Skip to content

Bump hono from 4.13.16 to 4.13.17 - #115

Merged
Krakabek merged 1 commit into
mainfrom
dependabot/npm_and_yarn/hono-4.13.17
Nov 10, 2026
Merged

Krakabek merged 1 commit into
mainfrom
dependabot/npm_and_yarn/hono-4.13.17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps hono from 4.13.16 to 4.13.17.

Release notes

Sourced from hono's releases.

v4.13.17

What's Changed

  • fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in honojs/hono#5608
  • fix(utils/url): do not match a query key across separators in honojs/hono#5607
  • fix(etag,pretty-json): cancel the discarded response body in honojs/hono#5606
  • fix(client): detect the JSON media type with whitespace before a parameter in honojs/hono#5609
  • fix(timing): honor a precision of 0 in setMetric in honojs/hono#5363
  • fix(utils/mime,ssg): match media types case-insensitively in honojs/hono#5449
  • fix(timing): escape double quotes and backslashes in Server-Timing descriptions in honojs/hono#5478
  • fix(etag): preserve commas within quoted entity tags in honojs/hono#5353
  • fix(accepts): preserve exact media type quality over subtype wildcards in honojs/hono#5427
  • fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in CookieConstraint in honojs/hono#5611
  • fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary in honojs/hono#5430
  • fix(ssg): do not reuse created directories across toSSG runs in honojs/hono#5381
  • fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events in honojs/hono#5483
  • fix(jsx): escape element and object attribute values in honojs/hono#5512
  • fix(jsx): do not render ref objects as attributes in honojs/hono#5615
  • fix(factory): keep independent return types for nine handlers in honojs/hono#5618

Full Changelog: honojs/hono@v4.13.16...v4.13.17

Commits
  • 61f7c59 4.13.17
  • 1534ffa fix(factory): keep independent return types for nine handlers (#5618)
  • eb754bd fix(jsx): do not render ref objects as attributes (#5615)
  • 6cbe361 fix(jsx): escape element and object attribute values (#5512)
  • 8b7f9e9 fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events (#...
  • 7852e0a fix(ssg): do not reuse created directories across toSSG runs (#5381)
  • bcfd02b fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary (#5430)
  • 456fe46 fix(cookie): match the __Secure- and __Host- prefixes case-insensitively in C...
  • 98b35af fix(accepts): preserve exact media type quality over subtype wildcards (#5427)
  • b3f1272 fix(etag): preserve commas within quoted entity tags (#5353)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hono](https://github.com/honojs/hono) from 4.13.16 to 4.13.17.
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.16...v4.13.17)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.13.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 9, 2026
@Krakabek
Krakabek merged commit ecb05cf into main Nov 10, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/hono-4.13.17 branch November 10, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

1 participant