Sourced from http-proxy-middleware's releases.

v4.0.0

Notable changes

• Switched proxy from http-proxy to httpxy ✨ This replaces a long-standing core dependency and brings in many upstream fixes and behavior improvements documented by the httpxy project: unjs/httpxy#2.

• ESM-only package [BREAKING CHANGE] 💣 http-proxy-middleware now ships as native ES modules only. CommonJS require() usage is no longer supported, so imports should use ESM syntax.

• Updated Node.js support policy [BREAKING CHANGE] 💣 Dropped Node.js 14, 16, 18, and 20. New minimum supported runtime is Node.js 22.15.0

• Removed legacyCreateProxyMiddleware() [BREAKING CHANGE] 💣 The legacy compatibility wrapper has been removed as part of API cleanup. Use createProxyMiddleware() directly.

• Added IPv6 literal support ✨ target and forward now support literal IPv6 URLs, for example: http://[::1]:3000.

• Experimental Hono support 🧪 Added createHonoProxyMiddleware() for Hono apps, including dedicated subpath support via http-proxy-middleware/hono.

Many thanks to everyone who helped make this release possible. 🙏

What's Changed

• fix(types): fix Logger type by @​chimurai in chimurai/http-proxy-middleware#1104
• fix(fixRequestBody): support text/plain by @​knudtty in chimurai/http-proxy-middleware#1103
• chore(examples): bump deps by @​chimurai in chimurai/http-proxy-middleware#1105
• build(prettier): improve prettier setup by @​chimurai in chimurai/http-proxy-middleware#1108
• chore(deps): fix punycode node deprecation warning by @​chimurai in chimurai/http-proxy-middleware#1109
• chore(examples): bump deps by @​chimurai in chimurai/http-proxy-middleware#1110
• build(codespaces): add devcontainer.json by @​chimurai in chimurai/http-proxy-middleware#1112
• chore(package): bump dev dependencies by @​chimurai in chimurai/http-proxy-middleware#1116
• ci(github-action): ci.yml add node v24 by @​chimurai in chimurai/http-proxy-middleware#1117
• chore(package): bump dev dependencies by @​chimurai in chimurai/http-proxy-middleware#1118
• chore(package): upgrade to jest v30 by @​chimurai in chimurai/http-proxy-middleware#1122
• chore(examples): upgrade deps by @​chimurai in chimurai/http-proxy-middleware#1124
• chore(package): update dev deps by @​chimurai in chimurai/http-proxy-middleware#1125
• test(websocket): fix ws import by @​chimurai in chimurai/http-proxy-middleware#1126
• chore(refactor): use node: protocol imports by @​chimurai in chimurai/http-proxy-middleware#1127
• ci(node24): pin node24 due to TLS issue with mockttp by @​chimurai in chimurai/http-proxy-middleware#1137
• docs(recipes/pathRewrite.md): fix comment by @​DEBargha2004 in chimurai/http-proxy-middleware#1135
• chore(package): bump dev deps by @​chimurai in chimurai/http-proxy-middleware#1138
• chore(deps): update actions/checkout action to v5 by @​chimurai in chimurai/http-proxy-middleware#1140
• fix(error-response-plugin): sanitize input by @​chimurai in chimurai/http-proxy-middleware#1141
• chore(package.json): update dev deps by @​chimurai in chimurai/http-proxy-middleware#1143
• chore: add context7.json by @​chimurai in chimurai/http-proxy-middleware#1144
• build(eslint): update eslint.config.mjs by @​chimurai in chimurai/http-proxy-middleware#1145
• ci(github workflow): harden github workflows by @​chimurai in chimurai/http-proxy-middleware#1146

... (truncated)

Sourced from http-proxy-middleware's changelog.

v4.0.0

• fix(types): fix Logger type
• fix(error-response-plugin): sanitize input
• feat: drop node v14/v16/v18 [BREAKING CHANGE]
• refactor: replace http-proxy w/ httpxy
• chore: remove legacyCreateProxyMiddleware() [BREAKING CHANGE]
• ci: migrate from jest to vitest
• chore(package.json): esm only [BREAKING CHANGE]
• chore(package.json): bump to httpxy 0.5.0 (#1183)
• chore(package.json): drop node20 [BREAKING CHANGE] (#1179)
• refactor: remove deprecated url.parse() (#1176)
• fix(fixRequestBody): support content-encoding on request body (#1142)
• fix: prevent TypeError when ws enabled but server is undefined (#1163)
• fix: applyPathRewrite logs old req.url instead of rewritten path (#1157)
• feat(hono): support for hono with createHonoProxyMiddleware
• feat(ipv6): support literal IPv6 addresses in target and forward options (ie. "http://[::1]:8000")
• chore(package.json): bump httpxy to ^0.5.1
• fix(logger-plugin): support ipv6 host and handle undefined protocol/host
• ci(publish.yml): pin github.triggering_actor
• chore(package.json): node ^22.15.0 (#1218)
• refactor(package): subpath 'http-proxy-middleware/hono' (#1220)
• chore: node 26 support

• 8f356bc chore(package.json): v4.0.0 (#1225)
• 7d7f9b0 chore: node 26 support (#1224)
• 9a1cdb5 docs: minor documentation fixes (#1223)
• c03926d docs: update http-proxy references to httpxy (#1222)
• f8ecd6d chore(package.json): v4.0.0-beta.6 (#1221)
• 08c5248 refactor(package): subpath 'http-proxy-middleware/hono' (#1220)
• a0fed53 chore(package.json): node ^22.15.0 (#1218)
• 2c6768b chore(package.json): remove patch-package (#1217)
• 339f09e ci(publish.yml): pin github.triggering_actor (#1216)
• dcacc02 fix(logger-plugin): support ipv6 host and handle undefined protocol/host (#1215)
• Additional commits viewable in compare view

This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.

This version modifies prepare script that runs during installation. Review the package contents before updating.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)