[dependabot]

Bumps https-proxy-agent from 9.0.0 to 9.1.0.

Release notes

Sourced from https-proxy-agent's releases.

https-proxy-agent@9.1.0

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@1.1.0

Changelog

Sourced from https-proxy-agent's changelog.

9.1.0

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@1.1.0

Commits

• 065d1ff Version Packages (#416)
• 84e85ed feat: add onProxyAuth callback and Negotiate/Kerberos proxy auth support (#420)
• 3ebf4b2 feat: add proxy event emission on request for all proxy agents (#422)
• 1852c75 fix(https-proxy-agent): defer socket.resume() to prevent data race condition ...
• 42a7ffa fix: use proxy_hostname from NordVPN metadata for correct TLS cert matching
• 8761b47 fix: log error message on each E2E retry attempt
• 434d237 fix: increase E2E test timeout to 120s for retry headroom
• 671a314 fix: retry NordVPN E2E proxy tests with different servers on failure (#419)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[changeset-bot]

⚠️ No Changeset found

Latest commit: 7d7ecf5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.86%. Comparing base (be88bdd) to head (7d7ecf5).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #644   +/-   ##
=======================================
  Coverage   99.86%   99.86%           
=======================================
  Files           7        7           
  Lines         730      730           
=======================================
  Hits          729      729           
  Misses          1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.