fix: don't deadlock on 10+ concurrent requests needing auth

[jenseng]

Fixes #754
Fixes octokit/octokit.js#2800

Give auth requests a dedicated queue. This ensures that they don't cause a deadlock when 10+ concurrent requests are made that need authentication (i.e. either we've never authed, or the token has expired).

[wolfy1339]

Can you update the PR with octokit/auth-app.js#689

[jenseng]

Can you update the PR with octokit/auth-app.js#689

Done! I only updated the dev dependency and the test, since it can still work with older versions (just suboptimally). Let me know if we should tweak peerDependencies/etc too

[github-actions]

🎉 This PR is included in version 9.6.1 🎉

The release is available on:

• GitHub release
• npm package (@latest dist-tag)

Your semantic-release bot 📦🚀

[gr2m]

Great work on adding custom throttling for auth requests 🚀

[imbroyury]

@gr2m @wolfy1339 @jenseng is it possible to backport this fix to CJS v8 version of the package?

[wolfy1339]

Unfortunately not. With recent developments on require(ESM), maintaining the CJS version is no longer needed.

Besides, the Octokit packages don't have an active maintainer team at all.
I am only a community volunteer maintainer, and do my best to do what I can.