Skip to content

chore(deps): bump the production-deps group across 1 directory with 2 updates - #136

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-10439b2ef5
Open

chore(deps): bump the production-deps group across 1 directory with 2 updates#136
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-deps-10439b2ef5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown

Bumps the production-deps group with 2 updates in the / directory: @solana/spl-token and hono.

Updates @solana/spl-token from 0.4.14 to 0.4.15

Release notes

Sourced from @​solana/spl-token's releases.

js-legacy@v0.4.15

What's new

Commits
  • 27c359d Publish js-legacy@v0.4.15
  • 6a09978 js-legacy: Update package.json for trusted publishing (#1303)
  • 5b2d7fe build(deps): bump solana-packet from 4.1.0 to 4.2.0 (#1302)
  • ca02a9a deps: Update crossbeam-epoch for audit (#1301)
  • 1ead7bb build(deps-dev): bump typedoc from 0.28.19 to 0.28.20 in /clients/js (#1297)
  • 3eb2f00 build(deps-dev): bump typedoc from 0.28.19 to 0.28.20 in /clients/js-legacy (...
  • 800990a build(deps-dev): bump @​typescript-eslint/eslint-plugin from 8.61.1 to 8.62.1 ...
  • e578003 build(deps-dev): bump vitest from 4.1.9 to 4.1.10 in /clients/js (#1296)
  • 1d8f1f8 build(deps-dev): bump @​typescript-eslint/parser from 8.61.1 to 8.62.1 in /cli...
  • c338a07 build(deps-dev): bump prettier from 3.8.4 to 3.9.4 in /clients/js-legacy (#1295)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​solana/spl-token since your current version.


Updates hono from 4.12.25 to 4.13.3

Release notes

Sourced from hono's releases.

v4.13.3

What's Changed

  • fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227
  • fix(etag): copy pending stream bytes in honojs/hono#5239
  • fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234
  • fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235
  • docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248
  • fix(trie-router): match suffix wildcard routes in honojs/hono#5236
  • fix(pattern-router/linear-router): prevent prefix overmatch on wildcard routes in honojs/hono#5252
  • fix(csrf): exempt OPTIONS request from CSRF validation in honojs/hono#5250
  • fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expand IPv6 in honojs/hono#5247
  • feat(pretty-json): support structured JSON content-types (+json) in honojs/hono#5226

Full Changelog: honojs/hono@v4.13.2...v4.13.3

v4.13.2

What's Changed

  • fix(secure-headers): output standard empty parentheses () instead of none for disabled Permissions-Policy directives in honojs/hono#5197
  • fix(jsx): render async children of document metadata tags instead of [object Promise] in honojs/hono#5204
  • fix(etag): resolve incorrect incremental hashing for chunked responses in honojs/hono#5199
  • fix(client): serialize multiple cookies correctly in honojs/hono#5202
  • fix(etag): stabilize digest across stream chunks in honojs/hono#5205
  • fix(url): strip trailing question mark correctly for optional params with regex quantifiers in honojs/hono#5209
  • perf(cors): pre-join static array header options during initialization in honojs/hono#5210
  • fix(client): send falsy JSON bodies in honojs/hono#5215
  • feat(secure-headers): add missing W3C Permissions-Policy directives in honojs/hono#5214

Full Changelog: honojs/hono@v4.13.1...v4.13.2

v4.13.1

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.13.0...v4.13.1

v4.13.0

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

... (truncated)

Commits
  • 0293343 4.13.3
  • 5ad469a feat(pretty-json): support structured JSON content-types (+json) (#5226)
  • c91ec9b fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expandIPv6 ...
  • eea9735 fix(csrf): exempt OPTIONS request from CSRF validation (#5250)
  • a194628 fix(pattern-router/linear-router): prevent prefix overmatch on wildcard route...
  • 63bbcf5 fix(trie-router): match suffix wildcard routes (#5236)
  • ef0739d docs(context): add custom headers append option example to Context JSDoc (#5248)
  • 8bf03c3 fix(cors): append Origin to Vary header on OPTIONS preflight (#5235)
  • 546eca0 fix(etag): avoid skipping headers when filtering 304 response headers (#5234)
  • 7195c24 fix(etag): copy pending stream bytes (#5239)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for hono since your current version.


@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, x402. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel

vercel Bot commented Jul 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
magpie-x402 Ignored Ignored Preview Aug 24, 2026 2:08pm

Request Review

… updates

Bumps the production-deps group with 2 updates in the / directory: [@solana/spl-token](https://github.com/solana-program/token-2022) and [hono](https://github.com/honojs/hono).


Updates `@solana/spl-token` from 0.4.14 to 0.4.15
- [Release notes](https://github.com/solana-program/token-2022/releases)
- [Commits](https://github.com/solana-program/token-2022/compare/js-legacy@v0.4.14...js-legacy@v0.4.15)

Updates `hono` from 4.12.25 to 4.13.3
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.25...v4.13.3)

---
updated-dependencies:
- dependency-name: "@solana/spl-token"
  dependency-version: 0.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
- dependency-name: hono
  dependency-version: 4.12.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-deps-10439b2ef5 branch from 693f37f to 7f871b9 Compare August 24, 2026 14:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants