Bump undici version and minimum node version

[cameron-robey]

To target security vulnerabilities in undici, we update to the latest version.

From undici v5.7.0, we require a node >=16.8.0 - here we update the minimum to 16.13.0 (the first Node 16 LTS release)

[JacobMGEvans]

As long as @mrbbot is good with these changes, I think it is good to go.

[cameron-robey]

Just worth noting that this will require some people to bump their version of node - I assume we have some precedent for a release like this

[mrbbot]

Nice, thank you! 🙂 Added a couple tiny commits to fix tests, but otherwise... ✅

[threepointone]

Would you be ok using 16.8.0 as the minimum version instead? Makes the breaking change radius a little smaller.

[mrbbot]

The thinking here was what if undici does this again? I'd rather we didn't have to make this kind of breaking change twice, and 16.13.0 was the first long-term support version of Node 16. We'd like people to be using the latest, supported versions of Node anyways, and there were just over 2 months between the releases of 16.7.0 and 16.13.0 so I don't think this will cause too many issues. When it does, they'll be a clear error telling people what's wrong. We, as developers of the packages, also get the option of using the newly added features ourselves if needed.

[threepointone]

That's fair. Let's land this?

[threepointone]

wait it was landed already ha

[mrbbot]

...and released in 2.7.0 😅