Skip to content

chore(deps): bump @hono/zod-openapi from 1.4.0 to 1.5.1 - #352

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/hono/zod-openapi-1.5.1
Open

chore(deps): bump @hono/zod-openapi from 1.4.0 to 1.5.1#352
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/hono/zod-openapi-1.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor

Bumps @hono/zod-openapi from 1.4.0 to 1.5.1.

Release notes

Sourced from @​hono/zod-openapi's releases.

@​hono/zod-openapi@​1.5.1

Patch Changes

@​hono/zod-openapi@​1.5.0

Minor Changes

  • #1878 443a8dc5cd8a6a65daa2bec1f251adfc605b05ce Thanks @​SAY-5! - feat: inherit defaultHook from parent app on nested routes mounted via app.route()

    Behavior change: if a parent app has a defaultHook and a mounted sub-app does not declare its own, the sub-app's routes now use the parent's defaultHook instead of the built-in validation response.

Patch Changes

  • #2033 740123c01aadb6c2ed742d1c67c2763a4cdc4f1f Thanks @​yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes

  • #2031 bf52ec2f18e32479ec85c00922c8aede68dc8286 Thanks @​tokiya-takai! - fix(zod-openapi): preserve onError()/notFound() set after basePath()

    OpenAPIHono.basePath() used to rebuild the instance by spreading the plain Hono clone returned by super.basePath(). That spread copied the clone's arrow-function instance fields (onError, notFound, request, fetch), which stay bound to the discarded clone — so calling .onError() (or .notFound()) after .basePath() mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead). basePath() now transplants only the routing state onto a properly constructed OpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.

Changelog

Sourced from @​hono/zod-openapi's changelog.

1.5.1

Patch Changes

1.5.0

Minor Changes

  • #1878 443a8dc5cd8a6a65daa2bec1f251adfc605b05ce Thanks @​SAY-5! - feat: inherit defaultHook from parent app on nested routes mounted via app.route()

    Behavior change: if a parent app has a defaultHook and a mounted sub-app does not declare its own, the sub-app's routes now use the parent's defaultHook instead of the built-in validation response.

Patch Changes

  • #2033 740123c01aadb6c2ed742d1c67c2763a4cdc4f1f Thanks @​yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes

  • #2031 bf52ec2f18e32479ec85c00922c8aede68dc8286 Thanks @​tokiya-takai! - fix(zod-openapi): preserve onError()/notFound() set after basePath()

    OpenAPIHono.basePath() used to rebuild the instance by spreading the plain Hono clone returned by super.basePath(). That spread copied the clone's arrow-function instance fields (onError, notFound, request, fetch), which stay bound to the discarded clone — so calling .onError() (or .notFound()) after .basePath() mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead). basePath() now transplants only the routing state onto a properly constructed OpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.

Commits
  • 70623e3 Version Packages (#2037)
  • 8e59b17 Version Packages (#2032)
  • 740123c fix(zod-openapi): resolve defaultHook through the ancestor chain on nested ro...
  • 443a8dc fix(zod-openapi): inherit defaultHook from parent app on nested routes (#1878)
  • bf52ec2 fix(zod-openapi): preserve onError/notFound bindings set after basePath() (#2...
  • b86478a ci: apply automated fixes
  • 5e32c00 chore: migrate to pnpm (#2006)
  • c5ba38b chore(deps-dev): bump tsdown from 0.22.2 to 0.22.3 (#1996)
  • f89ea30 chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 (#1866)
  • bf845ad chore: unblock TypeScript v6 (#1937)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@hono/zod-openapi](https://github.com/honojs/middleware/tree/HEAD/packages/zod-openapi) from 1.4.0 to 1.5.1.
- [Release notes](https://github.com/honojs/middleware/releases)
- [Changelog](https://github.com/honojs/middleware/blob/main/packages/zod-openapi/CHANGELOG.md)
- [Commits](https://github.com/honojs/middleware/commits/@hono/zod-openapi@1.5.1/packages/zod-openapi)

---
updated-dependencies:
- dependency-name: "@hono/zod-openapi"
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from amitpaz1 as a code owner August 2, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants