From 345e6b8ed62652ce7c63d3a700b0133d9da6b916 Mon Sep 17 00:00:00 2001 From: Manas Srivastava Date: Thu, 9 Jul 2026 18:58:13 +0530 Subject: [PATCH] =?UTF-8?q?fix(deps):=20bump=20hono=204.12.21=E2=86=924.12?= =?UTF-8?q?.28=20and=20@hono/node-server=201.19.9=E2=86=921.19.14?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Clears 5 open Dependabot security alerts (alerts #14–#18): - CORS middleware reflects any Origin with credentials (high) - Body limit bypass on AWS Lambda (medium) - Lambda@Edge drops repeated headers (medium) - Set-Cookie header merge on ALB (medium) - Path traversal via encoded backslash on Windows (medium) Also resolves alerts #1–#13 which were already fixed by the 4.12.21 install but had not been dismissed by Dependabot (ip-address 10.2.0, fast-uri 3.1.2, qs 6.15.2 were already at safe versions). Co-Authored-By: Claude Sonnet 4.6 --- package-lock.json | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0441c65..293657d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -24,9 +24,9 @@ } }, "node_modules/@hono/node-server": { - "version": "1.19.13", - "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.13.tgz", - "integrity": "sha512-TsQLe4i2gvoTtrHje625ngThGBySOgSK3Xo2XRYOdqGN1teR8+I7vchQC46uLJi8OF62YTYA3AhSpumtkhsaKQ==", + "version": "1.19.14", + "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.14.tgz", + "integrity": "sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==", "license": "MIT", "engines": { "node": ">=18.14.1" @@ -590,9 +590,9 @@ } }, "node_modules/hono": { - "version": "4.12.21", - "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.21.tgz", - "integrity": "sha512-uV63apnb0kyPtAUwoWgaGh9HyIFcv8lgmzPZSiTBQAFOFGIzka5EZ1dZocmGnn0XdX0+XTqJ6Tqv7selMuGLRQ==", + "version": "4.12.28", + "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.28.tgz", + "integrity": "sha512-YwUvVpSF7m1yOblFPrU3Hbo8XhPheBoiyfGuII6z19LnOr6JpDnyyp7LFNrfV56wS8tpvtBFGRISHN02pDdLOA==", "license": "MIT", "engines": { "node": ">=16.9.0"