what stackpulse tracks
Hono releases from GitHub
StackPulse watches Hono release notes and keeps the original source link close to every summary.
#stacks/
loading releases…
releases
breaking
security
deprecated
migrations
Ultrafast web framework for the Edges StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.
what stackpulse tracks
StackPulse watches Hono release notes and keeps the original source link close to every summary.
upgrade risk
Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.
migration notes
Migration steps and recommended actions are only shown when the upstream release notes support them.
This release focuses on bug fixes and minor improvements, including corrections to secure headers, JSX rendering, ETag handling, and cookie serialization. It also introduces a new feature for W3C Permissions-Policy directives.
Users relying on secure headers, JSX rendering, ETag handling, or cookie serialization may be affected by these fixes.
This release includes bug fixes related to trie-router slash counting, stream writer lock re-acquisition, and ETag handling for unsafe methods or error responses.
Users relying on trie-router, stream utilities, or ETag handling may be affected by these fixes.
Update to v4.13.1 to benefit from the bug fixes.
This release focuses on performance optimizations, introducing first-class support for the HTTP QUERY method, and adding a new Method Not Allowed middleware. Performance improvements include skipping unnecessary `Headers` allocations and replacing regex tests with `indexOf`, resulting in up to 1.25x speedup on common routes.
Developers using Hono for routing and caching will benefit from performance improvements and new QUERY method support.
Update to v4.13.0 to take advantage of performance improvements and new features.
This release addresses several critical security vulnerabilities affecting SSR, CORS, language middleware, and proxy functionality. The fixes prevent cross-user data disclosure, ReDoS attacks, and algorithmic complexity DoS vulnerabilities.
Users of `hono/jsx` for SSR, `hono/cors`, `hono/language`, or `hono/proxy` are affected by security vulnerabilities.
Upgrade to v4.12.34 immediately if using `hono/jsx` for SSR, `hono/cors`, `hono/language`, or `hono/proxy`.
This release relaxes cookie name validation when parsing Cookie headers and replaces undici with global fetch. It also includes fixes for JSX handling with useSyncExternalStore.
Users relying on strict cookie name validation or using undici may be affected.
Update to v4.12.33 to benefit from relaxed cookie parsing and global fetch adoption.
This release focuses on bug fixes and improvements, particularly for AWS Lambda, SSE, and Cloudflare Workers integrations. It also enhances security headers and query parsing.
Users leveraging AWS Lambda, SSE, or Cloudflare Workers integrations may be affected by the fixes and improvements.
This release focuses on bug fixes and minor improvements, including fixes for multipart boundary mismatches, SSE retry field handling, and formData caching in `parseBody()`.
Users relying on multipart requests, SSE retry functionality, or `parseBody()` caching may be affected.
Update to v4.12.31 to benefit from bug fixes and improvements.
This release includes several bug fixes and maintenance updates, such as deduplicating Cache-Control directives case-insensitively and preventing compression of 206 Partial Content responses.
Developers using Hono's caching, compression, and client URL parameter handling may be affected by these fixes.
Update to v4.12.30 to benefit from the latest bug fixes.
This release focuses on bug fixes and improvements across various modules, including client headers, Lambda Edge handling, and trie-router matching.
Developers using Hono's client, Lambda Edge, or trie-router functionality may benefit from the bug fixes and improvements.
This release focuses on bug fixes and minor improvements, including fixes for static content handling, Content-Type normalization, and AWS Lambda event detection. Several contributors made their first contributions.
Users relying on static content serving, Content-Type header matching, or AWS Lambda V2 event detection may be affected.
Update to this version to benefit from bug fixes.
This release addresses several critical security issues affecting `hono/jsx`, `hono/css`, and `hono/aws-lambda` adapters, fixing context isolation, XSS vulnerabilities, and header handling problems.
Users of `hono/jsx`, `hono/jsx-renderer`, `hono/css` (`cx()`), or the `hono/aws-lambda` API Gateway v1 / VPC Lattice adapters are affected.
Upgrade to version v4.12.27 to mitigate the security vulnerabilities.
This release focuses on minor fixes and internal improvements, including updates to satisfy Deno lib types for Content-Length body encoding and replacing external dependencies with Bun native APIs in the build script.
Developers using Hono with Deno or Bun may benefit from the updates.
This release focuses on addressing several critical security vulnerabilities across various middleware and adapters, including CORS, body limit, static file serving, and AWS Lambda integrations.
Users of Hono's CORS, body limit, static file serving, and AWS Lambda integrations are affected by these security vulnerabilities.
Upgrade to v4.12.25 immediately to mitigate the security risks.
This release focuses on minor fixes, refactoring, and documentation updates. Key changes include improvements to IP address handling, middleware testing, and cleanup of configuration files.
Developers using IP address utilities or middleware timing functionality may be affected by the fixes and improvements.
Update to the latest version to benefit from the fixes and improvements.
This release includes fixes for path normalization in static file serving and IP address compression, along with new features like exporting the Context class publicly and adding a contentTypeFilter option for compression.
Developers using static file serving or compression features may be affected by the fixes and new options.
Update to v4.12.23 to benefit from the latest fixes and features.
This release includes updates to dependencies, fixes for MIME type handling, compression behavior, and WebSocket subprotocol negotiation, along with the addition of MessagePack as a compressible content type.
Developers using Hono for handling MIME types, compression, or WebSocket subprotocols may be affected by the fixes and new features.
Update to v4.12.22 to benefit from the latest fixes and features.
This release addresses several critical security vulnerabilities affecting `app.mount()`, `hono/ip-restriction`, `hono/cookie`, and `hono/jwt`/`hono/jwk`.
Users who use `app.mount()`, `hono/ip-restriction`, `hono/cookie`, or `hono/jwt`/`hono/jwk` are affected.
Upgrade to this version to mitigate security vulnerabilities.