fix(deps): update dependency @hyperwatch/hyperwatch to v5.3.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@hyperwatch/hyperwatch	5.2.0 → 5.3.1

---

Release Notes

hyperwatch/hyperwatch (@​hyperwatch/hyperwatch)

v5.3.1: 5.3.1

Compare Source

Identities

• amazon-Quick-on-behalf-of-<id> (Amazon Quick's Web Crawler) is identified as Amazon Quick when it comes from the ranges published in Amazon Quick's documentation, copied in src/data/amazon-quick-ips.json. (#​627)

Dependencies & tooling

• @hyperwatch/useragent updated to 4.0.0, with updated UAP Core regexes and generic rules (for example a name followed by a hex id, such as amazon-Quick-on-behalf-of-<id>). Its new Node.js >= 24 requirement matches Hyperwatch's. (#​627)

v5.3.0: 5.3.0

Compare Source

Features

• New firewall module, inactive by default: IP and User-Agent lists (block, challenge or monitor) that tag matching logs, with an HTTP API to look up and edit them. Lists are stored in local files or on S3, can be declared in the configuration, and can be kept in sync with Cloudflare WAF custom rules automatically. See docs/firewall.md. (#​586)

Identities

• github-camo is identified as GitHub Camo, and is also verified from 9.234.0.0/17, where it fetches from in production. (#​624)
• Meta and Facebook crawlers are verified from the routes of Meta's network (AS32934) in RADb, fetched by scripts/fetch-meta-ips.js, instead of a single hard-coded range. Hyperlink is identified as Meta. (#​625)
• Google's user-triggered fetchers ranges are available in src/data/google-user-triggered-fetchers-ips.json, refreshed by scripts/fetch-google-ips.js. Data only: Hyperwatch doesn't use them yet. (#​626)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekday after 2:00 am before 6:00 am,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hacktron-app]

Hacktron Security Check - Skipped

Reason: OSS PR review limit reached for this approved repository and developer. New OSS PRs for this repository will resume at the start of the next cycle.

Wait for the next cycle. OSS quota is limited to the approved OSS repository and cannot be used on paid repositories.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: bee891f1-7346-414d-a9dd-06aea7978545

---

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

---

_{Comment @coderabbitai help to get the list of available commands.}