chore(server):(deps): bump the version-all group across 1 directory with 6 updates by dependabot[bot] · Pull Request #64 · manieperplex/dashlight

dependabot · 2026-07-19T01:03:41Z

Bumps the version-all group with 6 updates in the /packages/server directory:

Package	From	To
@hono/node-server	`2.0.6`	`2.0.8`
hono	`4.12.27`	`4.12.29`
js-yaml	`4.2.0`	`4.3.0`
lru-cache	`11.5.1`	`11.5.2`
undici	`8.5.0`	`8.7.0`
tsx	`4.22.4`	`4.23.0`

Updates @hono/node-server from 2.0.6 to 2.0.8

Release notes

Sourced from @hono/node-server's releases.

v2.0.8

What's Changed

ci(release): add --no-git-checks option for pnpm stage publish by @yusukebe in honojs/node-server#369

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

chore: migrate to pnpm by @BlankParticle in honojs/node-server#367

fix(serve-static): serve precompressed files for application/octet-stream by @yusukebe in honojs/node-server#366

chore: bump supertest by @yusukebe in honojs/node-server#368

Full Changelog: honojs/node-server@v2.0.6...v2.0.7

Commits

114c15e 2.0.8
5db2d5d ci(release): add --no-git-checks option for pnpm stage publish (#369)
a528a77 2.0.7
b2d610c chore: bump supertest (#368)
1b0040a fix(serve-static): serve precompressed files for application/octet-stream (#366)
ad5b13a chore: migrate to pnpm (#367)
See full diff in compare view

Updates hono from 4.12.27 to 4.12.29

Release notes

Sourced from hono's releases.

v4.12.29

What's Changed

fix(client): merge function headers with per-request headers by @yusukebe in honojs/hono#5092

chore: fix no-op tsc in test script by @yusukebe in honojs/hono#5093

fix(lambda-edge): resolve the handler with the value passed to the callback by @yusukebe in honojs/hono#5094

docs(language): add JSDoc @example to languageDetector by @codebybilal18 in honojs/hono#5081

test(workerd): add compatibilityDate by @yusukebe in honojs/hono#5100

fix(lambda-edge): base64 encode content-encoded response bodies by @yusukebe in honojs/hono#5099

fix(aws-lambda): treat any non-identity content-encoding as binary by @yusukebe in honojs/hono#5101

fix(types): strip extra properties from array types in JSONParsed by @Arman-Luthra in honojs/hono#5103

fix(trie-router): match empty wildcard remainder after regexp param by @usualoma in honojs/hono#5102

fix(etag): treat If-None-Match: * as a match by @yusukebe in honojs/hono#5084

New Contributors

@codebybilal18 made their first contribution in honojs/hono#5081

@Arman-Luthra made their first contribution in honojs/hono#5103

Full Changelog: honojs/hono@v4.12.28...v4.12.29

v4.12.28

What's Changed

fix(serve-static): treat empty string content as found by @yusukebe in honojs/hono#5062

docs(MIGRATION): fix req.raw.headers reference (property, not method) by @EduardF1 in honojs/hono#5047

chore: don't publish *.tsbuildinfo by @yusukebe in honojs/hono#5066

fix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by @yusukebe in honojs/hono#5067

fix: avoid circular dependency between body.ts and request.ts by @usualoma in honojs/hono#5071

fix(bun): report the requested subprotocol on WSContext.protocol by @greymoth-jp in honojs/hono#5059

chore: bump devDependencies by @yusukebe in honojs/hono#5085

fix(aws-lambda): detect V2 events by request context, not rawPath alone by @VihaanAgarwal in honojs/hono#5033

docs(context-storage): fix JSDoc by @yusukebe in honojs/hono#5086

New Contributors

@EduardF1 made their first contribution in honojs/hono#5047

@greymoth-jp made their first contribution in honojs/hono#5059

@VihaanAgarwal made their first contribution in honojs/hono#5033

Full Changelog: honojs/hono@v4.12.27...v4.12.28

Commits

cda1af2 4.12.29
2126289 fix(etag): treat If-None-Match: * as a match (#5084)
0fc7ffc fix(trie-router): match empty wildcard remainder after regexp param (#5102)
ab590e4 fix(types): strip extra properties from array types in JSONParsed (#5103)
b93a254 fix(aws-lambda): treat any non-identity content-encoding as binary (#5101)
6217f4b fix(lambda-edge): base64 encode content-encoded response bodies (#5099)
ba89e97 test(workerd): add compatibilityDate (#5100)
46557ef docs(language): add JSDoc @example to languageDetector (#5081)
24547a6 fix(lambda-edge): resolve the handler with the value passed to the callback (...
9c6ccd7 chore: fix no-op tsc in test script (#5093)
Additional commits viewable in compare view

Updates js-yaml from 4.2.0 to 4.3.0

Changelog

Sourced from js-yaml's changelog.

4.3.0, 3.15.0 - 2026-06-27

Security

Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.

Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

[breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

Added named exports for schemas, tags, parser events and AST utilities.

Reworked JSON_SCHEMA and CORE_SCHEMA with spec-compliant scalar resolution rules, and added YAML11_SCHEMA.

Added realMapTag for lossless mappings with non-string and complex keys. Object-based mappings now reject complex keys instead of stringifying them.

Added dump() transform option for changing the generated AST before rendering.

Added dump() options seqInlineFirst, flowBracketPadding, flowSkipCommaSpace, flowSkipColonSpace, quoteFlowKeys, quoteStyle and tagBeforeAnchor.

Added formal data layers (events and AST) for modular data pipelines.

Added low-level parser (to events), presenter and visitor APIs.

Added the YAML Test Suite to the test set.

Changed

See the migration guide for upgrade notes.

Rewritten in TypeScript and reorganized the public API around flat named exports.

... (truncated)

Commits

33d05b5 4.3.0 released
663bfab Drop demo publish, to not override new v5 one.
1cb8c7b Add v4-legacy tag for publish
02f27af Restore umd builds back to es5
8be84ed Fix es5 compatibility
59423c6 Replace maxMergeSeqLength option with maxTotalMergeKeys (more robust). Ba...
6842ef6 doc polish
See full diff in compare view

Updates lru-cache from 11.5.1 to 11.5.2

Commits

16b3a91 11.5.2
0b0a77e fire autopurge again if the first time isn't stale
See full diff in compare view

Updates undici from 8.5.0 to 8.7.0

Release notes

Sourced from undici's releases.

v8.7.0

What's Changed

test: guard balanced-pool error port lookup by @mcollina in nodejs/undici#5463

perf: optimize http/2 request hot path by @mcollina in nodejs/undici#5483

fix: do not reject open-ended Range values in simpleRangeHeaderValue by @spokodev in nodejs/undici#5490

fix(eventsource): set use-URL-credentials flag by @Ram-blip in nodejs/undici#5489

test: deflake connect-timeout watchdog by @mcollina in nodejs/undici#5197

docs: correct npm script name and JSON syntax in examples by @lenoxfernando in nodejs/undici#5496

fix: reject non-ascii octets in validateCookiePath by @spokodev in nodejs/undici#5452

fix(readable): ignore late consume chunks by @marko1olo in nodejs/undici#5375

fix(h2): destroy the stream on abort instead of relying on close() by @staylor in nodejs/undici#5462

fix: ignore an unparseable Set-Cookie Expires attribute by @spokodev in nodejs/undici#5488

docs: add reproduction guide and update bug report template by @mcollina in nodejs/undici#5451

fix(h2): guard onResponse against a 'response' event delivered after completion by @staylor in nodejs/undici#5440

fix(h2): requeue request on GOAWAY'd session instead of crashing by @staylor in nodejs/undici#5453

fix: add static buildDispatch method to RedirectHandler type definition by @matthieusieben in nodejs/undici#5442

fix: auto-detect HTTP proxy tunneling by @mcollina in nodejs/undici#5116

New Contributors

@spokodev made their first contribution in nodejs/undici#5490

@lenoxfernando made their first contribution in nodejs/undici#5496

@staylor made their first contribution in nodejs/undici#5462

Full Changelog: nodejs/undici@v8.6.0...v8.7.0

v8.6.0

What's Changed

build(deps-dev): bump proxy from 4.0.0 to 4.1.0 by @dependabot[bot] in nodejs/undici#5433

update accept-encoding header in fetch by @KhafraDev in nodejs/undici#5439

fix: drop response chunks after the response stream is destroyed (#5356) by @cesarvspr in nodejs/undici#5357

fix: handle incomplete multi-byte UTF-8 sequences in setEncoding() by @joecwu in nodejs/undici#5003

fix(retry): keep flow-control wired to the active connection across resumes by @bogomya in nodejs/undici#5405

test: cover connect lookup option by @vibhor-aggr in nodejs/undici#5411

test: fail on unexpected reconnect disconnect by @vibhor-aggr in nodejs/undici#5412

build(deps-dev): bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in nodejs/undici#5419

fix(proxy): fail the request when the CONNECT tunnel drops instead of looping by @cesarvspr in nodejs/undici#5441

feat(docs): migrate to doc-kit by @avivkeller in nodejs/undici#5438

build(deps-dev): bump undici from 6.25.0 to 6.27.0 by @dependabot[bot] in nodejs/undici#5445

fetch: fix issue 4058 by @KhafraDev in nodejs/undici#5456

docs: add Interceptors API reference page by @enjoykumawat in nodejs/undici#5446

Document H1 keep-alive trust tradeoff by @mcollina in nodejs/undici#5457

fix(h2): deliver an early final response to an Expect: 100-continue request by @jeswr in nodejs/undici#5470

