unidici security issue

[char0n]

Undici@5 has a security issue described in GHSA-3787-6prv-h9w3

First non-vulnerable version is [email protected]. Unfortunately the security fix introduced Nullish coalescing operator which is not supported in Node.js@12.

This means that the undici patch release which is applied automatically with every swagger-client installation will break Node.js@12 compatibility.

We ideally want to break compatibility with Node@12 explicitly, when we need to.

Keeping security issue in production dep tree is not an option, which leaves us to remove undici@5 from our deps:

Fetch API support will move from this:

>=12.20.0 <16.8 - [node-fetch@3](https://www.npmjs.com/package/node-fetch)
>=16.8 <18 - [undici](https://www.npmjs.com/package/undici)
>=18 - [native Node.js fetch](https://nodejs.org/dist/latest-v18.x/docs/api/globals.html#fetch)

to the following

>=12.20.0 <18 - [node-fetch@3](https://www.npmjs.com/package/node-fetch)
>=18 - [native Node.js fetch](https://nodejs.org/dist/latest-v18.x/docs/api/globals.html#fetch)

[char0n]

Addressed by #3383