What's Changed

• docs: changed as even smaller by @EdamAme-x in #3664
• chore(build): fix progress of log by @EdamAme-x in #3665
• chore(benchmark): add qs for query-param by @yusukebe in #3674
• feat(helper/factory): Calculate Context Type in createHandlers by @sushichan044 in #3670
• ci: compare bundle size by @EdamAme-x in #3661
• chore: enable formatting perf-measures by @yusukebe in #3683
• chore: lint build and perf-measures by @yusukebe in #3686
• ci: Display performance measurement results as custom metrics by @k2tzumi in #3491
• fix(base): define errorHandler with private not use # by @yusukebe in #3692

New Contributors

• @sushichan044 made their first contribution in #3670
• @k2tzumi made their first contribution in #3491

Full Changelog: v4.6.10...v4.6.11

What's Changed

• chore: format no-response.yml by @yusukebe in #3622
• ci(deno): merge deno runtime coverage by @usualoma in #3632
• chore: bump devDependencies by @EdamAme-x in #3633
• fix(jsr): fix missing exports by @EdamAme-x in #3636
• refactor(hono-base): use object abbreviation notation by @EdamAme-x in #3640
• chore(build): validate if exporting is correct in package.json and jsr.json by @EdamAme-x in #3638
• fix(serveStatic): add guard to prevent reading empty folders by @oussamasf in #3639
• docs(service-worker): fix module docs for service worker adapter by @rwv in #3645
• refactor(hono-base): remove unneeded processes and variables by @EdamAme-x in #3649
• perf(trie-router): optimize and remove unnecessary processes by @EdamAme-x in #3647
• refactor(router): use # for private props to reduce the minified bundle size by @EdamAme-x in #3660
• fix(middleware/combine): prevent c.req.routeIndex from being changed by @usualoma in #3663

New Contributors

• @oussamasf made their first contribution in #3639
• @rwv made their first contribution in #3645

Full Changelog: v4.6.9...v4.6.10

What's Changed

• refactor: fix typos by @mattn in #3583
• fix(req): correct c.req.param decodes invalid percent strings by @yusukebe in #3573
• fix(jsx/dom): fix memo for DOM renderer by @usualoma in #3568
• fix(jsx/dom): fix dom rendering bugs for fragment. by @usualoma in #3569
• perf(compose): check if it is a instance only once by @EdamAme-x in #3585
• perf(router): use .concat instead of spread syntax by @EdamAme-x in #3584
• fix(types): remove any and fix types of adapter/deno by @EdamAme-x in #3291
• refactor(timing/utils-body): a few minor edits by @sharma-shray in #3557
• fix(hono-base): remove .matchRoute and reduce bundle size by @EdamAme-x in #3595
• perf(utils/url): improve performance of url utility by @EdamAme-x in #3593
• perf(context): improve performance of context (setHeaders) by @EdamAme-x in #3592
• refactor(helper/html): Prefer Array.isArray over instanceof Array by @exoego in #3601
• refactor: compare with undefined directly by @exoego in #3602
• refactor: remove useless spread by @exoego in #3600
• refactor(context): use simple for-of syntax by @usualoma in #3598
• feat(context): allow URL object on c.redirect() by @cometkim in #3609
• ci: Use latest version of Bun and Deno for CI by @fel1x-developer in #3554
• chore(ISSUE_TEMPLATE): encourage them to add a version if possible by @EdamAme-x in #3599
• perf(middleware/logger): optimize color status by @exoego in #3603
• refactor(utils/mime): make object and type commonality by @EdamAme-x in #3606
• chore: automatically close issues marked as “not bug” over time by @EdamAme-x in #3611
• perf(utils): use | 0 instead of Math.floor by @EdamAme-x in #3605
• perf(helper/cookie): fast-path for name specified by @exoego in #3608
• refactor: use # for private methods to reduce the minified file size by @yusukebe in #3596
• fix(helper/websocket): allow custom events to be passed to generics by @EdamAme-x in #3616
• fix(middleware/etag): generate etag hash value from all chunks by @usualoma in #3604
• fix(utils/crypto): fix types of crypto utility by @EdamAme-x in #3614

New Contributors

• @mattn made their first contribution in #3583
• @sharma-shray made their first contribution in #3557
• @fel1x-developer made their first contribution in #3554

Full Changelog: v4.6.8...v4.6.9

What's Changed

• fix(bun/ws): fix invalid types by @nakasyou in #3562
• fix(utils/cookie): partitioned typo in CookieOptions by @imcotton in #3566
• fix(websocket): Fix typo in WSContextInit type by @Ariel-Moroshko in #3575
• fix(websocket): prevent sending entire buffer when streaming Uint8Array chunks by @Ariel-Moroshko in #3570
• fix(bun/ws): supoort --hot by @nakasyou in #3576
• feat(header): suggest name of header and combine in one file by @EdamAme-x in #3577
• fix(devcontainer): remove unknown flag on docker-compose by @EdamAme-x in #3582
• fix(types): replace Hono with HonoBase to get better consistency of types by @m-shaka in #3580

New Contributors

• @Ariel-Moroshko made their first contribution in #3575

Full Changelog: v4.6.7...v4.6.8

What's Changed

• fix(vercel): remove requestContext by @yusukebe in #3549
• feat(jwt): Support custom secret keys for signing JWTs by @kaandok in #3546
• feat(ws): Make WebSocket adapter more changeable by @nakasyou in #3531
• perf(router): improve performance of router by @EdamAme-x in #3526

New Contributors

• @kaandok made their first contribution in #3546

Full Changelog: v4.6.6...v4.6.7

What's Changed

• docs(powered-by): add JSDoc by @yusukebe in #3520
• chore: podman support for devcontainer by @marcomuser in #3529
• refactor(secure-headers): refine secureHeadersNonce init by @imcotton in #3535
• fix(serve-static): silence NotFound warning on Deno by @pablo-abc in #3542
• fix(client): return query params in $url by @alex-grover in #3541

New Contributors

• @marcomuser made their first contribution in #3529
• @imcotton made their first contribution in #3535
• @pablo-abc made their first contribution in #3542
• @alex-grover made their first contribution in #3541

Full Changelog: v4.6.5...v4.6.6

Security fix for CSRF Protection Middleware

This release includes a security fix for CSRF Protection Middleware. If you are using CSRF Protection Middleware, please upgrade this hono package immediately.

Before this release, a request without a Content-Type header can bypass the protection. This fix does not allow it. See: GHSA-2234-fmw7-43wr

What's Changed

• perf(types): replace intersection with union to get better perf by @m-shaka in #3443
• ci: use Deno v2 by @yusukebe in #3506
• ci: use Deno v2 for a test running for deno by @nakasyou in #3509
• fix(types): rm ExcludeEmptyObject to fix massively increased type instantiations by @m-shaka in #3507
• fix(cors): avoid setting Access-Control-Allow-Origin if there is no matching origin by @uki00a in #3510
• feat(powered-by): optional server name by @PatrickJS in #3492
• fix(factory): revert PR #3498 by @yusukebe in #3515
• fix(build): remove private fields by @nakasyou in #3514

New Contributors

• @uki00a made their first contribution in #3510
• @PatrickJS made their first contribution in #3492

Full Changelog: v4.6.4...v4.6.5

What's Changed

• chore: upgrade dependencies by @yusukebe in #3446
• chore: remove crypto-js from dev dependencies by @yusukebe in #3447
• chore(test): suppress no-unused-vars "'x' is assigned a value but only used as type" by @exoego in #3451
• chore(test): include bun coverage by @exoego in #3457
• test(deno): remove duplicated app.get by @exoego in #3469
• fix(types): add key to IntrinsicAttributes by @codehz in #3474
• fix(factory): relax Bindings and Variables for createMiddleware by @yusukebe in #3498
• fix(service-worker): bind fetch to globalThis by @sapphi-red in #3500
• refactor(jsx): add override to toStringToBuffer in classes extending JSXNode by @yusukebe in #3505

New Contributors

• @sapphi-red made their first contribution in #3500

Full Changelog: v4.6.3...v4.6.4

This release has many new features, but each feature is small, so we've released it as a patch release.

What's Changed

• chore: rename runtime_tests to runtime-tests by @yusukebe in #3419
• ci: Type check perf by @m-shaka in #3406
• refactor(jsx/streaming): Clarified the type of renderToReadableStream. by @usualoma in #3434
• perf(types): use homomorphic mapped type to reduce conditional branches by @m-shaka in #3440
• ci: prettify type check result and rm a comment by @m-shaka in #3442
• fix(types): useSyncExternalStore type by @codehz in #3437
• fix(combine/every): make every middleware work with short-circuiting middlewares by @paolostyle in #3441
• feat(secureHeader): add CSP Report-Only mode support by @isoppp in #3413
• feat(jwt): make JwtVariables generic for improved type safety by @TinsFox in #3428
• feat(request): Make request.ts available throught JSR for frameworks that need to instantiate HonoRequest by @Sorikairox in #3425
• feat(jsx/precompile): Normalization and stringification of attribute values as renderToString by @usualoma in #3432
• feat(serve-static): support absolute root by @yusukebe in #3420

New Contributors

• @codehz made their first contribution in #3437
• @paolostyle made their first contribution in #3441
• @isoppp made their first contribution in #3413
• @TinsFox made their first contribution in #3428
• @Sorikairox made their first contribution in #3425

Full Changelog: v4.6.2...v4.6.3

What's Changed

• chore(lint): ESLint v9 by @yusukebe in #3393
• perf(serve-static): performance optimization for precompressed feature by @usualoma in #3414
• fix(serve-static): use application/octet-stream if the mime type is not detected by @usualoma in #3415

Full Changelog: v4.6.1...v4.6.2