Skip to content
This repository was archived by the owner on Dec 21, 2025. It is now read-only.

fix(deps): update all non-major dependencies - #6

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#6
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Apr 24, 2025

Copy link
Copy Markdown
Contributor

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@hono/node-server ^1.19.2 -> ^1.19.7 age confidence devDependencies patch
@scalar/hono-api-reference (source) ^0.8.10 -> ^0.9.30 age confidence devDependencies minor
@sinclair/typebox ^0.34.33 -> ^0.34.41 age confidence peerDependencies patch
@types/node (source) ^22.18.3 -> ^22.19.3 age confidence devDependencies minor
actions/checkout v4.2.2 -> v4.3.1 age confidence action minor
cookie ^1.0.2 -> ^1.1.1 age confidence dependencies minor
hono (source) ^4.7.7 -> ^4.11.1 age confidence peerDependencies minor
hono (source) ^4.9.7 -> ^4.11.1 age confidence dependencies minor
lefthook ^1.13.0 -> ^1.13.6 age confidence devDependencies patch
node (source) 22.15.0 -> 22.21.1 age confidence minor
pnpm (source) 10.9.0 -> 10.26.1 age confidence packageManager minor
pnpm/action-setup v4.1.0 -> v4.2.0 age confidence action minor
prettier (source) ^3.6.2 -> ^3.7.4 age confidence devDependencies minor
tsup (source) ^8.5.0 -> ^8.5.1 age confidence devDependencies patch
tsx (source) ^4.20.5 -> ^4.21.0 age confidence devDependencies minor
typescript (source) ^5.9.2 -> ^5.9.3 age confidence devDependencies patch
zod (source) ^3.24.3 -> ^3.25.76 age confidence peerDependencies minor

Release Notes

honojs/node-server (@​hono/node-server)

v1.19.7

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.19.6...v1.19.7

v1.19.6

Compare Source

v1.19.5

Compare Source

What's Changed

  • fix: cancel a readable stream if a writable stream is closed before a readable stream is closed. by @​usualoma in #​280

Full Changelog: honojs/node-server@v1.19.4...v1.19.5

v1.19.4

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.19.3...v1.19.4

v1.19.3

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/node-server@v1.19.2...v1.19.3

scalar/scalar (@​scalar/hono-api-reference)

v0.9.30

Patch Changes
Updated Dependencies

v0.9.28

Patch Changes

v0.9.27

Patch Changes

v0.9.26

Patch Changes

v0.9.25

Patch Changes

v0.9.24

Patch Changes

v0.9.23

Patch Changes

v0.9.22

Patch Changes

v0.9.21

Patch Changes

v0.9.20

Patch Changes

v0.9.19

Patch Changes

v0.9.18

Patch Changes

v0.9.17

Patch Changes

v0.9.16

Patch Changes

v0.9.15

Patch Changes

v0.9.13

Patch Changes

v0.9.12

Patch Changes

v0.9.11

Patch Changes

v0.9.10

Patch Changes

v0.9.9

Patch Changes

v0.9.7

Patch Changes

v0.9.6

Patch Changes

v0.9.5

Patch Changes

v0.9.4

Patch Changes

v0.9.3

Patch Changes

v0.9.2

Patch Changes

v0.9.1

Patch Changes
sinclairzx81/typebox (@​sinclair/typebox)

v0.34.41

Compare Source

v0.34.40

Compare Source

v0.34.39

Compare Source

v0.34.38

Compare Source

v0.34.37

Compare Source

v0.34.36

Compare Source

v0.34.35

Compare Source

v0.34.34

Compare Source

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

jshttp/cookie (cookie)

v1.1.1

Compare Source

Fixed

  • Overwrite value in passed in options (#​253) c66147c
    • When value was provided in serialize(key, value, { value }) the value in options was used instead of the value passed as an argument

v1.1.0

Compare Source

honojs/hono (hono)

v4.11.1

Compare Source

What's Changed

Full Changelog: honojs/hono@v4.11.0...v4.11.1

v4.11.0

Compare Source

Release Notes

Hono v4.11.0 is now available!

This release includes new features for the Hono client, middleware improvements, and an important type system fix.

Type System Fix for Middleware

We've fixed a bug in the type system for middleware. Previously, app did not have the correct type with pathless handlers:

const app = new Hono()
  .use(async (c, next) => {
    await next()
  })
  .get('/a', async (c, next) => {
    await next()
  })
  .get((c) => {
    return c.text('Hello')
  })

// app's type was incorrect

This has now been fixed.

Thanks @​kosei28!

Typed URL for Hono Client

You can now pass the base URL as the second type parameter to hc to get more precise URL types:

const client = hc<typeof app, 'http://localhost:8787'>(
  'http://localhost:8787/'
)

const url = client.api.posts.$url()
// url is TypedURL with precise type information
// including protocol, host, and path

This is useful when you want to use the URL as a type-safe key for libraries like SWR.

