[Release] v6.29.1 (#6023)

* Bumped v6.29.1

* test: make security regression tests portable

Signed-off-by: Matteo Collina <hello@matteocollina.com>
(cherry picked from commit 1a69237)

---------

Signed-off-by: Matteo Collina <hello@matteocollina.com>
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Matteo Collina <hello@matteocollina.com>

Author: 3 people

package.json

@@ -1,6 +1,6 @@
 {
   "name": "undici",
-  "version": "6.29.0",
+  "version": "6.29.1",
   "description": "An HTTP/1.1 client, written from scratch for Node.js",
   "homepage": "https://undici.nodejs.org",
   "bugs": {

test/node-test/agent.js

@@ -842,7 +842,7 @@ test('forwards TLS certificate validation callbacks via tls option', async (t) =
   t.after(() => agent.close())
 
   await assert.rejects(
-    request(`https://localhost:${server.address().port}`, { dispatcher: agent }),
+    request(`https://127.0.0.1:${server.address().port}`, { dispatcher: agent }),
     /rejected by custom checkServerIdentity/
   )
   assert.strictEqual(identityChecks, 1)
@@ -874,7 +874,7 @@ test('forwards TLS certificate validation callbacks via connect option', async (
   t.after(() => agent.close())
 
   await assert.rejects(
-    request(`https://localhost:${server.address().port}`, { dispatcher: agent }),
+    request(`https://127.0.0.1:${server.address().port}`, { dispatcher: agent }),
     /rejected by custom checkServerIdentity/
   )
   assert.strictEqual(identityChecks, 1)
@@ -903,7 +903,7 @@ test('copies connect and tls options before storing them', async (t) => {
 
   connect.timeout = 200
   tls.servername = 'agent2'
-  await request(`http://localhost:${server.address().port}`, { dispatcher: agent })
+  await request(`http://127.0.0.1:${server.address().port}`, { dispatcher: agent })
 
   assert.notStrictEqual(capturedOptions.connect, connect)
   assert.notStrictEqual(capturedOptions.tls, tls)

test/tls-renegotiation.js

@@ -5,7 +5,7 @@ const { constants } = require('node:crypto')
 const { once } = require('node:events')
 const { readFileSync } = require('node:fs')
 const { join } = require('node:path')
-const { createServer } = require('node:tls')
+const { createServer, TLSSocket } = require('node:tls')
 const { test } = require('node:test')
 
 const { Client } = require('..')
@@ -20,10 +20,11 @@ const wrongHost = {
   cert: readFileSync(join(fixtures, 'wrong-cert.pem'))
 }
 const ca = readFileSync(join(fixtures, 'ca.pem'))
+const skip = typeof TLSSocket.prototype.setKeyCert !== 'function'
 
 // @see https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm
 for (const protocol of ['http/1.1', 'h2']) {
-  test(`TLS certificate errors after ${protocol} connection establishment reject the request`, async (t) => {
+  test(`TLS certificate errors after ${protocol} connection establishment reject the request`, { skip }, async (t) => {
     let startRenegotiation
     const renegotiationStarted = new Promise((resolve) => {
       startRenegotiation = resolve