build(deps): bump hono from 4.12.7 to 4.12.12#1891
build(deps): bump hono from 4.12.7 to 4.12.12#1891dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [hono](https://github.com/honojs/hono) from 4.12.7 to 4.12.12. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.7...v4.12.12) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.12 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Greptile SummaryThis PR is a security-driven dependency bump of hono 4.12.12 includes five CVE-level security fixes:
Other lockfile changes:
Confidence Score: 5/5Safe to merge — this is a patch-range security bump with no API-breaking changes and five CVEs resolved. The change is purely a version bump within the ^4.12.x semver range, so no code changes are required from the consumer. All five fixed issues in 4.12.12 are security patches. The lockfile regeneration is consistent and correct. The only side-effect is a minor pre-existing peer-resolution shuffle in a vitest snapshot entry, which does not affect production code. No files require special attention.
|
| Filename | Overview |
|---|---|
| pnpm-workspace.yaml | Catalog version pin for hono updated from ^4.12.7 to ^4.12.12 — correct and minimal change. |
| pnpm-lock.yaml | All hono@4.12.7 references mechanically replaced with hono@4.12.12 across importers, packages, and snapshots; integrity hash updated; one unrelated @vitest/mocker peer-resolution entry also changed (tsx@4.21.0 → tsx@4.20.6). |
Flowchart
%%{init: {'theme': 'neutral'}}%%
flowchart TD
A["pnpm-workspace.yaml\ncatalog: hono 4.12.12"] --> B["pnpm-lock.yaml\nhono@4.12.12 resolved"]
B --> C1["apps/ensnode-api"]
B --> C2["apps/ensindexer"]
B --> C3["apps/ensrainbow"]
B --> C4["packages/ens-referrals"]
B --> D1["@hono/node-server@1.19.11"]
B --> D2["@hono/otel@0.2.2"]
B --> D3["@hono/zod-openapi@1.2.2"]
B --> D4["@hono/zod-validator@0.7.6"]
B --> D5["ponder@0.16.3"]
B --> D6["ponder-enrich-gql-docs-middleware@0.1.3"]
Reviews (1): Last reviewed commit: "build(deps): bump hono from 4.12.7 to 4...." | Re-trigger Greptile
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps hono from 4.12.7 to 4.12.12.
Release notes
Sourced from hono's releases.
... (truncated)
Commits
c37ba264.12.12cc067c8Merge commit from forka586cd7Merge commit from fork48fa223Merge commit from forkb470278Merge commit from fork9aff14bMerge commit from fork2c403c64.12.11f82aba8feat(css): add classNameSlug option to createCssContext (#4834)9f374a54.12.10a8c56a6docs(ip-restriction): add clear JSDoc examples and param types (#4851)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.