Thanks @​miyaji255!

Custom NotFoundResponse Type

You can now customize the NotFoundResponse type using module augmentation. This allows c.notFound() to return a typed response:

import { Hono, TypedResponse } from 'hono'

declare module 'hono' {
  interface NotFoundResponse
    extends Response,
      TypedResponse<{ error: string }, 404, 'json'> {}
}

const app = new Hono()
  .get('/posts/:id', async (c) => {
    const post = await getPost(c.req.param('id'))
    if (!post) {
      return c.notFound()
    }
    return c.json({ post }, 200)
  })
  .notFound((c) => c.json({ error: 'not found' }, 404))

Now the client can correctly infer the 404 response type.

Thanks @​miyaji255!

tryGetContext Helper

The new tryGetContext() helper in the Context Storage middleware returns undefined instead of throwing an error when the context is not available:

import { tryGetContext } from 'hono/context-storage'

const context = tryGetContext<Env>()
if (context) {
  // Context is available
  console.log(context.var.message)
}

Thanks @​AyushCoder9!

Custom Query Serializer

You can now customize how query parameters are serialized using the buildSearchParams option:

const client = hc<AppType>('http://localhost', {
  buildSearchParams: (query) => {
    const searchParams = new URLSearchParams()
    for (const [k, v] of Object.entries(query)) {
      if (v === undefined) continue
      if (Array.isArray(v)) {
        v.forEach((item) => searchParams.append(`${k}[]`, item))
      } else {
        searchParams.set(k, v)
      }
    }
    return searchParams
  },
})

Thanks @​bolasblack!

New features

  • feat(types): make Hono client's $url return the exact URL type #​4502
  • feat(types): enhance NotFoundHandler to support custom NotFoundResponse type #​4518
  • feat(timing): add wrapTime to simplify usage #​4519
  • feat(pretty-json): support force option #​4531
  • feat(client): add buildSearchParams option to customize query serialization #​4535
  • feat(context-storage): add optional tryGetContext helper #​4539
  • feat(secure-headers): add CSP report-to and report-uri directive support #​4555
  • fix(types): replace schema-based path tracking with CurrentPath parameter #​4552

All changes

New Contributors

Full Changelog: honojs/hono@v4.10.8...v4.11.0

v4.10.8

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.10.7...v4.10.8

v4.10.7

Compare Source

What's Changed
New Contributors

Full Changelog: honojs/hono@v4.10.6...v4.10.7

v4.10.6

Compare Source

Deperecated
bearer-auth options

The following options are deprecated and will be removed in a future version:

  • noAuthenticationHeaderMessage => use noAuthenticationHeader.message
  • invalidAuthenticationHeaderMessage => use invalidAuthenticationHeader.message
  • invalidTokenMessage => use invalidToken.message
What's Changed
New Contributors

Full Changelog: honojs/hono@v4.10.5...v4.10.6

v4.10.5

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.10.4...v4.10.5

v4.10.4

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.10.3...v4.10.4

v4.10.3

Compare Source

Securiy Fix

A security issue in the CORS middleware has been fixed. In some cases, a request header could affect the Vary response header. Please update to the latest version if you are using the CORS middleware.

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.10.2...v4.10.3

v4.10.2

Compare Source

v4.10.1

Compare Source

What's Changed

Full Changelog: honojs/hono@v4.10.0...v4.10.1

v4.10.0

Compare Source

Release Notes

Hono v4.10.0 is now available!

This release brings improved TypeScript support and new utilities.

The main highlight is the enhanced middleware type definitions that solve a long-standing issue with type safety for RPC clients.

Middleware Type Improvements

Imagine the following app:

import { Hono } from 'hono'

const app = new Hono()

const routes = app.get(
  '/',
  (c) => {
    return c.json({ errorMessage: 'Error!' }, 500)
  },
  (c) => {
    return c.json({ message: 'Success!' }, 200)
  }
)

The client with RPC:

import { hc } from 'hono/client'

const client = hc<typeof routes>('/')

const res = await client.index.$get()

if (res.status === 500) {
}

if (res.status === 200) {
}

Previously, it couldn't infer the responses from middleware, so a type error was thrown.

CleanShot 2025-10-17 at 06 51 48@​2x

Now the responses are correctly typed.

CleanShot 2025-10-17 at 06 54 13@​2x

This was a long-standing issue and we were thinking it was super difficult to resolve it. But now come true.

Thank you for the great work @​slawekkolodziej!

cloneRawRequest Utility

The new cloneRawRequest utility allows you to clone the raw Request object after it has been consumed by validators or middleware.

import { cloneRawRequest } from 'hono/request'

app.post('/api', async (c) => {
  const body = await c.req.json()

  // Clone the consumed request
  const clonedRequest = cloneRawRequest(c.req)
  await externalLibrary.process(clonedRequest)
})

Thanks @​kamaal111!

