[dependabot]

Bumps hono from 4.13.7 to 4.13.14.

Release notes

Sourced from hono's releases.

v4.13.14

What's Changed

• docs(contributing): ask for issues instead of RPs honojs/hono#5526
• docs(readme): sync the contributing list with CONTRIBUTING.md honojs/hono#5527
• fix(adapters): accept Hono v5 prereleases in the hono peer range honojs/hono#5537
• chore: unified oxfmt and oxlint config honojs/hono#5518
• docs(readme): remove the deepwiki badge honojs/hono#5548
• fix(serve-static): only serve GET and HEAD requests honojs/hono#5514
• fix(build): keep barrel imports in the bundled d.ts honojs/hono#5557
• fix(jsx): preserve self-closing void elements in cloneElement honojs/hono#5314
• fix(css): keep "//" inside an unquoted url() when minifying honojs/hono#5450
• fix(css): keep the descendant combinator before a pseudo-class when minifying honojs/hono#5451
• fix(serve-static): respect q-values in Accept-Encoding for precompressed files honojs/hono#5436
• fix(helper/route): match regex params in basePath() the same way as the router honojs/hono#5498
• fix(trie-router): keep first value for duplicate path params honojs/hono#5423
• fix(hono-base): disallow getPath when strict is false honojs/hono#5563
• fix(css): Fix multiline CSS handling in style replacement honojs/hono#5405
• feat(bearer-auth): allow MessageFunction to return a Response honojs/hono#5269
• fix(utils/url): preserve encoded duplicate query order honojs/hono#5495

Full Changelog: honojs/hono@v4.13.13...v4.13.14

v4.13.13

Mount Middleware

app.mount() is now available as the Mount Middleware, hono/mount. It is just a handler, so you register it with app.all():

import { Router as IttyRouter } from 'itty-router'
import { Hono } from 'hono'
import { mount } from 'hono/mount'
const ittyRouter = IttyRouter()
ittyRouter.get('/hello', () => new Response('Hello from itty-router'))
const app = new Hono()
app.all('/itty-router/*', mount(ittyRouter.handle))

app.mount() still works in v4 but is deprecated and will be removed in v5. Migrating is a one-line change:

- app.mount('/itty-router', ittyRouter.handle)
+ app.all('/itty-router/*', mount(ittyRouter.handle))

What's Changed

• test(client): simulate network error for undefined route in parseResponse test in honojs/hono#5439
• docs(request): fix jsdoc comments for some getters in honojs/hono#5445
• fix(jsx): allow JSXNode function component results in honojs/hono#5476

... (truncated)

Commits

• bac5c4a 4.13.14
• eb78eca fix(utils/url): preserve encoded duplicate query order (#5495)
• 06a45bc feat(bearer-auth): allow MessageFunction to return a Response (#5269)
• 5ca49b0 fix(css): Fix multiline CSS handling in style replacement (#5405)
• e9c0107 fix(hono-base): disallow getPath when strict is false (#5563)
• 08807ce fix(trie-router): keep first value for duplicate path params (#5422) (#5423)
• e77c7c8 fix(helper/route): match regex params in basePath() the same way as the route...
• d54720d fix(serve-static): respect q-values in Accept-Encoding for precompressed file...
• ae401f0 fix(css): keep the descendant combinator before a pseudo-class when minifying...
• 2013fed fix(css): keep "//" inside an unquoted url() when minifying (#5450)
• Additional commits viewable in compare view

[github-actions]

👋 Friendly nudge — this PR has had no activity for 7 days.

What needs attention:

• 👀 No approving reviews yet. Request a review from a teammate.
• ⬇️ 12 commits behind dev. Rebase to pick up latest changes.

---

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

[dependabot]

Superseded by #2396.