-
Notifications
You must be signed in to change notification settings - Fork 119
fix(deps): update dependency hono to v4.9.6 - autoclosed #147
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
692d77a to
cd1f9ed
Compare
271f877 to
200b8a4
Compare
200b8a4 to
1088163
Compare
1088163 to
9add45d
Compare
9add45d to
a35314e
Compare
a35314e to
516e733
Compare
47a5f4a to
bd81257
Compare
bd81257 to
743155a
Compare
6c6498b to
0a897f2
Compare
4e89728 to
2b222a2
Compare
2b222a2 to
594e93e
Compare
594e93e to
a463f5b
Compare
a463f5b to
cd220fb
Compare
cd220fb to
76c027b
Compare
76c027b to
3b1b1eb
Compare
3b1b1eb to
7cb6c57
Compare
7cb6c57 to
2d062a5
Compare
2d062a5 to
ca9993d
Compare
ca9993d to
e32228d
Compare
e32228d to
b21f2da
Compare
b21f2da to
d4a4a68
Compare
d4a4a68 to
9828a15
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.6.14->4.9.6Release Notes
honojs/hono (hono)
v4.9.6Compare Source
Security
Fixed a bug in URL path parsing (
getPath) that could cause path confusion under malformed requests.If you rely on reverse proxies (e.g. Nginx) for ACLs or restrict access to endpoints like
/admin, please update immediately.See advisory for details: GHSA-9hp6-4448-45g2
What's Changed
Full Changelog: honojs/hono@v4.9.5...v4.9.6
v4.9.5Compare Source
What's Changed
originandallowMethodsby @jobrk in #4373app.fetchinhandleby @yusukebe in #4374New Contributors
Full Changelog: honojs/hono@v4.9.4...v4.9.5
v4.9.4Compare Source
What's Changed
deno publishby @yusukebe in #4364Full Changelog: honojs/hono@v4.9.3...v4.9.4
v4.9.3Compare Source
What's Changed
customFetchoption to allow custom fetch function by @yusukebe in #4360typescriptto5.9.2by @yusukebe in #4362packageManagerfield topackage.jsonby @yusukebe in #4363Full Changelog: honojs/hono@v4.9.2...v4.9.3
v4.9.2Compare Source
What's Changed
removeIndexStringby @yusukebe in #4352New Contributors
Full Changelog: honojs/hono@v4.9.1...v4.9.2
v4.9.1Compare Source
What's Changed
DetailedError.name(+ error tests) by @NamesMT in #4344Full Changelog: honojs/hono@v4.9.0...v4.9.1
v4.9.0Compare Source
Release Notes
Hono v4.9.0 is now available!
This release introduces several enhancements and utilities.
The main highlight is the new
parseResponseutility that makes it easier to work with RPC client responses.parseResponse Utility
The new
parseResponseutility provides a convenient way to parse responses from Hono RPC clients (hc). It automatically handles different response formats and throws structured errors for failed requests.This makes working with RPC client responses much more straightforward and type-safe.
Thanks @NamesMT!
New features
All changes
iss) claim by @yolocat-dev in #4253headerNameto JWK middleware by @JoaquinGimenez1 in #4279jointo correct path resolution by @yusukebe in #4291verifyWithJwksfor external use by @Beyondo in #4302parseResponseutil to smartly parsehc's Response by @NamesMT in #4314skipLibCheckto resolve TypeScript compilation issues by @yusukebe in #4342New Contributors
Full Changelog: honojs/hono@v4.8.12...v4.9.0
v4.8.12Compare Source
What's Changed
/files/:name{.*}by @yusukebe in #4329Full Changelog: honojs/hono@v4.8.11...v4.8.12
v4.8.11Compare Source
What's Changed
outputtype forc.body()by @NamesMT in #4318FetchEventas second argument toapp.fetchby @yusukebe in #4328@hono/eslint-configby @yusukebe in #4330Full Changelog: honojs/hono@v4.8.10...v4.8.11
v4.8.10Compare Source
What's Changed
benchmarks/*by @yusukebe in #4317New Contributors
Full Changelog: honojs/hono@v4.8.9...v4.8.10
v4.8.9Compare Source
What's Changed
isByteStringinc.redirectby @yusukebe in #4307Full Changelog: honojs/hono@v4.8.8...v4.8.9
v4.8.8Compare Source
What's Changed
safeEncodeURIby @yusukebe in #4306Full Changelog: honojs/hono@v4.8.7...v4.8.8
v4.8.7Compare Source
What's Changed
Full Changelog: honojs/hono@v4.8.6...v4.8.7
v4.8.6Compare Source
What's Changed
Full Changelog: honojs/hono@v4.8.5...v4.8.6
v4.8.5Compare Source
What's Changed
Full Changelog: honojs/hono@v4.8.4...v4.8.5
v4.8.4Compare Source
What's Changed
Proxyto support Node.js 24 by @yusukebe in #4260signingSecretoption by @yusukebe in #4263indexstring when calling$url()by @yusukebe in #4267req.json()keeps the content as is by @yusukebe in #4269Full Changelog: honojs/hono@v4.8.3...v4.8.4
v4.8.3Compare Source
What's Changed
tryDecodewhen parsing cookie by @yusukebe in #4240JwtTokenIssuedAterror message by @yusukebe in #4244pkg.pr.newby @NEKOYASAN in #4245New Contributors
Full Changelog: honojs/hono@v4.8.2...v4.8.3
v4.8.2Compare Source
What's Changed
Full Changelog: honojs/hono@v4.8.1...v4.8.2
v4.8.1Compare Source
What's Changed
New Contributors
Full Changelog: honojs/hono@v4.8.0...v4.8.1
v4.8.0Compare Source
Release Notes
Hono v4.8.0 is now available!
This release enhances existing features with new options and introduces powerful helpers for routing and static site generation. Additionally, we're introducing new third-party middleware packages.
fire()FunctionPlus new third-party middleware:
Let's look at each of these.
Reduced the code size
First, this update reduces the code size! The smallest
hono/tinypackage has been reduced by about 800 bytes fromv4.7.11, bringing it down to approximately 11 KB. When gzipped, it's only 4.5 KB. Very tiny!Route Helper
New route helper functions provide easy access to route information and path utilities.
These helpers make route introspection cleaner and more explicit.
Thanks @usualoma!
JWT Custom Header Location
JWT middleware now supports custom header locations beyond the standard
Authorizationheader. You can specify any header name to retrieve JWT tokens from.This is useful when working with APIs that use non-standard authentication headers.
Thanks @kunalbhagawati!
JSX Streaming Nonce Support
JSX streaming now supports nonce values for Content Security Policy (CSP) compliance. The streaming context can include a nonce that gets applied to inline scripts.
Thanks @usualoma!
CORS Dynamic allowedMethods
CORS middleware now supports dynamic
allowedMethodsbased on the request origin. You can provide a function that returns different allowed methods depending on the origin.This enables fine-grained control over CORS policies per origin.
Thanks @Kanahiro!
JWK Allow Anonymous Access
JWK middleware now supports anonymous access with the
allow_anonoption. When enabled, requests without valid tokens can still proceed to your handlers.Additionally,
keysandjwks_urioptions now support functions that receive the context, enabling dynamic key resolution.Thanks @Beyondo!
Cache Status Codes Option
Cache middleware now allows you to specify which status codes should be cached using the
cacheableStatusCodesoption.Thanks @miyamo2!
Service Worker fire() Function
A new
fire()function is available from the Service Worker adapter, providing a cleaner alternative toapp.fire().The
app.fire()method is now deprecated in favor of this approach. Goodbyeapp.fire().SSG Plugin System
Static Site Generation (SSG) now supports a plugin system that allows you to extend the generation process with custom functionality.
For example, the following is easy implementation of a sitemap plugin:
Applying the plugin:
Plugins can hook into various stages of the generation process to perform custom actions.
Thanks @3w36zj6!
Third-party Middleware Updates
In addition to core Hono features, we're excited to introduce new third-party middleware packages that extend Hono's capabilities.
MCP Middleware
A new middleware package
@hono/mcpenables creating remote MCP (Model Context Protocol) servers over Streamable HTTP Transport. This is the initial release with more features planned for the future.Currently, this is ideal for creating stateless and authentication-less remote MCP servers.
Thanks @MathurAditya724!
UA Blocker Middleware
The new
@hono/ua-blockermiddleware allows blocking requests based on user agent headers. It includes blocking AI bots functions.Thanks @finxol!
