chore(deps): update devdependency h3 to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
h3 (source)	1.15.11 → 2.0.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

h3js/h3 (h3)

v2.0.1

compare changes

🚀 Enhancements

• rules: Skip redirect when the request is already at the target (#​1559)

🩹 Fixes

• cookie: Include partitioned in the distinct-cookie key (#​1553)
• sse: Preserve buffered events during overlapping flushes (#​1555)
• static: Set vary header when a single encoding is accepted (#​1556)
• static: Honor q-values and case in accept-encoding (#​1560)
• mime: Add .mjs and .cjs to COMMON_MIME_TYPES (#​1566)
• rules: Normalize rule keys like routes and tighten the shape guard (7cbf21c)
• rules: Let a narrower pattern reinstate a rule reset on another reading (3f1c9e5)
• rules: Allow headers: false in RouteRuleConfig (edcc329)
• validate: Preserve repeated query values in defineValidatedHandler (#​1562)
• cookie: Size cookie chunks by their encoded length (#​1565)
• static: Resolve the MIME type of a precompressed variant from the requested asset (#​1564)
• mount: Reject // after base (1161eb7)
• session: Keep loaded session data prototype-free (46bc1a2)

💅 Refactors

• Update rou3 to v0.10 (3cfd749)

📖 Documentation

• Document raw query access via event.url.search (#​1551)

🌊 Types

• auth: BasicAuth context fields are always set (#​1550)

🏡 Chore

• Udate deps (8f21c71)
• Update rou3 to v1 (6d59f61)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Breken support@brekfuz.com
• 0020020 (@​00200200)
• Okxint (@​okxint)
• Pi0x x@pi0.io
• Alexandre Kohler (@​kwy404)
• Maxim Gagiev maximgagievv@gmail.com
• Kauê Leivingson (@​Kaue-TecsaGroup)
• Geonseok (@​hxperl)
• Oskar Lebuda (@​OskarLebuda)

v2.0.0

compare changes

🚀 Enhancements

• ⚠️ HTTPResponse (#​1212)

🔥 Performance

• Try avoid cloning response for meriging headers (#​1214)

🩹 Fixes

• cors: Use defaults in handleCors (#​1161)

💅 Refactors

• Hide internal event._res and event.res._headers (#​1185)

📦 Build

• Add missing exports (#​1211)

🏡 Chore

• Update deps (6396029)
• Prepare for rc (#​1213)
• Update srvx (4c1eefc)

⚠️ Breaking Changes

• ⚠️ HTTPResponse (#​1212)

❤️ Contributors

• Pooya Parsa (@​pi0)
• Ilya Semenov (@​IlyaSemenov)
• Huseeiin (@​huseeiin)
• Sandro Circi (@​sandros94)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs.npmx.dev	Ready	Preview	Oct 5, 2026 4:28am UTC
npmx.dev	Ready	Preview	Oct 5, 2026 4:28am UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
npmx-lunaria	Ignored		Oct 5, 2026 4:28am UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	h3@​2.0.1
	srvx@​1.0.4 ⏵ 1.0.5	+1		+1	-1

View full report

[github-actions]

📊 Dependency Size Changes

Warning

This PR adds 1 MB of new dependencies, which exceeds the threshold of 200 kB.

📦 Package	📏 Size
h3@2.0.1	667.1 kB
srvx@1.0.5	182.1 kB
rou3@1.0.0	168 kB
vue-component-type-helpers@3.3.11	-5.6 kB

Total size change: 1 MB