejs/undici#6050
• fix(h2): replace a connection that stops responding after a stream timeout by @​mcollina in nodejs/undici#6052
• fix(pool): keep caller async context for queued requests by @​mcollina in nodejs/undici#5982

New Contributors

• @​qodelicious made their first contribution in nodejs/undici#6050

Full Changelog: nodejs/undici@v8.12.2...v8.12.3

Commits

• ff9cc5e Bumped v8.12.3 (#6053)
• 0bbf614 fix(pool): keep caller async context for queued requests (#5982)
• aa1eef1 fix(h2): replace a connection that stops responding after a stream timeout (#...
• e34b872 docs: document the options of interceptors.cache() (#6050)
• e8f3423 build(deps-dev): bump eslint from 9.39.4 to 10.12.0 (#5967)
• b777e40 build(deps-dev): bump neostandard from 0.13.0 to 0.14.0 (#6006)
• 43700ff ci: use Python 3.14 for the WPT server on macOS (#6029)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions