chore(deps): update devdependency h3 to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
h3 (source)	1.15.11 → 2.0.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

h3js/h3 (h3)

v2.0.2

Compare Source

compare changes

🩹 Fixes

• node: Call onError for stream errors in Node.js handlers (#​1571)
• response: Use matching reason phrases in redirect and noContent (#​1570)
• middleware: Pass through handled responses in onError (#​1574)

📖 Documentation

• Add v2 blog article (9adeeee)

🌊 Types

• session: Remove @ts-nocheck from iron-crypto (#​1572)
• route: Infer defineRoute handler input from validation schemas (ec527f0)

🏡 Chore

• session: Retarget legacy seal fallback removal to v3 (#​1573)
• session: Mark legacySealFallback as deprecated (44dbfb8)
• Update deps (ac79e5f)
• Update release script (07d7d2c)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Pi0x x@pi0.io
• Bao Nguyen (@​giaBaoJS)
• Kaan Çelebi (@​kaanisthatyou)
• Daniel Shafer (@​dannyshafer)

v2.0.1

compare changes

🚀 Enhancements

• rules: Skip redirect when the request is already at the target (#​1559)

🩹 Fixes

• cookie: Include partitioned in the distinct-cookie key (#​1553)
• sse: Preserve buffered events during overlapping flushes (#​1555)
• static: Set vary header when a single encoding is accepted (#​1556)
• static: Honor q-values and case in accept-encoding (#​1560)
• mime: Add .mjs and .cjs to COMMON_MIME_TYPES (#​1566)
• rules: Normalize rule keys like routes and tighten the shape guard (7cbf21c)
• rules: Let a narrower pattern reinstate a rule reset on another reading (3f1c9e5)
• rules: Allow headers: false in RouteRuleConfig (edcc329)
• validate: Preserve repeated query values in defineValidatedHandler (#​1562)
• cookie: Size cookie chunks by their encoded length (#​1565)
• static: Resolve the MIME type of a precompressed variant from the requested asset (#​1564)
• mount: Reject // after base (1161eb7)
• session: Keep loaded session data prototype-free (46bc1a2)

💅 Refactors

• Update rou3 to v0.10 (3cfd749)

📖 Documentation

• Document raw query access via event.url.search (#​1551)

🌊 Types

• auth: BasicAuth context fields are always set (#​1550)

🏡 Chore

• Udate deps (8f21c71)
• Update rou3 to v1 (6d59f61)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Breken support@brekfuz.com
• 0020020 (@​00200200)
• Okxint (@​okxint)
• Pi0x x@pi0.io
• Alexandre Kohler (@​kwy404)
• Maxim Gagiev maximgagievv@gmail.com
• Kauê Leivingson (@​Kaue-TecsaGroup)
• Geonseok (@​hxperl)
• Oskar Lebuda (@​OskarLebuda)

v2.0.0

compare changes

🚀 Enhancements

• ⚠️ HTTPResponse (#​1212)

🔥 Performance

• Try avoid cloning response for meriging headers (#​1214)

🩹 Fixes

• cors: Use defaults in handleCors (#​1161)

💅 Refactors

• Hide internal event._res and event.res._headers (#​1185)

📦 Build

• Add missing exports (#​1211)

🏡 Chore

• Update deps (6396029)
• Prepare for rc (#​1213)
• Update srvx (4c1eefc)

⚠️ Breaking Changes

• ⚠️ HTTPResponse (#​1212)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Ilya Semenov (@​IlyaSemenov)
• Huseeiin (@​huseeiin)
• Sandro Circi (@​sandros94)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs.npmx.dev	Ready	Preview	Oct 8, 2026 5:38pm UTC
npmx.dev	Ready	Preview	Oct 8, 2026 5:38pm UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
npmx-lunaria	Ignored		Oct 8, 2026 5:38pm UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	h3@​2.0.2
	srvx@​1.0.4 ⏵ 1.0.5	+1		+1	-1

View full report

[github-actions]

📊 Dependency Size Changes

Warning

This PR adds 1 MB of new dependencies, which exceeds the threshold of 200 kB.

📦 Package	📏 Size
h3@2.0.2	666.9 kB
srvx@1.0.5	182.1 kB
rou3@1.0.0	168 kB
vue-component-type-helpers@3.3.11	-5.6 kB

Total size change: 1 MB

[codecov]

❌ 1 Tests Failed:

Tests completed	Failed	Passed	Skipped
3314	1	3313	6

View the top 1 failed test(s) by shortest run time

docs.spec.ts::API Documentation Pages › docs page without version redirects to latest

Stack Traces | 19.9s run time

expect(page).toHaveURL(expected) failed

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}