Skip to content

chore(deps): update dependency @hono/node-server to v2.1.5 - #3019

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/hono-node-server-2.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/hono-node-server-2.x

Conversation

@renovate

@renovate renovate Bot commented Sep 11, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@hono/node-server 2.1.0 → 2.1.5 age confidence

Release Notes

honojs/node-server (@​hono/node-server)

v2.1.5

Compare Source

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.1.4...v2.1.5

v2.1.4

Compare Source

What's Changed

Full Changelog: honojs/node-server@v2.1.3...v2.1.4

v2.1.3

Compare Source

Security fixes

serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

Affects: @hono/node-server/serve-static. Fixes serveStatic decoding an already-decoded path, where a crafted request could be routed as one path and served as another, skipping middleware mounted on a static prefix. GHSA-rmxm-3fg6-px4f

serveStatic now rejects request paths that still contain % after decoding. To serve files whose names contain a literal %, set allowPercentInPath: true.

The same fix ships in hono v4.13.11.

v2.1.2

Compare Source

What's Changed

Full Changelog: honojs/node-server@v2.1.1...v2.1.2

v2.1.1

Compare Source

What's Changed

Full Changelog: honojs/node-server@v2.1.0...v2.1.1


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added area: dependencies Pull requests that update a dependency file dependencies Pull requests that update a dependency file status: ready Ready for review labels Sep 11, 2026
@renovate
renovate Bot enabled auto-merge (squash) September 11, 2026 00:16
@vercel

vercel Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
cloud Ready Ready Preview Oct 15, 2026 9:18am UTC
showcase Ready Ready Preview Oct 15, 2026 9:18am UTC
tambo-docs Ready Ready Preview Oct 15, 2026 9:18am UTC

Request Review

@codecov

codecov Bot commented Oct 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from 623bbc3 to d29e09c Compare October 8, 2026 20:20
@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from d29e09c to 9d9a115 Compare October 8, 2026 22:06
@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from 9d9a115 to 8f61fb4 Compare October 8, 2026 22:23
@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from 8f61fb4 to 306e889 Compare October 9, 2026 16:12
@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from 306e889 to 52f7ed7 Compare October 10, 2026 08:51
@renovate renovate Bot changed the title chore(deps): update dependency @hono/node-server to v2.1.3 chore(deps): update dependency @hono/node-server to v2.1.4 Oct 10, 2026
@renovate
renovate Bot force-pushed the renovate/hono-node-server-2.x branch from 52f7ed7 to b378837 Compare October 15, 2026 09:16
@renovate renovate Bot changed the title chore(deps): update dependency @hono/node-server to v2.1.4 chore(deps): update dependency @hono/node-server to v2.1.5 Oct 15, 2026

This branch was successfully deployed

3 active deployments
Preview – cloud — b378837d Deployed Oct 15, 2026 by vercel[bot]
Preview – tambo-docs — b378837d Deployed Oct 15, 2026 by vercel[bot]
Preview – showcase — b378837d Deployed Oct 15, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: dependencies Pull requests that update a dependency file dependencies Pull requests that update a dependency file status: ready Ready for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants