Bump major-version dependencies (hono/node-server, eslint, pino, vitest, @types/node)

[cuibonobo]

Summary

Follow-up to #65, which intentionally left six available major bumps alone. This PR picks up five of them, each verified independently with typecheck/lint/format/test plus a real end-to-end smoke test (an actual serve() process, real HTTP requests against /.well-known/stack and POST /records, and graceful shutdown) — not just the mocked-transport test suite:

package	before	after
@hono/node-server	^1.19.17	^2.1.1
eslint	^9.39.5	^10.8.1
pino	^9.14.0	^10.3.1
vitest	^2.1.9	^4.1.11
@types/node	^22.20.1	^26.2.0

• eslint 9→10 also clears a peer-dependency warning that predates this PR: @eslint/js was already pinned to ^10.0.0 while eslint itself was still on ^9.0.0.
• vitest 2→4 needed vite added as an explicit devDependency (^8.2.1) — vitest 4 requires vite ^6 || ^7 || ^8 as a peer, and nothing already in the tree was pulling a compatible version in on its own. Without it, the suite failed to even start (ERR_PACKAGE_PATH_NOT_EXPORTED on vite's ./module-runner subpath).
• pino 9→10: verified the dev-mode pino-pretty transport still works, not just that the package resolves — ran the real entrypoint and confirmed colorized output and clean shutdown.
• @hono/node-server 1→2: same treatment — ran the real server and hit it with actual HTTP requests, since the test suite only ever calls app.request() directly and never exercises serve().

Left alone

typescript 5→7 is not upgraded. typescript-eslint 8.67.0 (its current latest release) hard-refuses to run under TypeScript 7 — pnpm lint fails immediately with:

typescript-eslint does not support TS 7.0.

and its own peer range caps at typescript@">=4.8.4 <6.1.0". There's no newer typescript-eslint release yet; upstream is tracking support at typescript-eslint#10940. tsc --noEmit alone was fine under TS 7 — it's specifically the lint toolchain that blocks this one. Worth revisiting once that lands.

Test plan

• pnpm typecheck
• pnpm lint
• pnpm format:check
• pnpm build
• pnpm test — 215/215 passing
• Manual smoke test: real serve() process, GET /.well-known/stack and POST /records over real HTTP, pino-pretty dev transport, graceful SIGTERM shutdown

---

Generated by Claude Code