From 3efdf93bfdd0e42c51538410a8b8749a74bfded0 Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Wed, 5 Aug 2026 02:26:31 +0000 Subject: [PATCH 1/2] chore: upgrade hono to ^4.13.0 to address CVE-2026-69207 Co-Authored-By: Claude Opus 5 (1M context) --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 7ba1fbf52..68ccd2230 100644 --- a/yarn.lock +++ b/yarn.lock @@ -15748,9 +15748,9 @@ __metadata: linkType: hard "hono@npm:^4.11.4": - version: 4.12.31 - resolution: "hono@npm:4.12.31" - checksum: 10c0/f80be65cd657cc353b3e478d55424a373d11801b2a1ffc96d94def813c6d852e76bea4437f5df252b15caca98742040d26950bc9c865d8720b89a00a9eac5249 + version: 4.13.0 + resolution: "hono@npm:4.13.0" + checksum: 10c0/d7cfb4d1063be19bea1982ea2a6b3cfa1840e8403a03203e86d17278e76fed11e7483974738345257543e183a935ea73ffc6d4a1e6ad7f0008451f55cdf8be7b languageName: node linkType: hard From ab697576a1527180fd5930c926dc5bbe622a907d Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Wed, 5 Aug 2026 02:26:50 +0000 Subject: [PATCH 2/2] chore: add CHANGELOG entry for hono upgrade Co-Authored-By: Claude Opus 5 (1M context) --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index ab1195e04..3dd180019 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Fixed a crash when searching with `context:` referencing a search context that does not exist; it now returns a graceful error. [#1362](https://github.com/sourcebot-dev/sourcebot/pull/1362) - Fixed search queries failing to parse when negating a bare term that contains a colon (e.g. `-foo:bar`, `-http://example.com`). [#1301](https://github.com/sourcebot-dev/sourcebot/pull/1301) - Fixed the Review Agent failing to fetch pull request diffs for private GitHub repositories. [#1352](https://github.com/sourcebot-dev/sourcebot/pull/1352) +- Upgraded `hono` to `^4.13.0`. [#1544](https://github.com/sourcebot-dev/sourcebot/pull/1544) ## [5.1.5] - 2026-07-31