Skip to content

chore(deps): bump hono to 4.13.13 - #60022

Merged
rekram1-node merged 1 commit into
devfrom
bump-hono
Oct 28, 2026
Merged

rekram1-node merged 1 commit into
devfrom
bump-hono

Conversation

@rekram1-node

Copy link
Copy Markdown
Collaborator

I bumped hono from 4.10.7 to 4.13.13 in the root workspaces.catalog. packages/function (the API and share workers) is the only package that uses it, and nothing else pins hono or any @hono/* package. The lockfile change is just the hono entry.

I went through the release notes from 4.10.8 to 4.13.13. Nothing changes the APIs these workers use (get/post/delete/all routing, c.text, c.json, c.html, c.req.header, c.req.json, c.req.url). The c.json fast path added in 4.12.0 was reverted in 4.12.2. The hono/<adapter> imports that 4.13.10 deprecated aren't used here.

Verification

  • bun install --frozen-lockfile and bun install --minimum-release-age=604800: no changes
  • bun check --no-script in packages/function: 1 error, the existing missing bun:test types error in test/github.test.ts. It's the same on origin/dev.
  • bun test in packages/function: 7 pass, 0 fail
  • I called app.fetch on both workers with 15 requests (every route, plus unknown paths, HEAD, OPTIONS, a missing or invalid Authorization header and an invalid JSON body), once on 4.10.7 and once on 4.13.13. Status codes, headers and bodies were identical.
  • bunx wrangler dev --local for src/api.ts and src/share.ts, then curl against each route: same statuses and bodies as above (200/401/403/404 on the API worker, 200/200/200/410 on the share worker)

@opencodejr opencodejr Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The bump looks sound. Only packages/function (the API and share workers) depends on hono. On the base (4.10.7) and with this PR (4.13.13), I sent the same requests through app.fetch to every route on both workers, plus unknown paths and missing or invalid auth. Statuses, content types and bodies were identical. bun test passes (7/7), and the only type error is the missing bun:test types in a test file this PR doesn't touch.

The public API is unchanged: this is an internal dependency of private workers.

@rekram1-node
rekram1-node merged commit 76243df into dev Oct 28, 2026
21 checks passed
@rekram1-node
rekram1-node deleted the bump-hono branch October 28, 2026 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant