[Snyk] Upgrade hono from 4.5.8 to 4.6.15

[Sourav-Goyal19]

Snyk has created this PR to upgrade hono from 4.5.8 to 4.6.15.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 19 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Cross-site Request Forgery (CSRF) SNYK-JS-HONO-8220272	616	Proof of Concept

Release notes

Package name: hono

• 4.6.15 - 2024-12-28
  

  c.json() etc. throwing type error when the status is contentless code, e.g., 204

  From this release, when c.json(), c.text(), or c.html() returns content, specifying a contentless status code such as 204 will now throw a type error.

  

  At first glance, this seems like a breaking change but not. It is not possible to return a contentless response with c.json() or c.text(). So, in that case, please use c.body().

  app.get('/', (c) => {
    return c.body(null, 204)
  })

  What's Changed

  • fix(jsr): exclude unused markdown files by @ ryuapp in #3767
  • feat(hono/context): contentful status code typing by @ askorupskyy in #3763
  • refactor(context): remove lint errors by @ yusukebe in #3769
  • feat(context): ResponseInit accepts generics StatusCode for status by @ yusukebe in #3770
  • feat(utils/cookie): Ability to set a priority to cookies in setCookie options by @ Beyondo in #3762
  • fix(hono-base): don't use Symbol for COMPOSED_HANDLER by @ yusukebe in #3773

  New Contributors

  • @ askorupskyy made their first contribution in #3763
  • @ Beyondo made their first contribution in #3762

  Full Changelog: v4.6.14...v4.6.15

• 4.6.14 - 2024-12-14
  

  What's Changed

  • perf(pattern-router): improve performance when create null object by @ EdamAme-x in #3730
  • perf(trie-router): avoid calling spread operator for Object.create(null) by @ usualoma in #3735
  • fix: Remove charset parameter from MIME type of application/json by @ SaekiTominaga in #3743
  • fix(streaming) Prevent console.error(undefined) when pipe is aborted by @ aantthony in #3747

  New Contributors

  • @ SaekiTominaga made their first contribution in #3743
  • @ aantthony made their first contribution in #3747

  Full Changelog: v4.6.13...v4.6.14

• 4.6.13 - 2024-12-06
  

  What's Changed

  • refactor: use Array.prototype.at() to look at the end by @ ryuapp in #3703
  • fix(aws-lambda): Fix query string handling for v1 by @ Holi0317 in #3717
  • chore: Add Cloudflare Static Assets reference to serveStatic deprecation notice by @ ambergristle in #3705
  • fix(middleware/cors): explicitly return No Content for the statusText when handling an OPTIONS request by @ shawncarr in #3719
  • fix(utils/ipaddr): support IPv6-mapped IPv4 address by @ usualoma in #3727

  New Contributors

  • @ Holi0317 made their first contribution in #3717
  • @ ambergristle made their first contribution in #3705
  • @ shawncarr made their first contribution in #3719

  Full Changelog: v4.6.12...v4.6.13

• 4.6.12 - 2024-11-25
  

  What's Changed

  • ci(perf-measures): support KB by @ EdamAme-x in #3696
  • perf(router): sort handlers by score only when necessary by @ EdamAme-x in #3697
  • feat(css): add CSP nonce to hono/css related style and script tags by @ meck93 in #3685
  • fix(adapter/aws-lambda): add alb event requestContext undefined check for testing convenience by @ ospatil in #3691

  New Contributors

  • @ meck93 made their first contribution in #3685
  • @ ospatil made their first contribution in #3691

  Full Changelog: v4.6.11...v4.6.12

• 4.6.11 - 2024-11-19
  

  What's Changed

  • docs: changed as even smaller by @ EdamAme-x in #3664
  • chore(build): fix progress of log by @ EdamAme-x in #3665
  • chore(benchmark): add qs for query-param by @ yusukebe in #3674
  • feat(helper/factory): Calculate Context Type in createHandlers by @ sushichan044 in #3670
  • ci: compare bundle size by @ EdamAme-x in #3661
  • chore: enable formatting perf-measures by @ yusukebe in #3683
  • chore: lint build and perf-measures by @ yusukebe in #3686
  • ci: Display performance measurement results as custom metrics by @ k2tzumi in #3491
  • fix(base): define errorHandler with private not use # by @ yusukebe in #3692

  New Contributors

  • @ sushichan044 made their first contribution in #3670
  • @ k2tzumi made their first contribution in #3491

  Full Changelog: v4.6.10...v4.6.11

• 4.6.10 - 2024-11-13
  

  What's Changed

  • chore: format no-response.yml by @ yusukebe in #3622
  • ci(deno): merge deno runtime coverage by @ usualoma in #3632
  • chore: bump devDependencies by @ EdamAme-x in #3633
  • fix(jsr): fix missing exports by @ EdamAme-x in #3636
  • refactor(hono-base): use object abbreviation notation by @ EdamAme-x in #3640
  • chore(build): validate if exporting is correct in package.json and jsr.json by @ EdamAme-x in #3638
  • fix(serveStatic): add guard to prevent reading empty folders by @ oussamasf in #3639
  • docs(service-worker): fix module docs for service worker adapter by @ rwv in #3645
  • refactor(hono-base): remove unneeded processes and variables by @ EdamAme-x in #3649
  • perf(trie-router): optimize and remove unnecessary processes by @ EdamAme-x in #3647
  • refactor(router): use # for private props to reduce the minified bundle size by @ EdamAme-x in #3660
  • fix(middleware/combine): prevent c.req.routeIndex from being changed by @ usualoma in #3663

  New Contributors

  • @ oussamasf made their first contribution in #3639
  • @ rwv made their first contribution in #3645

  Full Changelog: v4.6.9...v4.6.10

• 4.6.9 - 2024-11-04
  

  What's Changed

  • refactor: fix typos by @ mattn in #3583
  • fix(req): correct c.req.param decodes invalid percent strings by @ yusukebe in #3573
  • fix(jsx/dom): fix memo for DOM renderer by @ usualoma in #3568
  • fix(jsx/dom): fix dom rendering bugs for fragment. by @ usualoma in #3569
  • perf(compose): check if it is a instance only once by @ EdamAme-x in #3585
  • perf(router): use .concat instead of spread syntax by @ EdamAme-x in #3584
  • fix(types): remove any and fix types of adapter/deno by @ EdamAme-x in #3291
  • refactor(timing/utils-body): a few minor edits by @ sharma-shray in #3557
  • fix(hono-base): remove .matchRoute and reduce bundle size by @ EdamAme-x in #3595
  • perf(utils/url): improve performance of url utility by @ EdamAme-x in #3593
  • perf(context): improve performance of context (setHeaders) by @ EdamAme-x in #3592
  • refactor(helper/html): Prefer Array.isArray over instanceof Array by @ exoego in #3601
  • refactor: compare with undefined directly by @ exoego in #3602
  • refactor: remove useless spread by @ exoego in #3600
  • refactor(context): use simple for-of syntax by @ usualoma in #3598
  • feat(context): allow URL object on c.redirect() by @ cometkim in #3609
  • ci: Use latest version of Bun and Deno for CI by @ fel1x-developer in #3554
  • chore(ISSUE_TEMPLATE): encourage them to add a version if possible by @ EdamAme-x in #3599
  • perf(middleware/logger): optimize color status by @ exoego in #3603
  • refactor(utils/mime): make object and type commonality by @ EdamAme-x in #3606
  • chore: automatically close issues marked as “not bug” over time by @ EdamAme-x in #3611
  • perf(utils): use | 0 instead of Math.floor by @ EdamAme-x in #3605
  • perf(helper/cookie): fast-path for name specified by @ exoego in #3608
  • refactor: use # for private methods to reduce the minified file size by @ yusukebe in #3596
  • fix(helper/websocket): allow custom events to be passed to generics by @ EdamAme-x in #3616
  • fix(middleware/etag): generate etag hash value from all chunks by @ usualoma in #3604
  • fix(utils/crypto): fix types of crypto utility by @ EdamAme-x in #3614

  New Contributors

  • @ mattn made their first contribution in #3583
  • @ sharma-shray made their first contribution in #3557
  • @ fel1x-developer made their first contribution in #3554

  Full Changelog: v4.6.8...v4.6.9

• 4.6.8 - 2024-10-29
  

  What's Changed

  • fix(bun/ws): fix invalid types by @ nakasyou in #3562
  • fix(utils/cookie): partitioned typo in CookieOptions by @ imcotton in #3566
  • fix(websocket): Fix typo in WSContextInit type by @ Ariel-Moroshko in #3575
  • fix(websocket): prevent sending entire buffer when streaming Uint8Array chunks by @ Ariel-Moroshko in #3570
  • fix(bun/ws): supoort --hot by @ nakasyou in #3576
  • feat(header): suggest name of header and combine in one file by

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
finance-manager	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jan 24, 2025 5:54am