@depup/hono 4.13.7-depup.0 → 4.13.9-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/hono
 
 | Field | Value |
 |-------|-------|
-| Original | [hono](https://www.npmjs.com/package/hono) @ 4.13.7 |
-| Processed | 2026-09-05 |
+| Original | [hono](https://www.npmjs.com/package/hono) @ 4.13.9 |
+| Processed | 2026-09-24 |
 | Smoke test | passed |
 | Deps updated | 0 |
 

package/changes.json

@@ -1,5 +1,5 @@
 {
   "bumped": {},
-  "timestamp": "2026-09-05T00:31:16.725Z",
+  "timestamp": "2026-09-24T08:12:48.055Z",
   "totalUpdated": 0
 }

package/dist/adapter/aws-lambda/handler.js

@@ -1,4 +1,5 @@
 // src/adapter/aws-lambda/handler.ts
+import { pipeline } from "node:stream/promises";
 import { decodeBase64, encodeBase64 } from "../../utils/encode.js";
 function sanitizeHeaderValue(value) {
   const hasNonAscii = /[^\x00-\x7F]/.test(value);
@@ -10,14 +11,14 @@ function sanitizeHeaderValue(value) {
 var getRequestContext = (event) => {
   return event.requestContext;
 };
-var streamToNodeStream = async (reader, writer) => {
+async function* readWebStream(reader) {
   let readResult = await reader.read();
   while (!readResult.done) {
-    writer.write(readResult.value);
+    yield readResult.value;
     readResult = await reader.read();
   }
-  writer.end();
-};
+}
+var streamToNodeStream = (reader, writer) => pipeline(readWebStream(reader), writer);
 var streamHandle = (app) => {
   return awslambda.streamifyResponse(
     async (event, responseStream, context) => {
@@ -201,7 +202,7 @@ var EventV1Processor = class extends EventProcessor {
         ([key, values]) => values.map((value) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&")
       ).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
     }
   }
   getCookies(_event, _headers) {
@@ -261,7 +262,7 @@ var ALBProcessor = class extends EventProcessor {
     if (event.multiValueQueryStringParameters) {
       return Object.entries(event.multiValueQueryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value.join(`&${key}=`)}`).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${key}=${value}`).join("&");
     }
   }
   getCookies(event, headers) {
@@ -343,7 +344,10 @@ var isLatticeEventV2 = (event) => {
   return false;
 };
 var defaultIsContentTypeBinary = (contentType) => {
-  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/adapter/lambda-edge/handler.js

@@ -17,7 +17,8 @@ var handle = (app) => {
     const [context, callback] = args;
     let callbackError = null;
     let callbackResult;
-    const res = await app.fetch(createRequest(event), {
+    const cf = getCloudFrontRecord(event);
+    const res = await app.fetch(createRequest(cf), {
       event,
       context,
       callback: (err, result) => {
@@ -27,9 +28,9 @@ var handle = (app) => {
         }
         callback?.(err, result);
       },
-      config: event.Records[0].cf.config,
-      request: event.Records[0].cf.request,
-      response: event.Records[0].cf.response
+      config: cf.config,
+      request: cf.request,
+      response: cf.response
     });
     if (callbackError) {
       throw callbackError;
@@ -48,17 +49,27 @@ var createResult = async (res) => {
     ...isBase64Encoded && { bodyEncoding: "base64" }
   };
 };
-var createRequest = (event) => {
-  const queryString = event.Records[0].cf.request.querystring;
-  const host = event.Records[0].cf.request.headers?.host?.[0]?.value || event.Records[0].cf.config.distributionDomainName;
-  const urlPath = `https://${host}${event.Records[0].cf.request.uri}`;
+var getCloudFrontRecord = (event) => {
+  const cf = event?.Records?.[0]?.cf;
+  if (!cf?.request) {
+    throw new TypeError(
+      "Unable to map the CloudFront event to a Request: expected `Records[0].cf.request` in the Lambda@Edge event."
+    );
+  }
+  return cf;
+};
+var createRequest = (cf) => {
+  const request = cf.request;
+  const queryString = request.querystring;
+  const host = request.headers?.host?.[0]?.value || cf.config?.distributionDomainName;
+  const urlPath = `https://${host}${request.uri}`;
   const url = queryString ? `${urlPath}?${queryString}` : urlPath;
   const headers = new Headers();
-  Object.entries(event.Records[0].cf.request.headers).forEach(([k, v]) => {
+  Object.entries(request.headers ?? {}).forEach(([k, v]) => {
     v.forEach((header) => headers.append(k, header.value));
   });
-  const requestBody = event.Records[0].cf.request.body;
-  const method = event.Records[0].cf.request.method;
+  const requestBody = request.body;
+  const method = request.method;
   const rawBody = createBody(method, requestBody);
   let body = rawBody;
   if (rawBody !== void 0) {
@@ -85,7 +96,10 @@ var createBody = (method, requestBody) => {
   return requestBody.data;
 };
 var isContentTypeBinary = (contentType) => {
-  return !/^(text\/(plain|html|css|javascript|csv).*|application\/(.*json|.*xml).*|image\/svg\+xml.*)$/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/cjs/adapter/aws-lambda/handler.js

