Skip to content

chore(deps): update dependency @hono/node-server to v2.0.10 - #272

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/hono-node-server-2.x
Jul 26, 2026
Merged

chore(deps): update dependency @hono/node-server to v2.0.10#272
renovate[bot] merged 1 commit into
mainfrom
renovate/hono-node-server-2.x

Conversation

@renovate

@renovate renovate Bot commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@hono/node-server 2.0.82.0.10 age confidence

Release Notes

honojs/node-server (@​hono/node-server)

v2.0.10

Compare Source

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg


Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

Compare Source

What's Changed

  • fix(websocket): polyfill missing ErrorEvent global by @​otnc in #​371
  • fix(serve-static): correct Range header parsing edge cases by @​otnc in #​372
  • fix: recover complete request bodies after client disconnect by @​usualoma in #​375

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9


Configuration

📅 Schedule: (in timezone Australia/Melbourne)

  • Branch creation
    • "before 4am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Jul 26, 2026
@renovate
renovate Bot enabled auto-merge (squash) July 26, 2026 17:53
@renovate renovate Bot added the renovate label Jul 26, 2026
@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from a932aa3 to ed9f171 Compare July 26, 2026 21:38
@renovate
renovate Bot merged commit ecf6d97 into main Jul 26, 2026
9 checks passed
@renovate
renovate Bot deleted the renovate/hono-node-server-2.x branch July 26, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate type: chore 🧹

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants