@depup/hono 4.13.10-depup.0 → 4.13.11-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/hono
 
 | Field | Value |
 |-------|-------|
-| Original | [hono](https://www.npmjs.com/package/hono) @ 4.13.10 |
-| Processed | 2026-09-28 |
+| Original | [hono](https://www.npmjs.com/package/hono) @ 4.13.11 |
+| Processed | 2026-09-29 |
 | Smoke test | passed |
 | Deps updated | 0 |
 

package/changes.json

@@ -1,5 +1,5 @@
 {
   "bumped": {},
-  "timestamp": "2026-09-28T16:11:25.863Z",
+  "timestamp": "2026-09-29T08:14:19.115Z",
   "totalUpdated": 0
 }

package/dist/cjs/adapter/bun/websocket.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_helper_websocket_index = require("../../helper/websocket/index.js");
 const require_adapter_bun_server = require("./server.js");
+const require_helper_websocket_index = require("../../helper/websocket/index.js");
 //#region src/adapter/bun/websocket.ts
 /**
 * @internal

package/dist/cjs/middleware/language/language.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_utils_accept = require("../../utils/accept.js");
 const require_helper_cookie_index = require("../../helper/cookie/index.js");
+const require_utils_accept = require("../../utils/accept.js");
 //#region src/middleware/language/language.ts
 const DEFAULT_OPTIONS = {
 	order: [

package/dist/cjs/middleware/serve-static/index.js

@@ -23,6 +23,7 @@ const serveStatic = (options) => {
 		let filename;
 		if (options.path) filename = options.path;
 		else try {
+			if (!options.allowPercentInPath && c.req.path.includes("%")) throw new Error();
 			filename = require_utils_url.tryDecodeURI(c.req.path);
 			if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) throw new Error();
 		} catch {

package/dist/middleware/language/language.js

@@ -1,5 +1,5 @@
-import { getCookie, setCookie } from "../../helper/cookie/index.js";
 import { parseAccept } from "../../utils/accept.js";
+import { getCookie, setCookie } from "../../helper/cookie/index.js";
 //#region src/middleware/language/language.ts
 const DEFAULT_OPTIONS = {
 	order: [

package/dist/middleware/serve-static/index.js

@@ -22,6 +22,7 @@ const serveStatic = (options) => {
 		let filename;
 		if (options.path) filename = options.path;
 		else try {
+			if (!options.allowPercentInPath && c.req.path.includes("%")) throw new Error();
 			filename = tryDecodeURI(c.req.path);
 			if (/(?:^|[\/\\])\.{1,2}(?:$|[\/\\])|[\/\\]{2,}|\\/.test(filename)) throw new Error();
 		} catch {

package/dist/types/middleware/serve-static/index.d.ts

@@ -5,6 +5,8 @@ export type ServeStaticOptions<E extends Env = Env> = {
   root?: string;
   path?: string;
   precompressed?: boolean;
+  /** Allow percent signs in the routed request path. Defaults to false. */
+  allowPercentInPath?: boolean;
   mimes?: Record<string, string>;
   rewriteRequestPath?: (path: string) => string;
   onFound?: (path: string, c: Context<E>) => void | Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/hono",
-  "version": "4.13.10-depup.0",
+  "version": "4.13.11-depup.0",
   "description": "Web framework built on Web Standards (with updated dependencies)",
   "main": "dist/cjs/index.js",
   "type": "module",
@@ -711,8 +711,8 @@
     "changes": {},
     "depsUpdated": 0,
     "originalPackage": "hono",
-    "originalVersion": "4.13.10",
-    "processedAt": "2026-09-28T16:11:53.106Z",
+    "originalVersion": "4.13.11",
+    "processedAt": "2026-09-29T08:14:40.422Z",
     "smokeTest": "passed"
   }
 }