srvx 0.11.6 → 0.11.8

package/dist/_chunks/_url.mjs

@@ -25,6 +25,20 @@ function lazyInherit(target, source, sourceKey) {
 		if (modified) Object.defineProperty(target, key, desc);
 	}
 }
+/**
+* URL wrapper with fast paths to access to the following props:
+*
+*  - `url.pathname`
+*  - `url.search`
+*  - `url.searchParams`
+*  - `url.protocol`
+*
+* **NOTES:**
+*
+* - It is assumed that the input URL is **already encoded** and formatted from an HTTP request and contains no hash.
+* - Triggering the setters or getters on other props will deoptimize to full URL parsing.
+* - Changes to `searchParams` will be discarded as we don't track them.
+*/
 const FastURL = /* @__PURE__ */ (() => {
 	const NativeURL = globalThis.URL;
 	const FastURL = class URL {

package/dist/_chunks/loader.d.mts

@@ -0,0 +1,87 @@
+import { Server, ServerHandler } from "srvx";
+
+//#region src/loader.d.ts
+declare const defaultExts: string[];
+declare const defaultEntries: string[];
+/**
+* Options for loading a server entry module.
+*/
+type LoadOptions = {
+  /**
+  * Path or URL to the server entry file.
+  *
+  * If not provided, common entry points will be searched automatically.
+  */
+  entry?: string;
+  /**
+  * Base directory for resolving relative paths.
+  *
+  * @default "."
+  */
+  dir?: string;
+  /**
+  * Set to `false` to disable interception of `http.Server.listen` to detect legacy handlers.
+  *
+  * @default true
+  */
+  interceptHttpListen?: boolean;
+  /**
+  * Set to `false` to disable Node.js handler (req, res) compatibility.
+  */
+  nodeCompat?: boolean;
+  /**
+  * Node.js server instance to return when intercepting `http.Server.listen`.
+  */
+  nodeServer?: NodeServer;
+  /**
+  * srvx server instance to return when intercepting `http.Server.listen`.
+  */
+  srvxServer?: Server;
+  /**
+  * Hook called after the module is loaded to allow for custom processing.
+  *
+  * You can return a modified version of the module if needed.
+  */
+  onLoad?: (module: unknown) => any;
+};
+/**
+* Result of loading a server entry module.
+*/
+type LoadedServerEntry = {
+  /**
+  * The web fetch handler extracted from the loaded module.
+  *
+  * This is resolved from `module.fetch`, `module.default.fetch`,
+  * or upgraded from a legacy Node.js handler.
+  */
+  fetch?: ServerHandler;
+  /**
+  * The raw loaded module.
+  */
+  module?: any;
+  /**
+  * Whether the handler was upgraded from a legacy Node.js HTTP handler.
+  *
+  * When `true`, the original module exported a Node.js-style `(req, res)` handler
+  * that has been wrapped for web fetch compatibility.
+  */
+  nodeCompat?: boolean;
+  /**
+  * The resolved `file://` URL of the loaded entry module.
+  */
+  url?: string;
+  /**
+  * Whether the specified entry file was not found.
+  *
+  * When `true`, no valid entry point could be located.
+  */
+  notFound?: boolean;
+  /**
+  * The original srvx server instance if the module used the loader API to export a server directly.
+  */
+  srvxServer?: Server;
+};
+declare function loadServerEntry(opts: LoadOptions): Promise<LoadedServerEntry>;
+type NodeServer = NonNullable<Server["node"]>["server"];
+//#endregion
+export { loadServerEntry as a, defaultExts as i, LoadedServerEntry as n, defaultEntries as r, LoadOptions as t };

package/dist/adapters/aws-lambda.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 function awsRequest(event, context) {
 	const req = new Request(awsEventURL(event), {

package/dist/adapters/bun.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { t as FastURL } from "../_chunks/_url.mjs";
 import { a as resolveTLSOptions, i as resolvePortAndHost, n as fmtURL, r as printListening, t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { n as gracefulShutdownPlugin, r as wrapFetch } from "../_chunks/_plugins.mjs";
@@ -24,7 +25,7 @@ var BunServer = class {
 		const loader = globalThis.__srvxLoader__;
 		if (loader) {
 			this.fetch = fetchHandler;
-			loader(fetchHandler);
+			loader({ server: this });
 			return;
 		}
 		this.#wait = createWaitUntil();

package/dist/adapters/bunny.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;
 const FastResponse = Response;

package/dist/adapters/cloudflare.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;
 const FastResponse = Response;

package/dist/adapters/deno.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { t as FastURL } from "../_chunks/_url.mjs";
 import { a as resolveTLSOptions, i as resolvePortAndHost, n as fmtURL, r as printListening, t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { n as gracefulShutdownPlugin, r as wrapFetch } from "../_chunks/_plugins.mjs";
@@ -26,7 +27,7 @@ var DenoServer = class {
 		const loader = globalThis.__srvxLoader__;
 		if (loader) {
 			this.fetch = fetchHandler;
-			loader(fetchHandler);
+			loader({ server: this });
 			return;
 		}
 		this.#wait = createWaitUntil();

package/dist/adapters/generic.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;

package/dist/adapters/node.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { n as lazyInherit, t as FastURL } from "../_chunks/_url.mjs";
 import { a as resolveTLSOptions, i as resolvePortAndHost, n as fmtURL, r as printListening, t as createWaitUntil } from "../_chunks/_utils2.mjs";
 import { n as gracefulShutdownPlugin, r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
@@ -62,6 +63,11 @@ function streamBody(stream, nodeRes) {
 		nodeRes.off("error", streamCancel);
 	});
 }
+/**
+* Validates an HTTP Host header value (domain, IPv4, or bracketed IPv6) with optional port.
+* Intended for preliminary filtering invalid values like "localhost:3000/foobar?"
+*/
+const HOST_RE = /^(\[(?:[A-Fa-f0-9:.]+)\]|(?:[A-Za-z0-9_-]+\.)*[A-Za-z0-9_-]+|(?:\d{1,3}\.){3}\d{1,3})(:\d{1,5})?$/;
 var NodeRequestURL = class extends FastURL {
 	#req;
 	constructor({ req }) {
@@ -70,7 +76,11 @@ var NodeRequestURL = class extends FastURL {
 			const qIndex = path.indexOf("?");
 			const pathname = qIndex === -1 ? path : path?.slice(0, qIndex) || "/";
 			const search = qIndex === -1 ? "" : path?.slice(qIndex) || "";
-			const host = req.headers.host || req.headers[":authority"] || `${req.socket.localFamily === "IPv6" ? "[" + req.socket.localAddress + "]" : req.socket.localAddress}:${req.socket?.localPort || "80"}`;
+			let host = req.headers.host || req.headers[":authority"];
+			if (host) {
+				if (!HOST_RE.test(host)) throw new TypeError(`Invalid host header: ${host}`);
+			} else if (req.socket) host = `${req.socket.localFamily === "IPv6" ? "[" + req.socket.localAddress + "]" : req.socket.localAddress}:${req.socket?.localPort || "80"}`;
+			else host = "localhost";
 			const protocol = req.socket?.encrypted || req.headers["x-forwarded-proto"] === "https" || req.headers[":scheme"] === "https" ? "https:" : "http:";
 			super({
 				protocol,
@@ -248,6 +258,13 @@ const NodeRequest = /* @__PURE__ */ (() => {
 	Object.setPrototypeOf(Request.prototype, NativeRequest.prototype);
 	return Request;
 })();
+/**
+* Undici uses an incompatible Request constructor depending on private property accessors.
+*
+* This utility, patches global Request to support `new Request(req)` in Node.js.
+*
+* Alternatively you can use `new Request(req._request || req)` instead of patching global Request.
+*/
 function patchGlobalRequest() {
 	const NativeRequest = globalThis[Symbol.for("srvx.nativeRequest")] ??= globalThis.Request;
 	const PatchedRequest = class Request extends NativeRequest {
@@ -282,6 +299,11 @@ function readBody(req) {
 		req.on("data", onData).once("end", onEnd).once("error", onError);
 	});
 }
+/**
+* Fast Response for Node.js runtime
+*
+* It is faster because in most cases it doesn't create a full Response instance.
+*/
 const NodeResponse = /* @__PURE__ */ (() => {
 	const NativeResponse = globalThis.Response;
 	const STATUS_CODES = globalThis.process?.getBuiltinModule?.("node:http")?.STATUS_CODES || {};
@@ -390,6 +412,11 @@ const NodeResponse = /* @__PURE__ */ (() => {
 	Object.setPrototypeOf(NodeResponse.prototype, NativeResponse.prototype);
 	return NodeResponse;
 })();
+/**
+* Events:
+* - Readable (req from client): readable => data => end (push(null)) => error => close
+* - Writable (res to client): pipe => unpipe => drain => finish (end called) => error => close
+*/
 var WebRequestSocket = class extends Duplex {
 	_httpMessage;
 	autoSelectFamilyAttemptedAddresses = [];
@@ -604,6 +631,17 @@ var WebServerResponse = class extends ServerResponse {
 		});
 	}
 };
+/**
+* Calls a Node.js HTTP Request handler with a Fetch API Request object and returns a Response object.
+*
+* If the web Request contains an existing Node.js req/res pair (indicating it originated from a Node.js server from srvx/node), it will be called directly.
+*
+* Otherwise, new Node.js IncomingMessage and ServerResponse objects are created and linked to a custom Duplex stream that bridges the Fetch API streams with Node.js streams.
+*
+* The handler is invoked with these objects, and the response is constructed from the ServerResponse once it is finished.
+*
+* @experimental Behavior might be unstable.
+*/
 async function fetchNodeHandler(handler, req) {
 	const nodeRuntime = req.runtime?.node;
 	if (nodeRuntime && nodeRuntime.req && nodeRuntime.res) return await callNodeHandler(handler, req);
@@ -624,6 +662,9 @@ async function fetchNodeHandler(handler, req) {
 		});
 	}
 }
+/**
+* Converts a Fetch API handler to a Node.js HTTP handler.
+*/
 function toNodeHandler(handler) {
 	if (handler.__nodeHandler) return handler.__nodeHandler;
 	function convertedNodeHandler(nodeReq, nodeRes) {
@@ -637,6 +678,11 @@ function toNodeHandler(handler) {
 	assignFnName(convertedNodeHandler, handler, " (converted to Node handler)");
 	return convertedNodeHandler;
 }
+/**
+* Converts a Node.js HTTP handler into a Fetch API handler.
+*
+* @experimental Behavior might be unstable and won't work in Bun and Deno currently (tracker: https://github.com/h3js/srvx/issues/132)
+*/
 function toFetchHandler(handler) {
 	if (handler.__fetchHandler) return handler.__fetchHandler;
 	function convertedNodeHandler(req) {
@@ -672,14 +718,6 @@ var NodeServer = class {
 		for (const plugin of options.plugins || []) plugin(this);
 		errorPlugin(this);
 		const fetchHandler = this.fetch = wrapFetch(this);
-		const loader = globalThis.__srvxLoader__;
-		if (loader) {
-			loader(fetchHandler);
-			return;
-		}
-		gracefulShutdownPlugin(this);
-		this.#wait = createWaitUntil();
-		this.waitUntil = this.#wait.waitUntil;
 		const handler = (nodeReq, nodeRes) => {
 			const request = new NodeRequest({
 				req: nodeReq,
@@ -689,6 +727,18 @@ var NodeServer = class {
 			const res = fetchHandler(request);
 			return res instanceof Promise ? res.then((resolvedRes) => sendNodeResponse(nodeRes, resolvedRes)) : sendNodeResponse(nodeRes, res);
 		};
+		this.node = {
+			handler,
+			server: void 0
+		};
+		const loader = globalThis.__srvxLoader__;
+		if (loader) {
+			loader({ server: this });
+			return;
+		}
+		gracefulShutdownPlugin(this);
+		this.#wait = createWaitUntil();
+		this.waitUntil = this.#wait.waitUntil;
 		const tls = resolveTLSOptions(this.options);
 		const { port, hostname: host } = resolvePortAndHost(this.options);
 		this.serveOptions = {
@@ -711,10 +761,7 @@ var NodeServer = class {
 		else throw new Error("node.http2 option requires tls certificate!");
 		else if (this.#isSecure) server = nodeHTTPS.createServer(this.serveOptions, handler);
 		else server = nodeHTTP.createServer(this.serveOptions, handler);
-		this.node = {
-			server,
-			handler
-		};
+		this.node.server = server;
 		if (!options.manual) this.serve();
 	}
 	serve() {

package/dist/adapters/service-worker.mjs

@@ -1,3 +1,4 @@
+import "../_chunks/_utils.mjs";
 import { r as wrapFetch, t as errorPlugin } from "../_chunks/_plugins.mjs";
 const FastURL = URL;
 const FastResponse = Response;

package/dist/cli.d.mts

@@ -1,10 +1,6 @@
-import { LoadOptions } from "./loader.mjs";
-import { Server } from "srvx";
+import { t as LoadOptions } from "./_chunks/loader.mjs";
 
 //#region src/cli/types.d.ts
-declare global {
-  var __srvx__: Server | undefined;
-}
 type MainOptions = CLIOptions & {
   args?: string[];
   meta?: {

package/dist/cli.mjs

@@ -10,9 +10,13 @@ const NO_ENTRY_ERROR = "No server entry or public directory found";
 async function cliServe(cliOpts) {
 	try {
 		if (!process.env.NODE_ENV) process.env.NODE_ENV = cliOpts.prod ? "production" : "development";
+		let server;
 		const loaded = await loadServerEntry({
 			entry: cliOpts.entry,
-			dir: cliOpts.dir
+			dir: cliOpts.dir,
+			get srvxServer() {
+				return server;
+			}
 		});
 		const { serve: srvxServe } = loaded.nodeCompat ? await import("srvx/node") : await import("srvx");
 		const { serveStatic } = await import("srvx/static");
@@ -29,7 +33,7 @@ async function cliServe(cliOpts) {
 			...loaded.module
 		};
 		printInfo(cliOpts, loaded);
-		await (globalThis.__srvx__ = srvxServe({
+		server = srvxServe({
 			...serverOptions,
 			gracefulShutdown: !!cliOpts.prod,
 			port: cliOpts.port ?? serverOptions.port,
@@ -48,7 +52,8 @@ async function cliServe(cliOpts) {
 				cliOpts.static ? serveStatic({ dir: cliOpts.static }) : void 0,
 				...serverOptions.middleware || []
 			].filter(Boolean)
-		})).ready();
+		});
+		await server.ready();
 	} catch (error) {
 		console.error(error);
 		process.exit(1);
@@ -174,7 +179,7 @@ function getResponseFormat(res) {
 }
 const srvxMeta = {
 	name: "srvx",
-	version: "0.11.6",
+	version: "0.11.8",
 	description: "Universal Server."
 };
 function usage(mainOpts) {

package/dist/loader.d.mts

@@ -1,74 +1,2 @@
-import { ServerHandler } from "srvx";
-
-//#region src/loader.d.ts
-declare const defaultExts: string[];
-declare const defaultEntries: string[];
-/**
-* Options for loading a server entry module.
-*/
-type LoadOptions = {
-  /**
-  * Path or URL to the server entry file.
-  *
-  * If not provided, common entry points will be searched automatically.
-  */
-  entry?: string;
-  /**
-  * Base directory for resolving relative paths.
-  *
-  * @default "."
-  */
-  dir?: string;
-  /**
-  * Set to `false` to disable interception of `http.Server.listen` to detect legacy handlers.
-  *
-  * @default true
-  */
-  interceptHttpListen?: boolean;
-  /**
-  * Set to `false` to disable Node.js handler (req, res) compatibility.
-  */
-  nodeCompat?: boolean;
-  /**
-  * Hook called after the module is loaded to allow for custom processing.
-  *
-  * You can return a modified version of the module if needed.
-  */
-  onLoad?: (module: unknown) => any;
-};
-/**
-* Result of loading a server entry module.
-*/
-type LoadedServerEntry = {
-  /**
-  * The web fetch handler extracted from the loaded module.
-  *
-  * This is resolved from `module.fetch`, `module.default.fetch`,
-  * or upgraded from a legacy Node.js handler.
-  */
-  fetch?: ServerHandler;
-  /**
-  * The raw loaded module.
-  */
-  module?: any;
-  /**
-  * Whether the handler was upgraded from a legacy Node.js HTTP handler.
-  *
-  * When `true`, the original module exported a Node.js-style `(req, res)` handler
-  * that has been wrapped for web fetch compatibility.
-  */
-  nodeCompat?: boolean;
-  /**
-  * The resolved `file://` URL of the loaded entry module.
-  */
-  url?: string;
-  /**
-  * Whether the specified entry file was not found.
-  *
-  * When `true`, no valid entry point could be located.
-  */
-  notFound?: boolean;
-};
-declare function loadServerEntry(opts: LoadOptions): Promise<LoadedServerEntry>;
-//#endregion
+import { a as loadServerEntry, i as defaultExts, n as LoadedServerEntry, r as defaultEntries, t as LoadOptions } from "./_chunks/loader.mjs";
 export { LoadOptions, LoadedServerEntry, defaultEntries, defaultExts, loadServerEntry };

package/dist/loader.mjs

@@ -2,6 +2,7 @@ import { pathToFileURL } from "node:url";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 import * as nodeHTTP$1 from "node:http";
+import { EventEmitter } from "node:events";
 const defaultExts = [
 	".mjs",
 	".js",
@@ -35,13 +36,13 @@ async function loadServerEntry(opts) {
 	const url = entry.startsWith("file://") ? entry : pathToFileURL(resolve(entry)).href;
 	let mod;
 	let interceptedNodeHandler;
-	let interceptedFetchHandler;
+	let interceptedServer;
 	try {
 		if (opts.interceptHttpListen !== false) {
-			const loaded = await interceptListen(() => import(url));
+			const loaded = await interceptListen(() => import(url), opts);
 			mod = loaded.res;
 			interceptedNodeHandler = loaded.listenHandler;
-			interceptedFetchHandler = loaded.fetchHandler;
+			interceptedServer = loaded.server;
 		} else mod = await import(url);
 	} catch (error) {
 		if (error?.code === "ERR_UNKNOWN_FILE_EXTENSION") {
@@ -52,7 +53,7 @@ async function loadServerEntry(opts) {
 		throw error;
 	}
 	mod = await opts?.onLoad?.(mod) || mod;
-	let fetchHandler = mod?.fetch || mod?.default?.fetch || mod?.default?.default?.fetch || interceptedFetchHandler;
+	let fetchHandler = mod?.fetch || mod?.default?.fetch || mod?.default?.default?.fetch || interceptedServer?.fetch;
 	if (!fetchHandler && typeof mod?.default === "function" && mod.default.length < 2) fetchHandler = mod.default;
 	let nodeCompat = false;
 	if (!fetchHandler && opts.nodeCompat !== false) {
@@ -67,18 +68,21 @@ async function loadServerEntry(opts) {
 		module: mod,
 		nodeCompat,
 		url,
-		fetch: fetchHandler
+		fetch: fetchHandler,
+		srvxServer: interceptedServer
 	};
 }
 let _interceptQueue = Promise.resolve();
-async function interceptListen(cb) {
+async function interceptListen(cb, opts = {}) {
 	const result = _interceptQueue.then(async () => {
 		const originalListen = nodeHTTP$1.Server.prototype.listen;
 		let res;
 		let listenHandler;
-		let fetchHandler;
-		globalThis.__srvxLoader__ = (handler) => {
-			fetchHandler = handler;
+		let server;
+		const nodeServerStub = opts.nodeServer || opts.srvxServer?.node?.server || new StubNodeServer(() => opts.srvxServer?.node?.server);
+		globalThis.__srvxLoader__ = (obj) => {
+			server = obj.server;
+			if (server && server.node) server.node.server ||= nodeServerStub;
 		};
 		try {
 			nodeHTTP$1.Server.prototype.listen = function(arg1, arg2) {
@@ -89,15 +93,7 @@ async function interceptListen(cb) {
 				setImmediate(() => {
 					listenCallback?.();
 				});
-				return new Proxy({}, { get(_, prop) {
-					const server = globalThis.__srvx__;
-					if (!server && prop === "address") return () => ({
-						address: "",
-						family: "",
-						port: 0
-					});
-					return server?.node?.server?.[prop];
-				} });
+				return nodeServerStub;
 			};
 			res = await cb();
 		} finally {
@@ -107,10 +103,36 @@ async function interceptListen(cb) {
 		return {
 			res,
 			listenHandler,
-			fetchHandler
+			server
 		};
 	});
 	_interceptQueue = result.catch(() => {});
 	return result;
 }
+var StubNodeServer = class extends EventEmitter {
+	constructor(getServer) {
+		super();
+		return new Proxy(this, { get(target, prop, receiver) {
+			const server = getServer();
+			if (!server) return Reflect.get(target, prop, receiver);
+			const value = server[prop];
+			if (typeof value === "function") return value.bind(server);
+			return value;
+		} });
+	}
+	address() {
+		return {
+			address: "",
+			family: "",
+			port: 0
+		};
+	}
+	listen() {
+		return this;
+	}
+	close(callback) {
+		callback?.();
+		return this;
+	}
+};
 export { defaultEntries, defaultExts, loadServerEntry };

package/dist/tracing.mjs

@@ -1,3 +1,24 @@
+/**
+*
+* @experimental Channel names, event types and config options may change in future releases.
+*
+* Tracing plugin that adds diagnostics channel tracing to middleware and fetch handlers.
+*
+* This plugin wraps all middleware and the fetch handler with tracing instrumentation,
+* allowing you to subscribe to `srvx.request` and `srvx.middleware` tracing channels.
+*
+* @example
+* ```ts
+* import { serve } from "srvx";
+* import { tracingPlugin } from "srvx/tracing";
+*
+* const server = serve({
+*   fetch: (req) => new Response("OK"),
+*   middleware: [myMiddleware],
+*   plugins: [tracingPlugin()],
+* });
+* ```
+*/
 function tracingPlugin(opts = {}) {
 	return (server) => {
 		const { tracingChannel } = globalThis.process?.getBuiltinModule?.("node:diagnostics_channel") || {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "srvx",
-  "version": "0.11.6",
+  "version": "0.11.8",
   "description": "Universal Server.",
   "homepage": "https://srvx.h3.dev",
   "license": "MIT",
@@ -59,7 +59,7 @@
     "vitest": "vitest"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "^4.20260217.0",
+    "@cloudflare/workers-types": "^4.20260304.0",
     "@hono/node-server": "^1.19.9",
     "@mitata/counters": "^0.0.8",
     "@mjackson/node-fetch-server": "^0.7.0",
@@ -67,10 +67,10 @@
     "@types/bun": "^1.3.9",
     "@types/deno": "^2.5.0",
     "@types/express": "^5.0.6",
-    "@types/node": "^25.2.3",
+    "@types/node": "^25.3.0",
     "@types/node-forge": "^1.3.14",
-    "@types/serviceworker": "^0.0.191",
-    "@typescript/native-preview": "^7.0.0-dev.20260217.1",
+    "@types/serviceworker": "^0.0.192",
+    "@typescript/native-preview": "^7.0.0-dev.20260225.1",
     "@vitest/coverage-v8": "^4.0.18",
     "@whatwg-node/server": "^0.10.18",
     "automd": "^0.4.3",
@@ -83,10 +83,10 @@
     "mdbox": "^0.1.1",
     "mitata": "^1.0.34",
     "node-forge": "^1.3.3",
-    "obuild": "^0.4.27",
-    "oxfmt": "^0.33.0",
-    "oxlint": "^1.48.0",
-    "srvx-release": "npm:srvx@^0.11.4",
+    "obuild": "^0.4.31",
+    "oxfmt": "^0.35.0",
+    "oxlint": "^1.50.0",
+    "srvx-release": "npm:srvx@^0.11.7",
     "tslib": "^2.8.1",
     "typescript": "^5.9.3",
     "undici": "^7.22.0",
@@ -98,5 +98,5 @@
   "engines": {
     "node": ">=20.16.0"
   },
-  "packageManager": "pnpm@10.29.3"
+  "packageManager": "pnpm@10.30.2"
 }