chore(deps-dev): bump the packages group across 1 directory with 4 updates by dependabot[bot] · Pull Request #101 · homebridge/hap-client

dependabot · 2026-11-09T10:21:32Z

Bumps the packages group with 4 updates in the / directory: @homebridge/hap-nodejs, @vitest/coverage-v8, rimraf and vitest.

Updates @homebridge/hap-nodejs from 2.2.4-beta.7 to 2.3.0

Release notes

Sourced from @homebridge/hap-nodejs's releases.

v2.3.0

⚠️ Upgrade notes

For developers importing single files from dist/lib instead of the package itself: dist/lib/Service.js and dist/lib/Characteristic.js no longer attach the definitions (like Service.Lightbulb or Characteristic.On) when they are loaded on their own. Import from @homebridge/hap-nodejs as normal and nothing changes.

Node.js 22 users need v22.12.0 or newer. Node.js 24 and 26 are unchanged. This is the first Node.js 22 release that can require() an ES module, and the upstream dbus-native package needs it too.

HAP-NodeJS is now an ES module. Importing it works as before, including import hap from '@homebridge/hap-nodejs'. CommonJS code can still require('@homebridge/hap-nodejs'), on the Node.js versions above.

Changes

fix: ignore state changes reported while a controller is being restored (#1133) (@seydx)

perf: use the native crypto of Node.js for Curve25519 and Ed25519 (#1135) (@StefanRiese)

chore: update hap characteristics and services

chore(deps): dependency updates

chore(deps): switch from the @homebridge/dbus-native fork back to upstream dbus-native

fix: warn only once per address when a connection's local interface can't be found (#1131)

fix(datastream): stop a stray unidentified frame from crashing the process

fix(datastream): drop malformed frame payloads instead of crashing the process

fix(datastream): destroy closed sockets when the remote never closes its side

fix(camera): reject malformed SetupEndpoints writes before marking the stream busy

fix(camera): answer SetupEndpoints with an error when the prepared stream response is invalid

fix(camera): keep RTP proxy sockets open and only log errors after they are bound

fix(datastream): decode binary data of up to 32 bytes instead of dropping it

fix(datastream): make back-references follow the OPACK rule so reader and writer agree

perf(datastream): stop allocating an unused buffer for every received frame

fix(datastream): answer requests that have no handler instead of leaving them unanswered

fix(remote): read target configurations from the Map they are stored in

fix(remote): remove a whole target when the request lists no buttons

fix(remote): don't crash when a delayed button release fails

fix(remote): stop the Siri audio producer when the stream is refused

fix(adaptive-lighting): forget the saved curve position when a new curve arrives

fix(adaptive-lighting): keep Adaptive Lighting on when a control point request is rejected

fix(color-utils): stop rounding the shared color temperature lookup table in place

fix(adaptive-lighting): guard the curve maths against zero-length segments and NaN

fix(check-name): accept names that are a single letter or number

docs(uuid): say that unparse reads 16 bytes, not 8

fix(accessory): unlink controller storage when a bridged accessory is removed

fix(accessory): report slow and timed out handlers through the bridged accessory

fix(accessory): track the primary service of a restored accessory

fix(controller-storage): stop saving restored controller data again after it was cleared

fix(accessory): drop client event registrations when a bridged accessory is removed

fix(accessory): answer an Identify write of false instead of letting it time out

fix(accessory): handle a paired identify without a set listener on the Identify characteristic

fix(characteristic): reject instead of throwing when a legacy callback supplies an illegal value

fix(characteristic): recompute the configuration number when setProps is called after publish

refactor(accessory): share the read and write timeout handling and answer an empty write at once

fix(server): answer a malformed request URL with 400 instead of crashing

fix(server): only accept the proxy socket on the internal loopback HTTP server

fix(server): wait for the whole HTTP response before writing event notifications

fix(server): cap the size of request bodies, with a lower limit before pair-verify

fix(crypto): keep a frame whose length header arrived split across two TCP packets

... (truncated)

Changelog

Sourced from @homebridge/hap-nodejs's changelog.

v2.3.0 (2026-11-01)

⚠️ Upgrade notes

For developers importing single files from dist/lib instead of the package itself: dist/lib/Service.js and dist/lib/Characteristic.js no longer attach the definitions (like Service.Lightbulb or Characteristic.On) when they are loaded on their own. Import from @homebridge/hap-nodejs as normal and nothing changes.

Node.js 22 users need v22.12.0 or newer. Node.js 24 and 26 are unchanged. This is the first Node.js 22 release that can require() an ES module, and the upstream dbus-native package needs it too.

HAP-NodeJS is now an ES module. Importing it works as before, including import hap from '@homebridge/hap-nodejs'. CommonJS code can still require('@homebridge/hap-nodejs'), on the Node.js versions above.

Changes

fix: ignore state changes reported while a controller is being restored (#1133) (@seydx)

perf: use the native crypto of Node.js for Curve25519 and Ed25519 (#1135) (@StefanRiese)

chore: update hap characteristics and services

chore(deps): dependency updates

chore(deps): switch from the @homebridge/dbus-native fork back to upstream dbus-native

fix: warn only once per address when a connection's local interface can't be found (#1131)

fix(datastream): stop a stray unidentified frame from crashing the process

fix(datastream): drop malformed frame payloads instead of crashing the process

fix(datastream): destroy closed sockets when the remote never closes its side

fix(camera): reject malformed SetupEndpoints writes before marking the stream busy

fix(camera): answer SetupEndpoints with an error when the prepared stream response is invalid

fix(camera): keep RTP proxy sockets open and only log errors after they are bound

fix(datastream): decode binary data of up to 32 bytes instead of dropping it

fix(datastream): make back-references follow the OPACK rule so reader and writer agree

perf(datastream): stop allocating an unused buffer for every received frame

fix(datastream): answer requests that have no handler instead of leaving them unanswered

fix(remote): read target configurations from the Map they are stored in

fix(remote): remove a whole target when the request lists no buttons

fix(remote): don't crash when a delayed button release fails

fix(remote): stop the Siri audio producer when the stream is refused

fix(adaptive-lighting): forget the saved curve position when a new curve arrives

fix(adaptive-lighting): keep Adaptive Lighting on when a control point request is rejected

fix(color-utils): stop rounding the shared color temperature lookup table in place

fix(adaptive-lighting): guard the curve maths against zero-length segments and NaN

fix(check-name): accept names that are a single letter or number

docs(uuid): say that unparse reads 16 bytes, not 8

fix(accessory): unlink controller storage when a bridged accessory is removed

fix(accessory): report slow and timed out handlers through the bridged accessory

fix(accessory): track the primary service of a restored accessory

fix(controller-storage): stop saving restored controller data again after it was cleared

fix(accessory): drop client event registrations when a bridged accessory is removed

fix(accessory): answer an Identify write of false instead of letting it time out

fix(accessory): handle a paired identify without a set listener on the Identify characteristic

fix(characteristic): reject instead of throwing when a legacy callback supplies an illegal value

fix(characteristic): recompute the configuration number when setProps is called after publish

refactor(accessory): share the read and write timeout handling and answer an empty write at once

fix(server): answer a malformed request URL with 400 instead of crashing

fix(server): only accept the proxy socket on the internal loopback HTTP server

fix(server): wait for the whole HTTP response before writing event notifications

fix(server): cap the size of request bodies, with a lower limit before pair-verify

... (truncated)

Commits

See full diff in compare view

Updates @vitest/coverage-v8 from 5.0.5 to 5.1.0

Release notes

Sourced from @vitest/coverage-v8's releases.

v5.1.0

🚀 Features

Add --last-failed to run only failed tests - by @sheremet-va in vitest-dev/vitest#11558 (82f63)

Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime() - by @Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)

Introduce --since-last-run flag - by @sheremet-va in vitest-dev/vitest#11516 (08bd9)

Expose per-retry/repeat attempt result - by @hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)

Support fake timers for node:timers and node:timers/promise - by @hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)

Allow coverage providers to store data in fs module cache - by @AriPerkkio in vitest-dev/vitest#11747 (54a2b)

Interactively review failed snapshots - by @macarie and @hi-ogawa in vitest-dev/vitest#11325 (54e5b)

browser:

Mock modules through an import map - by @sheremet-va in vitest-dev/vitest#11534 (707f8)

Drop experimental label from trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)

Introduce experimental pointer API - by @macarie in vitest-dev/vitest#10780 (5dc09)

Capture aria snapshot in trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)

Show trace steps timeline on terminal on test failure - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)

Add failure-only trace view mode - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)

Enable failure-only trace view by default - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)

coverage:

V8 to support ignoreNode option - by @erickserra and @AriPerkkio in vitest-dev/vitest#11688 (e02db)

experimental:

Add trace timeline for node - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)

Add message option to vi.waitFor and vi.waitUntil - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

🐞 Bug Fixes

Rerun setup files after --changed filtering - by @sheremet-va in vitest-dev/vitest#11621 (3a39c)

Return the mock to concurrent imports - by @sheremet-va in vitest-dev/vitest#11623 (1453b)

Don't fail on console log pending at teardown - by @sheremet-va in vitest-dev/vitest#11619 (a60b8)

Reference chai types in every d.ts chunk - by @sheremet-va in vitest-dev/vitest#11618 (fb150)

Detect mock factory cycles that form later - by @sheremet-va in vitest-dev/vitest#11642 (e9554)

Skip fs module cache for typed import.meta.glob - by @sheremet-va in vitest-dev/vitest#11666 (79501)

Run tests that import a deleted file - by @sheremet-va in vitest-dev/vitest#11669 (80aa1)

Keep syntax highlighting in code frames - by @sheremet-va in vitest-dev/vitest#11705 (d39f5)

Respect CLI filters when prewarming browsers - by @sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)

Read cached source as utf-8 - by @juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)

Inherit watch from the root config in projects - by @nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)

Prefix expect.poll message to all errors - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)

Support api.port 0 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)

Show attempts in test error logs of retried tests - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)

Preserve rootDir in project paths - by @btea in vitest-dev/vitest#11816 (bf96d)

browser:

Change default port to 23315 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)

Advance fake timers in actions and expect.element - by @julienw, @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)

Drop trace view warning without html reporter - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)

Detect shared chunks via the optimizer - by @sheremet-va in vitest-dev/vitest#11661 (e2e9c)

Clear screenshot stability timeout - by @sheremet-va in vitest-dev/vitest#11659 (fbe37)

Measure prepare duration with one clock - by @sheremet-va in vitest-dev/vitest#11667 (a3ed4)

Keep failure screenshot per attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)

Print trace timeline of each attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

7a38449 chore: release v5.1.0 (#11838)
5901fb4 fix(coverage): v8 to ignore Vite's generated CJS namespace import helper (#11...
e02db08 feat(coverage): v8 to support ignoreNode option (#11688)
e1b0d33 chore: release v5.1.0-beta.1 (#11647)
de5af29 fix(coverage): v8 autoAttachSubprocess to use .tmp directory (#11632)
See full diff in compare view

Updates rimraf from 6.1.3 to 6.1.4

Commits

cbbc000 6.1.4
3c35eb4 glob 14
5fd6d20 make taprc yaml
051e6c7 bump tap for better module.register/registerHooks behavior
dec62fd update tap
9fd58c1 project updates
a51c7b0 remove rimraf test start/end char stuff
f433d9f ci: update test workflow
78d68ef update deps
7263194 test: make opt-arg output a less ridiculous amount of logging
Additional commits viewable in compare view

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

🚀 Features

Add --last-failed to run only failed tests - by @sheremet-va in vitest-dev/vitest#11558 (82f63)

Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime() - by @Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)

Introduce --since-last-run flag - by @sheremet-va in vitest-dev/vitest#11516 (08bd9)

Expose per-retry/repeat attempt result - by @hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)

Support fake timers for node:timers and node:timers/promise - by @hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)

Allow coverage providers to store data in fs module cache - by @AriPerkkio in vitest-dev/vitest#11747 (54a2b)

Interactively review failed snapshots - by @macarie and @hi-ogawa in vitest-dev/vitest#11325 (54e5b)

browser:

Mock modules through an import map - by @sheremet-va in vitest-dev/vitest#11534 (707f8)

Drop experimental label from trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)

Introduce experimental pointer API - by @macarie in vitest-dev/vitest#10780 (5dc09)

Capture aria snapshot in trace view - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)

Show trace steps timeline on terminal on test failure - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)

Add failure-only trace view mode - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)

Enable failure-only trace view by default - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)

coverage:

V8 to support ignoreNode option - by @erickserra and @AriPerkkio in vitest-dev/vitest#11688 (e02db)

experimental:

Add trace timeline for node - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)

Add message option to vi.waitFor and vi.waitUntil - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

🐞 Bug Fixes

Rerun setup files after --changed filtering - by @sheremet-va in vitest-dev/vitest#11621 (3a39c)

Return the mock to concurrent imports - by @sheremet-va in vitest-dev/vitest#11623 (1453b)

Don't fail on console log pending at teardown - by @sheremet-va in vitest-dev/vitest#11619 (a60b8)

Reference chai types in every d.ts chunk - by @sheremet-va in vitest-dev/vitest#11618 (fb150)

Detect mock factory cycles that form later - by @sheremet-va in vitest-dev/vitest#11642 (e9554)

Skip fs module cache for typed import.meta.glob - by @sheremet-va in vitest-dev/vitest#11666 (79501)

Run tests that import a deleted file - by @sheremet-va in vitest-dev/vitest#11669 (80aa1)

Keep syntax highlighting in code frames - by @sheremet-va in vitest-dev/vitest#11705 (d39f5)

Respect CLI filters when prewarming browsers - by @sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)

Read cached source as utf-8 - by @juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)

Inherit watch from the root config in projects - by @nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)

Prefix expect.poll message to all errors - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)

Support api.port 0 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)

Show attempts in test error logs of retried tests - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)

Preserve rootDir in project paths - by @btea in vitest-dev/vitest#11816 (bf96d)

browser:

Change default port to 23315 - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)

Advance fake timers in actions and expect.element - by @julienw, @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)

Drop trace view warning without html reporter - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)

Detect shared chunks via the optimizer - by @sheremet-va in vitest-dev/vitest#11661 (e2e9c)

Clear screenshot stability timeout - by @sheremet-va in vitest-dev/vitest#11659 (fbe37)

Measure prepare duration with one clock - by @sheremet-va in vitest-dev/vitest#11667 (a3ed4)

Keep failure screenshot per attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)

Print trace timeline of each attempt - by @hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

7a38449 chore: release v5.1.0 (#11838)
a5ec316 fix(vm): keep assignable accessor globals writable in node environment (#11834)
e46c6c1 refactor: share trace types and utils (#11825)
9e23ce5 refactor(snapshot): unify review update with SnapshotState update (#11790)
a0e33cc chore: eliminate lint error (#11822)
fd145d8 feat(experimental): add message option to vi.waitFor and vi.waitUntil (#11754)
4e98551 feat(experimental): add trace timeline for node (#11753)
bf96dad fix: preserve rootDir in project paths (#11816)
54e5b8a feat: interactively review failed snapshots (#11325)
4277075 fix(expect): keep soft .resolves/.rejects error location (#11792)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the packages group with 4 updates in the / directory: [@homebridge/hap-nodejs](https://github.com/homebridge/HAP-NodeJS), [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8), [rimraf](https://github.com/isaacs/rimraf) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `@homebridge/hap-nodejs` from 2.2.4-beta.7 to 2.3.0 - [Release notes](https://github.com/homebridge/HAP-NodeJS/releases) - [Changelog](https://github.com/homebridge/hap-nodejs/blob/latest/CHANGELOG.md) - [Commits](https://github.com/homebridge/HAP-NodeJS/commits/v2.3.0) Updates `@vitest/coverage-v8` from 5.0.5 to 5.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/coverage-v8) Updates `rimraf` from 6.1.3 to 6.1.4 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.1.3...v6.1.4) Updates `vitest` from 5.0.5 to 5.1.0 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest) --- updated-dependencies: - dependency-name: "@homebridge/hap-nodejs" dependency-version: 2.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: packages - dependency-name: "@vitest/coverage-v8" dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: packages - dependency-name: rimraf dependency-version: 6.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: packages - dependency-name: vitest dependency-version: 5.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 9, 2026

Navigation Menu

Repository navigation

chore(deps-dev): bump the packages group across 1 directory with 4 updates - #101

chore(deps-dev): bump the packages group across 1 directory with 4 updates#101
dependabot[bot] wants to merge 1 commit into
latestfrom
dependabot/npm_and_yarn/packages-675200e6df

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.3.0

⚠️ Upgrade notes

Changes

v2.3.0 (2026-11-01)

⚠️ Upgrade notes

Changes

v5.1.0

🚀 Features

🐞 Bug Fixes

v5.1.0

🚀 Features

🐞 Bug Fixes

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading