fix(deps): update npm-dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
marked (source)	^18.0.6 → ^18.0.7
piscina@>=5.0.0-alpha.0 <=5.1.4	[>=5.2.0 → >=5.3.0](https://renovatebot.com/diffs/npm/piscina@>=5.0.0-alpha.0 <=5.1.4/5.2.0/5.3.0)
undici@>=7.0.0 <7.28.0 (source)	[>=8.7.0 → >=8.8.0](https://renovatebot.com/diffs/npm/undici@>=7.0.0 <7.28.0/8.7.0/8.8.0)

---

Release Notes

markedjs/marked (marked)

v18.0.7

Compare Source

piscinajs/piscina (piscina@>=5.0.0-alpha.0 <=5.1.4)

v5.3.0

Compare Source

What's Changed

• chore(deps): Bump shell-quote from 1.8.3 to 1.8.4 in /docs in the npm_and_yarn group across 1 directory by @​github-actions[bot] in #​1075
• chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates by @​github-actions[bot] in #​1081
• chore: update sponsors by @​github-actions[bot] in #​1084
• [Backport v5] chore: Enhance SECURITY.md with detailed security policy by @​github-actions[bot] in #​1092
• chore(deps): Bump websocket-driver from 0.7.4 to 0.7.5 in /docs in the npm_and_yarn group across 1 directory by @​github-actions[bot] in #​1110
• feat: add stricterFIFO option for queue fairness (#​1100) by @​metcoder95 in #​1113

Full Changelog: piscinajs/piscina@v5.2.0...v5.3.0

nodejs/undici (undici@>=7.0.0 <7.28.0)

v8.8.0

Compare Source

What's Changed

• fetch: use ReadableStreamTee for cloning streams by @​KhafraDev in #​5517
• fix(benchmarks): adjust got after v15 upgrade by @​slagiewka in #​5526
• feat(mock): support asynchronous reply options callbacks by @​Develop-KIM in #​5534
• docs: clarify proxy threat model by @​mcollina in #​5530
• docs: clarify MockAgent pool usage by @​vibhor-aggr in #​5542
• docs: clarify parser timeout precision by @​vibhor-aggr in #​5543
• fix: handle flat alternating header arrays in cache normalizeHeaders by @​mcollina in #​5536
• chore(benchmarks): require(esm) on ESM-only packages by @​slagiewka in #​5527
• fix: run idle socket validation off setImmediate instead of setTimeout by @​carlotestor in #​5499
• docs: add custom interceptor example by @​vibhor-aggr in #​5548
• fix(h1): ignore type of service errors by @​mcollina in #​5547
• fix(fetch): convert null init in Response.json by @​Ram-blip in #​5540
• fix(redirect): remove body headers after POST-to-GET by @​Ram-blip in #​5551
• build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @​dependabot[bot] in #​5556
• fix(h2): allow stream-bodied requests to multiplex on a busy session by @​GiHoon1123 in #​5538
• fix(h2): destroy aborted stream synchronously instead of via setImmediate by @​staylor in #​5559
• fix(decompress): skip HEAD responses by @​Ram-blip in #​5564
• ci: build undici with node.js v26 by @​shivarm in #​5237
• docs: clarify top-level request option url fields by @​vibhor-aggr in #​5545
• test: add unexpected disconnect guards to http2 tests by @​Develop-KIM in #​5533
• fix: track origins by client map key in Agent teardown by @​emmayusufu in #​5537
• fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @​jeswr in #​5511
• fix(retry): handle Retry-After zero delay by @​Ram-blip in #​5519
• fix: honor stale-if-error on connection errors during revalidation by @​jeswr in #​5513
• fix: store revalidation-only responses so etag revalidation can engage by @​jeswr in #​5515
• fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @​mcollina in #​5546
• fix(h2): complete request stream on 'end' instead of waiting for 'close' by @​staylor in #​5560
• fix: invalidate Location and Content-Location URIs on unsafe methods by @​jeswr in #​5514
• test: deflake invalid websocket close status test by @​mcollina in #​5550
• refactor: replace tspl with node:test t.plan in connect-timeout tests by @​mcollina in #​5518
• fix(h2): release completed requests from queue by @​staylor in #​5569

New Contributors

• @​Develop-KIM made their first contribution in #​5534
• @​carlotestor made their first contribution in #​5499
• @​GiHoon1123 made their first contribution in #​5538
• @​emmayusufu made their first contribution in #​5537

Full Changelog: nodejs/undici@v8.7.0...v8.8.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud