Latest Results
fix: security fix for @hono/node-server (#29448)
This pull request primarily updates dependencies in the project,
focusing on bringing several packages to their latest versions and
ensuring consistency across `package.json`,
`packages/config/package.json`, and `pnpm-lock.yaml`. The main updates
are for the `@hono/node-server` and `c12` packages, along with their
transitive dependencies. Additionally, some deprecated or outdated
packages have been removed or replaced with newer versions.
**Dependency Updates and Improvements:**
* Upgraded `@hono/node-server` from `1.19.11` to `1.19.13` across all
relevant files, including `package.json`, `pnpm-lock.yaml` (importers,
packages, and snapshots), and `packages/query-plan-executor`
dependencies. This ensures the project uses the latest stable version of
the server package.
* Upgraded `c12` from `3.1.0` to `3.3.4` in
`packages/config/package.json` and in all relevant sections of
`pnpm-lock.yaml`, including its transitive dependencies: `chokidar`,
`confbox`, `defu`, `dotenv`, `exsolve`, `giget`, `jiti`,
`perfect-debounce`, `pkg-types`, and `rc9`. This brings in a range of
dependency updates and improvements.
**Package Additions and Removals:**
* Added new versions of dependencies such as `chokidar@5.0.0`,
`defu@6.1.7`, `dotenv@17.4.1`, `confbox@0.2.4`, `giget@3.2.0`,
`jiti@2.6.1`, `perfect-debounce@2.1.0`, `pkg-types@2.3.0`, `rc9@3.0.1`,
`readdirp@5.0.0`, and `tinyexec@1.0.4`.
* Removed older or deprecated versions of packages such as
`citty@0.1.6`, `consola@3.4.2`, `confbox@0.2.2`, `defu@6.1.4`,
`dotenv@17.2.3`, `exsolve@1.0.7`, `giget@2.0.0`, `jiti@2.4.2`,
`perfect-debounce@1.0.0`, `pkg-types@2.2.0`, `rc9@2.1.2`,
`tinyexec@0.3.2`, and others, cleaning up unused or outdated
dependencies.
**Maintenance and Minor Improvements:**
* Updated deprecation warnings for `glob` in `pnpm-lock.yaml` to reflect
the latest status.
* Ensured all dependency references in lockfiles are consistent with the
upgraded versions.
These changes collectively improve the security, stability, and
maintainability of the project by keeping dependencies up to date and
removing obsolete packages.Fixes security issue related to
`@hono/node-server`: https://github.com/advisories/GHSA-92pp-h63x-v22m
Command run:
```
pnpm i
``` Latest Branches
-1%
deps/engines-7.8.0-2.3187e3937290320ba3c7dbd5aa94af67942b4484 0%
deps/engines-7.8.0-1.7b80cc56c645c6e03c7541474e6a7c8d91b70d4e 0%
happinessee:fix/remove-dead-shadow-database-url-code © 2026 CodSpeed Technology