chore(deps): update non-major dependencies by renovate[bot] · Pull Request #180 · signalwire/signalwire-typescript

renovate · 2026-08-03T03:44:02Z

This PR contains the following updates:

Package	Change	Age	Confidence
@hono/node-server	`2.0.11` → `2.1.0`
eslint (source)	`10.7.0` → `10.8.0`
hono (source)	`4.12.32` → `4.13.1`
js-yaml	`4.3.0` → `4.3.1`
tsx (source)	`4.23.1` → `4.23.10`
typescript-eslint (source)	`8.65.0` → `8.66.0`
ws	`8.21.1` → `8.21.2`

Release Notes

honojs/node-server (@hono/node-server)

`v2.1.0`

Compare Source

What's Changed

feat: add Early Hints (HTTP 103) middleware by @bilal-azam in #378
fix(listener): avoid uncaught error when force-closing a non-standard socket by @mohamedramadan14 in #383

New Contributors

@bilal-azam made their first contribution in #378
@mohamedramadan14 made their first contribution in #383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

`v2.0.12`

Compare Source

What's Changed

test: replace supertest by @BlankParticle in #379
fix(response): copy headers when init is a foreign Response by @yusukebe in #382

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

eslint/eslint (eslint)

`v10.8.0`

Compare Source

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

honojs/hono (hono)

`v4.13.1`

Compare Source

`v4.13.0`

Compare Source

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

Here is benchmarks/fetch comparing v4.12 and v4.13 (ROUNDS=5 ./compare.sh, Bun 1.4.0, Apple Silicon — each measurement runs in a fresh process, and the variant order is reversed every round to avoid warm-up bias):

Benchmark	v4.12	v4.13	Speedup
`ping` — `GET /`	165.83 ns	163.99 ns	1.01x
`query` — `GET /id/1?name=bun`	674.40 ns	616.99 ns	1.09x
`json` — `GET /user`	528.99 ns	422.44 ns	1.25x
`body` — `POST /json`	1.16 µs	1.00 µs	1.15x

The individual changes:

perf(context): iterate the header record with for..in #5118
perf(url): replace regex tests with indexOf #5121
perf(context): skip Headers creation when there are no headers to merge #5122
perf(urls): refactor tryDecodeURIComponent #5158
perf(request): allocate #validatedData lazily #5175
perf(request): probe the body cache without allocating #5176

In addition, the RegExpRouter rewrite described below makes route registration plus the first match roughly 20% faster.

Thanks @kibertoad for the contributions!

First-class QUERY method support

The QUERY method — a safe, idempotent method that carries a request body — is now a first-class citizen in Hono. You can define QUERY handlers with app.query():

const app = new Hono()

app.query('/search', async (c) => {
  const conditions = await c.req.json()
  return c.json(await search(conditions))
})

Thanks @shellhaki!

QUERY support across built-in middleware

The built-in middleware has been updated to handle QUERY requests properly:

Cache Middleware

The Cache Middleware now caches QUERY responses. Following RFC 10008 Section 2.7, the cache key incorporates a SHA-256 digest of the request content and its representation metadata, so different query bodies are cached separately:

app.query(
  '/search',
  cache({
    cacheName: 'search-cache',
    cacheControl: 'max-age=3600',
  })
)

Note: To support this, the internal cache key format has changed for all methods, including GET. Cached entries are now stored under an internal URL of the form /.hono/cache?__hono_cache_key=.... If you purge cache entries by URL outside of the middleware (e.g. calling caches.delete() with the original request URL), you will need to update that logic. Existing cache entries stored with the old format will simply be re-fetched.

ETag Middleware

The ETag Middleware now handles conditional requests for QUERY, returning 304 Not Modified when If-None-Match matches.

CORS Middleware

The CORS Middleware now includes QUERY in the default Access-Control-Allow-Methods, which is now GET, HEAD, PUT, POST, DELETE, PATCH, QUERY. If you specify allowMethods explicitly, nothing changes for you.

Thanks @usualoma and @Cherry!

Method Not Allowed Middleware

The new Method Not Allowed Middleware returns a 405 Method Not Allowed response with a proper Allow header when the request path matches a registered route but the method does not:

import { methodNotAllowed } from 'hono/method-not-allowed'

const app = new Hono()

app.use(methodNotAllowed({ app }))

app.get('/hello', (c) => c.text('Hello!'))
app.post('/hello', (c) => c.text('Posted!'))

// PUT /hello -> 405 Method Not Allowed
// Allow: GET, HEAD, POST

You can customize the response with the onMethodNotAllowed option:

app.use(
  methodNotAllowed({
    app,
    onMethodNotAllowed: (c, methods) =>
      c.json({ error: 'Method Not Allowed' }, 405, { Allow: methods.join(', ') }),
  })
)

Thanks @usualoma!

RegExpRouter throws `UnsupportedPathError` at registration time

The RegExpRouter now detects unsupported path combinations when routes are registered, instead of at the first matching request. This means misconfigured routes fail fast at startup rather than at runtime. As a bonus, registration plus the first match is roughly 20% faster.

Thanks @usualoma!

Other improvements

hono/utils/headers has been synced with the IANA HTTP Field Name Registry, adding newly registered fields such as Accept-Query. Thanks @akahoshi1421!
The JWT and JWK middleware now accept a realm option for the WWW-Authenticate challenge on 401 responses, and challenge values are properly escaped. Thanks @arhxam!
JSX: useRef and RefObject are now aligned with React 19. Note that this is a type-level change — RefObject<T> is now { current: T }, so type a nullable ref as RefObject<T | null>, and pass useRef(undefined) instead of useRef(). Thanks @ashunar0!
JSX: a function component can now return an array of children without throwing during server-side rendering. Thanks @natsuki-engr!
The Compress Middleware now sets Vary: Accept-Encoding on negotiated responses. Thanks @arhxam!

All changes

perf(hono-base): avoid rest parameter in fetch by @yusukebe in #5113
perf(context): iterate the header record with for..in by @yusukebe in #5118
perf(url/request): replace regex tests with indexOf by @yusukebe in #5121
perf(context): skip Headers creation when there are no headers to merge by @yusukebe in #5122
perf(urls): refactor tryDecodeURIComponent by @yusukebe in #5158
chore(benchmarks): correct src path on Windows, add json and middleware cases by @kibertoad in #5173
perf(context): drop the throwaway env field initializer by @kibertoad in #5174
perf(request): allocate #validatedData lazily by @kibertoad in #5175
perf(request): probe the body cache without allocating by @kibertoad in #5176
chore(benchmarks): stabilize measurements by forcing mitata batching by @yusukebe in #5183
perf(hono-base): restore the rest parameter in fetch by @yusukebe in #5184
perf(context): restore the env field initializer by @yusukebe in #5186
feat: add first-class QUERY method support by @shellhaki in #5070
feat(etag): support conditional requests for the QUERY method by @Cherry in #5111
feat(cors): allow QUERY by default as a first-class method by @usualoma in #5115
feat(cache): add first-class support for QUERY requests by @usualoma in #5119
feat(jsx): add React-compatible overloads to useRef by @ashunar0 in #5063
feat(middleware): add method-not-allowed middleware by @usualoma in #5132
feat(jwt,jwk): add a configurable WWW-Authenticate realm by @arhxam in #5141
feat(utils/headers): sync HTTP field types with the IANA registry by @akahoshi1421 in #5153
fix(jsx): allow a function component to return an array by @natsuki-engr in #5179
feat(reg-exp-router): throw UnsupportedPathError during route registration by @usualoma in #5171
fix(compress): set Vary: Accept-Encoding on negotiated responses by @arhxam in #5137

Full Changelog: honojs/hono@v4.12.34...v4.13.0

Thank you to all contributors!

`v4.12.34`

Compare Source

`v4.12.33`

Compare Source

What's Changed

fix(cookie): relax name validation when parsing Cookie header in #5164
chore: bump @hono/node-server in #5167
fix(jsx): handle useSyncExternalStore subscription and snapshot changes in #5166
chore: remove undici in favor of global fetch in #5168

Full Changelog: honojs/hono@v4.12.32...v4.12.33

nodeca/js-yaml (js-yaml)