fix(deps): update all non-major dependencies by renovate[bot] · Pull Request #92 · rstackjs/rspack-dev-server

renovate · 2026-03-01T20:05:05Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update
@biomejs/biome (source)	`^1.8.3` → `^1.9.4`	devDependencies	patch
@hono/node-server	`^1.13.3` → `^1.19.9`	devDependencies	minor
@rspack/cli (source)	`2.0.0-beta.4` → `2.0.0-canary-20260116`	devDependencies	patch
@rspack/core (source)	`2.0.0-beta.4` → `2.0.0-canary-20260116`	devDependencies	patch
@rspack/plugin-react-refresh	`1.0.0` → `1.6.1`	devDependencies	minor
@types/compression (source)	`^1.7.2` → `^1.8.1`	devDependencies	patch
@types/express-serve-static-core (source)	`^4.17.21` → `^4.19.8`	dependencies	patch
@types/node (source)	`^24.0.14` → `^24.11.0`	devDependencies	minor
@types/node-forge (source)	`^1.3.1` → `^1.3.14`	devDependencies	patch
@types/serve-static (source)	`^1.15.5` → `^1.15.10`	dependencies	patch
@types/sockjs-client (source)	`^1.5.1` → `^1.5.4`	devDependencies	patch
@types/ws (source)	`8.5.10` → `8.18.1`	devDependencies	minor
@types/ws (source)	`^8.5.10` → `^8.18.1`	dependencies	minor
css-loader	`^7.1.2` → `^7.1.4`	devDependencies	patch
hono (source)	`^4.6.8` → `^4.12.3`	devDependencies	minor
ipaddr.js	`^2.1.0` → `^2.3.0`	dependencies	minor
launch-editor	`^2.6.1` → `^2.13.1`	dependencies	minor
nano-staged	`^0.8.0` → `^0.9.0`	devDependencies	minor
node	`20` → `20.20.0`	uses-with	minor
node	`24.11.1` → `24.14.0`	uses-with	minor
open	`^10.0.3` → `^10.2.0`	dependencies	minor
p-retry	`^6.2.0` → `^6.2.1`	dependencies	patch
pnpm (source)	`10.27.0` → `10.30.3`	packageManager	minor
prettier (source)	`3.2.5` → `3.8.1`	devDependencies	minor
puppeteer (source)	`^24.34.0` → `^24.37.5`	devDependencies	minor
react-refresh (source)	`0.14.0` → `0.18.0`	devDependencies	minor
serve-index	`^1.9.1` → `^1.9.2`	dependencies	patch
simple-git-hooks	`^2.11.1` → `^2.13.1`	devDependencies	minor
supertest	`^6.1.3` → `^6.3.4`	devDependencies	patch
webpack	`^5.94.0` → `^5.105.3`	devDependencies	minor
webpack-dev-middleware	`^7.4.2` → `^7.4.5`	devDependencies	patch
webpack-dev-middleware	`^7.4.2` → `^7.4.5`	dependencies	patch
ws	`^8.18.0` → `^8.19.0`	dependencies	minor

Release Notes

biomejs/biome (@biomejs/biome)

`v1.9.4`

Compare Source

`v1.9.3`

Compare Source

honojs/node-server (@hono/node-server)

`v1.19.9`

Compare Source

What's Changed

fix(globals): Stop overwriting global.fetch by @usualoma in #295

Full Changelog: honojs/node-server@v1.19.8...v1.19.9

`v1.19.8`

Compare Source

What's Changed

docs: add guide for listening to UNIX domain socket by @TransparentLC in #292
fix(serve-static): Use Readable.toWeb in serveStatic by @otya128 in #293

New Contributors

@TransparentLC made their first contribution in #292
@otya128 made their first contribution in #293

Full Changelog: honojs/node-server@v1.19.7...v1.19.8

`v1.19.7`

Compare Source

What's Changed

fix: Fix for hono issue 4563 - incorrect content-length after following symlink by @tshmieldev in #290
chore: add configVersion to bun.lock by @yusukebe in #291

New Contributors

@tshmieldev made their first contribution in #290

Full Changelog: honojs/node-server@v1.19.6...v1.19.7

`v1.19.6`

Compare Source

`v1.19.5`

Compare Source

What's Changed

fix: cancel a readable stream if a writable stream is closed before a readable stream is closed. by @usualoma in #280

Full Changelog: honojs/node-server@v1.19.4...v1.19.5

`v1.19.4`

Compare Source

What's Changed

fix(serve-static): Add error handling in createStreamBody by @thongdoan in #278

New Contributors

@thongdoan made their first contribution in #278

Full Changelog: honojs/node-server@v1.19.3...v1.19.4

`v1.19.3`

Compare Source

What's Changed

fix: Refactor promise check for response handling by @kay-is in #277

New Contributors

@kay-is made their first contribution in #277

Full Changelog: honojs/node-server@v1.19.2...v1.19.3

`v1.19.2`

Compare Source

What's Changed

fix: better handle range parse to avoid NaN error by @zwpaper in #276

New Contributors

@zwpaper made their first contribution in #276

Full Changelog: honojs/node-server@v1.19.1...v1.19.2

`v1.19.1`

Compare Source

What's Changed

fix: Keep lightweight request even if accessing method, url or headers by @usualoma in #274
chore: add packageManager field in package.json by @yusukebe in #275

Full Changelog: honojs/node-server@v1.19.0...v1.19.1

`v1.19.0`

Compare Source

What's Changed

feat: add log when directory does not exists by @Its-Just-Nans in #273

New Contributors

@Its-Just-Nans made their first contribution in #273

Full Changelog: honojs/node-server@v1.18.2...v1.19.0

`v1.18.2`

Compare Source

What's Changed

fix: Skip content-length assignment when transfer-encoding is chunked. by @usualoma in #271

Full Changelog: honojs/node-server@v1.18.1...v1.18.2

`v1.18.1`

Compare Source

What's Changed

fix(listener): Limit retries to a maximum of three. by @usualoma in #267

Full Changelog: honojs/node-server@v1.18.0...v1.18.1

`v1.18.0`

Compare Source

What's Changed

feat: always respond res.body by @usualoma in #262
ci: add Node.js v24 for CI by @yusukebe in #263
fix(listener): In Node.js v24, some response bodies are not read to the end until the next task queue. by @usualoma in #265

Full Changelog: honojs/node-server@v1.17.1...v1.18.0

`v1.17.1`

Compare Source

What's Changed

fix: handle client disconnection without canceling stream by @yusukebe in #258
fix: improve serve-static function by @usualoma in #261

Full Changelog: honojs/node-server@v1.17.0...v1.17.1

`v1.17.0`

Compare Source

What's Changed

docs: separate description of autoCleanupIncoming by @usualoma in #255
chore: rename server_socket.test.ts to server-socket.test.ts by @yusukebe in #256
feat(serve-static): support absolute path by @yusukebe in #257

Full Changelog: honojs/node-server@v1.16.0...v1.17.0

`v1.16.0`

Compare Source

What's Changed

feat: Clean up the incoming object if the request is not completely finished. by @usualoma in #252

Full Changelog: honojs/node-server@v1.15.0...v1.16.0

`v1.15.0`

Compare Source

What's Changed

feat(serve-static): pass context to rewriteRequestPath by @yusukebe in #247

Full Changelog: honojs/node-server@v1.14.4...v1.15.0

`v1.14.4`

Compare Source

What's Changed

fix: flush headers before sending data via readable stream by @usualoma in #245

Full Changelog: honojs/node-server@v1.14.3...v1.14.4

`v1.14.3`

Compare Source

What's Changed

fix: set RequestError name properly by @yusukebe in #243

Full Changelog: honojs/node-server@v1.14.2...v1.14.3

`v1.14.2`

Compare Source

What's Changed

perf: keep using the lightweight Response object when retrieving headers, status, and ok, and then drop the getInternalBody function. by @usualoma in #242

Full Changelog: honojs/node-server@v1.14.1...v1.14.2

`v1.14.1`

Compare Source

What's Changed

fix: Handle Response Errors Correctly by @jpulec in #236

New Contributors

@jpulec made their first contribution in #236

Full Changelog: honojs/node-server@v1.14.0...v1.14.1

`v1.14.0`

Compare Source

What's Changed

chore: use Bun as a package manager by @yusukebe in #224
fix: #230 use node:fs specifier prefix vs. fs import by @firxworx in #231
feat: accept absolute-form URI for request-target by @usualoma in #232
fix: fix the return type of responseViaCache by @yusukebe in #234

New Contributors

@firxworx made their first contribution in #231

Full Changelog: honojs/node-server@v1.13.8...v1.14.0

rstackjs/rspack-plugin-react-refresh (@rspack/plugin-react-refresh)

`v1.6.1`

Compare Source

What's Changed

fix(exports): support default-only module shape in ESM wrapper by @BleedingDev in #72

New Contributors

@BleedingDev made their first contribution in #72

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.6.0...v1.6.1

`v1.6.0`

Compare Source

What's Changed

feat: allow to override the default react-refresh-loader by @n0th1ng-else in #70
chore(deps): update actions/checkout action to v6 by @renovate[bot] in #67
chore(deps): update all non-major dependencies by @renovate[bot] in #66
chore(deps): update dependency node to v24 by @renovate[bot] in #69
chore(deps): update actions/setup-node action to v6 by @renovate[bot] in #68

New Contributors

@n0th1ng-else made their first contribution in #70

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.5.3...v1.6.0

`v1.5.3`

Compare Source

What's Changed

test: migrate tests to rstest by @9aoy in rspack-contrib#60
chore: switch to compiler.rspack by @chenjiahan in rspack-contrib#61
chore(deps): update actions/checkout action to v5 by @renovate[bot] in rspack-contrib#63
chore(deps): update all non-major dependencies by @renovate[bot] in rspack-contrib#62
docs: move license headers to THIRDPARTY.md by @chenjiahan in rspack-contrib#64

New Contributors

@9aoy made their first contribution in rspack-contrib#60

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.5.2...v1.5.3

`v1.5.2`

Compare Source

What's Changed

perf: bundle main script via Rslib by @chenjiahan in rspack-contrib#55
perf: replace require.resolve with path.join by @chenjiahan in rspack-contrib#56
perf: use require to reduce cjs-module-lexer overhead by @chenjiahan in rspack-contrib#57
perf: convert runtime paths to lazy-loaded functions by @chenjiahan in rspack-contrib#58

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.5.1...v1.5.2

`v1.5.1`

Compare Source

What's Changed

feat: always log error during HMR applying status by @stormslowly in rspack-contrib#49
feat: add reloadOnRuntimeErrors config by @stormslowly in rspack-contrib#50
fix: removeChild may throw when render to document.body by @stormslowly in rspack-contrib#52
fix: early return to void overlay flashing by @stormslowly in rspack-contrib#51
chore: release on release branch by @stormslowly in rspack-contrib#53
chore: format the code by @stormslowly in rspack-contrib#48

New Contributors

@stormslowly made their first contribution in rspack-contrib#48

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.5.0...v1.5.1

`v1.5.0`

Compare Source

What's Changed

feat: add new test option by @chenjiahan in rspack-contrib#45
fix: should exclude url dependency by @ahabhgk in rspack-contrib#36
fix: overlay.module is not working by @SyMind in rspack-contrib#41
chore(deps): update all non-major dependencies by @renovate[bot] in rspack-contrib#37
chore(deps): update all non-major dependencies by @renovate[bot] in rspack-contrib#38
chore(deps): update dependency cross-env to v10 by @renovate[bot] in rspack-contrib#44
chore(deps): update all non-major dependencies by @renovate[bot] in rspack-contrib#43
chore(workflow): enable trusted publishing by @chenjiahan in rspack-contrib#46

New Contributors

@SyMind made their first contribution in rspack-contrib#41

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.4.3...v1.5.0

`v1.4.3`

Compare Source

`v1.4.2`

Compare Source

What's Changed

feat: add resourceQuery option for excluding by query by @chenjiahan in rspack-contrib#34
chore(deps): update all non-major dependencies by @renovate in rspack-contrib#32

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.4.1...v1.4.2

`v1.4.1`

Compare Source

What's Changed

fix: incorrect type when required by @chenjiahan in rspack-contrib#31

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.4.0...v1.4.1

`v1.4.0`

Compare Source

What's Changed

feat: add ESM/CJS wrapper and build with Rslib by @chenjiahan in rspack-contrib#29

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.3.1...v1.4.0

`v1.3.1`

Compare Source

What's Changed

Revert "fix: TS error when skipLibCheck is false (#26)" by @chenjiahan in rspack-contrib#28