New features

  • feat(types): passing middleware types #​4393
  • feat(ssg): add default plugin that defines the recommended behavior #​4394
  • feat(request): add cloneRawRequest utility for request cloning #​4382

All changes

New Contributors

Full Changelog: honojs/hono@v4.9.12...v4.10.0

v4.9.12

Compare Source

What's Changed

  • refactor: internal structure of PreparedRegExpRouter for optimization and added tests by @​usualoma in #​4456
  • refactor: use protected methods instead of computed properties to allow tree shaking by @​usualoma in #​4458

Full Changelog: honojs/hono@v4.9.11...v4.9.12

v4.9.11

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.9.10...v4.9.11

v4.9.10

Compare Source

What's Changed

Full Changelog: honojs/hono@v4.9.9...v4.9.10

v4.9.9

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.9.8...v4.9.9

v4.9.8

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.9.7...v4.9.8

v4.9.7

Compare Source

Security

  • Fixed an issue in the bodyLimit middleware where the body size limit could be bypassed when both Content-Length and Transfer-Encoding headers were present. If you are using this middleware, please update immediately. Security Advisory

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.9.6...v4.9.7

v4.9.6

Compare Source

Security

Fixed a bug in URL path parsing (getPath) that could cause path confusion under malformed requests.

If you rely on reverse proxies (e.g. Nginx) for ACLs or restrict access to endpoints like /admin, please update immediately.

See advisory for details: GHSA-9hp6-4448-45g2

What's Changed

Full Changelog: honojs/hono@v4.9.5...v4.9.6

v4.9.5

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.9.4...v4.9.5

v4.9.4

Compare Source

What's Changed

Full Changelog: honojs/hono@v4.9.3...v4.9.4

v4.9.3

Compare Source

What's Changed

Full Changelog: honojs/hono@v4.9.2...v4.9.3

v4.9.2

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.9.1...v4.9.2

v4.9.1

Compare Source

What's Changed

Full Changelog: honojs/hono@v4.9.0...v4.9.1

v4.9.0

Compare Source

Release Notes

Hono v4.9.0 is now available!

This release introduces several enhancements and utilities.

The main highlight is the new parseResponse utility that makes it easier to work with RPC client responses.

parseResponse Utility

The new parseResponse utility provides a convenient way to parse responses from Hono RPC clients (hc). It automatically handles different response formats and throws structured errors for failed requests.

import { parseResponse, DetailedError } from 'hono/client'

// result contains the parsed response body (automatically parsed based on Content-Type)
const result = await parseResponse(client.hello.$get()).catch(
  // parseResponse automatically throws an error if response is not ok
  (e: DetailedError) => {
    console.error(e)
  }
)

This makes working with RPC client responses much more straightforward and type-safe.

Thanks @​NamesMT!

New features

  • feat(bun): allow importing upgradeWebSocket and websocket directly #​4242
  • feat(aws-lambda): specify content-type as binary #​4250
  • feat(jwt): add validation for the issuer (iss) claim #​4253
  • feat(jwk): add headerName to JWK middleware #​4279
  • feat(cookie): add generateCookie and generateSignedCookie helpers #​4285
  • feat(serve-static): use join to correct path resolution #​4291
  • feat(jwt): expose utility function verifyWithJwks for external use #​4302
  • feat: add parseResponse util to smartly parse hc's Response #​4314
  • feat(ssg

@renovate renovate Bot changed the title chore(deps): update dependency @types/node to ^22.15.0 chore(deps): update dependency @types/node to ^22.15.1 Apr 25, 2025
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from d267194 to e3a015e Compare April 25, 2025 03:50
@renovate renovate Bot changed the title chore(deps): update dependency @types/node to ^22.15.1 chore(deps): update dependency @types/node to ^22.15.2 Apr 25, 2025
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from e3a015e to 998e63b Compare April 25, 2025 07:25
@renovate renovate Bot changed the title chore(deps): update dependency @types/node to ^22.15.2 chore(deps): update all non-major dependencies Apr 27, 2025
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 998e63b to d009be9 Compare April 27, 2025 23:56
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Apr 28, 2025
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 10 times, most recently from 8cd67cd to d6972f7 Compare May 5, 2025 02:31
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 960ff41 to 1eccc41 Compare May 9, 2025 06:33
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1eccc41 to 28fd3f4 Compare May 12, 2025 23:02
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 15 times, most recently from dbb4d83 to b7b80ed Compare May 27, 2025 20:21
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 14 times, most recently from a12c8b7 to 9c6311d Compare June 2, 2025 13:41
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants