豆豆友情提示:这是一个非官方 GitHub 代理镜像,主要用于网络测试或访问加速。请勿在此进行登录、注册或处理任何敏感信息。进行这些操作请务必访问官方网站 github.com。 Raw 内容也通过此代理提供。
Skip to content
This repository was archived by the owner on Apr 16, 2026. It is now read-only.

Commit 027a548

Browse files
dependabot[bot]wolfib
authored andcommitted
chore(deps): bump hono from 4.12.0 to 4.12.2 (ChromeDevTools#1044)
Bumps [hono](https://github.com/honojs/hono) from 4.12.0 to 4.12.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/hono/releases">hono's releases</a>.</em></p> <blockquote> <h2>v4.12.2</h2> <h2>Security fix</h2> <p>Fixed incorrect handling of <code>X-Forwarded-For</code> in the AWS Lambda adapter behind ALB that could allow IP-based access control bypass. The detail: <a href="https://github.com/honojs/hono/security/advisories/GHSA-xh87-mx6m-69f3">https://github.com/honojs/hono/security/advisories/GHSA-xh87-mx6m-69f3</a></p> <p>Thanks <a href="https://github.com/EdamAme-x"><code>@​EdamAme-x</code></a></p> <h2>What's Changed</h2> <ul> <li>fix(context): revert PR <a href="https://redirect.github.com/honojs/hono/issues/4707">#4707</a> by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4757">honojs/hono#4757</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.12.1...v4.12.2">https://github.com/honojs/hono/compare/v4.12.1...v4.12.2</a></p> <h2>v4.12.1</h2> <h2>What's Changed</h2> <ul> <li>fix(client): export <code>ApplyGlobalResponse</code> from <code>hono/client</code> by <a href="https://github.com/sushichan044"><code>@​sushichan044</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4743">honojs/hono#4743</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.12.0...v4.12.1">https://github.com/honojs/hono/compare/v4.12.0...v4.12.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/hono/commit/df97e5f49771a2a219770515859b9cc1d80abab0"><code>df97e5f</code></a> 4.12.2</li> <li><a href="https://github.com/honojs/hono/commit/212c64f2c262c60585e4d80d547fb154fd8b9a16"><code>212c64f</code></a> fix(context): revert PR <a href="https://redirect.github.com/honojs/hono/issues/4707">#4707</a> (<a href="https://redirect.github.com/honojs/hono/issues/4757">#4757</a>)</li> <li><a href="https://github.com/honojs/hono/commit/5cc8f8f79eb600a1d98be117c2c7c2de3e0d400e"><code>5cc8f8f</code></a> ci: apply automated fixes</li> <li><a href="https://github.com/honojs/hono/commit/41adbf56e252c04611f8972364ac0887ae07a4c7"><code>41adbf5</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/2de30d7c2a25885c5df03c454582c305a34da771"><code>2de30d7</code></a> 4.12.1</li> <li><a href="https://github.com/honojs/hono/commit/91ef235f9fd34266dbb473a4c43d999465be3c87"><code>91ef235</code></a> fix(client): export <code>ApplyGlobalResponse</code> from <code>hono/client</code> (<a href="https://redirect.github.com/honojs/hono/issues/4743">#4743</a>)</li> <li>See full diff in <a href="https://github.com/honojs/hono/compare/v4.12.0...v4.12.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hono&package-manager=npm_and_yarn&previous-version=4.12.0&new-version=4.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ChromeDevTools/chrome-devtools-mcp/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 59faad9 commit 027a548

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

package-lock.json

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)