[codex] prepare v0.4.0 release

[bbopen]

This prepares the v0.4.0 release around Tywrap's new development hot reload story.

The user-facing change is that Tywrap now clearly documents and packages hot reload as an explicit tywrap/dev workflow instead of leaving it implied or buried. The docs now explain what hot reload actually means in Tywrap: Node watch sessions regenerate wrappers and swap the active bridge, Pyodide supports manual bridge replacement, and HTTP reload remains external because Tywrap does not own a remote server lifecycle.

This branch also finishes the release polish around that feature. It bumps the npm package to 0.4.0, adds the changelog entry, refreshes the bundled docs export, and updates the release guide so the documented release path matches the repository state.

On the tooling side, it rolls in the open Dependabot package bumps for @babel/parser, typescript, vite, and eslint-plugin-security, and moves the GitHub Actions Node.js baseline to 24 across CI, docs, and release publishing. That keeps the validated runtime aligned with the release workflow and removes the older split publish path.

Validation:

• npx -y -p node@24 -p npm@11 npm run check:all
• npx -y -p node@24 -p npm@11 npm run docs:build
• git diff --check

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: e0c5e156-0db7-49f6-99f6-d4f0ea44e635

📥 Commits

Reviewing files that changed from the base of the PR and between 81a427b and e8b82ea.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (18)

• .github/workflows/ci.yml
• .github/workflows/docs.yml
• .github/workflows/release.yml
• CHANGELOG.md
• README.md
• docs/guide/configuration.md
• docs/guide/getting-started.md
• docs/guide/runtimes/comparison.md
• docs/guide/runtimes/node.md
• docs/index.md
• docs/public/llms-full.txt
• docs/reference/api/index.md
• docs/release.md
• package.json
• src/dev.ts
• src/runtime/node.ts
• src/runtime/worker-pool.ts
• test/dev.test.ts

---

📝 Walkthrough

Walkthrough

The PR updates CI/release workflows to use Node.js 24, documents the new "Development Hot Reload" feature for Node.js across multiple documentation files, bumps the package version to 0.4.0, updates several dependencies, and applies minor code formatting improvements without functional changes.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflows .github/workflows/ci.yml, .github/workflows/docs.yml, .github/workflows/release.yml	Updated Node.js runtime from version 22 to 24 across lint, test, build, and publish jobs; adjusted test matrix and Codecov upload conditions to trigger on Node 24 with Python 3.11; removed conditional re-setup step for npm trusted publishing.
Documentation – Features & Index README.md, docs/index.md, CHANGELOG.md	Added "Development Hot Reload" as a new feature, documenting startNodeWatchSession from tywrap/dev for Node.js watch sessions with wrapper regeneration and bridge replacement; included TypeScript usage example with createBridge factory and control methods (reloadNow, close).
Documentation – Guide & API Reference docs/guide/configuration.md, docs/guide/getting-started.md, docs/guide/runtimes/node.md, docs/guide/runtimes/comparison.md, docs/reference/api/index.md, docs/public/llms-full.txt	Updated terminology from "Development Reload" to "Development Hot Reload" throughout; added runtime feature matrix row showing Node.js full support, Pyodide manual bridge reload, and HTTP external reload; clarified hot reload definition as wrapper regeneration plus bridge swap.
Release Documentation docs/release.md	Updated npm publishing workflow to use consistent Node.js 24 runtime for validation and publishing; removed prior instruction to validate on Node 22 then switch to Node 24.
Package Configuration package.json	Bumped version from 0.3.1 to 0.4.0; updated dependencies (@babel/parser ^7.25.6 → ^7.29.2, typescript ^5.6.2 → ^5.9.3, eslint-plugin-security ^3.0.1 → ^4.0.0, vite ^7.3.0 → ^8.0.8); added devDependencies postprocessing ^6.39.0 and three ^0.183.2.
Source Code Formatting src/dev.ts, src/runtime/node.ts, src/runtime/worker-pool.ts, test/dev.test.ts	Applied minor formatting refactors: multi-line ternary in startNodeWatchSession path computation, single-line argument object in worker warmup callback, condensed method parameter declaration, and multi-line test filter predicate; no functional or control-flow changes.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~15 minutes

Possibly related PRs

• bbopen/tywrap#221: Modifies the same code paths in src/runtime/node.ts and src/runtime/worker-pool.ts for worker-pool formatting and warmup callback refactoring.
• bbopen/tywrap#224: Touches the development hot-reload feature surface in src/dev.ts and accompanying documentation for hot-reload helpers.
• bbopen/tywrap#212: Modifies package.json for the same devDependency additions (three, postprocessing) and updates docs/index.md.

Suggested labels

enhancement, documentation, area:tooling, area:docs, area:ci, area:runtime-node, codex, priority:p1

Poem

🐰 A hop through hot reloads we go,
Node.js 24 steals the show,
Wrappers dance, bridges swap and spin,
Zero restarts—let dev flow begin!
Docs aglow with examples so neat,
Version bumped, the release complete. ✨

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/v0.4.0-polish-release

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}