chore(deps): update javascript dev dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/js (source)	9.37.0 -> 9.38.0
@sentry/node (source)	10.19.0 -> 10.20.0
@types/node (source)	22.18.9 -> 22.18.11
elysia	1.4.10 -> 1.4.12
eslint (source)	9.37.0 -> 9.38.0
hono (source)	4.9.11 -> 4.10.1
koa (source)	3.0.1 -> 3.0.3
typescript-eslint (source)	8.46.0 -> 8.46.1

---

Release Notes

eslint/eslint (@​eslint/js)

v9.38.0

Compare Source

getsentry/sentry-javascript (@​sentry/node)

v10.20.0

Compare Source

Important Changes

• feat(flags): Add Growthbook integration (#​17440)

  Adds a new Growthbook integration for feature flag support.

• feat(solid): Add support for TanStack Router Solid (#​17735)

  Adds support for TanStack Router in the Solid SDK, enabling better routing instrumentation for Solid applications.

• feat(nextjs): Support native debugIds in turbopack (#​17853)

  Adds support for native Debug IDs in Turbopack, improving source map resolution and error tracking for Next.js applications using Turbopack. Native Debug ID generation will be enabled automatically for compatible versions.

Other Changes

• feat(nextjs): Prepare for next 16 bundler default (#​17868)
• feat(node): Capture pino logger name (#​17930)
• fix(browser): Ignore React 19.2+ component render measure entries (#​17905)
• fix(nextjs): Fix createRouteManifest with basePath (#​17838)
• fix(react): Add POP guard for long-running pageload spans (#​17867)
• fix(tracemetrics): Send boolean for internal replay attribute (#​17908)
• ref(core): Add weight tracking logic to browser logs/metrics (#​17901)

Internal Changes

- chore(nextjs): Add Next.js 16 peer dependency ([#​17925](https://redirect.github.com/getsentry/sentry-javascript/pull/17925)) - chore(ci): Update Next.js canary testing ([#​17939](https://redirect.github.com/getsentry/sentry-javascript/pull/17939)) - chore: Bump size limit ([#​17941](https://redirect.github.com/getsentry/sentry-javascript/pull/17941)) - test(nextjs): Add next@16 e2e test ([#​17922](https://redirect.github.com/getsentry/sentry-javascript/pull/17922)) - test(nextjs): Update next 15 tests ([#​17919](https://redirect.github.com/getsentry/sentry-javascript/pull/17919)) - chore: Add external contributor to CHANGELOG.md ([#​17915](https://redirect.github.com/getsentry/sentry-javascript/pull/17915)) - chore: Add external contributor to CHANGELOG.md ([#​17928](https://redirect.github.com/getsentry/sentry-javascript/pull/17928)) - chore: Add external contributor to CHANGELOG.md ([#​17940](https://redirect.github.com/getsentry/sentry-javascript/pull/17940))

Work in this release was contributed by @​seoyeon9888, @​madhuchavva and @​thedanchez. Thank you for your contributions!

elysiajs/elysia (elysia)

v1.4.12

Compare Source

Improvement:

• named macro function callback
• adjust build script

v1.4.11

Compare Source

Bug fix:

• #​1469 incorrect ping, pong type signature
• #​1467 better error union handling in onError
• #​1463 responseValue is undefined in afterHandle when beforeHandle returns status
• #​1460 compressed response in mapResponse is corrupted if status !== 200
• #​1456 add response type check for stream
• #​1451 cookie validation is not running when there's no body schema
• make file-type non optional dependency to fix default build problem

eslint/eslint (eslint)

v9.38.0

Compare Source

honojs/hono (hono)

v4.10.1

Compare Source

What's Changed

• fix(types): cannot .use non-return mw from createMiddleware by @​NamesMT in #​4465

Full Changelog: honojs/hono@v4.10.0...v4.10.1

v4.10.0

Compare Source

Release Notes

Hono v4.10.0 is now available!

This release brings improved TypeScript support and new utilities.

The main highlight is the enhanced middleware type definitions that solve a long-standing issue with type safety for RPC clients.

Middleware Type Improvements

Imagine the following app:

import { Hono } from 'hono'

const app = new Hono()

const routes = app.get(
  '/',
  (c) => {
    return c.json({ errorMessage: 'Error!' }, 500)
  },
  (c) => {
    return c.json({ message: 'Success!' }, 200)
  }
)

The client with RPC:

import { hc } from 'hono/client'

const client = hc<typeof routes>('/')

const res = await client.index.$get()

if (res.status === 500) {
}

if (res.status === 200) {
}

Previously, it couldn't infer the responses from middleware, so a type error was thrown.

Now the responses are correctly typed.

---

This was a long-standing issue and we were thinking it was super difficult to resolve it. But now come true.

Thank you for the great work @​slawekkolodziej!

cloneRawRequest Utility

The new cloneRawRequest utility allows you to clone the raw Request object after it has been consumed by validators or middleware.

import { cloneRawRequest } from 'hono/request'

app.post('/api', async (c) => {
  const body = await c.req.json()

  // Clone the consumed request
  const clonedRequest = cloneRawRequest(c.req)
  await externalLibrary.process(clonedRequest)
})

Thanks @​kamaal111!

New features

• feat(types): passing middleware types #​4393
• feat(ssg): add default plugin that defines the recommended behavior #​4394
• feat(request): add cloneRawRequest utility for request cloning #​4382

All changes

• feat(types): passing middleware types by @​slawekkolodziej in #​4393
• feat(ssg): add default plugin that defines the recommended behavior by @​3w36zj6 in #​4394
• feat(request): add cloneRawRequest utility for request cloning by @​kamaal111 in #​4382
• fix(proxy): Correct hop-by-hop header handling per RFC 9110 by @​sugar-cat7 in #​4459

New Contributors

• @​slawekkolodziej made their first contribution in #​4393
• @​kamaal111 made their first contribution in #​4382

Full Changelog: honojs/hono@v4.9.12...v4.10.0

v4.9.12

Compare Source

What's Changed

• refactor: internal structure of PreparedRegExpRouter for optimization and added tests by @​usualoma in #​4456
• refactor: use protected methods instead of computed properties to allow tree shaking by @​usualoma in #​4458

Full Changelog: honojs/hono@v4.9.11...v4.9.12

koajs/koa (koa)

v3.0.3

Compare Source

What's Changed

• fix: normalize referer before redirect by @​fengmk2 in #​1908

Full Changelog: koajs/koa@v3.0.2...v3.0.3

v3.0.2

Compare Source

What's Changed

• fix: fixes response.attachment behaviour leads to Content-Type Sniffing by @​yowainwright in #​1904
• chore: use NPM trusted publishing with semver tag triggers by @​Copilot in #​1907

New Contributors

• @​Copilot made their first contribution in #​1907

Full Changelog: koajs/koa@v3.0.1...v3.0.2

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: Branch creation - "after 8am on saturday" in timezone Australia/Brisbane, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}