chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #180 · middleapi/standard-server

dependabot · 2026-11-01T12:27:29Z

Bumps the dev-dependencies-minor-patch group with 9 updates in the / directory:

Package	From	To
@hono/node-server	`2.1.4`	`2.1.5`
@types/node	`26.6.4`	`26.6.6`
fastify	`5.12.5`	`5.12.7`
h3	`2.0.2`	`2.0.8`
pkg-pr-new	`0.0.91`	`0.0.93`
srvx	`1.0.5`	`1.0.8`
ws	`8.22.0`	`8.22.1`
@fastify/cookie	`11.1.3`	`11.1.5`
@types/bun	`1.4.2`	`1.4.4`

Updates @hono/node-server from 2.1.4 to 2.1.5

Release notes

Sourced from @hono/node-server's releases.

v2.1.5

What's Changed

fix(listener): abort the request signal when an HTTP/2 client resets the stream by @affanmomin in honojs/node-server#404

fix(serve-static): only serve GET and HEAD requests by @usualoma in honojs/node-server#405

New Contributors

@affanmomin made their first contribution in honojs/node-server#404

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

Commits

4b47a0d 2.1.5
e77824a fix(serve-static): only serve GET and HEAD requests (#405)
1b6e6bf fix(listener): abort the request signal when an HTTP/2 client resets the stre...
See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.6

Commits

See full diff in compare view

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

Fix for GHSA-389g-gv7q-r4x8

What's Changed

[Backport 5.x] types: restrict route lookup methods by @github-actions[bot] in fastify/fastify#7048

[Backport 5.x] perf: decode string bodies once instead of per chunk by @github-actions[bot] in fastify/fastify#7053

[Backport 5.x] perf: avoid resetting the level of request child loggers by @github-actions[bot] in fastify/fastify#7058

[Backport 5.x] fix: resolve reply.mediaType from raw response headers by @github-actions[bot] in fastify/fastify#7067

[Backport 5.x] perf: use a FIFO cache for parsed content-types by @github-actions[bot] in fastify/fastify#7072

[Backport 5.x] fix(validation): lowercase header names in propertyNames enum/const by @mcollina in fastify/fastify#7104

[Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of storing it by @github-actions[bot] in fastify/fastify#7087

[Backport 5.x] fix: remove error when HTTP QUERY request has empty body by @github-actions[bot] in fastify/fastify#7060

[Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 by @github-actions[bot] in fastify/fastify#7094

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits

9f40003 Bumped v5.12.7
16469b9 Bumped v5.12.6
63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
Additional commits viewable in compare view

Updates h3 from 2.0.2 to 2.0.8

Release notes

Sourced from h3's releases.

v2.0.8

compare changes

🩹 Fixes

rules: Let HTTPError.headers opt out of headers rule on errors (#1613)

v2.0.7

🩹 Fixes

Keep middleware-staged headers out of handler-level caches (#1608)

v2.0.6

🩹 Fixes

rules: Fill target ** for named catch-all keys (/**:name) (48d650b)

rules: Keep middleware-staged headers out of cache entries (#1606)

v2.0.5

compare changes

🩹 Fixes

cli: Harden h3 docs page handling (7150b0e)

v2.0.4

compare changes

📦 Build

Remove bundled docs and open h3.dev from h3 docs (#1602)

🏡 Chore

Update srvx (1a1f488)

v2.0.3

compare changes

🩹 Fixes

body: Match form content type case-insensitively in readBody (#1601)

static: Serve .wasm as application/wasm (#1581)

static: Match file extensions case-insensitively (#1580)

sse: Preserve empty event ids (#1590)

query: Decode valid escapes next to a malformed one (#1582)

response: Omit HEAD body for default errors (#1595)

tracing: Mount nested apps passed to use() (#1576)

cors: Make stateful origin regex checks repeatable (#1589)

... (truncated)

Changelog

Sourced from h3's changelog.

v2.0.8

compare changes

🩹 Fixes

rules: Let HTTPError.headers opt out of headers rule on errors (#1613)

❤️ Contributors

Pi0x x@pi0.io

v2.0.7

compare changes

🩹 Fixes

Keep middleware-staged headers out of handler-level caches (#1608)

❤️ Contributors

Pi0x x@pi0.io

v2.0.6

compare changes

🩹 Fixes

rules: Fill target ** for named catch-all keys (/**:name) (48d650b)

rules: Keep middleware-staged headers out of cache entries (#1606)

❤️ Contributors

Pi0x x@pi0.io

Pooya Parsa (@pi0)

v2.0.5

compare changes

🩹 Fixes

cli: Harden h3 docs page handling (7150b0e)

❤️ Contributors

Pooya Parsa pooya@pi0.io

... (truncated)

Commits

f0e1780 chore(release): v2.0.8
f90f4c8 fix(rules): let HTTPError.headers opt out of headers rule on errors (#1613)
9d70cf3 chore(release): v2.0.7
1326e74 fix: keep middleware-staged headers out of handler-level caches (#1608)
31062a0 chore(release): v2.0.6
d658815 fix(rules): keep middleware-staged headers out of cache entries (#1606)
48d650b fix(rules): fill target ** for named catch-all keys (/**:name)
b64166a chore(release): v2.0.5
7150b0e fix(cli): harden h3 docs page handling
2084eca chore(release): v2.0.4
Additional commits viewable in compare view

Updates pkg-pr-new from 0.0.91 to 0.0.93

Commits

9dae3e0 release: v0.0.93
abfb98a release: v0.0.92
5e3a62c feat: support upm and nub in --packageManager flag (#562)
See full diff in compare view

Updates srvx from 1.0.5 to 1.0.8

Release notes

Sourced from srvx's releases.

v1.0.8

compare changes

🩹 Fixes

node: Don't expose derived content-length on materialized FastResponse headers (#337)

node: Send the head for stream bodies that end without data (#339)

v1.0.7

compare changes

🩹 Fixes

node: Scope FastResponse subclass instanceof and avoid nesting as global Response (#330)

node: Keep derived content-length when FastResponse materializes (#335)

node: Resolve native Request/Response by base class to support globals patched by other servers (#331)

v1.0.6

compare changes

🩹 Fixes

node: Omit default port/host when node.path is set (19b33f9)

generic: Keep an existing request.waitUntil (#309)

node: Read a pre-set rawBody from every body method (#312)

🏡 Chore

Update dependencies (7872d26)

🤖 CI

Update github actions (3cf7b25)

Restore workflow formatting (e59e62a)

❤️ Contributors

Pooya Parsa

Nitedani

Kaan Çelebi

Changelog

Sourced from srvx's changelog.

v1.0.8

compare changes

🩹 Fixes

node: Don't expose derived content-length on materialized FastResponse headers (#337)

node: Send the head for stream bodies that end without data (#339)

🏡 Chore

Update deps (3806369)

🤖 CI

Run deno vitest via npm specifier to bypass pnpm 12 bin shim (f0ef09c)

❤️ Contributors

Pooya Parsa (@pi0)

Daniel Roe (@danielroe)

v1.0.7

compare changes

🩹 Fixes

node: Scope FastResponse subclass instanceof and avoid nesting as global Response (#330)

node: Keep derived content-length when FastResponse materializes (#335)

node: Resolve native Request/Response by base class to support globals patched by other servers (#331)

❤️ Contributors

Pi0x x@pi0.io

v1.0.6

compare changes

🩹 Fixes

node: Omit default port/host when node.path is set (19b33f9)

generic: Keep an existing request.waitUntil (#309)

node: Read a pre-set rawBody from every body method (#312)

🏡 Chore

Update dependencies (7872d26)

... (truncated)

Commits

a961c16 chore(release): v1.0.8
f0ef09c ci: run deno vitest via npm specifier to bypass pnpm 12 bin shim
3806369 chore: update deps
2af7a1b fix(node): send the head for stream bodies that end without data (#339)
30fb59a fix(node): don't expose derived content-length on materialized FastResponse h...
a9a0754 chore(release): v1.0.7
a327007 fix(node): resolve native Request/Response by base class to support globa...
f0c13e0 fix(node): keep derived content-length when FastResponse materializes (#335)
008a954 fix(node): scope FastResponse subclass instanceof and avoid nesting as gl...
cc446f5 chore(release): v1.0.6
Additional commits viewable in compare view

Updates ws from 8.22.0 to 8.22.1

Release notes

Sourced from ws's releases.

8.22.1

Bug fixes

The path of IPC URLs is no longer truncated at : (#2344).

Other notable changes

http.websocketMask() and http.websocketUnmask() are now used instead of the bufferutil variants when available (2ab3d3e5).

Sender.frame() no longer returns empty chunks (85319a72).

Commits

c18a80a [dist] 8.22.1
2ab3d3e [minor] Use http.websocket{M,Unm}ask() if possible (#2347)
c9efa88 [ci] Test on node 27
aa91518 [test] Skip test on Node.js versions where it does not apply (#2340)
b54ca10 [fix] Do not truncate the URL path of IPC URLs at : (#2344)
85319a7 [minor] Prevent Sender.frame() from returning empty chunks
See full diff in compare view

Updates @fastify/cookie from 11.1.3 to 11.1.5

Release notes

Sourced from @fastify/cookie's releases.

v11.1.5

What's Changed

refactor: pass only encode option to cookie serializer, add tests by @ezefernandezyf in fastify/fastify-cookie#377

New Contributors

@ezefernandezyf made their first contribution in fastify/fastify-cookie#377

Full Changelog: fastify/fastify-cookie@v11.1.4...v11.1.5

v11.1.4

What's Changed

perf(signer): early exit on missing delimiter in unsign to avoid redundant HMAC calculations by @TalhaHunter101 in fastify/fastify-cookie#379

fix: forward encode option to cookie serializer by @lprnmns in fastify/fastify-cookie#374

New Contributors

@TalhaHunter101 made their first contribution in fastify/fastify-cookie#379

@lprnmns made their first contribution in fastify/fastify-cookie#374

Full Changelog: fastify/fastify-cookie@v11.1.3...v11.1.4

Commits

a96460b Bumped v11.1.5
7f9551e fix: forward custom encode option to cookie serializer (#377)
4f47cf1 Bumped v11.1.4
c07e472 fix: forward encode option to cookie serializer (#374)
d27beb4 perf(signer): add early delimiter check in unsign to avoid redundant HMAC com...
See full diff in compare view

Updates @types/bun from 1.4.2 to 1.4.4

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… directory with 9 updates Bumps the dev-dependencies-minor-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@hono/node-server](https://github.com/honojs/node-server) | `2.1.4` | `2.1.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.6` | | [fastify](https://github.com/fastify/fastify) | `5.12.5` | `5.12.7` | | [h3](https://github.com/h3js/h3) | `2.0.2` | `2.0.8` | | [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.91` | `0.0.93` | | [srvx](https://github.com/h3js/srvx) | `1.0.5` | `1.0.8` | | [ws](https://github.com/websockets/ws) | `8.22.0` | `8.22.1` | | [@fastify/cookie](https://github.com/fastify/fastify-cookie) | `11.1.3` | `11.1.5` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.4` | Updates `@hono/node-server` from 2.1.4 to 2.1.5 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.1.4...v2.1.5) Updates `@types/node` from 26.6.4 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `fastify` from 5.12.5 to 5.12.7 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.5...v5.12.7) Updates `h3` from 2.0.2 to 2.0.8 - [Release notes](https://github.com/h3js/h3/releases) - [Changelog](https://github.com/h3js/h3/blob/main/CHANGELOG.md) - [Commits](h3js/h3@v2.0.2...v2.0.8) Updates `pkg-pr-new` from 0.0.91 to 0.0.93 - [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.93/packages/cli) Updates `srvx` from 1.0.5 to 1.0.8 - [Release notes](https://github.com/h3js/srvx/releases) - [Changelog](https://github.com/h3js/srvx/blob/main/CHANGELOG.md) - [Commits](h3js/srvx@v1.0.5...v1.0.8) Updates `ws` from 8.22.0 to 8.22.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.22.0...8.22.1) Updates `@fastify/cookie` from 11.1.3 to 11.1.5 - [Release notes](https://github.com/fastify/fastify-cookie/releases) - [Commits](fastify/fastify-cookie@v11.1.3...v11.1.5) Updates `@types/bun` from 1.4.2 to 1.4.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: fastify dependency-version: 5.12.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: h3 dependency-version: 2.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: pkg-pr-new dependency-version: 0.0.93 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: srvx dependency-version: 1.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: ws dependency-version: 8.22.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: "@fastify/cookie" dependency-version: 11.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch - dependency-name: "@types/bun" dependency-version: 1.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