fix(types): correct deleteCookie attributes by @Ram-blip in nodejs/undici#5461

fix(h1): complete paused parser on socket end instead of crashing by @ronag in nodejs/undici#5474

build(deps): bump github/codeql-action/init from 4.36.1 to 4.36.2 by @dependabot[bot] in nodejs/undici#5476

build(deps): bump github/codeql-action/upload-sarif from 4.36.1 to 4.36.2 by @dependabot[bot] in nodejs/undici#5481

build(deps): bump fastify/github-action-merge-dependabot from 3.12.0 to 3.15.0 by @dependabot[bot] in nodejs/undici#5480

build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in nodejs/undici#5478

build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in nodejs/undici#5482

build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by @trivikr in nodejs/undici#5484

... (truncated)

Commits

cb4c2f1 Bumped v8.7.0 (#5501)
a8d1a95 fix: auto-detect HTTP proxy tunneling (#5116)
cb30e58 fix: add static buildDispatch method to RedirectHandler type definition (#5442)
0c08579 fix(h2): requeue request on GOAWAY'd session instead of crashing (#5453)
e5b3364 fix(h2): guard onResponse against a 'response' event delivered after completi...
c0007f4 docs: add reproduction guide and update bug report template (#5451)
e529cab fix: ignore an unparseable Set-Cookie Expires attribute (#5488)
754742c fix(h2): destroy the stream on abort instead of relying on close() (#5462)
db34f5f fix(readable): ignore late consume chunks (#5375)
4ea05a8 fix: reject non-ascii octets in validateCookiePath (#5452)
Additional commits viewable in compare view

Updates tsx from 4.22.4 to 4.23.0

Release notes

Sourced from tsx's releases.

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

This release is also available on:

npm package (@latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

isolate hook state per async module.register() registration (a305f36)

This release is also available on:

npm package (@latest dist-tag)

Commits

1dfad37 docs: cite esbuild's extension-resolution model in node notes
257bbbb fix: avoid redundant filesystem probes during module resolution
c178197 feat: add multi-scenario startup benchmark suite
51800ac docs: add Node internals knowledge base (notes/node)
a305f36 fix: isolate hook state per async module.register() registration
ca501a9 chore: upgrade skills-npm to v1.2.0
596cd1f test: cover __dirname, __filename, & require.cache in CJS TS file
75d9bf0 test: lock in lenient ESM for ambiguous and CJS-typed packages
1472f3e test: cover ESM-syntax dependency with omitted "type" field
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 6 updates Bumps the version-all group with 6 updates in the /packages/server directory: | Package | From | To | | --- | --- | --- | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.6` | `2.0.8` | | [hono](https://github.com/honojs/hono) | `4.12.27` | `4.12.29` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `4.3.0` | | [lru-cache](https://github.com/isaacs/node-lru-cache) | `11.5.1` | `11.5.2` | | [undici](https://github.com/nodejs/undici) | `8.5.0` | `8.7.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.22.4` | `4.23.0` | Updates `@hono/node-server` from 2.0.6 to 2.0.8 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.6...v2.0.8) Updates `hono` from 4.12.27 to 4.12.29 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.27...v4.12.29) Updates `js-yaml` from 4.2.0 to 4.3.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.2.0...4.3.0) Updates `lru-cache` from 11.5.1 to 11.5.2 - [Changelog](https://github.com/isaacs/node-lru-cache/blob/main/CHANGELOG.md) - [Commits](isaacs/node-lru-cache@v11.5.1...v11.5.2) Updates `undici` from 8.5.0 to 8.7.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v8.5.0...v8.7.0) Updates `tsx` from 4.22.4 to 4.23.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.22.4...v4.23.0) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-all - dependency-name: hono dependency-version: 4.12.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-all - dependency-name: js-yaml dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-all - dependency-name: lru-cache dependency-version: 11.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-all - dependency-name: undici dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-all - dependency-name: tsx dependency-version: 4.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: version-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot assigned manieperplex Jul 19, 2026

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(server):(deps): bump the version-all group across 1 directory with 6 updates#64

chore(server):(deps): bump the version-all group across 1 directory with 6 updates#64
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/packages/server/version-all-0d9732bbcb

dependabot Bot commented on behalf of github Jul 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 19, 2026

v2.0.8

What's Changed

v2.0.7

What's Changed

v4.12.29

What's Changed

New Contributors

v4.12.28

What's Changed

New Contributors

4.3.0, 3.15.0 - 2026-06-27

Security

[5.2.0] - 2026-06-26

Added

Removed

Fixed

[5.1.0] - 2026-06-23

Added

Changed

[5.0.0] - 2026-06-20

Added

Changed

v8.7.0

What's Changed

New Contributors

v8.6.0

What's Changed

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant