Skip to content

[Agent Builder] Upgrade hono and @hono/node-server dependency#263794

Merged
machadoum merged 4 commits intoelastic:mainfrom
machadoum:ea-CVE-upgrade-hono
Apr 17, 2026
Merged

[Agent Builder] Upgrade hono and @hono/node-server dependency#263794
machadoum merged 4 commits intoelastic:mainfrom
machadoum:ea-CVE-upgrade-hono

Conversation

@machadoum
Copy link
Copy Markdown
Member

@machadoum machadoum commented Apr 16, 2026

Summary

Upgrade hono and @hono/node-server dependency

Identify risks

  • Tests agent builder MCP server

@machadoum machadoum self-assigned this Apr 16, 2026
@machadoum machadoum added backport:all-open Backport to all branches that could still receive a release Team:agent-builder feature:agent-builder Identify agent builder functionalities to be grouped together for release notes release_note:fix labels Apr 16, 2026
@machadoum machadoum marked this pull request as ready for review April 16, 2026 14:09
@machadoum machadoum enabled auto-merge (squash) April 16, 2026 15:41
@elasticmachine
Copy link
Copy Markdown
Contributor

elasticmachine commented Apr 17, 2026

💔 Build Failed

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #33 / Endpoint plugin @ess @serverless @skipInServerlessMKI Endpoint policy response api GET /api/endpoint/policy_response "before all" hook for "should return one policy response for an id"
  • [job] [logs] Scout: [ platform / streams_app-stateful-classic ] plugin / local-stateful-classic - Stream data retention - storage metrics integration - should update retention without affecting storage display
  • [job] [logs] x-pack/solutions/observability/test/api_integration_deployment_agnostic/configs/serverless/oblt.synthetics.serverless.config.ts / Serverless Observability - Deployment-agnostic Synthetics API integration tests SyntheticsAPITests PrivateLocationCreateMonitor handles auto upgrading policies
  • [job] [logs] x-pack/solutions/observability/test/api_integration_deployment_agnostic/configs/serverless/oblt.synthetics.serverless.config.ts / Serverless Observability - Deployment-agnostic Synthetics API integration tests SyntheticsAPITests PrivateLocationCreateMonitor handles auto upgrading policies
  • [job] [logs] x-pack/solutions/observability/test/api_integration_deployment_agnostic/configs/serverless/oblt.synthetics.serverless.config.ts / Serverless Observability - Deployment-agnostic Synthetics API integration tests SyntheticsAPITests PrivateLocationCreateMonitor handles auto upgrading policies

Metrics [docs]

✅ unchanged

History

cc @machadoum

@machadoum machadoum merged commit 52c3e41 into elastic:main Apr 17, 2026
16 checks passed
@kibanamachine
Copy link
Copy Markdown
Contributor

Starting backport for target branches: 8.19, 9.2, 9.3, 9.4

https://github.com/elastic/kibana/actions/runs/24574081756

kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Apr 17, 2026
…c#263794)

## Summary

resolves elastic/security#9761
resolves elastic/security#9762
resolves elastic/security#9758
resolves elastic/security#9759

Upgrade hono and @hono/node-server dependency

### Identify risks

* Tests agent builder MCP server

(cherry picked from commit 52c3e41)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Apr 17, 2026
…c#263794)

## Summary

resolves elastic/security#9761
resolves elastic/security#9762
resolves elastic/security#9758
resolves elastic/security#9759

Upgrade hono and @hono/node-server dependency

### Identify risks

* Tests agent builder MCP server

(cherry picked from commit 52c3e41)
@kibanamachine
Copy link
Copy Markdown
Contributor

💔 Some backports could not be created

Status Branch Result
8.19 Backport failed because of merge conflicts
9.2 Backport failed because of merge conflicts
9.3
9.4

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

node scripts/backport --pr 263794

Questions ?

Please refer to the Backport tool documentation

kibanamachine added a commit that referenced this pull request Apr 17, 2026
…263794) (#264145)

# Backport

This will backport the following commits from `main` to `9.4`:
- [[Agent Builder] Upgrade hono and @hono/node-server dependency
(#263794)](#263794)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Pablo
Machado","email":"pablo.nevesmachado@elastic.co"},"sourceCommit":{"committedDate":"2026-04-17T15:51:27Z","message":"[Agent
Builder] Upgrade hono and @hono/node-server dependency (#263794)\n\n##
Summary\n\nresolves
https://github.com/elastic/security/issues/9761\nresolves
https://github.com/elastic/security/issues/9762\nresolves
https://github.com/elastic/security/issues/9758\nresolves
https://github.com/elastic/security/issues/9759\n\nUpgrade hono and
@hono/node-server dependency\n\n\n### Identify risks\n\n* Tests agent
builder MCP
server","sha":"52c3e419c9c7094a1e1c3fc939beb04b99560651","branchLabelMapping":{"^v9.5.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:all-open","Team:agent-builder","feature:agent-builder","v9.5.0"],"title":"[Agent
Builder] Upgrade hono and @hono/node-server
dependency","number":263794,"url":"https://github.com/elastic/kibana/pull/263794","mergeCommit":{"message":"[Agent
Builder] Upgrade hono and @hono/node-server dependency (#263794)\n\n##
Summary\n\nresolves
https://github.com/elastic/security/issues/9761\nresolves
https://github.com/elastic/security/issues/9762\nresolves
https://github.com/elastic/security/issues/9758\nresolves
https://github.com/elastic/security/issues/9759\n\nUpgrade hono and
@hono/node-server dependency\n\n\n### Identify risks\n\n* Tests agent
builder MCP
server","sha":"52c3e419c9c7094a1e1c3fc939beb04b99560651"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.5.0","branchLabelMappingKey":"^v9.5.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/263794","number":263794,"mergeCommit":{"message":"[Agent
Builder] Upgrade hono and @hono/node-server dependency (#263794)\n\n##
Summary\n\nresolves
https://github.com/elastic/security/issues/9761\nresolves
https://github.com/elastic/security/issues/9762\nresolves
https://github.com/elastic/security/issues/9758\nresolves
https://github.com/elastic/security/issues/9759\n\nUpgrade hono and
@hono/node-server dependency\n\n\n### Identify risks\n\n* Tests agent
builder MCP
server","sha":"52c3e419c9c7094a1e1c3fc939beb04b99560651"}}]}]
BACKPORT-->

Co-authored-by: Pablo Machado <pablo.nevesmachado@elastic.co>
@kibanamachine kibanamachine added the backport missing Added to PRs automatically when the are determined to be missing a backport. label Apr 20, 2026
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @machadoum

1 similar comment
@kibanamachine
Copy link
Copy Markdown
Contributor

Looks like this PR has backport PRs but they still haven't been merged. Please merge them ASAP to keep the branches relatively in sync.
cc: @machadoum

kibanamachine added a commit that referenced this pull request Apr 22, 2026
…263794) (#264144)

# Backport

This will backport the following commits from `main` to `9.3`:
- [[Agent Builder] Upgrade hono and @hono/node-server dependency
(#263794)](#263794)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Pablo
Machado","email":"pablo.nevesmachado@elastic.co"},"sourceCommit":{"committedDate":"2026-04-17T15:51:27Z","message":"[Agent
Builder] Upgrade hono and @hono/node-server dependency (#263794)\n\n##
Summary\n\nresolves
https://github.com/elastic/security/issues/9761\nresolves
https://github.com/elastic/security/issues/9762\nresolves
https://github.com/elastic/security/issues/9758\nresolves
https://github.com/elastic/security/issues/9759\n\nUpgrade hono and
@hono/node-server dependency\n\n\n### Identify risks\n\n* Tests agent
builder MCP
server","sha":"52c3e419c9c7094a1e1c3fc939beb04b99560651","branchLabelMapping":{"^v9.5.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:fix","backport:all-open","Team:agent-builder","feature:agent-builder","v9.5.0"],"title":"[Agent
Builder] Upgrade hono and @hono/node-server
dependency","number":263794,"url":"https://github.com/elastic/kibana/pull/263794","mergeCommit":{"message":"[Agent
Builder] Upgrade hono and @hono/node-server dependency (#263794)\n\n##
Summary\n\nresolves
https://github.com/elastic/security/issues/9761\nresolves
https://github.com/elastic/security/issues/9762\nresolves
https://github.com/elastic/security/issues/9758\nresolves
https://github.com/elastic/security/issues/9759\n\nUpgrade hono and
@hono/node-server dependency\n\n\n### Identify risks\n\n* Tests agent
builder MCP
server","sha":"52c3e419c9c7094a1e1c3fc939beb04b99560651"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.5.0","branchLabelMappingKey":"^v9.5.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/263794","number":263794,"mergeCommit":{"message":"[Agent
Builder] Upgrade hono and @hono/node-server dependency (#263794)\n\n##
Summary\n\nresolves
https://github.com/elastic/security/issues/9761\nresolves
https://github.com/elastic/security/issues/9762\nresolves
https://github.com/elastic/security/issues/9758\nresolves
https://github.com/elastic/security/issues/9759\n\nUpgrade hono and
@hono/node-server dependency\n\n\n### Identify risks\n\n* Tests agent
builder MCP
server","sha":"52c3e419c9c7094a1e1c3fc939beb04b99560651"}}]}]
BACKPORT-->

Co-authored-by: Pablo Machado <pablo.nevesmachado@elastic.co>
@kibanamachine kibanamachine added v9.3.4 and removed backport missing Added to PRs automatically when the are determined to be missing a backport. labels Apr 22, 2026
@kc13greiner
Copy link
Copy Markdown
Contributor

Is this PR going to be backported to 8.19?

@legrego
Copy link
Copy Markdown
Member

legrego commented Apr 27, 2026

@machadoum can you follow up on this?

Is this PR going to be backported to 8.19?

@machadoum
Copy link
Copy Markdown
Member Author

Backports for 9.2 and 8.19 are in progress and will be merged soon.
#266065
#266064

machadoum added a commit that referenced this pull request Apr 28, 2026
…263794) (#266064)

# Backport

This will backport the following commits from `main` to `9.2`:
- [[Agent Builder] Upgrade hono and @hono/node-server dependency
(#263794)](#263794)



### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)
machadoum added a commit that referenced this pull request Apr 28, 2026
…263794) (#266065)

# Backport

This will backport the following commits from `main` to `8.19`:
- [[Agent Builder] Upgrade hono and @hono/node-server dependency
(#263794)](#263794)



### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:all-open Backport to all branches that could still receive a release feature:agent-builder Identify agent builder functionalities to be grouped together for release notes release_note:fix Team:agent-builder v8.19.16 v9.3.4 v9.4.0 v9.5.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants