ci: bump hono from 4.13.0 to 4.13.3 - #602
Conversation
Bumps [hono](https://github.com/honojs/hono) from 4.13.0 to 4.13.3. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.0...v4.13.3) --- updated-dependencies: - dependency-name: hono dependency-version: 4.13.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
seonghobae
left a comment
seonghobae
left a comment
There was a problem hiding this comment.
Reviewed exact Dependabot head 5f9dc371fb3ba7150a8f1e3693bc64794e50ebee against protected develop@2c328875e00e86537df3e965170be80532571cad. The effective diff is limited to hono 4.13.0 → 4.13.3 in package.json and package-lock.json, with the lock integrity/resolved artifact updated consistently. Hono's official v4.13.3 release is a non-prerelease patch release and includes fixes in routing, CORS, CSRF, ETag streaming, IPv6 parsing, client URL/cookie behavior, and structured JSON handling; this remains above the already-patched 4.12.34 security floor. Current-head ScopeWeave Server Tests, Fuzz, OSV Scanner, Dependency Review, Security Scan, and SAST Semgrep are all terminal GitHub-success, Devin reports no issues, and there are no inline review threads. APPROVE as an independent human review of this Dependabot-authored head. This review does not convert synthetic/ambiguous workflow checkout evidence into exact-head merge authority or waive the separate live requirement for a second qualifying approval / last-push approval and corrected exact-revision evidence controls.
1 participant
Bumps hono from 4.13.0 to 4.13.3.
Release notes
Sourced from hono's releases.
Commits
02933434.13.35ad469afeat(pretty-json): support structured JSON content-types (+json) (#5226)c91ec9bfix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expandIPv6 ...eea9735fix(csrf): exempt OPTIONS request from CSRF validation (#5250)a194628fix(pattern-router/linear-router): prevent prefix overmatch on wildcard route...63bbcf5fix(trie-router): match suffix wildcard routes (#5236)ef0739ddocs(context): add custom headers append option example to Context JSDoc (#5248)8bf03c3fix(cors): append Origin to Vary header on OPTIONS preflight (#5235)546eca0fix(etag): avoid skipping headers when filtering 304 response headers (#5234)7195c24fix(etag): copy pending stream bytes (#5239)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)