Skip to content

chore(deps): bump @hono/node-server from 2.0.5 to 2.0.10 in /agent - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent/hono/node-server-2.0.8
Closed

chore(deps): bump @hono/node-server from 2.0.5 to 2.0.10 in /agent#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent/hono/node-server-2.0.8

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 7, 2026

Copy link
Copy Markdown

Bumps @hono/node-server from 2.0.5 to 2.0.10.

Release notes

Sourced from @​hono/node-server's releases.

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg


Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: honojs/node-server@v2.0.7...v2.0.8

v2.0.7

What's Changed

Full Changelog: honojs/node-server@v2.0.6...v2.0.7

v2.0.6

What's Changed

Full Changelog: honojs/node-server@v2.0.5...v2.0.6

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026
@vercel

vercelBot commented Jul 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
earlynotwrongReadyReadyPreview, CommentJul 18, 2026 8:55am

@socket-security

socket-securityBot commented Jul 7, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

DiffPackageSupply Chain
Security
VulnerabilityQualityMaintenanceLicense
Updatednpm/​@​hono/​node-server@​2.0.5 ⏵ 2.0.1098-110010096+1100

View full report

@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/agent/hono/node-server-2.0.8 branch from da2c9a3 to 6fe0552CompareJuly 14, 2026 17:08
thisyearnofear pushed a commit that referenced this pull request Jul 16, 2026
Seven improvements to surface all chains, capabilities, and connect
the conviction side to the trading side:
#1 Multi-chain anchor status panel (src/components/recent-anchors.tsx)
- Replaced flat history list with a 3-column panel: Casper, Mantle, Aleo
- Each chain gets equal visual weight with its own colored border/bg
- Shows latest anchor status, tx hash, and explorer link per chain
- Fetches from both /conviction (anchorResults) and /casper/anchors
- Rolling history list below, grouped by chain with color-coded labels
#2 Aleo added to dashboard narrative
- Aleo now appears as the third column in the anchor panel
- Role label: "Privacy-preserving thesis proof"
- No longer buried in /analyzer's Strategist tab only
#3 Chain legend
- One-line legend under the 3-column panel:
"Casper = public registry · Mantle = EVM mirror · Aleo = privacy proof"
- Tells a judge why there are three chains, not just that there are three
#4 Conviction-to-trade flow (src/app/agent/page.tsx)
- Held positions now show the conviction score that motivated entry
- "scored 72" annotation in signal color, with rationale on hover
- Conviction Ledger card title shows "positions ← signals" hint
- The connection between scoring and trading is now visible
#5 Shared conviction-core framework surfaced
- Row 0 orientation text now mentions conviction-core:
"The same conviction-core framework that scores the agent's trades
also powers the wallet analyzer"
- Links to /analyzer to connect the two sides of the product
#6 MCP/CAP story reframed (ReputationApiCard)
- Renamed from "Agent Reputation API" to "Agent-to-Agent Reputation"
- Badge now shows "MCP · x402 · CROO CAP" (all three protocols)
- Description rewritten to lead with the unique capability:
"Other AI agents query this agent's verifiable track record over
Model Context Protocol, paying per call through x402 micropayments
on Casper. The agent also advertises reputation services on the
CROO network, settled in USDC on Base — agent-to-agent commerce,
no human in the loop."
#7 Cycle timeline strip
- Horizontal strip in Row 0 showing the 6 pipeline steps with checkmarks:
"Cycle 127: ✓ data → ✓ score → ✓ manage → ✓ execute → ✓ anchor → ✓ narrate"
- Shows "next in Xm" countdown to the next cycle
- Proves the agent is a complete autonomous loop, not just a trader
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Bumps [@hono/node-server](https://github.com/honojs/node-server) from 2.0.5 to 2.0.10.
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.5...v2.0.10)
---
updated-dependencies:
- dependency-name: "@hono/node-server"
dependency-version: 2.0.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot changed the title chore(deps): bump @hono/node-server from 2.0.5 to 2.0.8 in /agentchore(deps): bump @hono/node-server from 2.0.5 to 2.0.10 in /agentJul 18, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/agent/hono/node-server-2.0.8 branch from 6fe0552 to 3098d17CompareJuly 18, 2026 08:51
@dependabot@github

dependabotBot commented on behalf of githubJul 21, 2026

Copy link
Copy Markdown
Author

Superseded by #24.

@dependabotdependabotBot closed this Jul 21, 2026
@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/agent/hono/node-server-2.0.8 branch July 21, 2026 09:45
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants