fix(deps): bump hono to 4.12.23 (security) — release 6.3.1 (#168)

Bumps hono 4.12.18 -> 4.12.23 (transitive via @openauthjs/openauth, pinned by override) to clear four moderate advisories, all fixed in 4.12.21. npm audit --omit=dev now reports 0 vulnerabilities. No source change; version bumped to 6.3.1 across package.json, manifest, and plugin.json. 2487 tests pass; build/lint/typecheck/audit:ci clean; publish dry-run verified.

Author: ndycode

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "oc-codex-multi-auth",
-  "version": "6.3.0",
+  "version": "6.3.1",
   "description": "Install and operate oc-codex-multi-auth for OpenCode with ChatGPT Plus/Pro OAuth, Codex/GPT-5 routing, multi-account rotation, account switching, health checks, diagnostics, quota status, and recovery tools.",
   "skills": "./skills/",
   "interface": {

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "6.3.0"
+  ".": "6.3.1"
 }

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "oc-codex-multi-auth",
-  "version": "6.3.0",
+  "version": "6.3.1",
   "description": "OpenCode plugin for ChatGPT Plus/Pro OAuth with Codex/GPT-5 routing, multi-account rotation, account switching, health checks, diagnostics, and recovery tools",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -123,14 +123,14 @@
     "@opencode-ai/plugin": "^1.14.22",
     "@opentui/core": "0.2.6",
     "@opentui/solid": "0.2.6",
-    "hono": "4.12.18",
+    "hono": "4.12.23",
     "solid-js": "^1.9.11",
     "web-tree-sitter": "^0.25.10",
     "zod": "^4.3.6"
   },
   "overrides": {
     "flatted": "3.4.2",
-    "hono": "4.12.18",
+    "hono": "4.12.23",
     "rollup": "4.60.0",
     "vite": "^7.3.2",
     "yaml": "^2.8.3",