Skip to content

build(deps): bump @hono/node-server from 2.0.8 to 2.0.11#308

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/hono/node-server-2.0.10
Open

build(deps): bump @hono/node-server from 2.0.8 to 2.0.11#308
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/hono/node-server-2.0.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps @hono/node-server from 2.0.8 to 2.0.11.

Release notes

Sourced from @​hono/node-server's releases.

v2.0.11

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg


Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.8...v2.0.9

Commits

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Jul 17, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 17, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
github-readme-stats 132cbd7 Commit Preview URL

Branch Preview URL
Jul 22 2026, 12:31 AM

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title build(deps): bump @hono/node-server from 2.0.8 to 2.0.10 build(deps): bump @hono/node-server from 2.0.8 to 2.0.11 Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono/node-server-2.0.10 branch from e1185c5 to 018af1e Compare July 21, 2026 14:51
@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono/node-server-2.0.10 branch from 018af1e to 8856c37 Compare July 21, 2026 14:56
@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

9 similar comments
@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 21, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dytsou

dytsou commented Jul 22, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [@hono/node-server](https://github.com/honojs/node-server) from 2.0.8 to 2.0.11.
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.8...v2.0.11)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono/node-server-2.0.10 branch from 8856c37 to 132cbd7 Compare July 22, 2026 00:28
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant