From ea66e6c9c71e6316b79335d879f2c07623281aae Mon Sep 17 00:00:00 2001 From: Pouzor Date: Tue, 9 Jun 2026 16:29:52 +0200 Subject: [PATCH] chore: bump hono to 4.12.21+ and ignore versioned db backups Add npm override forcing hono>=4.12.21 to resolve 4 Dependabot alerts (transitive via shadcn CLI, dev-only). Add *.db.back-* to .gitignore to exclude versioned database backups. ha-relevant: no --- .gitignore | 1 + frontend/package-lock.json | 6 +++--- frontend/package.json | 3 +++ 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 252f8e0..70c818c 100644 --- a/.gitignore +++ b/.gitignore @@ -46,6 +46,7 @@ htmlcov/ *.db-shm *.db-wal *.db.back +*.db.back-* # Docker .docker/ diff --git a/frontend/package-lock.json b/frontend/package-lock.json index 787af1c..1ce9089 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -6196,9 +6196,9 @@ } }, "node_modules/hono": { - "version": "4.12.18", - "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.18.tgz", - "integrity": "sha512-RWzP96k/yv0PQfyXnWjs6zot20TqfpfsNXhOnev8d1InAxubW93L11/oNUc3tQqn2G0bSdAOBpX+2uDFHV7kdQ==", + "version": "4.12.25", + "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.25.tgz", + "integrity": "sha512-2NFaIyNVgJmBs/ecmtGzlmluTFs5cHEWGTdu0t1HBwYzoGXOL5nUQBRMXsXWla5i4KkG//QMzVP88m1+I3fdAQ==", "license": "MIT", "engines": { "node": ">=16.9.0" diff --git a/frontend/package.json b/frontend/package.json index 4661af3..80ac42d 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -37,6 +37,9 @@ "tw-animate-css": "^1.4.0", "zustand": "^5.0.11" }, + "overrides": { + "hono": "^4.12.21" + }, "devDependencies": { "@eslint/js": "^9.39.1", "@tailwindcss/vite": "^4.2.1",