chore(deps-dev): bump the dependencies group with 7 updates by dependabot[bot] · Pull Request #196 · idempot-dev/idempot-js

dependabot · 2026-08-17T03:57:19Z

Bumps the dependencies group with 7 updates:

Package	From	To
@hono/node-server	`2.0.12`	`2.1.0`
eslint	`10.8.0`	`10.8.1`
fastify	`5.11.0`	`5.11.3`
hono	`4.12.34`	`4.13.1`
oxc-minify	`0.142.0`	`0.143.0`
pg	`8.22.0`	`8.23.0`
semantic-release	`25.0.8`	`25.0.9`

Updates @hono/node-server from 2.0.12 to 2.1.0

Release notes

Sourced from @hono/node-server's releases.

v2.1.0

What's Changed

feat: add Early Hints (HTTP 103) middleware by @bilal-azam in honojs/node-server#378

fix(listener): avoid uncaught error when force-closing a non-standard socket by @mohamedramadan14 in honojs/node-server#383

New Contributors

@bilal-azam made their first contribution in honojs/node-server#378

@mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

82ba34e 2.1.0
1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
977a242 feat: add Early Hints (HTTP 103) middleware (#378)
See full diff in compare view

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)

151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)

6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)

4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)

677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

7d0cbf8 docs: Update README (GitHub Actions Bot)

0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)

678c90b docs: Update README (GitHub Actions Bot)

8a10424 docs: Update README (GitHub Actions Bot)

69bb948 docs: Update README (GitHub Actions Bot)

Chores

0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])

05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)

5611035 test: add error locations info to no-void (#21185) (Lee Daeun)

ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])

f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)

1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)

d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)

65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)

22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)

55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])

7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])

eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)

60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)

f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)

d086293 test: add error locations to no-undef (#21147) (JIYEON)

cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)

688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)

7c1e175 test: add error locations to require-await (#21145) (Grit)

588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)

059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)

5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)

Commits

c049dc3 10.8.1
a3f7826 Build: changelog update for 10.8.1
18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173)
0a14800 chore: update github/codeql-action action to v4.37.4 (#21196)
7d0cbf8 docs: Update README
05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191)
5611035 test: add error locations info to no-void (#21185)
ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176)
f131c03 chore: improve ecosystem test failure reporting (#20937)
0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183)
Additional commits viewable in compare view

Updates fastify from 5.11.0 to 5.11.3

Release notes

Sourced from fastify's releases.

v5.11.3

What's Changed

fix: clear trailer state when removing all trailers by @Ram-blip in fastify/fastify#6845

docs: document percent-decoded route params as untrusted input by @mcollina in fastify/fastify#6903

docs(errors): document what the default error handler sends by @basteez in fastify/fastify#6894

docs(readme): fix grammar and cjs capitalization by @minirang in fastify/fastify#6899

fix: pass null instead of undefined to requestCompleted on success by @lazerg in fastify/fastify#6837

docs(encapsulation): clarify nested plugin scopes by @jean-michelet in fastify/fastify#6893

chore: Bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6916

chore: Bump fastify/workflows/.github/workflows/nested-quality.yml from 6.0.0 to 7.0.0 by @dependabot[bot] in fastify/fastify#6917

fix: recognize constructor-assigned built-in properties as decorator … by @aquie00t in fastify/fastify#6892

fix: reset lastIndex before testing global/sticky content-type RegExp parsers by @zelinewang in fastify/fastify#6846

New Contributors

@minirang made their first contribution in fastify/fastify#6899

@lazerg made their first contribution in fastify/fastify#6837

@zelinewang made their first contribution in fastify/fastify#6846

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

fix fastify version in fastify.js

Full Changelog: fastify/fastify@v5.11.1...v5.11.2

v5.11.1

What's Changed

fix: add http method override warning by @jean-michelet in fastify/fastify#6879

fix(types): allow explicit http2: false in server options by @Tony133 in fastify/fastify#6888

docs: clarify what attachValidation exposes on request.validationError by @basteez in fastify/fastify#6891

fix: do not force close in-flight connections when forceCloseConnections is 'idle' by @aquie00t in fastify/fastify#6889

New Contributors

@basteez made their first contribution in fastify/fastify#6891

Full Changelog: fastify/fastify@v5.11.0...v5.11.1

Commits

a22cede Bumped v5.11.3
16a74e7 fix: reset lastIndex before testing global/sticky content-type RegExp parsers...
27938ac fix: recognize constructor-assigned built-in properties as decorator dependen...
a2f5905 chore: Bump fastify/workflows/.github/workflows/nested-quality.yml (#6917)
22c419a chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#6916)
f5b1400 docs(encapsulation): clarify nested plugin scopes (#6893)
9eaef51 fix: pass null instead of undefined to requestCompleted on success (#6837)
39e87e8 docs(readme): fix grammar and cjs capitalization (#6899)
3f6451c docs(errors): document what the default error handler sends (#6894)
f28528f docs: document percent-decoded route params as untrusted input (#6903)
Additional commits viewable in compare view

Updates hono from 4.12.34 to 4.13.1

Release notes

Sourced from hono's releases.

v4.13.1

What's Changed

fix(trie-router): count every slash a pattern consumes by @Jaybhade in honojs/hono#5189

fix(utils/stream): re-acquire writer lock when pipe() throws by @Sriharsha-dev369 in honojs/hono#4988

fix(etag): skip unsafe methods or error responses on non-* case by @na-trium-144 in honojs/hono#5196

New Contributors

@Jaybhade made their first contribution in honojs/hono#5189

@Sriharsha-dev369 made their first contribution in honojs/hono#4988

Full Changelog: honojs/hono@v4.13.0...v4.13.1

v4.13.0

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

Here is benchmarks/fetch comparing v4.12 and v4.13 (ROUNDS=5 ./compare.sh, Bun 1.4.0, Apple Silicon — each measurement runs in a fresh process, and the variant order is reversed every round to avoid warm-up bias):

Benchmark v4.12 v4.13 Speedup

ping — GET / 165.83 ns 163.99 ns 1.01x

query — GET /id/1?name=bun 674.40 ns 616.99 ns 1.09x

json — GET /user 528.99 ns 422.44 ns 1.25x

body — POST /json 1.16 µs 1.00 µs 1.15x

The individual changes:

perf(context): iterate the header record with for..in honojs/hono#5118

perf(url): replace regex tests with indexOf honojs/hono#5121

perf(context): skip Headers creation when there are no headers to merge honojs/hono#5122

perf(urls): refactor tryDecodeURIComponent honojs/hono#5158

perf(request): allocate #validatedData lazily honojs/hono#5175

perf(request): probe the body cache without allocating honojs/hono#5176

In addition, the RegExpRouter rewrite described below makes route registration plus the first match roughly 20% faster.

Thanks @kibertoad for the contributions!

First-class QUERY method support

The QUERY method — a safe, idempotent method that carries a request body — is now a first-class citizen in Hono. You can define QUERY handlers with app.query():
const app = new Hono()
</tr></table>

... (truncated)

Commits

cf78528 4.13.1
f6aa913 fix(etag): skip unsafe methods or error responses on non-* case (#5196)
cd31bc1 fix(utils/stream): re-acquire writer lock when pipe() throws (#4988)
569b419 fix(trie-router): count every slash a pattern consumes (#5189)
192768f 4.13.0
b0c2d90 Merge pull request #5154 from honojs/next
8f07028 fix(compress): set Vary: Accept-Encoding on negotiated responses (#5137)
8a0b18f feat(reg-exp-router): throw UnsupportedPathError during route registration (#...
3feb355 fix(jsx): allow a function component to return an array (#5179)
5d911d2 feat(utils/headers): add HTTP fields newly registered with IANA (#5153)
Additional commits viewable in compare view

Updates oxc-minify from 0.142.0 to 0.143.0

Release notes

Sourced from oxc-minify's releases.

oxc crates_v0.143.0

💥 BREAKING CHANGES

4120da0 semantic: [BREAKING] Return borrowed JSDoc so the parse cache works (#25186) (Connor Shea)

f0a41c8 allocator: [BREAKING] Remove ArenaBox::dangling method (#25236) (overlookmotel)

067da8c ast: [BREAKING] Store single parameter in TSIndexSignature::parameter (#25154) (camc314)

a0c7788 ast: [BREAKING] Change TSIndexSignatureName::name to Ident (#25150) (camc314)

1bdedd1 ast: [BREAKING] Introduce ExportDeclaration, ExportFromDeclaration (#25095) (camc314)

c917f20 ast: [BREAKING] Introduce ArrowFunctionBody enum (#24987) (camc314)

7e1199c ast: [BREAKING] Remove conversion to Box from AST builder methods (#25038) (overlookmotel)

🚀 Features

3c8312e allocator: Make Box Send + Sync when the type it contains is (#25242) (overlookmotel)

cb5bc08 ast: Derive GetSpan for Comment (#25147) (leaysgur)

8541e18 ast_tools: Generate minifier scope collector (#25088) (camc314)

5acdae2 ecmascript: Skip transparent TS expressions (#25072) (camc314)

85d0f4d napi: Add React Compiler transform binding (#24934) (Boshen)

70d6ece minifier: Fold safe integer exponentiation (#25009) (Dunqing)

73fc747 minifier: Enable termination statement optimization for do while (#24921) (Armano)

5eadfdb minifier: Fold safe integer division and remainder (#24981) (Dunqing)

🐛 Bug Fixes

6c9ee14 minifier: Preserve if-chain idempotency and correct side effects when alternate should not be moved (#25041) (Armano)

8a47ff3 ecmascript: Do not treat lone-surrogate strings as constants (#25084) (Dunqing)

468b970 isolated-declarations: Strip re-export attributes (#25090) (camc314)

a70035d parser: Report export imports in namespaces (#25086) (camc314)

5d8ccf5 react_compiler: Preserve nonfatal diagnostics (#25066) (Boshen)

d349e4a react_compiler: Match eslint suppression gating (#25068) (Boshen)

0dc16ba react_compiler: Track catch block declarations (#25067) (Boshen)

e6734a5 minifier: Fold typeof comparisons with known object strings (#25017) (Dunqing)

3a9d5a5 minifier: Keep typeof foo == ['object'] as-is (#24941) (sapphi-red)

10ec276 ast: Custom AST builder methods take IntoIn<ArenaBox> where child method does (#25033) (overlookmotel)

fbe8d31 minifier: Respect targets when folding RegExp source (#24790) (Dunqing)

⚡ Performance

fb402b0 minifier: Stop re-deriving printed numeric spellings (#25103) (Dunqing)

7251e52 react_compiler: Avoid large types on stack (#25037) (overlookmotel)

e07718f isolated_declarations: Avoid large types on stack (#25036) (overlookmotel)

9fb1e3e transformer: Avoid large types on stack (#25035) (overlookmotel)

8b80f8b parser: Avoid large types on stack (#25034) (overlookmotel)

📚 Documentation

2ea0aa9 ast: Correct grammar in AST builder methods doc comments (#25173) (overlookmotel)

Commits

45a17c2 release(crates): oxc v0.143.0 (#25250)
b937e3e chore(deps): update napi (#25019)
See full diff in compare view

Updates pg from 8.22.0 to 8.23.0

Changelog

Sourced from pg's changelog.

pg@8.23.0

Add support for query pipelineing.

Commits

df274d1 Publish
eb19d0f Add opt-in query pipelining (#3652)
See full diff in compare view

Updates semantic-release from 25.0.8 to 25.0.9

Release notes

Sourced from semantic-release's releases.

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

do not expose the authenticated repository URL in EGITNOPERMISSION errors (#4283) (8d905a5)

Commits

8d905a5 fix: do not expose the authenticated repository URL in EGITNOPERMISSION error...
e176eb7 ci(action): update github/codeql-action action to v4.37.6 (#4282)
d27db1b chore(deps): update dependency js-yaml to v4.3.1 (#4279)
55beeac ci(action): update github/codeql-action action to v4.37.5 (#4277)
7bf348d chore(deps): update dependency nock to v14.0.17 (#4275)
2ec3ba2 chore(deps): update dependency mockserver-client to v7.5.0 (#4274)
d3b7724 chore(deps): update npm to v12.0.2 (#4273)
514dc5f chore(deps): update dependency npm-run-all2 to v9.0.3 (#4271)
f25b716 ci(action): update github/codeql-action action to v4.37.4 (#4270)
1114416 chore: remove 'next version' badge from README (#4265)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [@hono/node-server](https://github.com/honojs/node-server) | `2.0.12` | `2.1.0` | | [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` | | [fastify](https://github.com/fastify/fastify) | `5.11.0` | `5.11.3` | | [hono](https://github.com/honojs/hono) | `4.12.34` | `4.13.1` | | [oxc-minify](https://github.com/oxc-project/oxc/tree/HEAD/napi/minify) | `0.142.0` | `0.143.0` | | [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.22.0` | `8.23.0` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.8` | `25.0.9` | Updates `@hono/node-server` from 2.0.12 to 2.1.0 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v2.0.12...v2.1.0) Updates `eslint` from 10.8.0 to 10.8.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.8.0...v10.8.1) Updates `fastify` from 5.11.0 to 5.11.3 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.11.0...v5.11.3) Updates `hono` from 4.12.34 to 4.13.1 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.34...v4.13.1) Updates `oxc-minify` from 0.142.0 to 0.143.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/minify/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.143.0/napi/minify) Updates `pg` from 8.22.0 to 8.23.0 - [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md) - [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg) Updates `semantic-release` from 25.0.8 to 25.0.9 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v25.0.8...v25.0.9) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: eslint dependency-version: 10.8.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: fastify dependency-version: 5.11.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: hono dependency-version: 4.13.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: oxc-minify dependency-version: 0.143.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pg dependency-version: 8.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: semantic-release dependency-version: 25.0.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-08-17T03:57:21Z

Deploying idempot-js with Cloudflare Pages

Latest commit:	`55bd347`
Status:	✅ Deploy successful!
Preview URL:	https://a4b32620.idempot-js.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-depe-z4rp.idempot-js.pages.dev

View logs

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 17, 2026

Navigation Menu

Uh oh!

Uh oh!

chore(deps-dev): bump the dependencies group with 7 updates - #196

chore(deps-dev): bump the dependencies group with 7 updates#196
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-7484fac567

dependabot Bot commented on behalf of github Aug 17, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 17, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Benchmark	v4.12	v4.13	Speedup
`ping` — `GET /`	165.83 ns	163.99 ns	1.01x
`query` — `GET /id/1?name=bun`	674.40 ns	616.99 ns	1.09x
`json` — `GET /user`	528.99 ns	422.44 ns	1.25x
`body` — `POST /json`	1.16 µs	1.00 µs	1.15x

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026

v2.1.0

What's Changed

New Contributors

v10.8.1

Bug Fixes

Documentation

Chores

v5.11.3

What's Changed

New Contributors

v5.11.2

What's Changed

v5.11.1

What's Changed

New Contributors

v4.13.1

What's Changed

New Contributors

v4.13.0

Performance improvements

First-class QUERY method support

oxc crates_v0.143.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

pg@8.23.0

v25.0.9

25.0.9 (2026-08-05)

Bug Fixes

Uh oh!

cloudflare-workers-and-pages Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying idempot-js with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

cloudflare-workers-and-pages Bot commented Aug 17, 2026 •

edited

Loading