chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 7 updates

[dependabot]

Bumps the dev-dependencies-minor-patch group with 7 updates in the / directory:

Package	From	To
@hono/node-server	2.0.12	2.1.0
@types/node	26.1.2	26.2.0
bumpp	12.1.1	12.2.0
fastify	5.11.0	5.11.3
pkg-pr-new	0.0.86	0.0.87
ws	8.21.1	8.21.3
tsx	4.23.1	4.23.12

Updates @hono/node-server from 2.0.12 to 2.1.0

Release notes

Sourced from @​hono/node-server's releases.

v2.1.0

What's Changed

• feat: add Early Hints (HTTP 103) middleware by @​bilal-azam in honojs/node-server#378
• fix(listener): avoid uncaught error when force-closing a non-standard socket by @​mohamedramadan14 in honojs/node-server#383

New Contributors

• @​bilal-azam made their first contribution in honojs/node-server#378
• @​mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

Commits

• 82ba34e 2.1.0
• 1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
• 977a242 feat: add Early Hints (HTTP 103) middleware (#378)
• See full diff in compare view

Updates @types/node from 26.1.2 to 26.2.0

Commits

• See full diff in compare view

Updates bumpp from 12.1.1 to 12.2.0

Release notes

Sourced from bumpp's releases.

v12.2.0

   🚨 Breaking Changes

• Add ReleaseType &[#39](https://github.com/antfu-collective/bumpp/issues/39);conventional-prerelease&[#39](https://github.com/antfu-collective/bumpp/issues/39);  -  by @​DonBLong in antfu-collective/bumpp#109 (a098d)

   🚀 Features

• Add type safety for release option  -  by @​Faustze in antfu-collective/bumpp#123 (fe4c8)

    View changes on GitHub

Commits

• fd3463b chore: release v12.2.0
• 9836dfc chore: update deps
• fe4c831 feat: add type safety for release option (#123)
• a098d30 feat!: add ReleaseType 'conventional-prerelease' (#109)
• cade359 test(get-new-version): fix 'bumps conventional without throwing' (#130)
• e46b1be chore: add test ci
• 6bfa422 test(parse-args): fix fixtureDir path (#128)
• See full diff in compare view

Updates fastify from 5.11.0 to 5.11.3

Release notes

Sourced from fastify's releases.

v5.11.3

What's Changed

• fix: clear trailer state when removing all trailers by @​Ram-blip in fastify/fastify#6845
• docs: document percent-decoded route params as untrusted input by @​mcollina in fastify/fastify#6903
• docs(errors): document what the default error handler sends by @​basteez in fastify/fastify#6894
• docs(readme): fix grammar and cjs capitalization by @​minirang in fastify/fastify#6899
• fix: pass null instead of undefined to requestCompleted on success by @​lazerg in fastify/fastify#6837
• docs(encapsulation): clarify nested plugin scopes by @​jean-michelet in fastify/fastify#6893
• chore: Bump fastify/workflows/.github/workflows/lock-threads.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/fastify#6916
• chore: Bump fastify/workflows/.github/workflows/nested-quality.yml from 6.0.0 to 7.0.0 by @​dependabot[bot] in fastify/fastify#6917
• fix: recognize constructor-assigned built-in properties as decorator … by @​aquie00t in fastify/fastify#6892
• fix: reset lastIndex before testing global/sticky content-type RegExp parsers by @​zelinewang in fastify/fastify#6846

New Contributors

• @​minirang made their first contribution in fastify/fastify#6899
• @​lazerg made their first contribution in fastify/fastify#6837
• @​zelinewang made their first contribution in fastify/fastify#6846

Full Changelog: fastify/fastify@v5.11.2...v5.11.3

v5.11.2

What's Changed

• fix fastify version in fastify.js

Full Changelog: fastify/fastify@v5.11.1...v5.11.2

v5.11.1

What's Changed

• fix: add http method override warning by @​jean-michelet in fastify/fastify#6879
• fix(types): allow explicit http2: false in server options by @​Tony133 in fastify/fastify#6888
• docs: clarify what attachValidation exposes on request.validationError by @​basteez in fastify/fastify#6891
• fix: do not force close in-flight connections when forceCloseConnections is 'idle' by @​aquie00t in fastify/fastify#6889

New Contributors

• @​basteez made their first contribution in fastify/fastify#6891

Full Changelog: fastify/fastify@v5.11.0...v5.11.1

Commits

• a22cede Bumped v5.11.3
• 16a74e7 fix: reset lastIndex before testing global/sticky content-type RegExp parsers...
• 27938ac fix: recognize constructor-assigned built-in properties as decorator dependen...
• a2f5905 chore: Bump fastify/workflows/.github/workflows/nested-quality.yml (#6917)
• 22c419a chore: Bump fastify/workflows/.github/workflows/lock-threads.yml (#6916)
• f5b1400 docs(encapsulation): clarify nested plugin scopes (#6893)
• 9eaef51 fix: pass null instead of undefined to requestCompleted on success (#6837)
• 39e87e8 docs(readme): fix grammar and cjs capitalization (#6899)
• 3f6451c docs(errors): document what the default error handler sends (#6894)
• f28528f docs: document percent-decoded route params as untrusted input (#6903)
• Additional commits viewable in compare view

Updates pkg-pr-new from 0.0.86 to 0.0.87

Commits

• d293ab2 release: v0.0.87
• See full diff in compare view

Updates ws from 8.21.1 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

• The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

• Fixed a test for CITGM (2eb3be0b).

Commits

• c791e70 [dist] 8.21.3
• e97a20e [fix] Reject offers with client_max_window_bits below config
• 787ebf2 [dist] 8.21.2
• b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
• e4bb883 [security] Use GitHub PVR as main reporting channel
• 2eb3be0 [test] Skip test on Node.js versions where it does not apply
• See full diff in compare view

Updates tsx from 4.23.1 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

• shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

• preserve async ESM require fallback (55cbece)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

• support nyc coverage discovery (#710) (ec1bcd5)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

• map Node test locations (2f55884)
• support data URLs in tsImport (b94f46f)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.8

... (truncated)

Commits

• ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
• 651f5be test: cover CommonJS TypeScript import.meta paths
• bd3bc64 test: cover CommonJS loader source fallback
• 55cbece fix: preserve async ESM require fallback
• 6c5ba85 docs: document CommonJS default interop
• ec1bcd5 fix: support nyc coverage discovery (#710)
• b6e5b48 docs: clarify CommonJS default imports
• 2f55884 fix: map Node test locations
• de935d5 docs: document Node source-map stack formatting
• b94f46f fix: support data URLs in tsImport
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pkg-pr-new]

• @standardserver/hono-node-playground
• @standardserver/node-http-playground

@standardserver/aws-lambda

npm i https://pkg.pr.new/@standardserver/aws-lambda@63

@standardserver/bun

npm i https://pkg.pr.new/@standardserver/bun@63

@standardserver/core

npm i https://pkg.pr.new/@standardserver/core@63

@standardserver/deno

npm i https://pkg.pr.new/@standardserver/deno@63

@standardserver/fastify

npm i https://pkg.pr.new/@standardserver/fastify@63

@standardserver/fetch

npm i https://pkg.pr.new/@standardserver/fetch@63

@standardserver/node

npm i https://pkg.pr.new/@standardserver/node@63

@standardserver/peer

npm i https://pkg.pr.new/@standardserver/peer@63

@standardserver/shared

npm i https://pkg.pr.new/@standardserver/shared@63

commit: 5cc7cc9

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[codspeed-hq]

Merging this PR will not alter performance

✅ 26 untouched benchmarks
⏩ 108 skipped benchmarks¹

---

_{Comparing dependabot/npm_and_yarn/dev-dependencies-minor-patch-59a106b794 (5cc7cc9) with main (4e017f9)}

Footnotes

1. 108 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.