deps: update undici to latest v7.x release only

Modify update-undici.sh to fetch all releases and filter to only v7.x
releases, then select the latest one. This ensures we stay on the v7.x
line and don't accidentally upgrade to v8 or later.

Author: mcollina

tools/dep_updaters/update-undici.sh

@@ -17,14 +17,22 @@ NPM="$ROOT/deps/npm/bin/npm-cli.js"
 . "$ROOT/tools/dep_updaters/utils.sh"
 
 NEW_VERSION="$("$NODE" --input-type=module <<'EOF'
-const res = await fetch('https://api.github.com/repos/nodejs/undici/releases/latest',
+const res = await fetch('https://api.github.com/repos/nodejs/undici/releases',
   process.env.GITHUB_TOKEN && {
     headers: {
       "Authorization": `Bearer ${process.env.GITHUB_TOKEN}`
     },
   });
 if (!res.ok) throw new Error(`FetchError: ${res.status} ${res.statusText}`, { cause: res });
-const { tag_name } = await res.json();
+const releases = await res.json();
+const v7Releases = releases.filter(r => {
+  const tag = r.tag_name.replace(/^v/, '');
+  return tag.startsWith('7.');
+});
+if (v7Releases.length === 0) throw new Error('No v7.x releases found');
+// Sort by tag_name (prefixed with 'v') in descending order to get the latest first
+v7Releases.sort((a, b) => b.tag_name.localeCompare(a.tag_name));
+const { tag_name } = v7Releases[0];
 console.log(tag_name.replace('v', ''));
 EOF
 )"