YTMD/youtube-music
1
0
Fork 0
Code Issues 445 Pull requests 34 Projects Releases 87 Packages Wiki Activity Actions

chore(deps): bump hono from 4.9.6 to 4.9.7 #3879

Open
dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/hono-4.9.7 into master
pull from: dependabot/npm_and_yarn/hono-4.9.7
merge into: YTMD:master
Conversation 0 Commits 1 Files changed 2 +23 -23
dependabot[bot] commented 2025-09-12 21:35:13 +00:00 (Migrated from github.com)
Copy link

Bumps hono from 4.9.6 to 4.9.7.

Release notes

Sourced from hono's releases.

v4.9.7

Security

  • Fixed an issue in the bodyLimit middleware where the body size limit could be bypassed when both Content-Length and Transfer-Encoding headers were present. If you are using this middleware, please update immediately. Security Advisory

What's Changed

New Contributors

Full Changelog: https://github.com/honojs/hono/compare/v4.9.6...v4.9.7

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps [hono](https://github.com/honojs/hono) from 4.9.6 to 4.9.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/hono/releases">hono's releases</a>.</em></p> <blockquote> <h2>v4.9.7</h2> <h2>Security</h2> <ul> <li>Fixed an issue in the <code>bodyLimit</code> middleware where the body size limit could be bypassed when both <code>Content-Length</code> and <code>Transfer-Encoding</code> headers were present. If you are using this middleware, please update immediately. <a href="https://github.com/honojs/hono/security/advisories/GHSA-92vj-g62v-jqhh">Security Advisory</a></li> </ul> <h2>What's Changed</h2> <ul> <li>fix(client): Fix <code>parseResponse</code> not parsing json in react native by <a href="https://github.com/lr0pb"><code>@​lr0pb</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4399">honojs/hono#4399</a></li> <li>chore: add <code>.tool-versions</code> file by <a href="https://github.com/3w36zj6"><code>@​3w36zj6</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4397">honojs/hono#4397</a></li> <li>chore: update <code>bun install</code> commands to use <code>--frozen-lockfile</code> by <a href="https://github.com/3w36zj6"><code>@​3w36zj6</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4398">honojs/hono#4398</a></li> <li>test(jwk): Add tests of JWK token verification by <a href="https://github.com/buckett"><code>@​buckett</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4402">honojs/hono#4402</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lr0pb"><code>@​lr0pb</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4399">honojs/hono#4399</a></li> <li><a href="https://github.com/buckett"><code>@​buckett</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/hono/pull/4402">honojs/hono#4402</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.9.6...v4.9.7">https://github.com/honojs/hono/compare/v4.9.6...v4.9.7</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/hono/commit/5ece99500fbcdc1026ab7f458f65cbe9eab29a6b"><code>5ece995</code></a> 4.9.7</li> <li><a href="https://github.com/honojs/hono/commit/605c70560b52f13af10379f79b76717042fafe8d"><code>605c705</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/6792789ec06bd14c96ecdf38a368f7d7526e601a"><code>6792789</code></a> test(jwk): Add tests of JWK token verification (<a href="https://redirect.github.com/honojs/hono/issues/4402">#4402</a>)</li> <li><a href="https://github.com/honojs/hono/commit/2f489b3562cd0d29075062b2ea0648ab92b88727"><code>2f489b3</code></a> chore: update <code>bun install</code> commands to use <code>--frozen-lockfile</code> (<a href="https://redirect.github.com/honojs/hono/issues/4398">#4398</a>)</li> <li><a href="https://github.com/honojs/hono/commit/9b0a8f51ed15910b86cd2a6dd8f15b16b45e1c06"><code>9b0a8f5</code></a> chore: add <code>.tool-versions</code> file (<a href="https://redirect.github.com/honojs/hono/issues/4397">#4397</a>)</li> <li><a href="https://github.com/honojs/hono/commit/5b277d811cc655667683ae60141f739fa40b65e1"><code>5b277d8</code></a> fix(client): Fix <code>parseResponse</code> not parsing json in react native (<a href="https://redirect.github.com/honojs/hono/issues/4399">#4399</a>)</li> <li>See full diff in <a href="https://github.com/honojs/hono/compare/v4.9.6...v4.9.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hono&package-manager=npm_and_yarn&previous-version=4.9.6&new-version=4.9.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/th-ch/youtube-music/network/alerts). </details>
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/hono-4.9.7:dependabot/npm_and_yarn/hono-4.9.7
git switch dependabot/npm_and_yarn/hono-4.9.7

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch master
git merge --no-ff dependabot/npm_and_yarn/hono-4.9.7
git switch dependabot/npm_and_yarn/hono-4.9.7
git rebase master
git switch master
git merge --ff-only dependabot/npm_and_yarn/hono-4.9.7
git switch dependabot/npm_and_yarn/hono-4.9.7
git rebase master
git switch master
git merge --no-ff dependabot/npm_and_yarn/hono-4.9.7
git switch master
git merge --squash dependabot/npm_and_yarn/hono-4.9.7
git switch master
git merge --ff-only dependabot/npm_and_yarn/hono-4.9.7
git switch master
git merge dependabot/npm_and_yarn/hono-4.9.7
git push origin master
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
awaiting-reply

Awaiting reply

  
breaking changes

   
bug

Something isn't working

  
cannot-reproduce

Bug cannot be reproduced

  
dependencies

Pull requests that update a dependency file

  
documentation

   
duplicate

This issue or pull request already exists

  
electron-issue

It's an Electron or Electron related dependencies issue (not YTM-Desktop issue)

  
enhancement

New feature or request

  
fix-available

A fix to the issue is available in a new version

  
good first issue

Good for newcomers

  
help wanted

Extra attention is needed

  
invalid

This doesn't seem right

  
javascript

Pull requests that update javascript code

  
need more information

Need more information about the issue

  
need rebase

This plugin need rebase

  
official-youtube-music-issue

It's an YouTube's issue (not YTM-Desktop issue)

  
plugin request

An issue/discussion requesting for a new plugin or new functionality to an existing plugin.

  
question

Further information is requested

  
release

Release

  
security

   
stale

   
Status: blocked

There are something to do before this

  
typo

   
wontfix

This will not be worked on

  
ytmd-issue

An issue/discussion about ytm desktop, unrelated to th-ch/youtube-music

No labels
awaiting-reply
breaking changes
bug
cannot-reproduce
dependencies
documentation
duplicate
electron-issue
enhancement
fix-available
good first issue
help wanted
invalid
javascript
need more information
need rebase
official-youtube-music-issue
plugin request
question
release
security
stale
Status: blocked
typo
wontfix
ytmd-issue
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: YTMD/youtube-music#3879
No description provided.
Delete branch "dependabot/npm_and_yarn/hono-4.9.7"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?