* chore: update to ts6 in prep for ts7

* fix: update hono-eslint

…5025)

The cache middleware extracted existing Cache-Control directive names without
lower-casing them, then compared against its own lower-cased directive names.
Cache-Control directive names are case-insensitive (RFC 7234), so a handler-set
`Max-Age=3600` was not recognised as a duplicate of a configured `max-age=10`
and a contradictory directive was appended.

Lower-case the extracted names so the de-dup check matches regardless of case.

Co-authored-by: nyxst4ck <289980115+nyxst4ck@users.noreply.github.com>

compress() never looked at the response status, so a 206 was gzipped
while its Content-Range header still described the uncompressed byte
range, and the Content-Length matching the partial body was dropped.
Range clients reassembling parts from such responses end up with
corrupted data.

Skip compression when the status is 206. Reported as the second issue
in #5010.

…nother (#5096)

The regex built in replaceUrlParam had no boundary after the param
name, so a param whose name is a prefix of another param name (e.g.
`id` vs `idType`) matched inside the longer token. For
`/:idType/:id` with { id, idType } the result depended on object key
order and could produce e.g. `/1Type/:id`.

Add a `(?=/|$)` lookahead so the matched `:name`, `:name{...}`, or
`:name?` token must end at a slash or end of string.

Co-authored-by: Yusuke Wada <yusuke@kamawada.com>

…ry mode (#5110)