Skip to content

chore(deps): bump transitive hono to v^4.12.27 [security]#34489

Open
anna-shakhova wants to merge 1 commit into
DevExpress:mainfrom
anna-shakhova:bump_hono_main
Open

chore(deps): bump transitive hono to v^4.12.27 [security]#34489
anna-shakhova wants to merge 1 commit into
DevExpress:mainfrom
anna-shakhova:bump_hono_main

Conversation

@anna-shakhova

Copy link
Copy Markdown
Contributor

No description provided.

@anna-shakhova anna-shakhova self-assigned this Jul 24, 2026
Copilot AI review requested due to automatic review settings July 24, 2026 13:48
@anna-shakhova anna-shakhova added dependencies Pull requests that update a dependency file skip-cache 26_2 labels Jul 24, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates pnpm overrides/lockfile to address a security-related minimum version requirement for the transitive hono dependency.

Changes:

  • Updated the pnpm overrides rule for hono to require at least 4.12.27.
  • Regenerated pnpm-lock.yaml, resulting in hono being resolved to 4.12.32 in the lockfile.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File Description
pnpm-workspace.yaml Updates the workspace-level pnpm override for hono to enforce a secure minimum version.
pnpm-lock.yaml Reflects the updated override and the newly resolved hono version in the dependency graph.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

Comment thread pnpm-workspace.yaml Outdated
Comment thread pnpm-lock.yaml Outdated
Copilot AI review requested due to automatic review settings July 24, 2026 13:55

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.

Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

26_2 dependencies Pull requests that update a dependency file skip-cache

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants