Skip to content

chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 6 updates - #171

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-minor-patch-6048ff5143
Open

chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 6 updates#171
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-minor-patch-6048ff5143

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies-minor-patch group with 6 updates in the / directory:

Package From To
@hono/node-server 2.1.4 2.1.5
@types/node 26.6.4 26.6.5
fastify 5.12.5 5.12.7
h3 2.0.2 2.0.5
srvx 1.0.5 1.0.6
@types/bun 1.4.2 1.4.3

Updates @hono/node-server from 2.1.4 to 2.1.5

Release notes

Sourced from @​hono/node-server's releases.

v2.1.5

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

Commits
  • 4b47a0d 2.1.5
  • e77824a fix(serve-static): only serve GET and HEAD requests (#405)
  • 1b6e6bf fix(listener): abort the request signal when an HTTP/2 client resets the stre...
  • See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits
  • 9f40003 Bumped v5.12.7
  • 16469b9 Bumped v5.12.6
  • 63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
  • 20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
  • 38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
  • 3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
  • 1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
  • 7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
  • 1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
  • a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
  • Additional commits viewable in compare view

Updates h3 from 2.0.2 to 2.0.5

Release notes

Sourced from h3's releases.

v2.0.5

compare changes

🩹 Fixes

  • cli: Harden h3 docs page handling (7150b0e)

v2.0.4

compare changes

📦 Build

  • Remove bundled docs and open h3.dev from h3 docs (#1602)

🏡 Chore

v2.0.3

compare changes

🩹 Fixes

  • body: Match form content type case-insensitively in readBody (#1601)
  • static: Serve .wasm as application/wasm (#1581)
  • static: Match file extensions case-insensitively (#1580)
  • sse: Preserve empty event ids (#1590)
  • query: Decode valid escapes next to a malformed one (#1582)
  • response: Omit HEAD body for default errors (#1595)
  • tracing: Mount nested apps passed to use() (#1576)
  • cors: Make stateful origin regex checks repeatable (#1589)

📖 Documentation

  • Fix code example (#1587)
  • Fix broken section anchors (#1577)

✅ Tests

  • Accept exact loopback addresses in fingerprint checks (#1588)

❤️ Contributors

... (truncated)

Changelog

Sourced from h3's changelog.

v2.0.5

compare changes

🩹 Fixes

  • cli: Harden h3 docs page handling (7150b0e)

❤️ Contributors

v2.0.4

compare changes

📦 Build

  • Remove bundled docs and open h3.dev from h3 docs (#1602)

🏡 Chore

❤️ Contributors

v2.0.3

compare changes

🩹 Fixes

  • body: Match form content type case-insensitively in readBody (#1601)
  • static: Serve .wasm as application/wasm (#1581)
  • static: Match file extensions case-insensitively (#1580)
  • sse: Preserve empty event ids (#1590)
  • query: Decode valid escapes next to a malformed one (#1582)
  • response: Omit HEAD body for default errors (#1595)
  • tracing: Mount nested apps passed to use() (#1576)
  • cors: Make stateful origin regex checks repeatable (#1589)

📖 Documentation

  • Fix code example (#1587)
  • Fix broken section anchors (#1577)

🏡 Chore

... (truncated)

Commits
  • b64166a chore(release): v2.0.5
  • 7150b0e fix(cli): harden h3 docs page handling
  • 2084eca chore(release): v2.0.4
  • 1a1f488 chore: update srvx
  • b48b480 build: remove bundled docs and open h3.dev from h3 docs (#1602)
  • d8d726f chore(release): v2.0.3
  • badc762 fix(cors): make stateful origin regex checks repeatable (#1589)
  • d37911d chore: update deps
  • 3444ff7 fix(tracing): mount nested apps passed to use() (#1576)
  • 4ab19f7 fix(response): omit HEAD body for default errors (#1595)
  • Additional commits viewable in compare view

Updates srvx from 1.0.5 to 1.0.6

Release notes

Sourced from srvx's releases.

v1.0.6

compare changes

🩹 Fixes

  • node: Omit default port/host when node.path is set (19b33f9)
  • generic: Keep an existing request.waitUntil (#309)
  • node: Read a pre-set rawBody from every body method (#312)

