fix: pin Hono security patch - #5

Merged

Ryson-32 merged 1 commit into

mainfrom

Jun 17, 2026

Ryson-32 commented Jun 17, 2026

Member

Summary

pin transitive Hono dependency to 4.12.25 via npm overrides
refresh package-lock so Dependabot no longer reports Hono < 4.12.25

Validation

npm audit --audit-level=low
npm ls hono --all
npm run local:build
npm run check:public-submodule
npm run check:public-repository


          fix: pin hono security patch

49b7dcc

Ryson-32 merged commit 11305fd into main

3 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet