Merge dev to stable

.dockerignore

@@ -8,5 +8,5 @@
 !/LICENSE
 !/mise.toml
 !/package.json
-!/rolldown.config.ts
-!/tsconfig.json
+!/rolldown.config.mts
+!/tsconfig.json

.gitattributes

@@ -36,6 +36,8 @@
 *.styl            text
 *.tag             text
 *.ts              text
+*.mts             text
+*.cts             text
 *.tsx             text
 *.xml             text
 *.xhtml           text diff=html
@@ -193,4 +195,4 @@ Procfile          text
 *.*ignore         text
 
 # Prevents massive diffs from built files
-dist/*            binary
+dist/*            binary

.github/workflows/cd.yml

@@ -41,12 +41,12 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: "audit"
 
       - name: Setup mise-en-place
-        uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
+        uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
 
       - name: Save context
         id: ctx
@@ -76,7 +76,7 @@ jobs:
           echo "extended=${TIMESTAMP}-${SHA_SHORT}" >>"$GITHUB_OUTPUT"
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: "false"
 
@@ -115,7 +115,7 @@ jobs:
 
       - if: inputs.artifact-action == 'build-release'
         name: Attest artifact
-        uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
+        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
         with:
           subject-path: |
             dist/*.tar.xz
@@ -135,7 +135,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: "audit"
 
@@ -174,7 +174,7 @@ jobs:
           echo "list=${TAGS[*]}" >>"$GITHUB_OUTPUT"
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: "false"
 
@@ -214,7 +214,7 @@ jobs:
 
       - if: inputs.image-action == 'build-release'
         name: Attest image
-        uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
+        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
         with:
           subject-name: "${{ env.REGISTRY }}/${{ steps.build-image.outputs.image }}"
           subject-digest: "${{ steps.push-image.outputs.digest }}"

.github/workflows/ci.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
+        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
         with:
           egress-policy: "audit"
 
@@ -41,12 +41,12 @@ jobs:
           echo "sha_short=${CTX_SHA::7}" >>"$GITHUB_OUTPUT"
 
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: "false"
 
       - name: Setup mise-en-place
-        uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
+        uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
 
       - name: Run lint
         run: mise run lint

.gitignore

@@ -24,5 +24,5 @@
 !/mise.toml
 !/package.json
 !/README.md
-!/rolldown.config.ts
-!/tsconfig.json
+!/rolldown.config.mts
+!/tsconfig.json

biome.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://biomejs.dev/schemas/2.3.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.4.2/schema.json",
   "files": {
     "ignoreUnknown": true,
     "includes": ["**", "!!dist/*", "!node_modules/*", "!!storage/*"]
@@ -31,6 +31,8 @@
       "complexity": {
         "noForEach": "error",
         "noImplicitCoercions": "error",
+        "noUselessCatchBinding": "warn",
+        "noUselessUndefined": "warn",
         "useSimplifiedLogicExpression": "error"
       },
       "correctness": {
@@ -41,20 +43,18 @@
       },
       "nursery": {
         "noContinue": "warn",
-        "noDeprecatedImports": "warn",
         "noEqualsToNull": "warn",
         "noFloatingPromises": "warn",
         "noForIn": "warn",
-        "noImportCycles": "warn",
         "noIncrementDecrement": "warn",
         "noMisusedPromises": "warn",
         "noMultiAssign": "warn",
         "noMultiStr": "warn",
         "noParametersOnlyUsedInRecursion": "warn",
+        "noRedundantDefaultExport": "warn",
         "noReturnAssign": "warn",
-        "noUselessCatchBinding": "warn",
-        "noUselessUndefined": "warn",
         "useAwaitThenable": "off",
+        "useConsistentEnumValueType": "warn",
         "useDestructuring": "warn",
         "useExhaustiveSwitchCases": "warn",
         "useExplicitType": "off",
@@ -83,8 +83,8 @@
           "level": "error",
           "options": {
             "paths": {
-              "@hono/hono": {
-                "message": "Use `@hono/hono/tiny` instead",
+              "hono": {
+                "message": "Use `hono/tiny` instead",
                 "allowImportNames": ["Context"]
               }
             }
@@ -140,11 +140,13 @@
         "useUnifiedTypeSignatures": "error"
       },
       "suspicious": {
-        "noConsole": "error",
         "noAlert": "error",
+        "noConsole": "error",
         "noConstantBinaryExpressions": "error",
+        "noDeprecatedImports": "warn",
         "noEmptyBlockStatements": "error",
         "noEvolvingTypes": "error",
+        "noImportCycles": "warn",
         "noUnassignedVariables": "error",
         "noVar": "error",
         "useNumberToFixedDigitsArgument": "error",

deno.json

@@ -13,29 +13,28 @@
     "#http/": "./src/http/",
     "#task/": "./src/tasks/",
     "#util/": "./src/utils/",
-    "@deno/loader": "jsr:@deno/loader@~0.3.11",
-    "@hono/hono": "jsr:@hono/hono@^4.11.4",
-    "@hono/openapi": "npm:hono-openapi@^1.1.2",
+    "@deno/loader": "jsr:@deno/loader@~0.3.12",
+    "@hono/openapi": "npm:hono-openapi@^1.2.0",
     "@hono/standard-validator": "jsr:@hono/standard-validator@~0.2.2",
-    "@std/assert": "jsr:@std/assert@^1.0.16",
-    "@std/async": "jsr:@std/async@^1.0.16",
-    "@std/cache": "jsr:@std/cache@~0.2.1",
-    "@std/collections": "jsr:@std/collections@^1.1.3",
+    "@std/assert": "jsr:@std/assert@^1.0.18",
+    "@std/async": "jsr:@std/async@^1.1.1",
+    "@std/cache": "jsr:@std/cache@~0.2.2",
+    "@std/collections": "jsr:@std/collections@^1.1.5",
     "@std/dotenv": "jsr:@std/dotenv@~0.225.6",
     "@std/encoding": "jsr:@std/encoding@^1.0.10",
-    "@std/fmt": "jsr:@std/fmt@^1.0.8",
-    "@std/fs": "jsr:@std/fs@^1.0.21",
+    "@std/fmt": "jsr:@std/fmt@^1.0.9",
+    "@std/fs": "jsr:@std/fs@^1.0.22",
     "@std/path": "jsr:@std/path@^1.1.4",
-    "@std/streams": "jsr:@std/streams@^1.0.16",
+    "@std/streams": "jsr:@std/streams@^1.0.17",
     "@std/ulid": "jsr:@std/ulid@^1.0.0",
-    "@types/node": "npm:@types/node@^25.0.8",
-    "arkenv": "npm:arkenv@~0.8.3",
+    "@types/node": "npm:@types/node@^25.3.0",
+    "arkenv": "npm:arkenv@~0.9.3",
     "arktype": "npm:arktype@^2.1.29",
-    "biome": "npm:@biomejs/biome@2.3.11",
+    "biome": "npm:@biomejs/biome@2.4.2",
     "hash-wasm": "npm:hash-wasm@^4.12.0",
+    "hono": "jsr:@hono/hono@^4.12.0",
     "nanoid": "jsr:@sitnik/nanoid@^5.1.5",
-    "rolldown": "npm:rolldown@1.0.0-beta.60",
-    "vite-bundle-analyzer": "npm:vite-bundle-analyzer@^1.3.2"
+    "rolldown": "npm:rolldown@1.0.0-rc.5"
   },
   "fmt": {
     "exclude": ["**"]