fix(deps): update node dependencies (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
http-proxy-middleware	^3.0.5 → ^4.0.0
uuid	^13.0.0 → ^14.0.0

---

Release Notes

chimurai/http-proxy-middleware (http-proxy-middleware)

v4.1.0

Compare Source

• feat(definePlugin): helper function to create plugins
• chore(package.json): update to httpxy@​0.5.3
• fix(ipv6): preserve credentials when normalizing bracketed IPv6 target string
• fix(ipv6): unspecified IPv6 target hostname (::)
• fix(response-interceptor): reduce responseInterceptor buffer churn
• fix(ws): handle multi-server upgrade subscription and safe proxy shutdown
• feat(router): add 'res' and 'options' to router function
• feat(pathRewrite): add 'res' and 'options' to custom pathRewrite function
• fix(responseInterceptor): prevent trailer/content-length conflict
• feat(zstd): support zstd compression in responseInterceptor and fixRequestBody
• fix(responseInterceptor): handle bodyless responses (HEAD/1xx/204/304) with content-encoding
• fix(router): harden proxy-table matching

v4.0.0

Compare Source

• fix(types): fix Logger type
• fix(error-response-plugin): sanitize input
• feat: drop node v14/v16/v18 [BREAKING CHANGE]
• refactor: replace http-proxy w/ httpxy
• chore: remove legacyCreateProxyMiddleware() [BREAKING CHANGE]
• ci: migrate from jest to vitest
• chore(package.json): esm only [BREAKING CHANGE]
• chore(package.json): bump to httpxy 0.5.0 (#​1183)
• chore(package.json): drop node20 [BREAKING CHANGE] (#​1179)
• refactor: remove deprecated url.parse() (#​1176)
• fix(fixRequestBody): support content-encoding on request body (#​1142)
• fix: prevent TypeError when ws enabled but server is undefined (#​1163)
• fix: applyPathRewrite logs old req.url instead of rewritten path (#​1157)
• feat(hono): support for hono with createHonoProxyMiddleware
• feat(ipv6): support literal IPv6 addresses in target and forward options (ie. "http://[::1]:8000")
• chore(package.json): bump httpxy to ^0.5.1
• fix(logger-plugin): support ipv6 host and handle undefined protocol/host
• ci(publish.yml): pin github.triggering_actor
• chore(package.json): node ^22.15.0 (#​1218)
• refactor(package): subpath 'http-proxy-middleware/hono' (#​1220)
• chore: node 26 support

uuidjs/uuid (uuid)

v14.0.0

Compare Source

Security

• Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

• crypto is now expected to be globally defined (requires node@​20+) (#​935)
• drop node@​18 support (#​934)
• upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

---

Configuration

📅 Schedule: (in timezone Europe/Madrid)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.