Summary
- aws-lambda types for API Gateway v2
- sse resets Last-Event-ID with empty id
- parsing uses Object.create(null) to avoid prototype inheritance
Links
Resources
Recent
Latest Release Posts
Summary
- multipart boundary fix
- reuse cached FormData
- sse emits retry 0
Summary
- Deduplicate Cache-Control headers
- Do not compress 206 Partial Content
- Fix URL param replacement bug
Summary
- merge function headers with per-request headers
- lambda-edge: callback resolution and base64-encoded responses
- aws-lambda: non-identity encodings treated as binary
Summary
- serve-static treats empty-string content as found
- AWS Lambda V2 detection improved via request context
- Content-Type media type matching normalized
Summary
- SSR cross-request context disclosure
- Server-side JSX XSS via cx()
- API Gateway v1 header value drop
Summary
- Deno types: Content-Length encoding fix
- CI: OIDC-based npm publishing enabled
- Build: switched to Bun native APIs
Summary
- Fixes CORS wildcard origin with credentials
- Prevents body-limit bypass on AWS Lambda
- Resolves cookie/header and Windows path traversal issues
Summary
- ipv6 unspecified address bugfix
- clearer bearer-auth error message
- tests and docs improvements
Summary
- normalize backslashes in serve-static
- export Context class publicly
- add compress contentTypeFilter option
Summary
- msgpack added as compressible type
- compression now respects Accept-Encoding
- mime charset set per MIME type
Summary
- app.mount percent-encoding fix
- IPv6 deny-bypass resolved
- Set-Cookie and JWT validation hardened
Summary
- route base path preserved
- jsx children typed as Child[]
- new contributor ashunar0
Summary
- typed bearer-auth verifyToken
- cache keys respect Vary headers
- node-server v2 improves stream abort handling
Summary
- Fixes cross-user cache leakage
- Prevents CSS declaration injection in JSX SSR
- Corrects JWT numeric-date validation
Summary
- Normalize SVG root attributes
- Add atom+xml and rss+xml mappings
- Make CORS origin optional
Summary
- HTML injection fix in hono/jsx
- bodyLimit() bypass fixed for chunked requests
- Upgrade to v4.12.16 recommended
Summary
- Supports single-line PEM keys
- Fixes JWT key parsing bug
- Patch release v4.12.15
Summary
- JSX attribute-name validation added
- Fix for invalid AWS Lambda header handling
- Upgrade to v4.12.14 recommended
Summary
- Type inference fixed for app.on handlers
- trailing-slash middleware gains skip option
- cache adds onCacheNotAvailable callback