Update all devDependencies to latest versions

[Copilot]

Bumps all devDependencies to their latest releases and fixes a resulting TypeScript type error surfaced by the updated @types/node.

Dependency updates

Package	Old	New
@biomejs/biome	2.3.11	2.4.4
@types/node	25.0.6	25.3.2
np	10.2.0	11.0.2 (major)
typedoc	0.28.16	0.28.17
vitest	4.0.16	4.0.18

Type fix

@types/node@25.3.2 broadened PeerCertificate.subject.CN from string to string | string[]. Updated verifyHostname() to handle both:

// Before
isHostnameMatch(certificate.subject.CN, host)

// After
const cn = certificate.subject?.CN;
if (cn) {
  const cnValues = Array.isArray(cn) ? cn : [cn];
  if (cnValues.some((name) => isHostnameMatch(name, host))) {
    return true;
  }
}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• expired.badssl.com
  • Triggering command: /opt/hostedtoolcache/node/24.13.1/x64/bin/node /opt/hostedtoolcache/node/24.13.1/x64/bin/node --conditions node --conditions development --experimental-import-meta-resolve --require /home/REDACTED/work/sslko/sslko/node_modules/vitest/suppress-warnings.cjs /home/REDACTED/work/sslko/sslko/node_modules/vitest/dist/workers/forks.js (dns block)
• google.com
  • Triggering command: /opt/hostedtoolcache/node/24.13.1/x64/bin/node /opt/hostedtoolcache/node/24.13.1/x64/bin/node --conditions node --conditions development --experimental-import-meta-resolve --require /home/REDACTED/work/sslko/sslko/node_modules/vitest/suppress-warnings.cjs /home/REDACTED/work/sslko/sslko/node_modules/vitest/dist/workers/forks.js (dns block)
• self-signed.badssl.com
  • Triggering command: /opt/hostedtoolcache/node/24.13.1/x64/bin/node /opt/hostedtoolcache/node/24.13.1/x64/bin/node --conditions node --conditions development --experimental-import-meta-resolve --require /home/REDACTED/work/sslko/sslko/node_modules/vitest/suppress-warnings.cjs /home/REDACTED/work/sslko/sslko/node_modules/vitest/dist/workers/forks.js (dns block)
• wrong.host.badssl.com
  • Triggering command: /opt/hostedtoolcache/node/24.13.1/x64/bin/node /opt/hostedtoolcache/node/24.13.1/x64/bin/node --conditions node --conditions development --experimental-import-meta-resolve --require /home/REDACTED/work/sslko/sslko/node_modules/vitest/suppress-warnings.cjs /home/REDACTED/work/sslko/sslko/node_modules/vitest/dist/workers/forks.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

The task is to update all dependencies in the repository ozzyczech/sslko to their latest versions. This involves checking and updating all package management files (e.g., package.json, requirements.txt, Pipfile, Gemfile.lock, build.gradle, etc.), configuration files, or any other files where dependencies might be declared. Properly test the updates to ensure compatibility and functionality with the rest of the codebase.

This pull request was created from Copilot chat.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

This PR updates the project’s JavaScript/TypeScript tooling by bumping devDependencies and adjusting hostname verification logic to accommodate the updated @types/node TLS certificate typings.

Changes:

• Bumped key devDependencies (@biomejs/biome, @types/node, np, typedoc, vitest) to newer versions.
• Updated verifyHostname() to handle certificate.subject.CN being either a string or string[].
• Updated yarn.lock resolutions to match the new versions (but selectors/keys need regeneration to align with updated ranges).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.

File	Description
package.json	Updates devDependency version ranges to latest releases.
yarn.lock	Updates resolved versions, but currently has selector/key mismatches vs package.json ranges (needs regeneration).
src/get-certificate-info.ts	Adjusts CN hostname verification for `string

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.