Skip to content

chore(deps): bump hono from 4.12.30 to 4.13.0 - #1954

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/hono-4.12.31
Open

chore(deps): bump hono from 4.12.30 to 4.13.0#1954
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/hono-4.12.31

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps hono from 4.12.30 to 4.13.0.

Release notes

Sourced from hono's releases.

v4.13.0

Hono v4.13.0 is now available!

The highlight of this release is performance: a batch of low-level optimizations makes the core request/response path significantly faster — up to 1.25x on common routes in our benchmark. This release also adds first-class support for the HTTP QUERY method, defined in RFC 10008, a new Method Not Allowed middleware, and more.

Performance improvements

This release includes a series of small optimizations: skipping unnecessary Headers allocations, replacing regex tests with indexOf, allocating internal state lazily, and more.

Here is benchmarks/fetch comparing v4.12 and v4.13 (ROUNDS=5 ./compare.sh, Bun 1.4.0, Apple Silicon — each measurement runs in a fresh process, and the variant order is reversed every round to avoid warm-up bias):

Benchmark v4.12 v4.13 Speedup
pingGET / 165.83 ns 163.99 ns 1.01x
queryGET /id/1?name=bun 674.40 ns 616.99 ns 1.09x
jsonGET /user 528.99 ns 422.44 ns 1.25x
bodyPOST /json 1.16 µs 1.00 µs 1.15x

The individual changes:

In addition, the RegExpRouter rewrite described below makes route registration plus the first match roughly 20% faster.

Thanks @​kibertoad for the contributions!

First-class QUERY method support

The QUERY method — a safe, idempotent method that carries a request body — is now a first-class citizen in Hono. You can define QUERY handlers with app.query():

const app = new Hono()
app.query('/search', async (c) => {
const conditions = await c.req.json()
return c.json(await search(conditions))
})

Thanks @​shellhaki!

QUERY support across built-in middleware

The built-in middleware has been updated to handle QUERY requests properly:

... (truncated)

Commits
  • 192768f 4.13.0
  • b0c2d90 Merge pull request #5154 from honojs/next
  • 8f07028 fix(compress): set Vary: Accept-Encoding on negotiated responses (#5137)
  • 8a0b18f feat(reg-exp-router): throw UnsupportedPathError during route registration (#...
  • 3feb355 fix(jsx): allow a function component to return an array (#5179)
  • 5d911d2 feat(utils/headers): add HTTP fields newly registered with IANA (#5153)
  • 30277ae feat(jwt,jwk): add a configurable WWW-Authenticate realm (#5141)
  • 1f707c5 feat(middleware): add method-not-allowed middleware (#5132)
  • 2df0b47 feat(jsx): add React-compatible overloads to useRef (#5063)
  • 3bc96ba feat(cache): add first-class support for QUERY requests (#5119)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Jul 22, 2026
@vercel

vercel Bot commented Jul 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
kysely Skipped Skipped Aug 5, 2026 7:46am

Request Review

@pkg-pr-new

pkg-pr-new Bot commented Jul 22, 2026

Copy link
Copy Markdown

commit: a1ac54d

@github-actions

Copy link
Copy Markdown

⏱️ TypeScript Benchmark Results

✅ ⏱️  No benchmark changes detected.

@dependabot dependabot Bot changed the title chore(deps): bump hono from 4.12.30 to 4.12.31 chore(deps): bump hono from 4.12.30 to 4.12.32 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono-4.12.31 branch from a204c00 to aad108b Compare July 27, 2026 07:47
@dependabot dependabot Bot changed the title chore(deps): bump hono from 4.12.30 to 4.12.32 chore(deps): bump hono from 4.12.30 to 4.12.33 Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono-4.12.31 branch from aad108b to e427a2b Compare August 3, 2026 07:48
Bumps [hono](https://github.com/honojs/hono) from 4.12.30 to 4.13.0.
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.12.30...v4.13.0)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.12.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump hono from 4.12.30 to 4.12.33 chore(deps): bump hono from 4.12.30 to 4.13.0 Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono-4.12.31 branch from e427a2b to a1ac54d Compare August 5, 2026 07:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants