[Snyk] Upgrade: hono, typescript #73
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- hono from 2.7.8 to 4.5.10.
See this package in npm: https://www.npmjs.com/package/hono
- typescript from 4.9.5 to 5.5.4.
See this package in npm: https://www.npmjs.com/package/typescript
See this project in Snyk:
https://app.snyk.io/org/laurry-gee/project/b5f5690f-a110-484e-85a4-d96c843d311a?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
hono
⚠️ This is a major version upgrade, and may be a breaking change | 21 days ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
from 2.7.8 to 4.5.10 | 202 versions ahead of your current version
on 2024-08-31
typescript
from 4.9.5 to 5.5.4 | 595 versions ahead of your current version
on 2024-07-22
Issues fixed by the recommended upgrade:
SNYK-JS-HONO-6129070
SNYK-JS-HONO-6129121
SNYK-JS-HONO-6672874
SNYK-JS-HONO-7814167
Release notes
Package name: hono
-
4.5.10 - 2024-08-31
- feat(compress): improve compress middleware by @ nitedani in #3317
- feat(jsx): add popover api attributes by @ ssssota in #3323
- feat(jsx): improve form attribute types by @ ssssota in #3330
- chore(test): migrate to vitest v2 by @ yasuaki640 in #3326
- chore(test): replace deprecated vitest type by @ yasuaki640 in #3338
- fix(logger): removing spaces from logger by @ marceloverdijk in #3334
- @ nitedani made their first contribution in #3317
- @ marceloverdijk made their first contribution in #3334
-
4.5.9 - 2024-08-26
- test(types): broken test in future versions of typescript by @ m-shaka in #3310
- fix(utils/color): Deno does not require permission for
- feat(jsx): improve
- feat(pretty-json): support custom query by @ nakasyou in #3300
-
4.5.8 - 2024-08-22
-
4.5.7 - 2024-08-21
- fix(jsx/dom): Fixed a bug that caused Script elements to turn into Style elements. by @ usualoma in #3294
- perf(jsx/dom): improve performance by @ usualoma in #3288
- feat(jsx): improve a-tag types with well known values by @ ssssota in #3287
- fix(validator): Fixed a bug in hono/validator where URL Encoded Data could not be validated if the Content-Type included charset. by @ uttk in #3297
- feat(jsx): improve
- docs(README): change Twitter to X by @ nakasyou in #3301
- fix(client): replace optional params to url correctly by @ yusukebe in #3304
- feat(jsx): improve input attribute types based on react by @ ssssota in #3302
- @ uttk made their first contribution in #3297
-
4.5.6 - 2024-08-17
- fix(jsx): handle async component error explicitly and throw the error in the response by @ usualoma in #3274
- fix(validator): support multipart headers without a separating space by @ Ernxst in #3286
- fix(validator): Allow form data will mutliple values appended by @ nicksrandall in #3273
- feat(jsx): improve meta-tag types with well known values by @ ssssota in #3276
- @ Ernxst made their first contribution in #3286
- @ ssssota made their first contribution in #3276
-
4.5.5 - 2024-08-11
- fix(jsx): allow null, undefined, and boolean to be returned from function component by @ usualoma in #3241
- feat(context): Add types for
- fix(jsx): fix draggable type to accept boolean by @ yasuaki640 in #3253
- feat(context): add Context-Type types to
- fix(serve-static): supports directory contains
-
4.5.4 - 2024-08-06
- fix(jsx): corrects the type of 'draggable' attribute in intrinsic-elements.ts by @ yasuaki640 in #3224
- feat(jsx): allow to merge CSSProperties declaration by @ jonasnobile in #3228
- feat(client): Add WebSocket Provider Integration Tests and Enhance WebSocket Initialization by @ naporin0624 in #3213
- fix(types):
- @ jonasnobile made their first contribution in #3228
-
4.5.3 - 2024-07-29
- fix(validator): Add double quotation marks to multipart checker regex by @ CPlusPatch in #3195
- fix(validator): support
- fix(jsx): fix handling of SVG elements in JSX. by @ usualoma in #3204
- fix(jsx/dom): fix performance issue with adding many new node listings by @ usualoma in #3205
- fix(service-worker): refer to
- @ CPlusPatch made their first contribution in #3195
-
4.5.2 - 2024-07-27
- fix(helper/adapter): don't check
- fix(types): handle readonly array correctly by @ m-shaka in #3172
- Revert "fix(helper/adapter): don't check
- fix(type): degradation of generic type handling by @ m-shaka in #3138
- fix:(csrf) fix typo of csrf middleware by @ yasuaki640 in #3178
- feat(secure-headers): remove "X-Powered-By" should be an option by @ EdamAme-x in #3177
-
4.5.1 - 2024-07-20
- chore: remove rimraf and use bun shell by @ nakasyou in #3146
- chore: moving the setup file of vitest by @ EdamAme-x in #3157
- fix(middleware/jwt): Changed the jwt-secret type to SignatureKey by @ JulesVerner in #3167
- feat(bearer-auth): Allow empty bearer-auth middleware prefixes by @ prevostc in #3161
- chore(factory): remove
- fix(client): support array values for
- fix(validator): ignore content-type mismatches by @ yusukebe in #3165
- @ JulesVerner made their first contribution in #3167
- @ prevostc made their first contribution in #3161
-
4.5.0 - 2024-07-16
-
4.5.0-rc.2 - 2024-06-29
-
4.5.0-rc.1 - 2024-06-12
-
4.4.13 - 2024-07-11
-
4.4.12 - 2024-07-06
-
4.4.11 - 2024-07-03
-
4.4.10 - 2024-06-29
-
4.4.9 - 2024-06-27
-
4.4.8 - 2024-06-24
-
4.4.7 - 2024-06-19
-
4.4.6 - 2024-06-13
-
4.4.5 - 2024-06-11
-
4.4.4 - 2024-06-06
-
4.4.3 - 2024-06-03
-
4.4.2 - 2024-05-30
-
4.4.1 - 2024-05-30
-
4.4.0 - 2024-05-27
-
4.4.0-rc.1 - 2024-05-24
-
4.3.11 - 2024-05-24
-
4.3.10 - 2024-05-23
-
4.3.9 - 2024-05-21
-
4.3.8 - 2024-05-19
-
4.3.7 - 2024-05-15
-
4.3.6 - 2024-05-12
-
4.3.5 - 2024-05-12
-
4.3.4 - 2024-05-09
-
4.3.3 - 2024-05-08
-
4.3.2 - 2024-05-04
-
4.3.1 - 2024-05-04
-
4.3.0 - 2024-05-03
-
4.2.9 - 2024-04-29
-
4.2.8 - 2024-04-26
-
