chore(deps): bump elysia from 1.4.19 to 1.4.21

[dependabot]

Bumps elysia from 1.4.19 to 1.4.21.

Release notes

Sourced from elysia's releases.

1.4.21

What's Changed

Improvement:

• #1654 encode t.Date() to iso string by @​zoriya
• #1624 apply macros before merging hooks in group method by @​tt-a1i

Bug fix:

• call Sucrose GC unref when possible (browser fallback)
• add allowUnsafeValidationDetails to Standard Validator

New Contributors

• @​tt-a1i made their first contribution in elysiajs/elysia#1624
• @​zoriya made their first contribution in elysiajs/elysia#1654

Full Changelog: elysiajs/elysia@1.4.20...1.4.21

1.4.20

What's Changed

Improvement:

• add ModelValidator.schema for accessing raw schema
• #1636 add subscriptions to Elysia.ws context
• #1638 unref Sucrose gc by @​akim-bow

Bug fix:

• #1649 add null check for object properties (t.Record) by @​aymaneallaoui
• #1646 use constant-time comparison for signed cookie verification by @​JNX03
• #1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists
• #1631 update Exact Mirror to 0.2.6
• #1630 enforce fetch to return MaybePromise

Bug fix:

• Elysia.models broke when referencing non typebox model

New Contributors

• @​aymaneallaoui made their first contribution in elysiajs/elysia#1649
• @​JNX03 made their first contribution in elysiajs/elysia#1646

Full Changelog: elysiajs/elysia@1.4.19...1.4.20

Changelog

Sourced from elysia's changelog.

1.4.21 - 4 Jan 2026

Improvement:

• #1654 encode t.Date() to iso string
• #1624 apply macros before merging hooks in group method

Bug fix:

• call Sucrose GC unref when possible (browser fallback)
• add allowUnsafeValidationDetails to Standard Validator

1.4.20 - 3 Jan 2026

Improvement:

• add ModelValidator.schema for accessing raw schema
• #1636 add subscriptions to Elysia.ws context
• #1638 unref Sucrose gc

Bug fix:

• #1649 add null check for object properties (t.Record)
• #1646 use constant-time comparison for signed cookie verification
• #1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists
• #1631 update Exact Mirror to 0.2.6
• #1630 enforce fetch to return MaybePromise

Bug fix:

• Elysia.models broke when referencing non typebox model

Commits

• 969fc76 Merge branch 'main' of https://github.com/elysiajs/elysia
• d4cde97 📘 doc: document changelog
• 920c18b Merge pull request #1654 from zoriya/patch-1
• 949c6cf Merge pull request #1624 from tt-a1i/fix/macro-beforehandle-ordering
• a1802bb 🔧 fix: small things and there
• 27c17f0 Always convert dates to iso string
• c163c89 Merge pull request #1637 from elysiajs/next
• 7555347 Merge pull request #1653 from elysiajs/revert-1634-fix/record-response-valida...
• 028d1af Revert ":wrench: fix: t.Record validation failure in response schemas"
• df9c4cd Merge pull request #1634 from MarcelOlsen/fix/record-response-validation
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.