[dependabot]

Bumps the hapi group with 7 updates in the / directory:

Package	From	To
@hapi/bourne	3.0.0	4.0.1
@hapi/catbox-redis	7.0.2	7.1.0
@hapi/hapi	21.4.9	21.4.13
@hapi/inert	7.1.2	7.1.3
@hapi/wreck	18.1.2	18.1.3
hapi-pulse	3.0.1	4.0.0
joi	18.3.0	18.3.2

Updates @hapi/bourne from 3.0.0 to 4.0.1

Commits

• fc76c4b 4.0.1
• 693c721 Revert "fix: strip leading UTF-8 BOM"
• b7355d7 4.0.0
• a10bbf6 fix: strip leading UTF-8 BOM
• 1579494 chore: update linting
• c79288d chore: revert implicit README.md
• dc1f65a chore: revert extension change
• 5a8e751 refactor: move source to src/ as .mjs
• 531308e build: ship API.md + README.md in the npm package
• 287cc05 chore: update tsconfig
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by marsup, a new releaser for @​hapi/bourne since your current version.

Updates @hapi/catbox-redis from 7.0.2 to 7.1.0

Commits

• 42c38b0 7.1.0
• 817e457 feat: support username
• 0a48e9a chore: fix CI
• 3cfba4e chore: 🤖 test with latest redis and redis drop-ins
• c78198d chore: pin eslint-plugin
• See full diff in compare view

Updates @hapi/hapi from 21.4.9 to 21.4.13

Commits

• f2837a0 21.4.13
• 947544c fix: reject invalid host headers
• 9358b48 21.4.12
• 6f4fe79 chore: bump subtext (security)
• 58630f3 21.4.11
• 7df895d chore: bump dependencies
• d9ae305 fix: close connection when error response fails
• 32d0251 fix: properly check host headers
• 6129132 fix: retry failed error response transmission
• b90c41b fix(types): add QUERY http method
• Additional commits viewable in compare view

Updates @hapi/inert from 7.1.2 to 7.1.3

Commits

• 40f706d 7.1.3
• c3a0dc1 fix: reject encoded separators in directory handler
• See full diff in compare view

Updates @hapi/wreck from 18.1.2 to 18.1.3

Commits

• 3920557 18.1.3
• bcbf3a9 fix: reject invalid redirect locations
• See full diff in compare view

Updates hapi-pulse from 3.0.1 to 4.0.0

Changelog

Sourced from hapi-pulse's changelog.

4.0.0 - 2026-06-18

Updated

• bump dependencies

Breaking Changes

• require Node.js v22

Commits

• 582e0cb 4.0.0
• ea6a9a3 add "files" to package.json
• bbd0239 update release date
• 2021471 prepare compatibility in readme for v4 release
• 8da4969 test node versions 22, 24, 26
• 331c3cd prepare changelog
• 02e7733 bump sinon dependency
• 2272b6a dont lint when testing
• bc3338a require Node.js v22
• f9b54de bump deps
• Additional commits viewable in compare view

Updates joi from 18.3.0 to 18.3.2

Commits

• 7cfb3ce 18.3.2
• 4a42179 Merge pull request #3169 from hapijs/fix/linear-unique
• 0154b7b fix: make unique() linear on objects
• 4009bfb 18.3.1
• 976cf13 Merge pull request #3165 from hapijs/fix/rename-prototype-keys
• 9d82116 fix: rename to prototype-named keys
• 316d08d Merge pull request #3164 from hapijs/fix/messages-proto-language
• 76f5771 fix: reject proto as a messages language
• bc1b041 Merge pull request #3162 from hapijs/fix/email-multiple-split
• 03dc1d9 fix: linear split for email multiple
• See full diff in compare view