🏡 Chore

🤖 CI

  • Update github actions (3cf7b25)
  • Restore workflow formatting (e59e62a)

❤️ Contributors

  • Pooya Parsa
  • Nitedani
  • Kaan Çelebi
Changelog

Sourced from srvx's changelog.

v1.0.6

compare changes

🩹 Fixes

  • node: Omit default port/host when node.path is set (19b33f9)
  • generic: Keep an existing request.waitUntil (#309)
  • node: Read a pre-set rawBody from every body method (#312)

🏡 Chore

🤖 CI

  • Update github actions (3cf7b25)
  • Restore workflow formatting (e59e62a)

❤️ Contributors

  • Pooya Parsa (@​pi0)
  • Nitedani
  • Kaan Çelebi
Commits
  • cc446f5 chore(release): v1.0.6
  • e59e62a ci: restore workflow formatting
  • 3cf7b25 ci: update github actions
  • 7872d26 chore: update dependencies
  • 437596f fix(node): read a pre-set rawBody from every body method (#312)
  • 96be02b fix(generic): keep an existing request.waitUntil (#309)
  • 19b33f9 fix(node): omit default port/host when node.path is set
  • See full diff in compare view

Updates @types/bun from 1.4.2 to 1.4.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies-minor-patch group across 1…
8d61455 
… directory with 6 updates

Bumps the dev-dependencies-minor-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.1.4` | `2.1.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |
| [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` |
| [h3](https://github.com/h3js/h3) | `2.0.2` | `2.0.5` |
| [srvx](https://github.com/h3js/srvx) | `1.0.5` | `1.0.6` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.3` |



Updates `@hono/node-server` from 2.1.4 to 2.1.5
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.1.4...v2.1.5)

Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `fastify` from 5.12.5 to 5.12.7
- [Release notes](https://github.com/fastify/fastify/releases)
- [Commits](fastify/fastify@v5.12.5...v5.12.7)

Updates `h3` from 2.0.2 to 2.0.5
- [Release notes](https://github.com/h3js/h3/releases)
- [Changelog](https://github.com/h3js/h3/blob/main/CHANGELOG.md)
- [Commits](h3js/h3@v2.0.2...v2.0.5)

Updates `srvx` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/h3js/srvx/releases)
- [Changelog](https://github.com/h3js/srvx/blob/main/CHANGELOG.md)
- [Commits](h3js/srvx@v1.0.5...v1.0.6)

Updates `@types/bun` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-minor-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-minor-patch
- dependency-name: fastify
  dependency-version: 5.12.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-minor-patch
- dependency-name: h3
  dependency-version: 2.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-minor-patch
- dependency-name: srvx
  dependency-version: 1.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-minor-patch
- dependency-name: "@types/bun"
  dependency-version: 1.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026
@pkg-pr-new

pkg-pr-new Bot commented Oct 21, 2026

Copy link
Copy Markdown
@standard-server/aws-lambda

npm i https://pkg.pr.new/@standard-server/aws-lambda@171

@standard-server/core

npm i https://pkg.pr.new/@standard-server/core@171

@standard-server/fastify

npm i https://pkg.pr.new/@standard-server/fastify@171

@standard-server/fetch

npm i https://pkg.pr.new/@standard-server/fetch@171

@standard-server/node

npm i https://pkg.pr.new/@standard-server/node@171

@standard-server/peer

npm i https://pkg.pr.new/@standard-server/peer@171

@standard-server/shared

npm i https://pkg.pr.new/@standard-server/shared@171

commit: 8d61455

@codecov

codecov Bot commented Oct 21, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@codspeed

codspeed Bot commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Merging this PR will not alter performance

⚠️ 5 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

✅ 26 untouched benchmarks
⏩ 108 skipped benchmarks1

Comparing dependabot/npm_and_yarn/dev-dependencies-minor-patch-6048ff5143 (8d61455) with main (fc31c9d)2

Open in CodSpeed

Footnotes

  1. 108 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

  2. No successful run was found on main (f83a4c1) during the generation of this report, so fc31c9d was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants