Update all non-major dependencies #446

renovate · 2025-12-15T00:56:05Z

This PR contains the following updates:

Package	Change	Age	Confidence
@cloudflare/vitest-pool-workers (source)	`0.10.14` -> `0.10.15`
@cloudflare/workers-types	`4.20251205.0` -> `4.20251213.0`
@types/node (source)	`24.10.1` -> `24.10.4`
discord-api-types (source)	`0.38.36` -> `0.38.37`
es-toolkit (source)	`1.42.0` -> `1.43.0`
hono (source)	`4.10.7` -> `4.11.1`
kysely (source)	`0.28.8` -> `0.28.9`
miniflare (source)	`4.20251202.1` -> `4.20251210.0`
pnpm (source)	`10.24.0` -> `10.25.0`
tsdown (source)	`0.17.0` -> `0.17.4`
wrangler (source)	`4.53.0` -> `4.54.0`

Release Notes

cloudflare/workers-sdk (@cloudflare/vitest-pool-workers)

`v0.10.15`

Compare Source

Patch Changes

Updated dependencies [c15e99e, 31c162a, bd5f087, c6dd86f, 235d325, b17797c, b17797c, 41103f5, ea6fbec, bb47e20, 991760d]:
- wrangler@4.54.0
- miniflare@4.20251210.0

cloudflare/workerd (@cloudflare/workers-types)

discordjs/discord-api-types (discord-api-types)

`v0.38.37`

Compare Source

toss/es-toolkit (es-toolkit)

`v1.43.0`

Compare Source

Released on December 12th, 2025.

Enhanced merge to handle arrays and objects consistently, and to match lodash's behavior with date values and array-like objects. ([#1553], [#1542], [#1548])
Fixed isMatch and isMatchWith to match lodash's behavior.
Fixed intersectionBy implementation and removed duplicates when the mapper produces the same values. ([#1528])
Fixed throttle working like debounce.
Fixed type inference in toSnakeCaseKeys, toCamelCaseKeys for edge cases and improved type inference for uppercase keys. ([#1538])
Fixed casing utilities (camelCase, kebabCase, lowerCase, snakeCase, startCase, upperCase) to match lodash's behavior. ([#1525])
Fixed compat/template to disable ES interpolation when custom interpolate is provided. ([#1527])
Fixed incorrect example in differenceBy documentation. ([#1543])
Performance improvement: updated deburr to use arrays to construct the deburrMap. ([#1526])

We sincerely thank @dayongkr, @raon0211, @wo-o29, @Yeom-JinHo, @Copilot, @oshosh, @vbfox, @sukvvon, @sankeyangshu, @D-Sketon, @seo-rii for their contributions. We appreciate your great efforts!

honojs/hono (hono)

`v4.11.1`

Compare Source

What's Changed

fix(types): fix app.on method array type inference by @kosei28 in #4578

Full Changelog: honojs/hono@v4.11.0...v4.11.1

`v4.11.0`

Compare Source

Release Notes

Hono v4.11.0 is now available!

This release includes new features for the Hono client, middleware improvements, and an important type system fix.

Type System Fix for Middleware

We've fixed a bug in the type system for middleware. Previously, app did not have the correct type with pathless handlers:

const app = new Hono()
  .use(async (c, next) => {
    await next()
  })
  .get('/a', async (c, next) => {
    await next()
  })
  .get((c) => {
    return c.text('Hello')
  })

// app's type was incorrect

This has now been fixed.

Thanks @kosei28!

Typed URL for Hono Client

You can now pass the base URL as the second type parameter to hc to get more precise URL types:

const client = hc<typeof app, 'http://localhost:8787'>(
  'http://localhost:8787/'
)

const url = client.api.posts.$url()
// url is TypedURL with precise type information
// including protocol, host, and path

This is useful when you want to use the URL as a type-safe key for libraries like SWR.

Thanks @miyaji255!

Custom NotFoundResponse Type

You can now customize the NotFoundResponse type using module augmentation. This allows c.notFound() to return a typed response:

import { Hono, TypedResponse } from 'hono'

declare module 'hono' {
  interface NotFoundResponse
    extends Response,
      TypedResponse<{ error: string }, 404, 'json'> {}
}

const app = new Hono()
  .get('/posts/:id', async (c) => {
    const post = await getPost(c.req.param('id'))
    if (!post) {
      return c.notFound()
    }
    return c.json({ post }, 200)
  })
  .notFound((c) => c.json({ error: 'not found' }, 404))

Now the client can correctly infer the 404 response type.

Thanks @miyaji255!

tryGetContext Helper

The new tryGetContext() helper in the Context Storage middleware returns undefined instead of throwing an error when the context is not available:

import { tryGetContext } from 'hono/context-storage'

const context = tryGetContext<Env>()
if (context) {
  // Context is available
  console.log(context.var.message)
}

Thanks @AyushCoder9!

Custom Query Serializer

You can now customize how query parameters are serialized using the buildSearchParams option:

const client = hc<AppType>('http://localhost', {
  buildSearchParams: (query) => {
    const searchParams = new URLSearchParams()
    for (const [k, v] of Object.entries(query)) {
      if (v === undefined) continue
      if (Array.isArray(v)) {
        v.forEach((item) => searchParams.append(`${k}[]`, item))
      } else {
        searchParams.set(k, v)
      }
    }
    return searchParams
  },
})

Thanks @bolasblack!

New features

feat(types): make Hono client's $url return the exact URL type #4502
feat(types): enhance NotFoundHandler to support custom NotFoundResponse type #4518
feat(timing): add wrapTime to simplify usage #4519
feat(pretty-json): support force option #4531
feat(client): add buildSearchParams option to customize query serialization #4535
feat(context-storage): add optional tryGetContext helper #4539
feat(secure-headers): add CSP report-to and report-uri directive support #4555
fix(types): replace schema-based path tracking with CurrentPath parameter #4552

All changes

chore: update esbuild to version 0.27.1 by @kosei28 in #4571
fix(hono/jsx): display blank when children is nullish by @techfish-11 in #4573
feat(types): make Hono client's $url return the exact URL type by @miyaji255 in #4502
feat(types): enhance NotFoundHandler to support custom NotFoundResponse type by @miyaji255 in #4518
feat(timing): add wrapTime to simplify usage by @PassiDel in #4519
feat(pretty-json): support force option by @missinglink in #4531
feat(context-storage): Add optional tryGetContext helper to context-storage middleware by @AyushCoder9 in #4539
feat(client): add buildSearchParams option to customize query serialization by @bolasblack in #4535
feat(secure-headers): Add CSP report-to and report-uri directive support by @cruzz77 in #4555
fix(types): replace schema-based path tracking with CurrentPath parameter by @kosei28 in #4552
Next by @yusukebe in #4574

New Contributors

@missinglink made their first contribution in #4531
@bolasblack made their first contribution in #4535
@cruzz77 made their first contribution in #4555

Full Changelog: honojs/hono@v4.10.8...v4.11.0

`v4.10.8`

Compare Source

What's Changed

chore: bump linter and formatter by @ryuapp in #4568
chore: bump github actions by @ryuapp in #4569
fix(linear-router): incorrect path matching by @cromery in #4567
docs(cookie): update outdated RFC links by @AyushCoder9 in #4557
feat(csrf): Support async IsAllowedOriginHandler by @baseballyama in #4558
feat(csrf): Support async IsAllowedSecFetchSiteHandler by @baseballyama in #4559

New Contributors

@cromery made their first contribution in #4567
@AyushCoder9 made their first contribution in #4557
@baseballyama made their first contribution in #4558

Full Changelog: honojs/hono@v4.10.7...v4.10.8

kysely-org/kysely (kysely)

`v0.28.9`: 0.28.9

Compare Source

Hey 👋

A small batch of bug fixes. Please report any issues. 🤞😰🤞

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

fix: withSchema not applying for delete query using clause. by @igalklebanov in #1648
fix: withSchema adds schema to for update|share|key share|no key share of tables causing database errors. by @igalklebanov in #1659

📖 Documentation

📦 CICD & Tooling

publish to jsr. by @igalklebanov in #1457
chore: bump pnpm, use trustPolicy, exclude safe downgrades, fix browser test, fix bun tests. by @igalklebanov in #1641
chore(ci): add deno lint with JSR rules. Add verbatimModuleSyntax in tsconfig.json. Apply lint fixes. by @igalklebanov in #1642
chore: bump dependencies, run prettier. by @igalklebanov in #1644
chore: bump github actions. by @igalklebanov in #1645
fix TypeScript native type errors in test-setup.ts. by @igalklebanov in #1660

⚠️ Breaking Changes

🐤 New Contributors

Full Changelog: kysely-org/kysely@v0.28.8...v0.28.9

cloudflare/workers-sdk (miniflare)

`v4.20251210.0`

Compare Source

Patch Changes

#11552 31c162a Thanks @dependabot! - chore: update dependencies of "miniflare" package

The following dependency versions have been updated:

Dependency From To

workerd 1.20251202.0 1.20251205.0
#11583 bd5f087 Thanks @dependabot! - chore: update dependencies of "miniflare" package

The following dependency versions have been updated:

Dependency From To

workerd 1.20251205.0 1.20251209.0
#11584 c6dd86f Thanks @dependabot! - chore: update dependencies of "miniflare" package

The following dependency versions have been updated:

Dependency From To

workerd 1.20251209.0 1.20251210.0

pnpm/pnpm (pnpm)

`v10.25.0`

Compare Source

rolldown/tsdown (tsdown)

`v0.17.4`

Compare Source

🚨 Breaking Changes

copy: Sync behavior of rollup-plugin-copy - by @sxzz (e864b)

🚀 Features

exports: Add exclude option - by @TheAlexLichter and @sxzz in #340 (9e634)
shortcuts: Case insensitive - by @btea in #649 (019af)

🐞 Bug Fixes

Resolve cwd from user config - by @sxzz (bc066)

View changes on GitHub

`v0.17.3`

Compare Source

🚀 Features

copy: Support glob in copy - by @kricsleo and @sxzz in #637 (c1fd4)

🐞 Bug Fixes

Print error stack - by @sxzz (1c5b6)
Add config name to rebuilt message - by @sxzz (bfdc6)
Call hooks for each format - by @sxzz (19bdd)
Merge input & output options - by @sxzz (14181)

View changes on GitHub

`v0.17.2`

Compare Source

🐞 Bug Fixes

Empty clean array - by @sxzz (eae7f)

View changes on GitHub

`v0.17.1`

Compare Source

🐞 Bug Fixes

Respect clean on watch mode - by @sxzz (bfbfb)

View changes on GitHub

cloudflare/workers-sdk (wrangler)

`v4.54.0`

Compare Source

Minor Changes

#11512 c15e99e Thanks @emily-shen! - Enable using ctx.exports with containers

You can now use containers with Durable Objects that are accessed via ctx.exports.

Now your config file can look something like this:

{
	"name": "container-app",
	"main": "src/index.ts",
	"compatibility_date": "2025-12-01",
	"compatibility_flags": ["enable_ctx_exports"], // compat flag needed for now.
	"containers": [
		{
			"image": "./Dockerfile",
			"class_name": "MyDOClassname",
			"name": "my-container"
		},
	],
	"migrations": [
		{
			"tag": "v1",
			"new_sqlite_classes": ["MyDOClassname"],
		},
	],
	// no need to declare your durable object binding here
}

Note that when using ctx.exports, where you previously accessed a Durable Object via something like env.DO, you should now access with ctx.exports.MyDOClassname.

Refer to the docs for more information on using ctx.exports.

#11508 b17797c Thanks @dario-piotrowicz! - Wrangler will no longer try to add additional configuration to projects using @cloudflare/vite-plugin when deploying or running wrangler setup
#11508 b17797c Thanks @dario-piotrowicz! - When a Vite project is detected, install @cloudflare/vite-plugin
#11576 bb47e20 Thanks @dario-piotrowicz! - Support Analog projects in autoconfig
#10582 991760d Thanks @flakey5! - Add containers ssh command

Patch Changes

#11467 235d325 Thanks @edmundhung! - fix: prevent reporting SQLite error from wrangler d1 execute to Sentry
#11414 41103f5 Thanks @petebacondarwin! - add extra logging to user log-in flow for diagnosing failed login requests
#11559 ea6fbec Thanks @nikitassharma! - Remove image validation for containers on wrangler deploy.

Internal customers are able to use additional image registries and will run into failures with this validation. Image registry validation will now be handled by the API.
Updated dependencies [31c162a, bd5f087, c6dd86f]:
- miniflare@4.20251210.0

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Update all non-major dependencies

d5f6eab

renovate bot added the dependencies label Dec 15, 2025

renovate bot enabled auto-merge (squash) December 15, 2025 00:56

renovate bot added the dependencies label Dec 15, 2025

renovate bot merged commit 0299bbd into main Dec 15, 2025
4 checks passed

renovate bot deleted the renovate/all-minor-patch branch December 15, 2025 00:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all non-major dependencies #446

Update all non-major dependencies #446

Uh oh!

renovate bot commented Dec 15, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Update all non-major dependencies #446

Update all non-major dependencies #446

Uh oh!

Conversation

renovate bot commented Dec 15, 2025

Release Notes

Patch Changes

What's Changed

Release Notes

Type System Fix for Middleware

Typed URL for Hono Client

Custom NotFoundResponse Type

tryGetContext Helper

Custom Query Serializer

New features

All changes

New Contributors

What's Changed

New Contributors

v0.28.9: 0.28.9

🚀 Features

🐞 Bugfixes

PostgreSQL 🐘

📖 Documentation

📦 CICD & Tooling

⚠️ Breaking Changes

🐤 New Contributors

Patch Changes

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

🚀 Features

🐞 Bug Fixes

🐞 Bug Fixes

🐞 Bug Fixes

Minor Changes

Patch Changes

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v0.28.9`: 0.28.9