chore(ui): update dependency hono to v4.13.7 [security]

2026-10-04 10:14:20 +00:00 · 2026-10-03 23:11:53 +00:00
1 changed files with 4 additions and 4 deletions
@@ -1,6 +1,3 @@
-# pnpm 11+ workspace config. .npmrc is auth/registry only; everything else lives here.
-# Reference: https://pnpm.io/supply-chain-security
-
 packages: []

 # Refuse to install on Node/pnpm outside the `engines` block in package.json.
@@ -29,7 +26,7 @@ overrides:
  # Language middleware algorithmic DoS, Proxy Helper keeping `Connection` headers.
  # Node adapter 1.19.17 fixes serve-static path traversal via `%5C` on Windows
  # (1.19.15 was published without provenance and trips `trustPolicy: no-downgrade`).
-  "hono": "4.12.34"
+  "hono": "4.13.7"
  "@hono/node-server": "1.19.17"
  "@isaacs/brace-expansion": "5.0.1"
  "fast-xml-parser": "5.8.0"
@@ -157,3 +154,6 @@ trustPolicyExclude:

 # Block transitive dependencies from using exotic specifiers (git URLs, tarballs).
 blockExoticSubdeps: true
+minimumReleaseAgeExclude:
+  # Renovate security update: hono@4.13.7
+  - hono@4.13.7