fix(deps): update non-major dependencies - #2
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/non-major-dependencies
branch
from
August 21, 2026 07:44
2010afc to
80b7b09
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^1.19.14→^1.19.1722.19.17→22.20.1^4.12.19→^4.13.14.13.3(+1)20→20.20.2^4.22.2→^4.23.104.23.12(+1)^2.50.3→^2.55.112.55.19(+5)8.21.0→8.21.28.21.3Release Notes
honojs/node-server (@hono/node-server)
v1.19.17Compare Source
v1.19.15Compare Source
honojs/hono (hono)
v4.13.1Compare Source
v4.13.0Compare Source
Hono v4.13.0 is now available!
The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.
Performance improvements
This release includes a series of small optimizations: skipping unnecessary
Headersallocations, replacing regex tests withindexOf, allocating internal state lazily, and more.Here is
benchmarks/fetchcomparing v4.12 and v4.13 (ROUNDS=5 ./compare.sh, Bun 1.4.0, Apple Silicon — each measurement runs in a fresh process, and the variant order is reversed every round to avoid warm-up bias):ping—GET /query—GET /id/1?name=bunjson—GET /userbody—POST /jsonThe individual changes:
for..in#5118indexOf#5121Headerscreation when there are no headers to merge #5122tryDecodeURIComponent#5158#validatedDatalazily #5175In addition, the RegExpRouter rewrite described below makes route registration plus the first match roughly 20% faster.
Thanks @kibertoad for the contributions!
First-class QUERY method support
The QUERY method — a safe, idempotent method that carries a request body — is now a first-class citizen in Hono. You can define QUERY handlers with
app.query():Thanks @shellhaki!
QUERY support across built-in middleware
The built-in middleware has been updated to handle QUERY requests properly:
Cache Middleware
The Cache Middleware now caches QUERY responses. Following RFC 10008 Section 2.7, the cache key incorporates a SHA-256 digest of the request content and its representation metadata, so different query bodies are cached separately:
Note: To support this, the internal cache key format has changed for all methods, including GET. Cached entries are now stored under an internal URL of the form
/.hono/cache?__hono_cache_key=.... If you purge cache entries by URL outside of the middleware (e.g. callingcaches.delete()with the original request URL), you will need to update that logic. Existing cache entries stored with the old format will simply be re-fetched.ETag Middleware
The ETag Middleware now handles conditional requests for QUERY, returning
304 Not ModifiedwhenIf-None-Matchmatches.CORS Middleware
The CORS Middleware now includes QUERY in the default
Access-Control-Allow-Methods, which is nowGET, HEAD, PUT, POST, DELETE, PATCH, QUERY. If you specifyallowMethodsexplicitly, nothing changes for you.Thanks @usualoma and @Cherry!
Method Not Allowed Middleware
The new Method Not Allowed Middleware returns a
405 Method Not Allowedresponse with a properAllowheader when the request path matches a registered route but the method does not:You can customize the response with the
onMethodNotAllowedoption:Thanks @usualoma!
RegExpRouter throws
UnsupportedPathErrorat registration timeThe RegExpRouter now detects unsupported path combinations when routes are registered, instead of at the first matching request. This means misconfigured routes fail fast at startup rather than at runtime. As a bonus, registration plus the first match is roughly 20% faster.
Thanks @usualoma!
Other improvements
hono/utils/headershas been synced with the IANA HTTP Field Name Registry, adding newly registered fields such asAccept-Query. Thanks @akahoshi1421!realmoption for theWWW-Authenticatechallenge on401responses, and challenge values are properly escaped. Thanks @arhxam!useRefandRefObjectare now aligned with React 19. Note that this is a type-level change —RefObject<T>is now{ current: T }, so type a nullable ref asRefObject<T | null>, and passuseRef(undefined)instead ofuseRef(). Thanks @ashunar0!Vary: Accept-Encodingon negotiated responses. Thanks @arhxam!All changes
fetchby @yusukebe in #5113indexOfby @yusukebe in #5121tryDecodeURIComponentby @yusukebe in #5158envfield initializer by @kibertoad in #5174#validatedDatalazily by @kibertoad in #5175fetchby @yusukebe in #5184envfield initializer by @yusukebe in #5186Full Changelog: honojs/hono@v4.12.34...v4.13.0
Thank you to all contributors!
v4.12.34Compare Source
v4.12.33Compare Source
What's Changed
@hono/node-serverin #5167Full Changelog: honojs/hono@v4.12.32...v4.12.33
v4.12.32Compare Source
What's Changed
Object.create(null)when parsing query, headers, and params in #5161Full Changelog: honojs/hono@v4.12.31...v4.12.32
v4.12.31Compare Source
v4.12.30Compare Source
What's Changed
Full Changelog: honojs/hono@v4.12.29...v4.12.30
v4.12.29Compare Source
What's Changed
compatibilityDateby @yusukebe in #5100*as a match by @yusukebe in #5084New Contributors
Full Changelog: honojs/hono@v4.12.28...v4.12.29
v4.12.28Compare Source
What's Changed
*.tsbuildinfoby @yusukebe in #5066devDependenciesby @yusukebe in #5085New Contributors
Full Changelog: honojs/hono@v4.12.27...v4.12.28
actions/node-versions (node)
v20.20.2: 20.20.2Compare Source
Node.js 20.20.2
v20.20.1: 20.20.1Compare Source
Node.js 20.20.1
v20.20.0: 20.20.0Compare Source
Node.js 20.20.0
v20.19.6: 20.19.6Compare Source
Node.js 20.19.6
v20.19.5: 20.19.5Compare Source
Node.js 20.19.5
v20.19.4: 20.19.4Compare Source
Node.js 20.19.4
v20.19.3: 20.19.3Compare Source
Node.js 20.19.3
v20.19.2: 20.19.2Compare Source
Node.js 20.19.2
v20.19.1: 20.19.1Compare Source
Node.js 20.19.1
v20.19.0: 20.19.0Compare Source
Node.js 20.19.0
v20.18.3: 20.18.3Compare Source
Node.js 20.18.3
v20.18.2: 20.18.2Compare Source
Node.js 20.18.2
v20.18.1: 20.18.1Compare Source
Node.js 20.18.1
v20.18.0: 20.18.0Compare Source
Node.js 20.18.0
v20.17.0: 20.17.0Compare Source
Node.js 20.17.0
v20.16.0: 20.16.0Compare Source
Node.js 20.16.0
v20.15.1: 20.15.1Compare Source
Node.js 20.15.1
v20.15.0: 20.15.0Compare Source
Node.js 20.15.0
v20.14.0: 20.14.0Compare Source
Node.js 20.14.0
v20.13.1: 20.13.1Compare Source
Node.js 20.13.1
v20.13.0: 20.13.0Compare Source
Node.js 20.13.0
v20.12.2: 20.12.2Compare Source
Node.js 20.12.2
v20.12.1: 20.12.1Compare Source
Node.js 20.12.1
v20.12.0: 20.12.0Compare Source
Node.js 20.12.0
v20.11.1: 20.11.1Compare Source
Node.js 20.11.1
v20.11.0: 20.11.0Compare Source
Node.js 20.11.0
v20.10.0: 20.10.0Compare Source
Node.js 20.10.0
v20.9.0: 20.9.0Compare Source
Node.js 20.9.0
v20.8.1: 20.8.1Compare Source
Node.js 20.8.1
v20.8.0: 20.8.0Compare Source
Node.js 20.8.0
v20.7.0: 20.7.0Compare Source
Node.js 20.7.0
v20.6.1: 20.6.1Compare Source
Node.js 20.6.1
v20.6.0: 20.6.0Compare Source
Node.js 20.6.0
v20.5.1: 20.5.1Compare Source
Node.js 20.5.1
v20.5.0: 20.5.0Compare Source
Node.js 20.5.0
v20.4.0: 20.4.0Compare Source
Node.js 20.4.0
v20.3.1: 20.3.1Compare Source
Node.js 20.3.1
v20.3.0: 20.3.0Compare Source
Node.js 20.3.0
v20.2.0: 20.2.0Compare Source
Node.js 20.2.0
v20.1.0: 20.1.0Compare Source
Node.js 20.1.0
privatenumber/tsx (tsx)
v4.23.10Compare Source
Bug Fixes
This release is also available on:
v4.23.9Compare Source
Bug Fixes
This release is also available on:
v4.23.8Compare Source
Bug Fixes
This release is also available on:
v4.23.7Compare Source
Bug Fixes
This release is also available on:
v4.23.6Compare Source
v4.23.5Compare Source
v4.23.4Compare Source
Bug Fixes
This release is also available on:
v4.23.3Compare Source
Bug Fixes
This release is also available on:
v4.23.2Compare Source
v4.23.1Compare Source
Bug Fixes
Performance Improvements
This release is also available on:
v4.23.0Compare Source
Bug Fixes
Features
This release is also available on:
v4.22.5Compare Source
Bug Fixes
This release is also available on:
v4.22.4Compare Source
Bug Fixes
This release is also available on:
v4.22.3Compare Source
Bug Fixes
This release is also available on:
wevm/viem (viem)
v2.55.11Compare Source
Patch Changes
#4949
f05ae7eff8852cd4b4b117a5c5d77140bd26a8f6Thanks @grandpig! - FixedwithRetryhanging whenshouldRetryor the retry delay callback throws.#4955
87067c2fc2487967872582c1a0739b419612d5eeThanks @ShenWang-PiP! - Updated thestory(1514) andstoryAeneid(1315) chains for the Story → Data rebrand: renamed to "Data Network" / "Data Network Aeneid", set the native currency to $DATA, the RPC URLs todatarpc.io, and the block explorer todatanetscan.io. Chain IDs and thestory/storyAeneidexports are unchanged.#4958
3fe8f4bef7688d4e76d112cf89846d66d272d17bThanks @struong! - Refreshed the experimental Tempo Earn interfaces and Zone router actions against the latest reviewed contract source.#4956
3304d2ec8efdf4704cc1978c3beb3d7bdfb30016Thanks @struong! - Respect explicit client multicall configuration when fetching Tempo token metadata.#4961
fca3ff599e16172a86a9d1f6ce7057ea91246056Thanks @RezaRahemtola! - Rejected nonstandarduintandintaliases invalidateTypedDatato prevent noncanonical EIP-712 hashes.v2.55.10Compare Source
Patch Changes
#4873
ccdf9a02c14d569bfde9cd1840bea59548f798cfThanks @decofe! - AddedAddresses.validatorV2for the Tempo Validator Config V2 precompile.#4856
109ef0f8af627131dfb055e99bf43ec06625199aThanks @ibruno! - Updated Polygon Amoy's deprecated default RPC URL.#4900
3b78e9b78f8052da0ed20be6264c35e39e7f62f9Thanks @cristianizzo! - FixedformatUserOperationRequestencoding an EIP-7702 authorizationyParityof0as a 32-byte zero value instead of0x00.#4846
0e6c671284aa9530142ccb3b17f697807b423890Thanks @m4ttw4n! - Updated EDU Chain and EDU Chain Testnet RPC URLs, block explorer URLs, and added multicall3 contract to EDU Chain mainnet#4861
31f47493a18f9699d0c2d3d78ad09204a870c8fdThanks @wriches! - Updated 0G Testnet native currency to0Gand 0G explorer names, per ethereum-lists/chains.#4862
e5a4ac4e96859f3aaad1eab8dde67ef584917b22Thanks @Kropiunig! - FixedestimateFeesPerGas(andfillTransaction) rounding the base fee multiplier up viaMath.ceil, which overshot the intended value for multipliers such as1.09(applied as1.1) due to floating-point error. The multiplier is now recovered withMath.round.#4903
a20fc674487d32640c1ea5b1422e2fddc53f7723Thanks @nishant-uxs! - Fixed missing{"type":"module"}marker in the emitted_types/folder so declaration files resolve correctly under TypeScriptnodenext.v2.55.8Compare Source
Patch Changes
#4890
3078687aabea3064fc868f395114f41815895685Thanks @parvahuja! -viem/tempo: Fixed gas estimation for sponsored access key transactions prepared without gas.#4891
c067f1a0c540afb54e27864b601064fb1c6e5249Thanks @jxom! -viem/tempo: Added Zone E metadata, address registries, and Portal and Messenger contracts.#4891
c067f1a0c540afb54e27864b601064fb1c6e5249Thanks @jxom! - Breaking(viem/tempo): RemovedportalAddresses.v2.55.7Compare Source
Patch Changes
#4881
34c30a01012e326682a1ef365ee6599b2510e9daThanks @jxom! -tempo/viem: Added earn actions#4888
944a011e2edabfc4aa5ed59b8ee201486e0dc74bThanks @jxom! - FixedfromBlobsmisreading a0x80data byte at a blob boundary as the terminator.#4887
b693174dde06dd322b6f88508fb37231d38b620bThanks @jxom! - FixedbytesToBigIntandbytesToNumber(andfromByteswithto: "bigint" | "number") scaling the decoded value when asizelarger than the input byte length was provided.#4880
0095510ba5051931eb89d05c8a9b33b3a65ff356Thanks @tmm! - Fixed Tempo access key transactions failing by preserving the gas limit covered by fee payer signatures returned frometh_fillTransaction.#4884
14a2537066f353092d4b6cc77941c018fde8f6c8Thanks @jxom! - Replacedzone.getZoneInfo.sequencerwithsequencers.v2.55.5Compare Source
Patch Changes
#4865
d993c2c331f4bedb76ecb78250c7858603bbdd62Thanks @jxom! - Batched compatible concurrentmulticallactions into one aggregate call.#4863
b6f7349221d4d3b51e4094634fa2839b5a448c24Thanks @jxom! -viem/tempo: Updated multisig implementation.#4868
cb7d66f966e9eea501b075eeb0f14a7ddd0c35fcThanks @jsutaria! - EnsuredprepareTransactionRequestfetched Tempo fee payer signatures when the caller'sparametersoption omittedfees/gas.#4866
5ee7eb12b248a1e72f37196d1fbb25d38283723fThanks @jsutaria! - EnsuredprepareTransactionRequestfetched Tempo fee payer signatures for fully specified transactions.v2.55.4Compare Source
Patch Changes
#4848
dceac56692bb2db5b710908321ab722195de79a2Thanks @jxom! - Updated Ethereum's default RPC URL.#4851
2b1f8deeac868a3480e1ede7f6fd6066995f36a1Thanks @nezouse! - AddblockTimeto Robinhood chain definition#4858
1de66e727e5f328d111cf41bca29731a5af4afb4Thanks @decofe! - Defaulted omittedvalidAftervalues to random past timestamps for Tempo expiring-nonce transactions, preventing otherwise-identical transactions from sharing a nonce hash.#4852
99b14341b807767cd783863ac645331f4b1cd708Thanks @nezouse! - AddblockTimeto xLayer chain definitionv2.55.2Compare Source
Patch Changes
3f7f0f6839738de70e2f836b475d589c6f1c68b4Thanks @Slokh! - Added Tempo Zone helpers for preparing encrypted deposit recipients and withdrawal requests with normalized details, maximum fees, and distinct callback and Zone transaction gas limits.v2.55.1Compare Source
Patch Changes
#4828
765e19b99b97567ef7b3446bc196353cdaa281a3Thanks @jxom! - Added Tempo zone encryption-key and deposit-status waiting actions, defaulted bounceback recipients to accounts, and adapted receipt polling for private Zone RPCs.#4823
c31e0bd376bf41250c1833cd741e9a93bfe75398Thanks @jxom! - AddedblockHashandrequireCanonicalparameters toverifyHash,verifyMessage,verifyTypedData, andverifySiweMessage, allowing onchain signature verification to be pinned to a specific block via EIP-1898.v2.55.0Compare Source
Minor Changes
#4817
2825f37bd4d9429a312dad378410d63c67feb0f8Thanks @davidperk! - AddeddepositNonceanddepositReceiptVersionto OP Stack transaction receipts.#4822
0ef1b5d84abc6f03c4f7573ca5bab851593ccb2fThanks @tmm! - AddedfilterChainsutility for filtering chain definitions by structured criteria.Patch Changes
#4809
c93d355d68f2ac98d5f139c963564651576793deThanks @defiQUG! - Added Defi Oracle Meta Mainnet chain.#4818
48324f72c057e5e52545e4672408af6bc9eeb60aThanks @cctdaniel! - Added Robinhood Chain and Robinhood Chain Testnet chains.v2.54.6Compare Source
Patch Changes
f1ac4480d0c1c6f29bf709f116068e903643ecadThanks @jxom! -viem/tempo: Supported calling token `.caConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.