v4.12.21Hono / May 19, 2026app.mount percent-encoding fixIPv6 deny-bypass resolvedSet-Cookie and JWT validation hardenedsecurityroutingipv6cookiesjwthono
v4.12.19Hono / May 16, 2026typed bearer-auth verifyTokencache keys respect Vary headersnode-server v2 improves stream abort handlinghonoreleasecacheauthstreamingcookiestypescriptci
v4.12.12Hono / Apr 7, 2026serveStatic のバイパス修正toSSG のパストラバース修正cookie と IP 制限の改善securityserve-staticssgcookiesip-restrictionpath-traversalhono
v4.12.4Hono / Mar 3, 2026SSE control field injection fixedCookie attribute injection fixedServe Static URL-decoding bypass fixedsecurityssecookiesserve-staticurl-decodingmiddlewarerelease