build(deps): bump https-proxy-agent from 9.0.0 to 9.1.0

[dependabot]

Bumps https-proxy-agent from 9.0.0 to 9.1.0.

Release notes

Sourced from https-proxy-agent's releases.

https-proxy-agent@9.1.0

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@1.1.0

Changelog

Sourced from https-proxy-agent's changelog.

9.1.0

Minor Changes

• 84e85ed: Add onProxyAuth callback and negotiate option for Kerberos/SPNEGO proxy authentication

  • Extract shared Negotiate/SPNEGO auth logic into new proxy-agent-negotiate package
  • Added optional onProxyAuth async callback to HttpsProxyAgent and HttpProxyAgent options
  • When the proxy responds with 407 Proxy-Authentication Required, the callback is invoked with the response and auth scheme
  • The callback returns headers (e.g. Proxy-Authorization) to retry the request with
  • Added negotiate: true option that uses the kerberos package for automatic Negotiate/SPNEGO auth
  • Added kerberos as an optional peer dependency of proxy-agent-negotiate
  • Extended the proxy test package to support authenticate: 'negotiate' mode for mock testing

• 3ebf4b2: Add proxy event emission on the request object for all proxy agents. After the proxy connection is established, the request emits a proxy event with { proxy, socket } where proxy is the proxy URL string. This is useful for debugging and logging which proxy was used for a connection.

Patch Changes

• 1852c75: Fix socket event race condition by deferring socket.resume() via setImmediate(), ensuring HTTP client machinery has time to attach data listeners before data starts flowing
• Updated dependencies [84e85ed]
  • proxy-agent-negotiate@1.1.0

Commits

• 065d1ff Version Packages (#416)
• 84e85ed feat: add onProxyAuth callback and Negotiate/Kerberos proxy auth support (#420)
• 3ebf4b2 feat: add proxy event emission on request for all proxy agents (#422)
• 1852c75 fix(https-proxy-agent): defer socket.resume() to prevent data race condition ...
• 42a7ffa fix: use proxy_hostname from NordVPN metadata for correct TLS cert matching
• 8761b47 fix: log error message on each E2E retry attempt
• 434d237 fix: increase E2E test timeout to 120s for retry headroom
• 671a314 fix: retry NordVPN E2E proxy tests with different servers on failure (#419)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud