chore(deps-dev): bump the dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the dependencies group with 7 updates in the / directory:

Package	From	To
@commitlint/cli	20.4.1	20.4.2
@commitlint/config-conventional	20.4.1	20.4.2
@hapi/hapi	21.4.4	21.4.6
@types/node	22.19.8	22.19.11
eslint	9.39.2	9.39.3
hono	4.11.7	4.12.1
webpack	5.105.0	5.105.2

Updates @commitlint/cli from 20.4.1 to 20.4.2

Release notes

Sourced from @​commitlint/cli's releases.

v20.4.2

20.4.2 (2026-02-19)

Bug Fixes

• fix(rules): ignore cherry-picks in signed-off-by by @​mzedel in conventional-changelog/commitlint#4625
• fix(config-nx-scopes): add unique names to fixture projects by @​escapedcat in conventional-changelog/commitlint#4622

New Contributors

• @​mzedel made their first contribution in conventional-changelog/commitlint#4625

Full Changelog: conventional-changelog/commitlint@v20.4.1...v20.4.2

Changelog

Sourced from @​commitlint/cli's changelog.

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/cli

Commits

• 81cfc9e v20.4.2
• See full diff in compare view

Updates @commitlint/config-conventional from 20.4.1 to 20.4.2

Release notes

Sourced from @​commitlint/config-conventional's releases.

v20.4.2

20.4.2 (2026-02-19)

Bug Fixes

• fix(rules): ignore cherry-picks in signed-off-by by @​mzedel in conventional-changelog/commitlint#4625
• fix(config-nx-scopes): add unique names to fixture projects by @​escapedcat in conventional-changelog/commitlint#4622

New Contributors

• @​mzedel made their first contribution in conventional-changelog/commitlint#4625

Full Changelog: conventional-changelog/commitlint@v20.4.1...v20.4.2

Changelog

Sourced from @​commitlint/config-conventional's changelog.

20.4.2 (2026-02-19)

Note: Version bump only for package @​commitlint/config-conventional

Commits

• 81cfc9e v20.4.2
• See full diff in compare view

Updates @hapi/hapi from 21.4.4 to 21.4.6

Commits

• 5095382 21.4.6
• 97c435f Fix invalid hostname parsing for ipv6 formatted host header (#4564)
• 62032e6 21.4.5
• 0ead0ec fix: auth typings and reduced type ambiguity (#4562)
• See full diff in compare view

Updates @types/node from 22.19.8 to 22.19.11

Commits

• See full diff in compare view

Updates eslint from 9.39.2 to 9.39.3

Release notes

Sourced from eslint's releases.

v9.39.3

Bug Fixes

• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504) (sethamus)

Chores

• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#20529) (Milos Djermanovic)
• 9ceef92 chore: package.json update for @​eslint/js release (Jenkins)
• af498c6 chore: ignore /docs/v9.x in link checker (#20453) (Milos Djermanovic)

Commits

• a7d5fe6 9.39.3
• 42e6b06 Build: changelog update for 9.39.3
• 8594a43 chore: upgrade @​eslint/js@​9.39.3 (#20529)
• 9ceef92 chore: package.json update for @​eslint/js release
• 791bf8d fix: restore TypeScript 4.0 compatibility in types (#20504)
• af498c6 chore: ignore /docs/v9.x in link checker (#20453)
• See full diff in compare view

Updates hono from 4.11.7 to 4.12.1

Release notes

Sourced from hono's releases.

v4.12.1

What's Changed

• fix(client): export ApplyGlobalResponse from hono/client by @​sushichan044 in honojs/hono#4743

Full Changelog: honojs/hono@v4.12.0...v4.12.1

v4.12.0

Release Notes

Hono v4.12.0 is now available!

This release includes new features for the Hono client, middleware improvements, adapter enhancements, and significant performance improvements to the router and context.

$path for Hono Client

The Hono client now has a $path() method that returns the path string instead of a full URL. This is useful when you need just the path portion for routing or key-based operations:

const client = hc<typeof app>('http://localhost:8787')
// Get the path string
const path = client.api.posts.$path()
// => '/api/posts'
// With path parameters
const postPath = client.api.posts[':id'].$path({
param: { id: '123' },
})
// => '/api/posts/123'
// With query parameters
const searchPath = client.api.posts.$path({
query: { filter: 'test' },
})
// => '/api/posts?filter=test'

Unlike $url() which returns a URL object, $path() returns a plain path string, making it convenient for use with routers or as cache keys.

Thanks @​ShaMan123!

ApplyGlobalResponse Type Helper for RPC Client

The new ApplyGlobalResponse type helper allows you to add global error response types to all routes in the RPC client. This is useful for typing common error responses from app.onError() or global middlewares:

const app = new Hono()
  .get('/api/users', (c) => c.json({ users: ['alice', 'bob'] }, 200))
  .onError((err, c) => c.json({ error: err.message }, 500))
</tr></table> 

... (truncated)

Commits

• 2de30d7 4.12.1
• 91ef235 fix(client): export ApplyGlobalResponse from hono/client (#4743)
• d2ed2e9 4.12.0
• 01e78ad Merge pull request #4735 from honojs/next
• a340a25 perf(context): use createResponseInstance for new Response (#4733)
• bd26c31 perf(trie-router): improve performance (1.5x ~ 2.0x) (#4724)
• b85c1e0 feat(types): Add exports field to ExecutionContext (#4719)
• 02346c6 feat(language): add progressive locale code truncation to normalizeLanguage (...
• 7438ab9 perf(context): add fast path to c.json() matching c.text() optimization (#4707)
• 034223f feat(trailing-slash): add alwaysRedirect option to support wildcard routes ...
• Additional commits viewable in compare view

Updates webpack from 5.105.0 to 5.105.2

Release notes

Sourced from webpack's releases.

v5.105.2

Patch Changes

• Fixed WebpackPluginInstance type regression. (by @​alexander-akait in #20440)

v5.105.1

Patch Changes

• Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #20424)

• Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #20433)

• Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #20433)

Changelog

Sourced from webpack's changelog.

5.105.2

Patch Changes

• Fixed WebpackPluginInstance type regression. (by @​alexander-akait in #20440)

5.105.1

Patch Changes

• Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #20424)

• Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #20433)

• Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #20433)

Commits

• 0756c7e chore(release): new release (#20441)
• ff28476 chore(deps): bump CodSpeedHQ/action in the dependencies group (#20442)
• 4d3ed66 ci: discord using curl
• 004550a ci: discord fix
• 44bf97b ci: emulate release for discord using other approach
• 9c71a09 ci: emulate release for discord
• 02d3bc9 ci: allow to run release announcement
• 6c62c28 ci: fix discord
• 900219d fix: type regression (#20440)
• 8e50ef2 chore(release): new release (#20429)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.