This release includes a security fix for CSRF Protection Middleware. If you are using CSRF Protection Middleware, please upgrade this hono package immediately.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the dependencies group with 13 updates in the / directory:
4.21.0
4.21.1
2.0.6
2.0.7
7.25.7
7.25.8
7.25.7
7.25.8
7.25.7
7.25.8
1.13.1
1.13.2
22.7.4
22.7.5
8.14.4
8.15.2
2.30.0
2.31.0
4.6.3
4.6.5
4.12.0
4.14.0
23.5.0
23.5.3
5.6.2
5.6.3
Updates
express
from 4.21.0 to 4.21.1Release notes
Sourced from express's releases.
Changelog
Sourced from express's changelog.
Commits
8e229f9
4.21.1a024c8a
fix(deps): cookie@0.7.1Updates
http-proxy-middleware
from 2.0.6 to 2.0.7Release notes
Sourced from http-proxy-middleware's releases.
Changelog
Sourced from http-proxy-middleware's changelog.
Commits
1e92339
ci(github-actions): fix npm tag90afb7c
chore(package): v2.0.70b4274e
fix(filter): handle errors1bd6dd5
ci(github actions): add publish.ymlUpdates
@babel/core
from 7.25.7 to 7.25.8Release notes
Sourced from
@babel/core
's releases.Changelog
Sourced from
@babel/core
's changelog.Commits
f9cb91a
v7.25.82570cfd
Restore public API ofresolvePlugin
/resolvePreset
(#16888)Updates
@babel/eslint-parser
from 7.25.7 to 7.25.8Release notes
Sourced from
@babel/eslint-parser
's releases.Changelog
Sourced from
@babel/eslint-parser
's changelog.Commits
f9cb91a
v7.25.8362b823
chore: Update lint deps (#16883)Updates
@babel/preset-env
from 7.25.7 to 7.25.8Release notes
Sourced from
@babel/preset-env
's releases.Changelog
Sourced from
@babel/preset-env
's changelog.Commits
f9cb91a
v7.25.8a6b0f54
Inline one-line syntax plugins (#16824)Updates
@hono/node-server
from 1.13.1 to 1.13.2Release notes
Sourced from
@hono/node-server
's releases.Commits
cd4d4d7
v1.13.22357641
fix(serve): support ipv6 by default (#206)Updates
@types/node
from 22.7.4 to 22.7.5Commits
Updates
cspell
from 8.14.4 to 8.15.2Release notes
Sourced from cspell's releases.
... (truncated)
Changelog
Sourced from cspell's changelog.
Commits
63f8b97
v8.15.2e7c0b5a
fix: Support passing the config in memory to cspell (#6358)e801dcd
v8.15.160b0456
v8.15.0abc7548
fix: stdin urls on the command line (#6345)611b21a
ci: Workflow Bot -- Update ALL Dependencies (main) (#6311)5421710
chore(deps): replace strip-ansi with native Node API (#6307)430f63e
ci: Workflow Bot -- Update ALL Dependencies (main) (#6295)8f00d78
feat: replace fast-glob with tinyglobby (#6167)Updates
eslint-plugin-import
from 2.30.0 to 2.31.0Release notes
Sourced from eslint-plugin-import's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-import's changelog.
Commits
91f809b
v2.31.03f1ac24
[utils] [refactor]parse
: avoid using a regex hered225176
[New]extensions
: add thecheckTypeImports
option5a51b9a
[Tests]rule-tester
: try this babel class workaroundd66cde0
[New] support eslint v9d27a639
[Fix] adjust "is source type module" checks for flat config1fa8a07
[Refactor] createsourceType
helper0bc1355
[Tests]no-default-export
,no-named-export
: add test cases with non-modu...55fa203
[Tests]no-default-export
,no-named-export
: add test case6be20df
[Docs]no-restricted-paths
: fix grammarUpdates
hono
from 4.6.3 to 4.6.5Release notes
Sourced from hono's releases.
Commits
89a0ac1
v4.6.5c4d19ec
chore: update the lockfile6cf01e5
fix(build): remove private fields (#3514)aa50e0a
Merge commit from forkf9e6ea7
fix(factory): revert PR #3498 (#3515)fc9cc6d
feat(powered-by): optional server name (#3492)cebf4e8
fix(cors): avoid settingAccess-Control-Allow-Origin
if there is no matchin...3311664
fix(types): rm ExcludeEmptyObject to fix massively increased type instantiati...bd9effe
ci: use Deno v2 for a test running for deno (#3509)9986b47
ci: use Denov2
(#3506)Updates
memfs
from 4.12.0 to 4.14.0Release notes
Sourced from memfs's releases.
Changelog
Sourced from memfs's changelog.
Commits
92be69e
chore(release): 4.14.0 [skip ci]11f8a36
feat: support stream as source in promises version ofwriteFile
(#1069)5460fce
chore(deps): lock file maintenance85648ff
chore(release): 4.13.0 [skip ci]a1772b2
feat: implement lutimes (#1066)Updates
puppeteer
from 23.5.0 to 23.5.3Release notes
Sourced from puppeteer's releases.
... (truncated)
Commits
5673801
chore: release main (#13173)3b5ecf2
chore(dependencies): update TypeScript to 5.5.4 (#13177)de145c3
fix: roll to Chrome 129.0.6668.100 (#13174)5b2b1fe
fix: roll to Firefox 131.0.2 (#13171)cce90d9
chore: release main (#13167)0cf512b
chore: update decorator for TS update (#13168)e5cbedf
chore: update types for TypeScript 5.6.2 (#13165)8a216f1
fix: roll to Chrome 129.0.6668.91 (#13166)1a64055
chore: release main (#13162)dd13d5d
fix: default to RAF polling if visible||hidden is set (#13153)Updates
typescript
from 5.6.2 to 5.6.3Release notes
Sourced from typescript's releases.
Commits
d48a5cf
Bump version to 5.6.3 and LKGfefa70a
🤖 Pick PR #60083 (Don't issue implicit any when obtai...) into release-5.6 (#...ff71692
[release-5.6] Remove tsbuildInfo specification error now that we need it for ...1f44dcf
🤖 Pick PR #60157 (fix automatic type acquisition) into release-5.6 (#60169)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show