Skip to content

feat(deps): bump hono from 4.12.12 to 4.12.14 - #20340

Merged
JPeer264 merged 1 commit into
developfrom
dependabot/npm_and_yarn/hono-4.12.14
Apr 29, 2026
Merged

feat(deps): bump hono from 4.12.12 to 4.12.14#20340
JPeer264 merged 1 commit into
developfrom
dependabot/npm_and_yarn/hono-4.12.14

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubApr 16, 2026

Copy link
Copy Markdown
Contributor

Bumps hono from 4.12.12 to 4.12.14.

Release notes

Sourced from hono's releases.

v4.12.14

Security fixes

This release includes fixes for the following security issues:

Improper handling of JSX attribute names in hono/jsx SSR

Affects: hono/jsx. Fixes missing validation of JSX attribute names during server-side rendering, which could allow malformed attribute keys to corrupt the generated HTML output and inject unintended attributes or elements. GHSA-458j-xx4x-4375

Other changes

  • fix(aws-lambda): handle invalid header names in request processing (#4883) fa2c74fe

v4.12.13

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.12.12...v4.12.13

Commits

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 16, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/hono-4.12.14 branch from 58c1cc8 to 75a7d9eCompareApril 16, 2026 16:46
@dependabotdependabotBot changed the title feat(deps): Bump hono from 4.12.12 to 4.12.14feat(deps): bump hono from 4.12.12 to 4.12.14Apr 21, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/hono-4.12.14 branch 4 times, most recently from aa7cba5 to e8bb6c8CompareApril 23, 2026 13:44
Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.14.
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.12...v4.12.14)
---
updated-dependencies:
- dependency-name: hono
dependency-version: 4.12.14
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/hono-4.12.14 branch from e8bb6c8 to 4ab2645CompareApril 29, 2026 14:19
@dependabot
dependabotBot requested a review from a team as a code ownerApril 29, 2026 14:19
@JPeer264
JPeer264 merged commit d58f82a into developApr 29, 2026
235 checks passed
@JPeer264
JPeer264 deleted the dependabot/npm_and_yarn/hono-4.12.14 branch April 29, 2026 16:37
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@JPeer264