chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@hono/node-server	^2.0.0 → ^2.0.1
@rslint/core	^0.5.0 → ^0.5.1
@rstest/core (source)	^0.9.9 → ^0.9.10
hono (source)	^4.12.15 → ^4.12.16
http-proxy-middleware	4.0.0-beta.5 → 4.0.0-beta.6

---

Release Notes

honojs/node-server (@​hono/node-server)

v2.0.1

Compare Source

What's Changed

• fix: forward Hono response headers during WebSocket upgrade by @​gentamura in #​346

New Contributors

• @​gentamura made their first contribution in #​346

Full Changelog: honojs/node-server@v2.0.0...v2.0.1

web-infra-dev/rslint (@​rslint/core)

v0.5.1

Compare Source

What's Changed

New Features 🎉

• feat: port rule @​typescript-eslint/prefer-for-of by @​fansenze in #​791
• feat: port rule no-irregular-whitespace by @​fansenze in #​792
• feat: port rule @​typescript-eslint/no-magic-numbers by @​fansenze in #​793
• feat: port rule react/jsx-no-script-url by @​fansenze in #​794
• feat: port rule @​typescript-eslint/prefer-destructuring by @​fansenze in #​795
• feat: port rule react/no-unused-state by @​fansenze in #​796
• feat: port rule react/no-unused-class-component-methods by @​fansenze in #​797
• feat: port rule react/jsx-no-leaked-render by @​fansenze in #​798
• feat: port rule react/jsx-curly-brace-presence by @​fansenze in #​799
• feat: port rule react/prefer-stateless-function by @​fansenze in #​800
• feat: port rule react/no-unstable-nested-components by @​fansenze in #​801
• feat: port rule react-hooks/rules-of-hooks by @​fansenze in #​806
• feat: port rule unicorn/filename-case by @​fansenze in #​807
• feat: port rule react-hooks/exhaustive-deps by @​fansenze in #​808
• feat: port rule unicorn/no-static-only-class by @​fansenze in #​809
• feat: add eslint-plugin-react-hooks recommended config by @​fansenze in #​813
• feat: add eslint-plugin-unicorn recommended config by @​fansenze in #​814

Performance 🚀

• perf: use tinyglobby for downward config scan by @​fansenze in #​812
• perf: parallelize Go-side gitignore reading and gap-file discovery by @​fansenze in #​815

Bug Fixes 🐞

• fix: align dot-notation with ESLint implementation by @​fansenze in #​784
• fix: accept bare-object options from CLI / JS config in no-floating-promises by @​fansenze in #​782
• fix(react): guard nil TypeChecker in no-danger-with-children and style-prop-object by @​fansenze in #​783
• fix: align prefer-optional-chain with ESLint implementation by @​fansenze in #​790
• fix: skip no-import-assign member-write when wrapped in type assertion by @​fansenze in #​789
• fix: align no-use-before-define with typescript-eslint for heritage clauses by @​fansenze in #​788
• fix: detect unused TypeScript type parameters in no-unused-vars by @​fansenze in #​787
• fix: align no-redundant-type-constituents with ESLint implementation by @​fansenze in #​802
• fix: exclude property-name positions from no-unused-vars unresolved-ref fallback by @​fansenze in #​804

Documentation 📖

• docs: unify plugin rule doc titles and refactor rules-and-presets page by @​fansenze in #​816

Other Changes

• chore(deps): update dependency @​vscode/vsce to v3.9.1 by @​renovate[bot] in #​729
• chore(deps): update dependency @​typescript-eslint/parser to v8.59.0 by @​renovate[bot] in #​597
• ci: add CodSpeed benchmark coverage by @​simplyme0823 in #​669
• test: lock in alignment with typescript-eslint v8 by @​fansenze in #​786
• chore: nil-guard GetDeclaration and add gap-file regression sweep by @​fansenze in #​785
• test: align no-unnecessary-condition test coverage with typescript-eslint v8 main by @​fansenze in #​805

Full Changelog: web-infra-dev/rslint@v0.5.0...v0.5.1

web-infra-dev/rstest (@​rstest/core)

v0.9.10

Compare Source

What's Changed

Performance 🚀

• perf(core): optimize updateTestModes traversal by @​9aoy in #​1202

Bug Fixes 🐞

• fix(core): clean coverage at run start instead of from rsbuild compile hook by @​fi3ework in #​1214

Document 📖

• docs(website): improve rstest feature messaging by @​9aoy in #​1205

Other Changes

• ci(codspeed): run after e2e succeeds by @​fi3ework in #​1203
• chore: clear existing lint warnings by @​9aoy in #​1204
• ci(codspeed): temporarily disable on PR/push by @​fi3ework in #​1208
• chore(deps): update all non-major dependencies by @​renovate[bot] in #​1198

Full Changelog: web-infra-dev/rstest@v0.9.9...v0.9.10

honojs/hono (hono)

v4.12.16

Compare Source

Security fixes

This release includes fixes for the following security issues:

Unvalidated JSX Tag Names in hono/jsx May Allow HTML Injection

Affects: hono/jsx. Fixes missing validation of JSX tag names when using jsx() or createElement(), which could allow HTML injection if untrusted input is used as the tag name. GHSA-69xw-7hcm-h432

bodyLimit() can be bypassed for chunked / unknown-length requests

Affects: Body Limit Middleware. Fixes late enforcement for request bodies without a reliable Content-Length (e.g. chunked requests), where oversized requests could reach handlers and return successful responses before being rejected. GHSA-9vqf-7f2p-gf9v

chimurai/http-proxy-middleware (http-proxy-middleware)

v4.0.0-beta.6

Compare Source

What's Changed

• chore(package.json): remove patch-package by @​chimurai in #​1217
• chore(package.json): node ^22.15.0 by @​chimurai in #​1218
• refactor(package): subpath 'http-proxy-middleware/hono' by @​chimurai in #​1220
• chore(package.json): v4.0.0-beta.6 by @​chimurai in #​1221

Full Changelog: chimurai/http-proxy-middleware@v4.0.0-beta.5...v4.0.0-beta.6

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.