From 082a95aea90b864fc5be561d7c9784559cb7b15a Mon Sep 17 00:00:00 2001
From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 13:40:17 +0000
Subject: [PATCH 1/2] chore: upgrade @hono/node-server to ^2.0.5 to address
 GHSA-frvp-7c67-39w9

Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1584/sourcebot-devsourcebot-ghsa-frvp-7c67-39w9-nodejs-adapter-for-hono#agent-session-67174614)

Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com>
---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index ed846875f..4cd924959 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
         "brace-expansion@npm:^2.0.2": "^2.0.3",
         "brace-expansion@npm:^5.0.2": "^5.0.5",
         "brace-expansion@npm:^1.1.7": "^1.1.13",
-        "@modelcontextprotocol/sdk/@hono/node-server": "^1.19.13",
+        "@modelcontextprotocol/sdk/@hono/node-server": "^2.0.5",
         "markdown-it@npm:^14.1.0": "^14.1.1",
         "yaml@npm:^2.3.4": "^2.8.3",
         "yaml@npm:^2.8.0": "^2.8.3",
diff --git a/yarn.lock b/yarn.lock
index 051755b31..7dc93795d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2450,12 +2450,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@hono/node-server@npm:^1.19.13":
-  version: 1.19.14
-  resolution: "@hono/node-server@npm:1.19.14"
+"@hono/node-server@npm:^2.0.5":
+  version: 2.0.11
+  resolution: "@hono/node-server@npm:2.0.11"
   peerDependencies:
     hono: ^4
-  checksum: 10c0/41a099bb3705d96aac44b7a8db8805f2a22ce8a0f767a27b6d10b74a9964925df01c5f35d3631e882f8bcdeee3518884c30f40588ac8c960d88bf71048ba0df3
+  checksum: 10c0/eedfff2122bcb23b368f4a785c2f8d93ecd653c14ecdbf47422fedeb559fb7201c183b10020c3cc01457d856cdda6868fdc5e8f60c3af1d6c6ddd77291689736
   languageName: node
   linkType: hard
 

From 183aa49cf4be5eda3a383071e074dcca1f3a1732 Mon Sep 17 00:00:00 2001
From: "linear-code[bot]" <222613912+linear-code[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 13:40:41 +0000
Subject: [PATCH 2/2] docs: add CHANGELOG entry for #1491

Generated with [Linear](https://linear.app/sourcebot/issue/SOU-1584/sourcebot-devsourcebot-ghsa-frvp-7c67-39w9-nodejs-adapter-for-hono#agent-session-67174614)

Co-authored-by: linear-code[bot] <222613912+linear-code[bot]@users.noreply.github.com>
---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b0402dab6..a7d8cb744 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - Upgraded `tar` to `^7.5.20`. [#1474](https://github.com/sourcebot-dev/sourcebot/pull/1474)
+- Upgraded `@hono/node-server` to `^2.0.5`. [#1491](https://github.com/sourcebot-dev/sourcebot/pull/1491)
 
 ### Changed
 - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475)