pkg-pr-new · 2026-11-01T12:28:13Z

@standard-server/aws-lambda

npm i https://pkg.pr.new/@standard-server/aws-lambda@180

@standard-server/core

npm i https://pkg.pr.new/@standard-server/core@180

@standard-server/fastify

npm i https://pkg.pr.new/@standard-server/fastify@180

@standard-server/fetch

npm i https://pkg.pr.new/@standard-server/fetch@180

@standard-server/node

npm i https://pkg.pr.new/@standard-server/node@180

@standard-server/peer

npm i https://pkg.pr.new/@standard-server/peer@180

@standard-server/shared

npm i https://pkg.pr.new/@standard-server/shared@180

commit: ad1751c

codspeed · 2026-11-01T12:29:08Z

Merging this PR will not alter performance

1 warning

⚠️ 4 benchmarks are dominated by system calls

System calls cannot be simulated consistently and are left out of the measure. The reported value understates the real cost. Switch to the Walltime instrument to measure them.

Learn more about system calls

See affected benchmarks

✅ 26 untouched benchmarks
⏩ 108 skipped benchmarks¹

_{Comparing dependabot/npm_and_yarn/dev-dependencies-minor-patch-1f09e25ace (ad1751c) with main (216da52)²}

108 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩
No successful run was found on main (23bc2c9) during the generation of this report, so 216da52 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

codecov · 2026-11-01T12:29:20Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026

Navigation Menu

Repository navigation

chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 9 updates - #180

chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 9 updates#180
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-minor-patch-1f09e25ace

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

pkg-pr-new Bot commented Nov 1, 2026

Uh oh!

codspeed Bot commented Nov 1, 2026

Uh oh!

codecov Bot commented Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v2.1.5

What's Changed

New Contributors

v5.12.7

v5.12.6

⚠️ Security Release

What's Changed

v2.0.8

🩹 Fixes

v2.0.7

🩹 Fixes

v2.0.6

🩹 Fixes

v2.0.5

🩹 Fixes

v2.0.4

📦 Build

🏡 Chore

v2.0.3

🩹 Fixes

v2.0.8

🩹 Fixes

❤️ Contributors

v2.0.7

🩹 Fixes

❤️ Contributors

v2.0.6

🩹 Fixes

❤️ Contributors

v2.0.5

🩹 Fixes

❤️ Contributors

v1.0.8

🩹 Fixes

v1.0.7

🩹 Fixes

v1.0.6

🩹 Fixes

🏡 Chore

🤖 CI

❤️ Contributors

v1.0.8

🩹 Fixes

🏡 Chore

🤖 CI

❤️ Contributors

v1.0.7

🩹 Fixes

❤️ Contributors

v1.0.6

🩹 Fixes

🏡 Chore

8.22.1

Bug fixes

Other notable changes

v11.1.5

What's Changed

New Contributors

v11.1.4

What's Changed

New Contributors

Uh oh!

pkg-pr-new Bot commented Nov 1, 2026

Uh oh!

codspeed Bot commented Nov 1, 2026

Merging this PR will not alter performance

Footnotes

Uh oh!

codecov Bot commented Nov 1, 2026

Codecov Report

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development