Zod Validator v4 Support
The
@hono/zod-validatormiddleware now supports Zod v4!All Changes
res.clone()is not supported by @yusukebe in #4198res.clone()is not supported (#4198)" by @yusukebe in #4200cacheableStatusCodesoption by @miyamo2 in #3943allow_anonoption & passingContextto callbacks by @Beyondo in #3961propstoExecutionContextby @yusukebe in #4030NO_COLORon cloudflare workers by @ryuapp in #4094fire()by @yusukebe in #4214app.fire()as deprecated by @yusukebe in #4231New Contributors
Full Changelog: honojs/hono@v4.7.11...v4.8.0
v4.7.11Compare Source
What's Changed
URLSearchParamsto the query-params benchmark by @yusukebe in #4149c.newResponse()for the response oferr.getResponse()by @yusukebe in #4181New Contributors
Full Changelog: honojs/hono@v4.7.10...v4.7.11
v4.7.10Compare Source
What's Changed
#clone()by @yusukebe in #4139header.algas fallback inverifyFromJwksby @yusukebe in #4144Full Changelog: honojs/hono@v4.7.9...v4.7.10
v4.7.9Compare Source
What's Changed
getSignedCookieparameters type by @Hill-98 in #4123New Contributors
Full Changelog: honojs/hono@v4.7.8...v4.7.9
v4.7.8Compare Source
What's Changed
4.12.0by @yusukebe in #4096replaceRequest: falseoption for.mountby @geelen in #4113New Contributors
Full Changelog: honojs/hono@v4.7.7...v4.7.8
v4.7.7Compare Source
What's Changed
c.header()when it's finalized by @yusukebe in #4078New Contributors
Full Changelog: honojs/hono@v4.7.6...v4.7.7
v4.7.6Compare Source
What's Changed
hono is cooltohono is hotby @EdamAme-x in #4035New Contributors
Full Changelog: honojs/hono@v4.7.5...v4.7.6
v4.7.5Compare Source
What's Changed
BunWebSocketDataandBunWebSocketHandlerby @yusukebe in #4002New Contributors
Full Changelog: honojs/hono@v4.7.4...v4.7.5
v4.7.4Compare Source
What's Changed
Full Changelog: honojs/hono@v4.7.3...v4.7.4
v4.7.3Compare Source
What's Changed
BunWebSocketHandlerby @yusukebe in #3964New Contributors
Full Changelog: honojs/hono@v4.7.2...v4.7.3
v4.7.2Compare Source
What's Changed
RequestandResponseclasses by @BarryThePenguin in #3928Full Changelog: honojs/hono@v4.7.1...v4.7.2
v4.7.1Compare Source
What's Changed
next()by @usualoma in #3905cryptoby @EdamAme-x in #3916New Contributors
Full Changelog: honojs/hono@v4.7.0...v4.7.1
v4.7.0Compare Source
Release Notes
Hono v4.7.0 is now available!
This release introduces one helper and two middleware.
Plus, Standard Schema Validator has been born.
Let's look at each of these.
Proxy Helper
We sometimes use the Hono application as a reverse proxy. In that case, it accesses the backend using
fetch. However, it sends an unintended headers.For example,
fetchmay sendAccept-Encoding, causing the origin server to return a compressed response. Some runtimes automatically decode it, leading to aContent-Lengthmismatch and potential client-side errors.Also, you should probably remove some of the headers sent from the origin server, such as
Transfer-Encoding.Proxy Helper will send requests to the origin and handle responses properly. The above headers problem is solved simply by writing as follows.
You can also use it in more complex ways.
Thanks @usualoma!
Language Middleware
Language Middleware provides 18n functions to Hono applications. By using the
languageDetectorfunction, you can get the language that your application should support.You can get the target language in various ways, not just by using
Accept-Language.Accept-LanguageheaderThanks @lord007tn!
JWK Auth Middleware
Finally, middleware that supports JWK (JSON Web Key) has landed. Using JWK Auth Middleware, you can authenticate by verifying JWK tokens. It can access keys fetched from the specified URL.
Thanks @Beyondo!
Standard Schema Validator
Standard Schema provides a common interface for TypeScript validator libraries. Standard Schema Validator is a validator that uses it. This means that Standard Schema Validator can handle several validators, such as Zod, Valibot, and ArkType, with the same interface.
The code below really works!
Thanks @muningis!
New features
All changes
yarnby @EdamAme-x in #3878toLowerCase()is unnecessary forreq.header()by @yusukebe in #3880envtype by @yusukebe in #3885Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.