v5.23.0

What's Changed

• bump engines to node >= 16 by @ronag in #2119
• Revert "bump engines to node >= 16 (#2119)" by @ronag in #2121
• fetch: set referrer properly by @KhafraDev in #2125
• fix: support truncated gzip by @jimmywarting in #2126
• workflow: apply security best practices by @step-security-bot in #2130
• build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot in #2135
• build(deps): bump actions/dependency-review-action from 2.5.1 to 3.0.4 by @dependabot in #2133
• build(deps): bump node from 18-alpine to 20-alpine in /build by @dependabot in #2131
• build(deps): bump pkgjs/action from 0.1.6 to 0.1.7 by @dependabot in #2136
• build(deps): bump actions/checkout from 3.1.0 to 3.5.2 by @dependabot in #2132
• build(deps-dev): bump jsdom from 21.1.2 to 22.1.0 by @dependabot in #2142
• build(deps): bump fastify/github-action-merge-dependabot from 3.7.0 to 3.8.0 by @dependabot in #2148
• fix(pr): use correct pr template file by @AugustinMauroy in #2141
• Additional WebSocket send tests to cover all payload size categories by @jawj in #2149
• fix: reverse decompression order of "Content-Encoding" encodings (fixes #2158) by @rychkog in #2159
• fix: keep running WPTs if a test times out by @KhafraDev in #2165
• feat: add build environment info by @mhdawson in #2168
• fix: forward error reason to fetch controller by @KhafraDev in #2172
• stricter types for bodymixin.json by @KhafraDev in #2181
• chore: Renable autoSelectFamily tests. by @ShogunPanda in #2180
• build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 by @dependabot in #2147
• build(deps): bump github/codeql-action from 2.3.2 to 2.20.3 by @dependabot in #2185
• fix: fetch resource timing performance entry names should be strings by @GaryWilber in #2188
• build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #2176
• build(deps): bump fastify/github-action-merge-dependabot from 3.8.0 to 3.9.0 by @dependabot in #2177
• build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in #2178
• build(deps): bump step-security/harden-runner from 2.4.0 to 2.4.1 by @dependabot in #2175
• test: fix autoselectfamily on platforms without IPv6 support by @LiviaMedeiros in #2197
• fix: make multipart/form-data boundary string more consistent by @LiviaMedeiros in #2196
• docs: add proxy agent options docs by @dancastillo in #2193
• build(deps): bump github/codeql-action from 2.20.3 to 2.21.2 by @dependabot in #2205
• feat: make use of addAbortListener where applicable by @atlowChemi in #2195

New Contributors

• @step-security-bot made their first contribution in #2130
• @AugustinMauroy made their first contribution in #2141
• @rychkog made their first contribution in #2159
• @mhdawson made their first contribution in #2168
• @GaryWilber made their first contribution in #2188
• @atlowChemi made their first contribution in #2195

Full Changelog: v5.22.1...v5.23.0