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.3.0...v1.3.1

`v1.3.0`

Compare Source

What's Changed

fix: TS error when skipLibCheck is false by @chenjiahan in rspack-contrib#26

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.2.2...v1.3.0

`v1.2.2`

Compare Source

What's Changed

fix: failed to resolve phantom dependency by @chenjiahan in rspack-contrib#25

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.2.1...v1.2.2

`v1.2.1`

Compare Source

What's Changed

fix: module cache missing in runtime requirements by @LingyuCoder in rspack-contrib#24

New Contributors

@LingyuCoder made their first contribution in rspack-contrib#24

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.2.0...v1.2.1

`v1.2.0`

Compare Source

What's Changed

feat: support custom inject entry runtime by @ahabhgk in rspack-contrib#23

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.1.1...v1.2.0

`v1.1.1`

Compare Source

What's Changed

fix: export loader by @ahabhgk in rspack-contrib#22

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.1.0...v1.1.1

`v1.1.0`

Compare Source

What's Changed

feat: support manually inject loader by @ahabhgk in rspack-contrib#21
chore(deps): update all non-major dependencies by @renovate in rspack-contrib#17
chore(deps): update all non-major dependencies by @renovate in rspack-contrib#18
chore(deps): update pnpm to v10 by @renovate in rspack-contrib#19
fix(deps): update all non-major dependencies by @renovate in rspack-contrib#20

New Contributors

@ahabhgk made their first contribution in rspack-contrib#21

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.0.3...v1.1.0

`v1.0.3`

Compare Source

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.0.2...v1.0.3

`v1.0.2`

Compare Source

What's Changed

Support custom and whm socket integration type by @ItamarGronich in rspack-contrib#13
chore: try 2fa publish by @hardfist in rspack-contrib#14

New Contributors

@ItamarGronich made their first contribution in rspack-contrib#13
@hardfist made their first contribution in rspack-contrib#14

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.0.1...v1.0.2

`v1.0.1`

Compare Source

What's Changed

perf: reuse resolved reactRefreshEntryPath by @chenjiahan in rspack-contrib#10
feat: export overlay module in package.json by @MIGUELez11 in rspack-contrib#12
fix: correct the type of include and exclude options by @chenjiahan in rspack-contrib#7
fix: make all overlay options optional by @dstaley in rspack-contrib#9
chore(deps): update all non-major dependencies by @renovate in rspack-contrib#5
chore(deps): update dependency @types/node to v22 by @renovate in rspack-contrib#6
docs: complete options documentation by @chenjiahan in rspack-contrib#8
chore(deps): update all non-major dependencies by @renovate in rspack-contrib#11

New Contributors

@renovate made their first contribution in rspack-contrib#5
@dstaley made their first contribution in rspack-contrib#9
@MIGUELez11 made their first contribution in rspack-contrib#12

Full Changelog: rstackjs/rspack-plugin-react-refresh@v1.0.0...v1.0.1

webpack/css-loader (css-loader)

`v7.1.4`

Compare Source

`v7.1.3`

Compare Source

honojs/hono (hono)

`v4.12.3`

Compare Source

What's Changed

fix(validator): prevent type diff bug in form data parsing by @EdamAme-x in #4753
fix(jwt): use Math.floor instead of bitwise OR for safe timestamp by @EdamAme-x in #4754
fix(jwt): fix JwtVariables for ContextVariableMap by @yusukebe in #4764
fix(types): remove DOM type dependencies from ClientResponse and request method by @YevheniiKotyrlo in #4768
fix(types): correct middleware types by @hmnd in #4774
fix(jwt): prevent memory leak by avoiding mutation of options object by @EdamAme-x in #4759

New Contributors

@YevheniiKotyrlo made their first contribution in #4768
@hmnd made their first contribution in #4774

Full Changelog: honojs/hono@v4.12.2...v4.12.3

`v4.12.2`

Compare Source

Security fix

Fixed incorrect handling of X-Forwarded-For in the AWS Lambda adapter behind ALB that could allow IP-based access control bypass. The detail: GHSA-xh87-mx6m-69f3

Thanks @EdamAme-x

What's Changed

fix(context): revert PR #4707 by @yusukebe in #4757

Full Changelog: honojs/hono@v4.12.1...v4.12.2

`v4.12.1`

Compare Source

What's Changed

fix(client): export ApplyGlobalResponse from hono/client by @sushichan044 in #4743

Full Changelog: honojs/hono@v4.12.0...v4.12.1

`v4.12.0`

Compare Source

Release Notes

Hono v4.12.0 is now available!

This release includes new features for the Hono client, middleware improvements, adapter enhancements, and significant performance improvements to the router and context.

`$path` for Hono Client

The Hono client now has a $path() method that returns the path string instead of a full URL. This is useful when you need just the path portion for routing or key-based operations:

const client = hc<typeof app>('http://localhost:8787')

// Get the path string
const path = client.api.posts.$path()
// => '/api/posts'

// With path parameters
const postPath = client.api.posts[':id'].$path({
  param: { id: '123' },
})
// => '/api/posts/123'

// With query parameters
const searchPath = client.api.posts.$path({
  query: { filter: 'test' },
})
// => '/api/posts?filter=test'

Unlike $url() which returns a URL object, $path() returns a plain path string, making it convenient for use with routers or as cache keys.

Thanks @ShaMan123!

`ApplyGlobalResponse` Type Helper for RPC Client

The new ApplyGlobalResponse type helper allows you to add global error response types to all routes in the RPC client. This is useful for typing common error responses from app.onError() or global middlewares:

const app = new Hono()
  .get('/api/users', (c) => c.json({ users: ['alice', 'bob'] }, 200))
  .onError((err, c) => c.json({ error: err.message }, 500))

type AppWithErrors = ApplyGlobalResponse<
  typeof app,
  {
    401: { json: { error: string; message: string } }
    500: { json: { error: string; message: string } }
  }
>

const client = hc<AppWithErrors>('http://api.example.com')
// Now client knows about both success and error responses
const res = await client.api.users.$get()
// InferResponseType includes { users: string[] } | { error: string; message: string }

Thanks @mohankumarelec!

SSG Redirect Plugin

A new redirectPlugin for SSG generates static HTML redirect pages for HTTP redirect responses (301, 302, 303, 307, 308):

import { toSSG } from 'hono/ssg'
import { defaultPlugin, redirectPlugin } from 'hono/ssg'

const app = new Hono()
app.get('/old', (c) => c.redirect('/new'))
app.get('/new', (c) => c.html('New Page'))

// redirectPlugin must be placed before defaultPlugin
await toSSG(app, fs, {
  plugins: [redirectPlugin(), defaultPlugin()],
})

The generated redirect pages include a <meta http-equiv="refresh"> tag, a canonical link, and a robots noindex meta tag.

Thanks @3w36zj6!

`onAuthSuccess` Callback for Basic Auth

The Basic Auth middleware now supports an onAuthSuccess callback that is invoked after successful authentication. This allows you to set context variables or perform logging without re-parsing the Authorization header:

app.use(
  '/auth/*',
  basicAuth({
    username: 'hono',
    password: 'ahotproject',
    onAuthSuccess: (c, username) => {
      c.set('user', { name: username, role: 'admin' })


</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/rstackjs/rspack-dev-server).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNDguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

renovate bot enabled auto-merge (squash) March 3, 2026 03:25

renovate bot force-pushed the renovate/all-minor-patch branch from 8d18f87 to 6c9bb6e Compare March 3, 2026 03:25

fix(deps): update all non-major dependencies

54a89cd

renovate bot force-pushed the renovate/all-minor-patch branch from 6c9bb6e to 54a89cd Compare March 3, 2026 03:26

renovate bot merged commit 87e1332 into main Mar 3, 2026
0 of 3 checks passed

renovate bot deleted the renovate/all-minor-patch branch March 3, 2026 03:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all non-major dependencies#92

fix(deps): update all non-major dependencies#92
renovate[bot] merged 1 commit intomainfrom
renovate/all-minor-patch

renovate bot commented Mar 1, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Security fix

What's Changed

What's Changed

Release Notes

$path for Hono Client

ApplyGlobalResponse Type Helper for RPC Client

SSG Redirect Plugin

onAuthSuccess Callback for Basic Auth

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 1, 2026 •

edited

Loading

`$path` for Hono Client

`ApplyGlobalResponse` Type Helper for RPC Client

`onAuthSuccess` Callback for Basic Auth