Skip to content

Commit 23c063a

Browse files
msukkariclaude
andcommitted
chore: fix dependabot alert by upgrading hono to 4.12.14
Bump the yarn resolution for @modelcontextprotocol/sdk/hono from ^4.12.12 to ^4.12.14 to resolve CVE for HTML injection in hono/jsx SSR. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent d89c5a1 commit 23c063a

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@
4949
"brace-expansion@npm:^5.0.2": "^5.0.5",
5050
"brace-expansion@npm:^1.1.7": "^1.1.13",
5151
"@react-email/preview-server/next": "^16.2.3",
52-
"@modelcontextprotocol/sdk/hono": "^4.12.12",
52+
"@modelcontextprotocol/sdk/hono": "^4.12.14",
5353
"@modelcontextprotocol/sdk/@hono/node-server": "^1.19.13",
5454
"langsmith@npm:>=0.5.0 <1.0.0": "^0.5.19",
5555
"markdown-it@npm:^14.1.0": "^14.1.1",

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -14411,10 +14411,10 @@ __metadata:
1441114411
languageName: node
1441214412
linkType: hard
1441314413

14414-
"hono@npm:^4.12.12":
14415-
version: 4.12.12
14416-
resolution: "hono@npm:4.12.12"
14417-
checksum: 10c0/7e514cac7f0fde53a93b5344605a11bc944c55c7b68e586ab722269a60c2d78e81b91c298e934b232d44aa8fcbfd2584b7cd7e01fb3f0edaaba0597a584b2ead
14414+
"hono@npm:^4.12.14":
14415+
version: 4.12.14
14416+
resolution: "hono@npm:4.12.14"
14417+
checksum: 10c0/78de4c98a9a3da0f067e38dcc4bd27f0d82b45d146ac39f5ca688515ee482c0a2e704d2ac6c1ee91ad17596b7c52b3e4b9483acd9c238d42f6ebcb43414a71b6
1441814418
languageName: node
1441914419
linkType: hard
1442014420

0 commit comments

Comments
 (0)