chore(deps): bump the server-dependencies group with 2 updates

[dependabot]

Bumps the server-dependencies group with 2 updates: ejs and http-proxy-middleware.

Updates ejs from 5.0.2 to 6.0.1

Release notes

Sourced from ejs's releases.

v6.0.1

Version 6.0.1

Commits

• 2c41365 Version 6.0.1
• 409fec9 Moved missed shim
• 7097026 Update README
• f78de72 Updated README
• dc84d04 Major version bump
• 82e73e5 Proto poisoning hardening
• 34c68a1 Ecosystem smoke tests
• 8d1af6c Linting warnings
• c62fe52 Move shim
• dff76b5 Packaging improvements
• See full diff in compare view

Updates http-proxy-middleware from 3.0.5 to 4.0.0

Release notes

Sourced from http-proxy-middleware's releases.

v4.0.0

Notable changes

• Switched proxy from http-proxy to httpxy ✨ (chimurai/http-proxy-middleware#1160) This replaces a long-standing core dependency and brings in many upstream fixes and behavior improvements documented by the httpxy project: unjs/httpxy#2

  • many fixes: https://github.com/unjs/httpxy/pulls?q=sort%3Aupdated-desc+is%3Apr+is%3Aclosed
  • http/2 support: unjs/httpxy#102
  • performance: unjs/httpxy#124

• ESM-only package [BREAKING CHANGE] 💣 http-proxy-middleware now ships as native ES modules only. CommonJS require() usage is no longer supported, so imports should use ESM syntax.

• Updated Node.js support policy [BREAKING CHANGE] 💣 Dropped Node.js 14, 16, 18, and 20. New minimum supported runtime is Node.js 22.15.0

• Removed legacyCreateProxyMiddleware() [BREAKING CHANGE] 💣 The legacy compatibility wrapper has been removed as part of API cleanup. Use createProxyMiddleware() directly.

• Added IPv6 literal support ✨ target and forward now support literal IPv6 URLs, for example: http://[::1]:3000.

• Experimental Hono support 🧪 Added createHonoProxyMiddleware() for Hono apps, including dedicated subpath support via http-proxy-middleware/hono.

Many thanks to everyone who helped make this release possible. 🙏

What's Changed

• fix(types): fix Logger type by @​chimurai in chimurai/http-proxy-middleware#1104
• fix(fixRequestBody): support text/plain by @​knudtty in chimurai/http-proxy-middleware#1103
• chore(examples): bump deps by @​chimurai in chimurai/http-proxy-middleware#1105
• build(prettier): improve prettier setup by @​chimurai in chimurai/http-proxy-middleware#1108
• chore(deps): fix punycode node deprecation warning by @​chimurai in chimurai/http-proxy-middleware#1109
• chore(examples): bump deps by @​chimurai in chimurai/http-proxy-middleware#1110
• build(codespaces): add devcontainer.json by @​chimurai in chimurai/http-proxy-middleware#1112
• chore(package): bump dev dependencies by @​chimurai in chimurai/http-proxy-middleware#1116
• ci(github-action): ci.yml add node v24 by @​chimurai in chimurai/http-proxy-middleware#1117
• chore(package): bump dev dependencies by @​chimurai in chimurai/http-proxy-middleware#1118
• chore(package): upgrade to jest v30 by @​chimurai in chimurai/http-proxy-middleware#1122
• chore(examples): upgrade deps by @​chimurai in chimurai/http-proxy-middleware#1124
• chore(package): update dev deps by @​chimurai in chimurai/http-proxy-middleware#1125
• test(websocket): fix ws import by @​chimurai in chimurai/http-proxy-middleware#1126
• chore(refactor): use node: protocol imports by @​chimurai in chimurai/http-proxy-middleware#1127
• ci(node24): pin node24 due to TLS issue with mockttp by @​chimurai in chimurai/http-proxy-middleware#1137
• docs(recipes/pathRewrite.md): fix comment by @​DEBargha2004 in chimurai/http-proxy-middleware#1135
• chore(package): bump dev deps by @​chimurai in chimurai/http-proxy-middleware#1138
• chore(deps): update actions/checkout action to v5 by @​chimurai in chimurai/http-proxy-middleware#1140
• fix(error-response-plugin): sanitize input by @​chimurai in chimurai/http-proxy-middleware#1141
• chore(package.json): update dev deps by @​chimurai in chimurai/http-proxy-middleware#1143

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v4.0.0

• fix(types): fix Logger type
• fix(error-response-plugin): sanitize input
• feat: drop node v14/v16/v18 [BREAKING CHANGE]
• refactor: replace http-proxy w/ httpxy
• chore: remove legacyCreateProxyMiddleware() [BREAKING CHANGE]
• ci: migrate from jest to vitest
• chore(package.json): esm only [BREAKING CHANGE]
• chore(package.json): bump to httpxy 0.5.0 (#1183)
• chore(package.json): drop node20 [BREAKING CHANGE] (#1179)
• refactor: remove deprecated url.parse() (#1176)
• fix(fixRequestBody): support content-encoding on request body (#1142)
• fix: prevent TypeError when ws enabled but server is undefined (#1163)
• fix: applyPathRewrite logs old req.url instead of rewritten path (#1157)
• feat(hono): support for hono with createHonoProxyMiddleware
• feat(ipv6): support literal IPv6 addresses in target and forward options (ie. "http://[::1]:8000")
• chore(package.json): bump httpxy to ^0.5.1
• fix(logger-plugin): support ipv6 host and handle undefined protocol/host
• ci(publish.yml): pin github.triggering_actor
• chore(package.json): node ^22.15.0 (#1218)
• refactor(package): subpath 'http-proxy-middleware/hono' (#1220)
• chore: node 26 support

Commits

• 8f356bc chore(package.json): v4.0.0 (#1225)
• 7d7f9b0 chore: node 26 support (#1224)
• 9a1cdb5 docs: minor documentation fixes (#1223)
• c03926d docs: update http-proxy references to httpxy (#1222)
• f8ecd6d chore(package.json): v4.0.0-beta.6 (#1221)
• 08c5248 refactor(package): subpath 'http-proxy-middleware/hono' (#1220)
• a0fed53 chore(package.json): node ^22.15.0 (#1218)
• 2c6768b chore(package.json): remove patch-package (#1217)
• 339f09e ci(publish.yml): pin github.triggering_actor (#1216)
• dcacc02 fix(logger-plugin): support ipv6 host and handle undefined protocol/host (#1215)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.70%. Comparing base (746ee90) to head (d63cc27).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1075   +/-   ##
=======================================
  Coverage   50.70%   50.70%           
=======================================
  Files         253      253           
  Lines        5499     5499           
  Branches     1660     1660           
=======================================
  Hits         2788     2788           
  Misses       2440     2440           
  Partials      271      271           

Flag	Coverage Δ
e2e	68.96% <ø> (ø)
unit	2.01% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.