4.2.7 - 2024-04-23
-
4.2.6 - 2024-04-22
-
4.2.5 - 2024-04-18
-
4.2.4 - 2024-04-13
-
4.2.3 - 2024-04-09
-
4.2.2 - 2024-04-05
-
4.2.1 - 2024-04-03
-
4.2.0 - 2024-04-02
-
4.2.0-rc.1 - 2024-03-31
-
4.1.7 - 2024-03-31
-
4.1.6 - 2024-03-31
-
4.1.5 - 2024-03-27
-
4.1.4 - 2024-03-25
-
4.1.3 - 2024-03-20
-
4.1.2 - 2024-03-18
-
4.1.1 - 2024-03-17
-
4.1.0 - 2024-03-11
-
4.1.0-rc.1 - 2024-03-04
-
4.0.10 - 2024-03-05
-
4.0.9 - 2024-03-03
-
4.0.8 - 2024-02-28
-
4.0.7 - 2024-02-25
-
4.0.6 - 2024-02-24
-
4.0.5 - 2024-02-20
-
4.0.4 - 2024-02-17
-
4.0.3 - 2024-02-16
-
4.0.2 - 2024-02-14
-
4.0.1 - 2024-02-11
-
4.0.0 - 2024-02-09
-
4.0.0-rc.4 - 2024-02-03
-
4.0.0-rc.3 - 2024-01-27
-
4.0.0-rc.2 - 2024-01-21
-
4.0.0-rc.1 - 2024-01-18
-
4.0.0-rc.0 - 2024-01-10
-
3.12.12 - 2024-02-07
-
3.12.11 - 2024-02-05
-
3.12.10 - 2024-02-02
-
3.12.9 - 2024-01-31
-
3.12.8 - 2024-01-27
-
3.12.7 - 2024-01-25
-
3.12.6 - 2024-01-18
-
3.12.5 - 2024-01-16
-
3.12.4 - 2024-01-15
-
3.12.3 - 2024-01-12
-
3.12.2 - 2024-01-11
-
3.12.1 - 2024-01-09
-
3.12.0 - 2024-01-04
-
3.11.12 - 2024-01-01
-
3.11.11 - 2023-12-26
-
3.11.10 - 2023-12-24
-
3.11.9 - 2023-12-21
-
3.11.8 - 2023-12-16
-
3.11.7 - 2023-12-14
-
3.11.6 - 2023-12-13
-
3.11.5 - 2023-12-13
-
3.11.4 - 2023-12-09
-
3.11.3 - 2023-12-07
-
3.11.2 - 2023-12-05
-
3.11.1 - 2023-12-04
-
3.11.0 - 2023-12-04
-
3.10.5 - 2023-12-03
-
3.10.4 - 2023-12-01
-
3.10.3 - 2023-11-28
-
3.10.2 - 2023-11-21
-
3.10.1 - 2023-11-15
-
3.10.0 - 2023-11-13
-
3.10.0-rc.2 - 2023-11-08
-
3.10.0-rc.1 - 2023-11-06
-
3.9.2 - 2023-11-03
-
3.9.1 - 2023-10-31
-
3.9.0 - 2023-10-27
-
3.9.0-rc.1 - 2023-10-26
-
3.8.4 - 2023-10-26
-
3.8.3 - 2023-10-22
-
3.8.2 - 2023-10-21
-
3.8.1 - 2023-10-18
-
3.8.0 - 2023-10-17
-
3.8.0-rc.3 - 2023-10-16
-
3.8.0-rc.2 - 2023-10-05
-
3.8.0-rc.1 - 2023-10-05
-
3.7.6 - 2023-10-12
-
3.7.5 - 2023-10-05
-
3.7.4 - 2023-10-04
-
3.7.3 - 2023-09-30
-
3.7.2 - 2023-09-23
-
3.7.1 - 2023-09-21
-
3.7.0 - 2023-09-21
-
3.7.0-rc.2 - 2023-09-20
-
3.7.0-rc.1 - 2023-09-17
-
3.6.3 - 2023-09-16
-
3.6.2 - 2023-09-16
-
3.6.1 - 2023-09-15
-
3.6.0 - 2023-09-10
-
3.6.0-rc.2 - 2023-09-09
-
3.6.0-rc.1 - 2023-09-05
-
3.5.8 - 2023-09-05
-
3.5.7 - 2023-09-03
-
3.5.6 - 2023-08-29
-
3.5.5 - 2023-08-28
-
3.5.4 - 2023-08-24
-
3.5.3 - 2023-08-24
-
3.5.2 - 2023-08-24
-
3.5.1 - 2023-08-23
-
3.5.0 - 2023-08-21
-
3.5.0-rc.1 - 2023-08-21
-
3.4.3 - 2023-08-14
-
3.4.2 - 2023-08-14
-
3.4.1 - 2023-08-08
-
3.4.0 - 2023-08-08
-
3.3.4 - 2023-07-27
-
3.3.3 - 2023-07-23
-
3.3.2 - 2023-07-20
-
3.3.1 - 2023-07-16
-
3.3.0 - 2023-07-11
-
3.3.0-rc.1 - 2023-07-08
-
3.2.7 - 2023-06-29
-
3.2.6 - 2023-06-22
-
3.2.5 - 2023-06-07
-
3.2.4 - 2023-06-04
-
3.2.3 - 2023-05-27
-
3.2.2 - 2023-05-24
-
3.2.1 - 2023-05-20
-
3.2.0 - 2023-05-19
-
3.2.0-rc.4 - 2023-05-17
-
3.2.0-rc.3 - 2023-05-14
-
3.2.0-rc.2 - 2023-05-12
-
3.2.0-rc.1 - 2023-05-09
-
3.1.8 - 2023-05-02
-
3.1.7 - 2023-04-28
-
3.1.6 - 2023-04-16
-
3.1.5 - 2023-03-31
-
3.1.4 - 2023-03-30
-
3.1.3 - 2023-03-26
-
3.1.2 - 2023-03-20
-
3.1.1 - 2023-03-19
-
3.1.0 - 2023-03-17
-
3.1.0-rc.2 - 2023-03-13
-
3.1.0-rc.1 - 2023-03-13
-
3.0.5 - 2023-03-13
-
3.0.4 - 2023-03-13
-
3.0.3 - 2023-03-02
-
3.0.2 - 2023-02-25
-
3.0.1 - 2023-02-20
-
3.0.0 - 2023-02-18
-
3.0.0-rc.16 - 2023-02-17
-
3.0.0-rc.15 - 2023-02-15
-
3.0.0-rc.14 - 2023-02-12
-
3.0.0-rc.13 - 2023-02-11
-
3.0.0-rc.12 - 2023-02-10
-
3.0.0-rc.11 - 2023-02-09
-
3.0.0-rc.10 - 2023-02-01
-
3.0.0-rc.9 - 2023-01-31
-
3.0.0-rc.8 - 2023-01-19
-
3.0.0-rc.7 - 2023-01-18
-
3.0.0-rc.6 - 2023-01-18
-
3.0.0-rc.5 - 2023-01-14
-
3.0.0-rc.4 - 2023-01-08
-
3.0.0-rc.3 - 2023-01-01
-
3.0.0-rc.2 - 2022-12-30
-
3.0.0-0 - 2022-12-29
-
2.7.8 - 2023-02-12
from hono GitHub release notesWhat's Changed
New Contributors
Full Changelog: v4.5.9...v4.5.10
What's Changed
NO_COLORby @ ryuapp in #3306type(MIME) attribute types by @ ssssota in #3305Full Changelog: v4.5.8...v4.5.9
Security Fix for CSRF Protection Middleware
Before this release, in versions 4.5.7 and below, the CSRF Protection Middleware did not treat requests including
Content-Typeswith uppercase letters (e.g.,Application/x-www-form-urlencoded) as potential attacks, allowing them to pass.This could cause unexpected behavior, leading to a vulnerability. If you are using the CSRF Protection Middleware, please upgrade to version 4.5.8 or higher immediately.
For more details, see the report here: GHSA-rpfr-3m35-5vx5
What's Changed
targetandformtargetattribute types by @ ssssota in #3299New Contributors
Full Changelog: v4.5.6...v4.5.7
What's Changed
New Contributors
Full Changelog: v4.5.5...v4.5.6
What's Changed
c.headerby @ nakasyou in #3221c.headerby @ nakasyou in #3255.and not end/by @ yusukebe in #3256Full Changelog: v4.5.4...v4.5.5
What's Changed
paraminValidationTargetssupports optional param by @ yusukebe in #3229New Contributors
Full Changelog: v4.5.3...v4.5.4
What's Changed
application/jsonwith a charset as JSON by @ yusukebe in #3199self.fetchcorrectly by @ yusukebe in #3200New Contributors
Full Changelog: v4.5.2...v4.5.3
What's Changed
navigatorisundefinedby @ yusukebe in #3171navigatorisundefinedby @ yusukebe in #3173Full Changelog: v4.5.1...v4.5.2
What's Changed
@ experimentalfromcreateAppby @ yusukebe in #3164queryinwsby @ yusukebe in #3169New Contributors
Full Changelog: v4.5.0...v4.5.1
Package name: typescript
For release notes, check out the release announcement.
For the complete list of fixed issues, check out the
Downloads are available on:
For release notes, check out the release announcement.
For the complete list of fixed issues, check out the
Downloads are available on:
For release notes, check out the release announcement.
For the complete list of fixed issues, check out the
Downloads are available on: