Skip to content

fix: bump Hono override for Dependabot alerts#176

Merged
simongonzalezdc merged 1 commit into
mainfrom
codex/fix-dialectos-hono-alerts
Jun 7, 2026
Merged

fix: bump Hono override for Dependabot alerts#176
simongonzalezdc merged 1 commit into
mainfrom
codex/fix-dialectos-hono-alerts

Conversation

@simongonzalezdc

@simongonzalezdc simongonzalezdc commented Jun 7, 2026

Copy link
Copy Markdown
Member

Summary

  • tighten the pnpm Hono override to cover vulnerable versions below 4.12.21
  • refresh the lockfile so @modelcontextprotocol/sdk resolves Hono 4.12.23

Validation

  • pnpm audit --prod
  • pnpm install --frozen-lockfile --offline
  • pnpm build
  • pnpm test

View with Codesmith Autofix with Codesmith
Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.

@coderabbitai

coderabbitai Bot commented Jun 7, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: da84a8c6-38f3-4fbb-8ada-5ce510380ad0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/fix-dialectos-hono-alerts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@simongonzalezdc simongonzalezdc merged commit 9ca978e into main Jun 7, 2026
9 checks passed
@simongonzalezdc simongonzalezdc deleted the codex/fix-dialectos-hono-alerts branch June 7, 2026 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant