bump undici in http-client to 5.28.5

Signed-off-by: Brian DeHamer <bdehamer@github.com>

packages/http-client/RELEASES.md

@@ -1,5 +1,8 @@
 ## Releases
 
+## 2.2.4
+- Bump `undici` to version 5.28.5 [#1956](https://github.com/actions/toolkit/pull/1956)
+
 ## 2.2.3
 - Fixed an issue where proxy username and password were not handled correctly [#1799](https://github.com/actions/toolkit/pull/1799)
 

packages/http-client/package-lock.json

@@ -1,16 +1,16 @@
 {
   "name": "@actions/http-client",
-  "version": "2.2.3",
+  "version": "2.2.4",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@actions/http-client",
-      "version": "2.2.3",
+      "version": "2.2.4",
       "license": "MIT",
       "dependencies": {
         "tunnel": "^0.0.6",
-        "undici": "^5.25.5"
+        "undici": "^5.28.5"
       },
       "devDependencies": {
         "@types/node": "20.7.1",

packages/http-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actions/http-client",
-  "version": "2.2.3",
+  "version": "2.2.4",
   "description": "Actions Http Client",
   "keywords": [
     "github",
@@ -46,6 +46,6 @@
   },
   "dependencies": {
     "tunnel": "^0.0.6",
-    "undici": "^5.25.5"
+    "undici": "^5.28.5"
   }
-}
+}