build(deps): bump hono from 4.6.4 to 4.6.5

[dependabot[bot]]

Bumps hono from 4.6.4 to 4.6.5.

Release notes

Sourced from hono's releases.

v4.6.5

Security fix for CSRF Protection Middleware

This release includes a security fix for CSRF Protection Middleware. If you are using CSRF Protection Middleware, please upgrade this hono package immediately.

Before this release, a request without a Content-Type header can bypass the protection. This fix does not allow it. See: https://github.com/honojs/hono/security/advisories/GHSA-2234-fmw7-43wr

What's Changed

• perf(types): replace intersection with union to get better perf by @​m-shaka in honojs/hono#3443
• ci: use Deno v2 by @​yusukebe in honojs/hono#3506
• ci: use Deno v2 for a test running for deno by @​nakasyou in honojs/hono#3509
• fix(types): rm ExcludeEmptyObject to fix massively increased type instantiations by @​m-shaka in honojs/hono#3507
• fix(cors): avoid setting Access-Control-Allow-Origin if there is no matching origin by @​uki00a in honojs/hono#3510
• feat(powered-by): optional server name by @​PatrickJS in honojs/hono#3492
• fix(factory): revert PR #3498 by @​yusukebe in honojs/hono#3515
• fix(build): remove private fields by @​nakasyou in honojs/hono#3514

New Contributors

• @​uki00a made their first contribution in honojs/hono#3510
• @​PatrickJS made their first contribution in honojs/hono#3492

Full Changelog: https://github.com/honojs/hono/compare/v4.6.4...v4.6.5

Commits

• 89a0ac1 v4.6.5
• c4d19ec chore: update the lockfile
• 6cf01e5 fix(build): remove private fields (#3514)
• aa50e0a Merge commit from fork
• f9e6ea7 fix(factory): revert PR #3498 (#3515)
• fc9cc6d feat(powered-by): optional server name (#3492)
• cebf4e8 fix(cors): avoid setting Access-Control-Allow-Origin if there is no matchin...
• 3311664 fix(types): rm ExcludeEmptyObject to fix massively increased type instantiati...
• bd9effe ci: use Deno v2 for a test running for deno (#3509)
• 9986b47 ci: use Deno v2 (#3506)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel[bot]]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
push-all-in-cloud	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Oct 15, 2024 11:35am

[github-actions[bot]]

:tada: This PR is included in version 2.0.0-beta.1 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket:

[github-actions[bot]]

:tada: This PR is included in version 1.3.1 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: