chore(deps): bump the all-deps group across 1 directory with 8 updates by dependabot[bot] · Pull Request #6 · oranix-io/hookwire

dependabot · 2026-07-20T10:46:44Z

Bumps the all-deps group with 8 updates in the / directory:

Package	From	To
@hono/zod-openapi	`1.4.0`	`1.5.1`
@scalar/hono-api-reference	`0.11.6`	`0.11.11`
hono	`4.12.27`	`4.12.31`
@cloudflare/workers-types	`4.20260629.1`	`5.20260719.1`
typescript	`6.0.3`	`7.0.2`
vitest	`4.1.9`	`4.1.10`
wrangler	`4.105.0`	`4.112.0`
@rslib/core	`0.23.1`	`0.23.2`

Updates @hono/zod-openapi from 1.4.0 to 1.5.1

Release notes

Sourced from @hono/zod-openapi's releases.

@hono/zod-openapi@1.5.1

Patch Changes

Updated dependencies [7bc11dffa7dd5b639c614b12c34bd76722d76354]:

@hono/zod-validator@0.9.0

@hono/zod-openapi@1.5.0

Minor Changes

#1878 443a8dc5cd8a6a65daa2bec1f251adfc605b05ce Thanks @SAY-5! - feat: inherit defaultHook from parent app on nested routes mounted via app.route()

Behavior change: if a parent app has a defaultHook and a mounted sub-app does not declare its own, the sub-app's routes now use the parent's defaultHook instead of the built-in validation response.

Patch Changes

#2033 740123c01aadb6c2ed742d1c67c2763a4cdc4f1f Thanks @yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes

#2031 bf52ec2f18e32479ec85c00922c8aede68dc8286 Thanks @tokiya-takai! - fix(zod-openapi): preserve onError()/notFound() set after basePath()

OpenAPIHono.basePath() used to rebuild the instance by spreading the plain Hono clone returned by super.basePath(). That spread copied the clone's arrow-function instance fields (onError, notFound, request, fetch), which stay bound to the discarded clone — so calling .onError() (or .notFound()) after .basePath() mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead). basePath() now transplants only the routing state onto a properly constructed OpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.

Changelog

Sourced from @hono/zod-openapi's changelog.

1.5.1

Patch Changes

Updated dependencies [7bc11dffa7dd5b639c614b12c34bd76722d76354]:

@hono/zod-validator@0.9.0

1.5.0

Minor Changes

#1878 443a8dc5cd8a6a65daa2bec1f251adfc605b05ce Thanks @SAY-5! - feat: inherit defaultHook from parent app on nested routes mounted via app.route()

Behavior change: if a parent app has a defaultHook and a mounted sub-app does not declare its own, the sub-app's routes now use the parent's defaultHook instead of the built-in validation response.

Patch Changes

#2033 740123c01aadb6c2ed742d1c67c2763a4cdc4f1f Thanks @yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes

#2031 bf52ec2f18e32479ec85c00922c8aede68dc8286 Thanks @tokiya-takai! - fix(zod-openapi): preserve onError()/notFound() set after basePath()

OpenAPIHono.basePath() used to rebuild the instance by spreading the plain Hono clone returned by super.basePath(). That spread copied the clone's arrow-function instance fields (onError, notFound, request, fetch), which stay bound to the discarded clone — so calling .onError() (or .notFound()) after .basePath() mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead). basePath() now transplants only the routing state onto a properly constructed OpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.

Commits

70623e3 Version Packages (#2037)
8e59b17 Version Packages (#2032)
740123c fix(zod-openapi): resolve defaultHook through the ancestor chain on nested ro...
443a8dc fix(zod-openapi): inherit defaultHook from parent app on nested routes (#1878)
bf52ec2 fix(zod-openapi): preserve onError/notFound bindings set after basePath() (#2...
b86478a ci: apply automated fixes
5e32c00 chore: migrate to pnpm (#2006)
c5ba38b chore(deps-dev): bump tsdown from 0.22.2 to 0.22.3 (#1996)
f89ea30 chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 (#1866)
bf845ad chore: unblock TypeScript v6 (#1937)
Additional commits viewable in compare view

Updates @scalar/hono-api-reference from 0.11.6 to 0.11.11

Changelog

Sourced from @scalar/hono-api-reference's changelog.

0.11.11

Patch Changes

#9719: docs: update the Scalar platform overview block in the README

0.11.10

Patch Changes

#9710: Republish so the updated README (with the Scalar platform overview) reaches npm. Also renames the README generator metadata in package.json from readme to scalarReadme: npm treats a readme field as the readme text itself, so affected packages were published with a literal [object Object] readme on the registry instead of README.md.

0.11.9

0.11.8

0.11.7

Commits

See full diff in compare view

Updates hono from 4.12.27 to 4.12.31

Release notes

Sourced from hono's releases.

v4.12.31

What's Changed

test(context): assert case-insensitive header names in response helpers by @yusukebe in honojs/hono#5116

chore(benchmark): add app.fetch() overhead benchmark by @yusukebe in honojs/hono#5117

refactor(aws-lambada): remove FIXME in @ts-expect-error by @yusukebe in honojs/hono#5130

fix(utils/body): reuse cached formData in parseBody() by @yusukebe in honojs/hono#5131

fix(request): fix multipart boundary mismatch in cloneRawRequest by @yusukebe in honojs/hono#5133

fix(sse): emit retry feild when retry is 0 by @yusukebe in honojs/hono#5135

test(validator): fix misspelled identifier in transform type test by @yusukebe in honojs/hono#5136

Full Changelog: honojs/hono@v4.12.30...v4.12.31

v4.12.30

What's Changed

chore(benchmark/routers): bump deps in honojs/hono#5107

chore(benchmark): remove not used benchmarks in honojs/hono#5108

chore: update to ts6 in prep for ts7 in honojs/hono#5104

fix(cache): deduplicate Cache-Control directives case-insensitively in honojs/hono#5025

fix(compress): do not compress 206 Partial Content responses in honojs/hono#5020

fix(client): replaceUrlParam should not match a param that prefixes another in honojs/hono#5096

fix(method-override): set duplex when forwarding a stream body in query mode in honojs/hono#5110

Full Changelog: honojs/hono@v4.12.29...v4.12.30

v4.12.29

What's Changed

fix(client): merge function headers with per-request headers by @yusukebe in honojs/hono#5092

chore: fix no-op tsc in test script by @yusukebe in honojs/hono#5093

fix(lambda-edge): resolve the handler with the value passed to the callback by @yusukebe in honojs/hono#5094

docs(language): add JSDoc @example to languageDetector by @codebybilal18 in honojs/hono#5081

test(workerd): add compatibilityDate by @yusukebe in honojs/hono#5100

fix(lambda-edge): base64 encode content-encoded response bodies by @yusukebe in honojs/hono#5099

fix(aws-lambda): treat any non-identity content-encoding as binary by @yusukebe in honojs/hono#5101

fix(types): strip extra properties from array types in JSONParsed by @Arman-Luthra in honojs/hono#5103

fix(trie-router): match empty wildcard remainder after regexp param by @usualoma in honojs/hono#5102

fix(etag): treat If-None-Match: * as a match by @yusukebe in honojs/hono#5084

New Contributors

@codebybilal18 made their first contribution in honojs/hono#5081

@Arman-Luthra made their first contribution in honojs/hono#5103

Full Changelog: honojs/hono@v4.12.28...v4.12.29

v4.12.28

What's Changed

fix(serve-static): treat empty string content as found by @yusukebe in honojs/hono#5062

docs(MIGRATION): fix req.raw.headers reference (property, not method) by @EduardF1 in honojs/hono#5047

chore: don't publish *.tsbuildinfo by @yusukebe in honojs/hono#5066

fix(utils/body,validator): normalize Content-Type media type for case-insensitive matching by @yusukebe in honojs/hono#5067

fix: avoid circular dependency between body.ts and request.ts by @usualoma in honojs/hono#5071

... (truncated)

Commits

cadff88 4.12.31
64c613a test(validator): fix misspelled identifier in transform type test (#5136)
aeba9ec fix(sse): emit retry feild when retry is 0 (#5135)
d796450 fix(request): fix multipart boundary mismatch in cloneRawRequest (#5133)
80959d4 fix(utils/body): reuse cached formData in parseBody() (#5131)
21b44b6 refactor(aws-lambada): remove FIXME in @ts-expect-error (#5130)
5f73897 docs(combine): close quote in combine JSDoc example (#5126)
c285f9a chore(benchmark): add app.fetch() overhead benchmark (#5117)
fb9d7bf test(context): assert case-insensitive header names in response helpers (#5116)
b2ae3a2 4.12.30
Additional commits viewable in compare view

Updates @cloudflare/workers-types from 4.20260629.1 to 5.20260719.1

Commits

See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
See full diff in compare view

Updates wrangler from 4.105.0 to 4.112.0

Release notes

Sourced from wrangler's releases.

wrangler@4.112.0

Minor Changes
#14470 3de70df Thanks @DiogoSantoss! - Add a top-level addresses field to Wrangler configuration for Email Routing

You can now declare the inbound email addresses handled by your Worker directly in wrangler.json:
{
  "name": "my-worker",
  "main": "src/index.ts",
  "compatibility_date": "2026-05-21",
  "addresses": ["support@example.com", "*@example.com"]
}
#14706 cb6c3f9 Thanks @edmundhung! - Add Durable Object storage access to createTestHarness()

You can now execute SQL against a SQLite-backed Durable Object to seed or assert the storage state.
const server = createTestHarness({
  workers: [{ configPath: "./wrangler.json" }],
});
await server.listen();
const worker = server.getWorker();
const storage = await worker.getDurableObjectStorage("COUNTER", {
name: "user-123",
});
await worker.fetch("/counter/user-123");
const rows = await storage.exec(
"SELECT value FROM counters WHERE id = ?",
"user-123"
);
expect(rows).toEqual([{ value: 1 }]);
#14562 9f04a7e Thanks @martijnwalraven! - Emit a typed runtimeError event on the unstable_startWorker DevEnv for uncaught Worker exceptions

Uncaught Worker exceptions were only source-mapped and printed, so programmatic consumers had to scrape terminal output to observe them. The DevEnv now re-emits a RuntimeErrorEvent (like reloadComplete) carrying the exception text and source-mapped stack — fed from Miniflare's pretty-error seam via the new handleUncaughtError option for exceptions the runtime catches, and from the inspector for those it does not.
Patch Changes

#14682 d39ae01 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

... (truncated)

Commits

82918ad Version Packages (#14699)
24731b5 [wrangler] Wait for workerd cleanup in port conflict E2E (#14730)
028ce1f [wrangler] Wait for workers.dev propagation in E2Es (#14728)
c79504f fix(wrangler): support containers in test harness (#14725)
4c1309e [wrangler] Use default readiness timeout in local dev E2Es (#14729)
b38f494 chore: consolidate most packages on zod 4.4.3 in pnpm catalog (#14707)
cb6c3f9 feat(wrangler): access do storage with test harness (#14706)
c7dbe1a fix(wrangler): type the public startWorker input as WranglerStartDevWorkerInp...
9f04a7e feat: surface uncaught Worker exceptions as a typed runtimeError event in loc...
3de70df [wrangler] Add top-level addresses config field for Email Routing (#14470)
Additional commits viewable in compare view

Updates @rslib/core from 0.23.1 to 0.23.2

Release notes

Sourced from @rslib/core's releases.

v0.23.2

What's Changed

New Features 🎉

feat(create-rslib): use Rust-powered React Compiler via reactCompiler option by @elecmonkey in web-infra-dev/rslib#1729

feat(core): support custom argv in runCLI by @chenjiahan in web-infra-dev/rslib#1737

feat(create-rslib): bump default Node syntax to 22 and add public publishConfig by @elecmonkey in web-infra-dev/rslib#1739

feat(core): export config definition types by @Timeless0911 in web-infra-dev/rslib#1742

feat(core): align loadConfig with rsbuild options by @Timeless0911 in web-infra-dev/rslib#1741

Bug Fixes 🐞

fix(core): reset Rspack const environment by @Timeless0911 in web-infra-dev/rslib#1735

fix(core): replace deprecated circular dependency plugin by @elecmonkey in web-infra-dev/rslib#1738

fix(core): pass cli command to config loading by @Timeless0911 in web-infra-dev/rslib#1740

Refactor 🔨

refactor(create-rslib): simplify svelte rstest config by @Timeless0911 in web-infra-dev/rslib#1732

Document 📖

docs: add Rslib 1.0 development notice by @Timeless0911 in web-infra-dev/rslib#1728

docs: enable Rspress anchor checks by @chenjiahan in web-infra-dev/rslib#1730

docs(create-rslib): update template guidance by @Timeless0911 in web-infra-dev/rslib#1743

Other Changes

chore(deps): update all non-major dependencies by @renovate[bot] in web-infra-dev/rslib#1727

chore(deps): update all non-major dependencies by @renovate[bot] in web-infra-dev/rslib#1736

release: v0.23.2 by @Timeless0911 in web-infra-dev/rslib#1744

Full Changelog: web-infra-dev/rslib@v0.23.1...v0.23.2

Commits

c1de526 release: v0.23.2 (#1744)
d44fca9 feat(core): align loadConfig with rsbuild options (#1741)
f23d1f1 feat(core): export config definition types (#1742)
a0b6e92 fix(core): pass cli command to config loading (#1740)
133b54c fix(core): replace deprecated circular dependency plugin (#1738)
b0872e3 feat(core): support custom argv in runCLI (#1737)
4cff0ba chore(deps): update all non-major dependencies (#1736)
9cf5bc9 fix(core): reset Rspack const environment (#1735)
de0241d refactor(create-rslib): simplify svelte rstest config (#1732)
058d750 chore(deps): update all non-major dependencies (#1727)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@hono/zod-openapi](https://github.com/honojs/middleware/tree/HEAD/packages/zod-openapi) | `1.4.0` | `1.5.1` | | [@scalar/hono-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/hono) | `0.11.6` | `0.11.11` | | [hono](https://github.com/honojs/hono) | `4.12.27` | `4.12.31` | | [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `4.20260629.1` | `5.20260719.1` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | | [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.105.0` | `4.112.0` | | [@rslib/core](https://github.com/web-infra-dev/rslib/tree/HEAD/packages/core) | `0.23.1` | `0.23.2` | Updates `@hono/zod-openapi` from 1.4.0 to 1.5.1 - [Release notes](https://github.com/honojs/middleware/releases) - [Changelog](https://github.com/honojs/middleware/blob/main/packages/zod-openapi/CHANGELOG.md) - [Commits](https://github.com/honojs/middleware/commits/@hono/zod-openapi@1.5.1/packages/zod-openapi) Updates `@scalar/hono-api-reference` from 0.11.6 to 0.11.11 - [Release notes](https://github.com/scalar/scalar/releases) - [Changelog](https://github.com/scalar/scalar/blob/main/integrations/hono/CHANGELOG.md) - [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/hono) Updates `hono` from 4.12.27 to 4.12.31 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.27...v4.12.31) Updates `@cloudflare/workers-types` from 4.20260629.1 to 5.20260719.1 - [Release notes](https://github.com/cloudflare/workerd/releases) - [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md) - [Commits](https://github.com/cloudflare/workerd/commits) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) Updates `wrangler` from 4.105.0 to 4.112.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.112.0/packages/wrangler) Updates `@rslib/core` from 0.23.1 to 0.23.2 - [Release notes](https://github.com/web-infra-dev/rslib/releases) - [Commits](https://github.com/web-infra-dev/rslib/commits/v0.23.2/packages/core) --- updated-dependencies: - dependency-name: "@hono/zod-openapi" dependency-version: 1.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: "@scalar/hono-api-reference" dependency-version: 0.11.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: hono dependency-version: 4.12.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: "@cloudflare/workers-types" dependency-version: 5.20260719.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-deps - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-deps - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: wrangler dependency-version: 4.112.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: "@rslib/core" dependency-version: 0.23.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-deps ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-07-20T10:46:51Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	hookwire	`4c9d994`	Jul 20 2026, 10:47 AM

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026

Navigation Menu

Uh oh!

chore(deps): bump the all-deps group across 1 directory with 8 updates - #6

chore(deps): bump the all-deps group across 1 directory with 8 updates#6
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/all-deps-af8b36b1c1

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​hono/zod-openapi@​1.5.1

Patch Changes

@​hono/zod-openapi@​1.5.0

Minor Changes

Patch Changes

1.5.1

Patch Changes

1.5.0

Minor Changes

Patch Changes

0.11.11

Patch Changes

0.11.10

Patch Changes

0.11.9

0.11.8

0.11.7

v4.12.31

What's Changed

v4.12.30

What's Changed

v4.12.29

What's Changed

New Contributors

v4.12.28

What's Changed

v4.1.10

🐞 Bug Fixes

View changes on GitHub

wrangler@4.112.0

Minor Changes

Patch Changes

v0.23.2

What's Changed

New Features 🎉

Bug Fixes 🐞

Refactor 🔨

Document 📖

Other Changes

Uh oh!

cloudflare-workers-and-pages Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited

Loading

`@hono/zod-openapi@1`.5.1

`@hono/zod-openapi@1`.5.0

cloudflare-workers-and-pages Bot commented Jul 20, 2026 •

edited

Loading