chore: bump undici to ^7.16.0

- @actions/http-client: ^5.28.5 → ^7.16.0
- @actions/github: ^5.28.5 → ^7.16.0
- @actions/attest: ^6.20.0 → ^7.16.0

Note: undici v7 requires Node.js 20+

packages/github/package-lock.json

@@ -15,7 +15,7 @@
         "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
         "@octokit/request": "^8.4.1",
         "@octokit/request-error": "^5.1.1",
-        "undici": "^5.28.5"
+        "undici": "^7.16.0"
       },
       "devDependencies": {
         "proxy": "^2.1.1"
@@ -31,6 +31,18 @@
         "undici": "^5.25.4"
       }
     },
+    "node_modules/@actions/http-client/node_modules/undici": {
+      "version": "5.29.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
+      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
+      "license": "MIT",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.0"
+      }
+    },
     "node_modules/@fastify/busboy": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
@@ -402,15 +414,12 @@
       }
     },
     "node_modules/undici": {
-      "version": "5.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-5.29.0.tgz",
-      "integrity": "sha512-raqeBD6NQK4SkWhQzeYKd1KmIG6dllBOTt55Rmkt4HtI9mwdWtJljnrXjAFUBLTSN67HWrOIZ3EPF4kjUw80Bg==",
+      "version": "7.16.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.16.0.tgz",
+      "integrity": "sha512-QEg3HPMll0o3t2ourKwOeUAZ159Kn9mx5pnzHRQO8+Wixmh88YdZRiIwat0iNzNNXn0yoEtXJqFpyW7eM8BV7g==",
       "license": "MIT",
-      "dependencies": {
-        "@fastify/busboy": "^2.0.0"
-      },
       "engines": {
-        "node": ">=14.0"
+        "node": ">=20.18.1"
       }
     },
     "node_modules/universal-user-agent": {

packages/github/package.json

@@ -44,7 +44,7 @@
     "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
     "@octokit/request": "^8.4.1",
     "@octokit/request-error": "^5.1.1",
-    "undici": "^5.28.5"
+    "undici": "^7.16.0"
   },
   "devDependencies": {
     "proxy": "^2.1.1"