chore(deps): bump @morojs/engine from 1.1.4 to 1.1.10

[dependabot]

Bumps @morojs/engine from 1.1.4 to 1.1.10.

Release notes

Sourced from @​morojs/engine's releases.

v.1.1.10

@​morojs/engine 1.1.0

Performance release: pipelined response corking and a zero-allocation hot path — no API changes, no behavior changes.

Numbers

Verified against the published npm packages, not just local builds. Measured comparisons against other servers and frameworks live in the MoroJS Benchmark repo.

What changed

• Pipelined response corking — synchronous responses to pipelined requests now accumulate in a per-connection cork buffer and hit the socket as one write per batch instead of one queued write + event-loop deferral per response. Handlers still run strictly one-at-a-time on a clean stack (request N+1 is surfaced only after handler N returns); async handlers, upgrades, errors, and Connection: close keep their existing paths. The buffer is bounded by the write high-water mark.
• Zero-allocation hot path on warm connections
  • Header parsing reuses header slots (and their string capacities) across requests instead of reallocating and destroying them each request.
  • The request snapshot (path, query, method, headers, body) is swapped with the parser rather than copied — the previous request's buffers become the parser's scratch for the next one.
  • Responses build into a reusable per-connection buffer and are written straight from it on the fast path — no per-response allocation, no intermediate copy. Oversized buffers (>64 KB) are released so a single large response can't pin memory.
  • Prebuilt status lines for hot statuses; the Connection: header no longer allocates.
• Bounded as before — all caps (maxHeaders, body/head sizes, write high-water mark, pending-bytes flood cap) apply unchanged; large bodies and responses do not stay pinned to idle keep-alive connections.

Compatibility

• No API changes. Drop-in for 1.0.0; MoroJS picks it up via ^1.0.0.
• Same platform/ABI matrix as 1.0.0 (macOS arm64/x64, Linux glibc x64/arm64, Linux musl x64, Windows x64 × Node 20–26), prebuilt with npm provenance.

Verification

• 128 socket-level wire tests (HTTP conformance + edge + hardening + regression, WebSocket, limits, TLS + TLS-hardening, permessage-deflate) — all passing.
• 95-check parser unit suite + WebSocket/deflate unit suites under the C++ harness.
• 234 MoroJS integration tests against this build.
• libFuzzer corpus runs on the modified parser; ASan/UBSan legs run in CI.

v1.1.9

@​morojs/engine 1.1.9

A routing release with two new native functions. Nothing on the wire changes, nothing in the API is removed or renamed, and the one new capability is additive and feature-detected through probe().capabilities. A 1.8.x MoroJS keeps working on this binary; a MoroJS that calls the new functions checks the flag first.

A TLS release with one new native function. Nothing on the wire changes, nothing in the API is removed or renamed, and the one new capability is additive and feature-detected through probe().capabilities. A 1.8.x MoroJS keeps working on this binary; a MoroJS that calls the new function checks the flag first and reports a clear error on 1.1.7.

New — certificate rotation without a restart

updateSsl(serverId, ssl) replaces the certificate and key of a running TLS server for every handshake that starts afterwards

... (truncated)

Commits

• 2209dc2 chore: release v1.1.10
• 1960b4e feat: optimize transport selection and performance improvements
• f57fdac chore: release v1.1.9
• 30a8de9 # @​morojs/engine 1.1.9
• d5d59c3 feat: add parameter route support with setParamRoute and clearParamRoutes fun...
• 798fc82 chore: release v1.1.8
• c784804 # @​morojs/engine 1.1.8
• e2ecd4e feat: enhance loop behavior to reap pending tasks and improve wake efficiency...
• de71951 feat: enhance server stats to include transport mode and improve task handlin...
• a2e1976 chore: release v1.1.7
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)