chore(deps): bump dio from 5.9.2 to 5.11.0

[dependabot]

Bumps dio from 5.9.2 to 5.11.0.

Release notes

Sourced from dio's releases.

dio 5.11.0

What's new

• Add query and queryUri convenience methods for the HTTP QUERY method defined in RFC 10008, which allows a request body for safe, idempotent queries.
• Fix FusedTransformer (the default transformer) throwing a FormatException on an empty response body when a custom responseDecoder is set. It now returns an empty result, consistent with SyncTransformer and BackgroundTransformer.
• Fix concurrent requests hanging or reporting uncaught errors when an interceptor shares a failing Future, such as in request deduplication.

dio 5.10.0

What's new

• Fix FormData.readAsBytes excessive memory usage with large payloads by replacing the O(n²) reduce+spread approach with a pre-allocated Uint8List.
• Fix request hanging indefinitely when async interceptor callbacks throw without calling the handler.
• Fix HttpException: Connection closed before full header was received being reported as DioExceptionType.unknown.
• Add transformTimeout to bound long-running response transformations, including background JSON decoding. On web, timeout handling is best-effort because synchronous JavaScript work cannot be preempted.
• Fix FormData.clone() dropping boundaryName and camelCaseContentDisposition, so a retried multipart request now keeps the original options instead of silently falling back to the defaults.
• Fix QueuedInterceptor stalling its queue forever when the active request is cancelled while its callback is still pending (never calls next/resolve/reject), which blocked every subsequent request routed through the interceptor.
• Fix ErrorInterceptorHandler.reject(..., true) not continuing to following error interceptors in queued interceptors.

Commits

• ef9dbb8 🔖 dio v5.11.0
• 5aaff55 🔖 native_dio_adapter v1.7.0
• e60cfe1 🔖 cookie_manager v3.5.0
• 9d6f43e 🔖 http2_adapter v2.8.0
• f72e83c 🔖 web_adapter v2.2.1
• 9d7ac91 Merge commit from fork
• 26ed7e5 feat(native_dio_adapter): opt-in Cronet provider fallback (#2573)
• 28b4897 fix(http2_adapter): handle closed streams during uploads (#2571)
• 3b5cd7d fix(cookie_manager): prevent duplicate cookies on reused request options (#2572)
• 775572f build(deps): bump the codeql-action group with 3 updates (#2569)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)