Skip to content

build(deps): bump @hono/node-server from 1.19.10 to 1.19.11#766

Merged
TSavo merged 1 commit intomainfrom
dependabot/npm_and_yarn/hono/node-server-1.19.11
Mar 13, 2026
Merged

build(deps): bump @hono/node-server from 1.19.10 to 1.19.11#766
TSavo merged 1 commit intomainfrom
dependabot/npm_and_yarn/hono/node-server-1.19.11

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Bumps @hono/node-server from 1.19.10 to 1.19.11.

Release notes

Sourced from @​hono/node-server's releases.

v1.19.11

What's Changed

Full Changelog: honojs/node-server@v1.19.10...v1.19.11

Commits
  • ecd4d6b 1.19.11
  • c944899 fix: do not overwrite Content-Length in the fast path pattern if Content-Leng...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Open with Devin

Note

Bump @hono/node-server from 1.19.10 to 1.19.11

Updates the @hono/node-server dependency version in package.json and regenerates the lockfiles to resolve the new version.

Macroscope summarized f1d075e.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 13, 2026
@github-actions github-actions bot enabled auto-merge March 13, 2026 05:45
Copy link

@devin-ai-integration devin-ai-integration bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

Open in Devin Review

@greptile-apps
Copy link

greptile-apps bot commented Mar 13, 2026

Greptile Summary

This PR bumps @hono/node-server from 1.19.10 to 1.19.11, a patch release that fixes a bug where Content-Length was incorrectly overwritten in the fast path even when the header was already explicitly set by the application.

  • Bug fix applied: The upstream fix (fix: do not overwrite Content-Length in the fast path pattern if Content-Length already exists. honojs/node-server#309) prevents Content-Length from being overwritten in the fast response path when the header is already present — this could previously cause clients to receive a mismatched or invalid Content-Length, leading to truncated or malformed responses.
  • All three lock files updated consistently: package.json, package-lock.json, and pnpm-lock.yaml are all in sync with the new version and integrity hashes.
  • No breaking changes: This is a patch-level bump with no API changes. The fix is strictly additive (a missing guard condition was added upstream).
  • No application code changes: Only dependency manifest files are modified, which is expected for a Dependabot bump.

Confidence Score: 5/5

  • This PR is safe to merge — it is a patch dependency bump with a targeted bug fix and no breaking changes.
  • The change is a minimal patch bump (1.19.101.19.11) to @hono/node-server. The upstream fix is a narrow, well-scoped bug fix (guarding against overwriting an already-set Content-Length header). All three manifest files are updated consistently. There are no source code changes, no API surface changes, and no risk of regression beyond the narrow scenario fixed. Dependabot's compatibility score also supports merging.
  • No files require special attention.

Important Files Changed

Filename Overview
package.json Version specifier for @hono/node-server bumped from ^1.19.10 to ^1.19.11. No other changes.
package-lock.json Resolved version and integrity hash updated from 1.19.10 to 1.19.11 for @hono/node-server. All other entries unchanged.
pnpm-lock.yaml Specifier, resolution integrity hash, and snapshot entry for @hono/node-server updated from 1.19.10 to 1.19.11. Consistent with package.json and package-lock.json changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["HTTP Request arrives at Hono Node Server"] --> B{"Content-Length header already set?"}
    B -- "Yes (1.19.10 bug)" --> C["❌ Overwrite Content-Length\n(incorrect response length)"]
    B -- "Yes (1.19.11 fix)" --> D["✅ Keep existing Content-Length\n(correct response length)"]
    B -- "No" --> E["Set Content-Length normally"]
    C --> F["Client receives malformed response"]
    D --> G["Client receives correct response"]
    E --> G
Loading

Last reviewed commit: 226c589

@github-actions
Copy link

github-actions bot commented Mar 13, 2026

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 77.16% (🎯 70%) 3681 / 4770
🔵 Statements 76.79% (🎯 70%) 3879 / 5051
🔵 Functions 72.55% (🎯 70%) 587 / 809
🔵 Branches 65.65% (🎯 65%) 1573 / 2396
File CoverageNo changed files found.
Generated in workflow #2505 for commit f1d075e by the Vitest Coverage Report Action

Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.10 to 1.19.11.
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.10...v1.19.11)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 1.19.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/hono/node-server-1.19.11 branch from 226c589 to f1d075e Compare March 13, 2026 08:15
@TSavo TSavo disabled auto-merge March 13, 2026 16:07
@TSavo TSavo added this pull request to the merge queue Mar 13, 2026
Merged via the queue into main with commit 80ea7d6 Mar 13, 2026
12 checks passed
@TSavo TSavo deleted the dependabot/npm_and_yarn/hono/node-server-1.19.11 branch March 13, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant