From f513eeb344bac97778f0bba63576c75d4adb5dc0 Mon Sep 17 00:00:00 2001 From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:39:40 +0000 Subject: [PATCH 1/2] chore: upgrade hono to ^4.12.31 to address CVE-2026-59897 Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1582/sourcebot-devsourcebot-cve-2026-59897-hono-api-gateway-v1-adapter-can#agent-session-843aeae2) Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com> --- CHANGELOG.md | 1 + yarn.lock | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b0402dab6..1385646e8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed - Upgraded `tar` to `^7.5.20`. [#1474](https://github.com/sourcebot-dev/sourcebot/pull/1474) +- Upgraded `hono` to `^4.12.31`. [#1476](https://github.com/sourcebot-dev/sourcebot/pull/1476) ### Changed - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475) diff --git a/yarn.lock b/yarn.lock index 051755b31..fdab81224 100644 --- a/yarn.lock +++ b/yarn.lock @@ -15964,9 +15964,9 @@ __metadata: linkType: hard "hono@npm:^4.11.4": - version: 4.12.25 - resolution: "hono@npm:4.12.25" - checksum: 10c0/9216d647fe2f39b17855b0e74913688b837e3fa9519d367c7beeec399265b36608a820928cc33ab926eee58fe2daf7e33296235b52e56dbfac0fbcd51a5e818e + version: 4.12.31 + resolution: "hono@npm:4.12.31" + checksum: 10c0/f80be65cd657cc353b3e478d55424a373d11801b2a1ffc96d94def813c6d852e76bea4437f5df252b15caca98742040d26950bc9c865d8720b89a00a9eac5249 languageName: node linkType: hard From 1c9a6b499d6651e0fb80ba845bae531fac9d953f Mon Sep 17 00:00:00 2001 From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:40:03 +0000 Subject: [PATCH 2/2] chore: correct CHANGELOG PR link to #1487 Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1582/sourcebot-devsourcebot-cve-2026-59897-hono-api-gateway-v1-adapter-can#agent-session-843aeae2) Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com> --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1385646e8..b0250136e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,7 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed - Upgraded `tar` to `^7.5.20`. [#1474](https://github.com/sourcebot-dev/sourcebot/pull/1474) -- Upgraded `hono` to `^4.12.31`. [#1476](https://github.com/sourcebot-dev/sourcebot/pull/1476) +- Upgraded `hono` to `^4.12.31`. [#1487](https://github.com/sourcebot-dev/sourcebot/pull/1487) ### Changed - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475)