chore(deps-dev): bump the dev-dependencies-minor-patch group with 4 updates

[dependabot]

Bumps the dev-dependencies-minor-patch group with 4 updates: @hono/node-server, @types/node, fastify and @types/bun.

Updates @hono/node-server from 2.1.4 to 2.1.5

Release notes

Sourced from @​hono/node-server's releases.

v2.1.5

What's Changed

• fix(listener): abort the request signal when an HTTP/2 client resets the stream by @​affanmomin in honojs/node-server#404
• fix(serve-static): only serve GET and HEAD requests by @​usualoma in honojs/node-server#405

New Contributors

• @​affanmomin made their first contribution in honojs/node-server#404

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

Commits

• 4b47a0d 2.1.5
• e77824a fix(serve-static): only serve GET and HEAD requests (#405)
• 1b6e6bf fix(listener): abort the request signal when an HTTP/2 client resets the stre...
• See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

• See full diff in compare view

Updates fastify from 5.12.5 to 5.12.7

Release notes

Sourced from fastify's releases.

v5.12.7

Full Changelog: fastify/fastify@v5.12.6...v5.12.7

v5.12.6

⚠️ Security Release

• Fix for GHSA-389g-gv7q-r4x8

What's Changed

• [Backport 5.x] types: restrict route lookup methods by @​github-actions[bot] in fastify/fastify#7048
• [Backport 5.x] perf: decode string bodies once instead of per chunk by @​github-actions[bot] in fastify/fastify#7053
• [Backport 5.x] perf: avoid resetting the level of request child loggers by @​github-actions[bot] in fastify/fastify#7058
• [Backport 5.x] fix: resolve reply.mediaType from raw response headers by @​github-actions[bot] in fastify/fastify#7067
• [Backport 5.x] perf: use a FIFO cache for parsed content-types by @​github-actions[bot] in fastify/fastify#7072
• [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/const by @​mcollina in fastify/fastify#7104
• [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of storing it by @​github-actions[bot] in fastify/fastify#7087
• [Backport 5.x] fix: remove error when HTTP QUERY request has empty body by @​github-actions[bot] in fastify/fastify#7060
• [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 by @​github-actions[bot] in fastify/fastify#7094

Full Changelog: fastify/fastify@v5.12.5...v5.12.6

Commits

• 9f40003 Bumped v5.12.7
• 16469b9 Bumped v5.12.6
• 63496de [Backport 5.x] docs: document fastify.query() shorthand for RFC 10008 (#7094)
• 20b55d4 [Backport 5.x] fix: remove error when HTTP QUERY request has empty body (#7060)
• 38d2b63 [Backport 5.x] fix: copy a set-cookie array passed to reply.header instead of...
• 3241fbd [Backport 5.x] fix(validation): lowercase header names in propertyNames enum/...
• 1a46b1b [Backport 5.x] perf: use a FIFO cache for parsed content-types (#7072)
• 7e06676 [Backport 5.x] fix: resolve reply.mediaType from raw response headers (#7067)
• 1b0eb32 [Backport 5.x] perf: avoid resetting the level of request child loggers (#7058)
• a636a10 [Backport 5.x] perf: decode string bodies once instead of per chunk (#7053)
• Additional commits viewable in compare view

Updates @types/bun from 1.4.2 to 1.4.3

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pkg-pr-new]

• @standard-server/hono-node-playground
• @standard-server/node-http-playground

@standard-server/aws-lambda

npm i https://pkg.pr.new/@standard-server/aws-lambda@165

@standard-server/core

npm i https://pkg.pr.new/@standard-server/core@165

@standard-server/fastify

npm i https://pkg.pr.new/@standard-server/fastify@165

@standard-server/fetch

npm i https://pkg.pr.new/@standard-server/fetch@165

@standard-server/node

npm i https://pkg.pr.new/@standard-server/node@165

@standard-server/peer

npm i https://pkg.pr.new/@standard-server/peer@165

@standard-server/shared

npm i https://pkg.pr.new/@standard-server/shared@165

commit: 53c721f

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[codspeed]

Merging this PR will not alter performance

⚠️ 4 benchmarks spent significant time in system calls

System calls cannot be consistently instrumented, so they are not included in the measure, which understates the real cost. Please switch to the Walltime instrument to accurately measure system calls.

Measurement and system calls

• json 10KB
• form data 10KB
• json 10KB
• octet stream 10KB

✅ 26 untouched benchmarks
⏩ 108 skipped benchmarks¹

---

_{Comparing dependabot/npm_and_yarn/dev-dependencies-minor-patch-b2a3be9c91 (53c721f) with main (99f8bda)²}

Footnotes

1. 108 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on main (48708ec) during the generation of this report, so 99f8bda was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