@@ -29,6 +29,7 @@ __export(handler_exports, {
   streamHandle: () => streamHandle
 });
 module.exports = __toCommonJS(handler_exports);
+var import_promises = require("node:stream/promises");
 var import_encode = require("../../utils/encode");
 function sanitizeHeaderValue(value) {
   const hasNonAscii = /[^\x00-\x7F]/.test(value);
@@ -40,14 +41,14 @@ function sanitizeHeaderValue(value) {
 const getRequestContext = (event) => {
   return event.requestContext;
 };
-const streamToNodeStream = async (reader, writer) => {
+async function* readWebStream(reader) {
   let readResult = await reader.read();
   while (!readResult.done) {
-    writer.write(readResult.value);
+    yield readResult.value;
     readResult = await reader.read();
   }
-  writer.end();
-};
+}
+const streamToNodeStream = (reader, writer) => (0, import_promises.pipeline)(readWebStream(reader), writer);
 const streamHandle = (app) => {
   return awslambda.streamifyResponse(
     async (event, responseStream, context) => {
@@ -231,7 +232,7 @@ class EventV1Processor extends EventProcessor {
         ([key, values]) => values.map((value) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&")
       ).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
     }
   }
   getCookies(_event, _headers) {
@@ -291,7 +292,7 @@ class ALBProcessor extends EventProcessor {
     if (event.multiValueQueryStringParameters) {
       return Object.entries(event.multiValueQueryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value.join(`&${key}=`)}`).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${key}=${value}`).join("&");
     }
   }
   getCookies(event, headers) {
@@ -373,7 +374,10 @@ const isLatticeEventV2 = (event) => {
   return false;
 };
 const defaultIsContentTypeBinary = (contentType) => {
-  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/cjs/adapter/lambda-edge/handler.js

@@ -50,7 +50,8 @@ const handle = (app) => {
     const [context, callback] = args;
     let callbackError = null;
     let callbackResult;
-    const res = await app.fetch(createRequest(event), {
+    const cf = getCloudFrontRecord(event);
+    const res = await app.fetch(createRequest(cf), {
       event,
       context,
       callback: (err, result) => {
@@ -60,9 +61,9 @@ const handle = (app) => {
         }
         callback?.(err, result);
       },
-      config: event.Records[0].cf.config,
-      request: event.Records[0].cf.request,
-      response: event.Records[0].cf.response
+      config: cf.config,
+      request: cf.request,
+      response: cf.response
     });
     if (callbackError) {
       throw callbackError;
@@ -81,17 +82,27 @@ const createResult = async (res) => {
     ...isBase64Encoded && { bodyEncoding: "base64" }
   };
 };
-const createRequest = (event) => {
-  const queryString = event.Records[0].cf.request.querystring;
-  const host = event.Records[0].cf.request.headers?.host?.[0]?.value || event.Records[0].cf.config.distributionDomainName;
-  const urlPath = `https://${host}${event.Records[0].cf.request.uri}`;
+const getCloudFrontRecord = (event) => {
+  const cf = event?.Records?.[0]?.cf;
+  if (!cf?.request) {
+    throw new TypeError(
+      "Unable to map the CloudFront event to a Request: expected `Records[0].cf.request` in the Lambda@Edge event."
+    );
+  }
+  return cf;
+};
+const createRequest = (cf) => {
+  const request = cf.request;
+  const queryString = request.querystring;
+  const host = request.headers?.host?.[0]?.value || cf.config?.distributionDomainName;
+  const urlPath = `https://${host}${request.uri}`;
   const url = queryString ? `${urlPath}?${queryString}` : urlPath;
   const headers = new Headers();
-  Object.entries(event.Records[0].cf.request.headers).forEach(([k, v]) => {
+  Object.entries(request.headers ?? {}).forEach(([k, v]) => {
     v.forEach((header) => headers.append(k, header.value));
   });
-  const requestBody = event.Records[0].cf.request.body;
-  const method = event.Records[0].cf.request.method;
+  const requestBody = request.body;
+  const method = request.method;
   const rawBody = createBody(method, requestBody);
   let body = rawBody;
   if (rawBody !== void 0) {
@@ -118,7 +129,10 @@ const createBody = (method, requestBody) => {
   return requestBody.data;
 };
 const isContentTypeBinary = (contentType) => {
-  return !/^(text\/(plain|html|css|javascript|csv).*|application\/(.*json|.*xml).*|image\/svg\+xml.*)$/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/cjs/context.js

@@ -424,7 +424,7 @@ class Context {
     const locationString = String(location);
     this.header(
       "Location",
-      // Multibyes should be encoded
+      // Multibytes should be encoded
       // eslint-disable-next-line no-control-regex
       !/[^\x00-\xFF]/.test(locationString) ? locationString : encodeURI(locationString)
     );

package/dist/cjs/helper/accepts/accepts.js

@@ -23,15 +23,17 @@ __export(accepts_exports, {
 module.exports = __toCommonJS(accepts_exports);
 var import_accept = require("../../utils/accept");
 const matchType = (acceptType, supportedType) => {
-  if (acceptType === supportedType) {
+  const accept = acceptType.toLowerCase();
+  const supported = supportedType.toLowerCase();
+  if (accept === supported) {
     return true;
   }
-  if (acceptType === "*/*" || acceptType === "*") {
+  if (accept === "*/*" || accept === "*") {
     return false;
   }
-  if (acceptType.endsWith("/*")) {
-    const [acceptMain] = acceptType.split("/");
-    const [supportedMain] = supportedType.split("/");
+  if (accept.endsWith("/*")) {
+    const [acceptMain] = accept.split("/");
+    const [supportedMain] = supported.split("/");
     return acceptMain === supportedMain;
   }
   return false;
@@ -47,7 +49,7 @@ const getSpecificity = (type) => {
 };
 const defaultMatch = (accepts2, config) => {
   const { supports, default: defaultSupport } = config;
-  const sortedAccepts = accepts2.slice().sort((a, b) => {
+  const sortedAccepts = accepts2.filter((accept) => accept.q > 0).sort((a, b) => {
     if (b.q !== a.q) {
       return b.q - a.q;
     }

package/dist/cjs/jsx/components.js

@@ -110,7 +110,7 @@ const ErrorBoundary = async ({ children, fallback, fallbackRender, onError }) =>
   if (resArray.some((res) => res instanceof Promise)) {
     getResume();
     const index = errorBoundaryCounter++;
-    const replaceRe = RegExp(`(<template id="E:${index}"></template>.*?)(.*?)(<!--E:${index}-->)`);
+    const replaceRe = RegExp(`(<template id="E:${index}"></template>)(.*?)(<!--E:${index}-->)`, "s");
     let caught = false;
     const catchCallback = async ({ error: error2, buffer }) => {
       if (caught) {

package/dist/cjs/jsx/dom/render.js

@@ -355,6 +355,17 @@ const applyNodeObject = (node, container, isNew) => {
   }
 };
 const isSameContext = (oldContexts, newContexts) => !!(oldContexts && oldContexts.length === newContexts.length && oldContexts.every((ctx, i) => ctx[1] === newContexts[i][1]));
+const indexChildrenByKey = (children) => {
+  const index = /* @__PURE__ */ new Map();
+  for (const child of children) {
+    const key = child.key;
+    if (index.has(key)) {
+      return;
+    }
+    index.set(key, child);
+  }
+  return index;
+};
 const fallbackUpdateFnArrayMap = /* @__PURE__ */ new WeakMap();
 const build = (context, node, children) => {
   const buildWithPreviousChildren = !children && node.pC;
@@ -368,9 +379,11 @@ const build = (context, node, children) => {
       foundErrorHandler = children[0][import_constants.DOM_ERROR_HANDLER];
       context[5].push([context, foundErrorHandler, node]);
     }
-    const oldVChildren = buildWithPreviousChildren ? [...node.pC] : node.vC ? [...node.vC] : void 0;
+    let oldVChildren = buildWithPreviousChildren ? [...node.pC] : node.vC ? [...node.vC] : void 0;
     const vChildren = [];
     let prevNode;
+    let scanBudget = (oldVChildren?.length || 0) * 2;
+    let oldChildrenByKey;
     for (let i = 0; i < children.length; i++) {
       if (Array.isArray(children[i])) {
         children.splice(i, 1, ...children[i].flat(Infinity));
@@ -389,13 +402,35 @@ const build = (context, node, children) => {
           }
         }
         let oldChild;
-        if (oldVChildren && oldVChildren.length) {
-          const i2 = oldVChildren.findIndex(
-            isNodeString(child) ? (c) => isNodeString(c) : child.key !== void 0 ? (c) => c.key === child.key && c.tag === child.tag : (c) => c.tag === child.tag
-          );
-          if (i2 !== -1) {
-            oldChild = oldVChildren[i2];
-            oldVChildren.splice(i2, 1);
+        if (oldChildrenByKey && child.key === void 0 && !isNodeString(child)) {
+          oldVChildren = [...oldChildrenByKey.values()];
+          oldChildrenByKey = void 0;
+        }
+        if (oldChildrenByKey) {
+          const key = child.key;
+          const candidate = oldChildrenByKey.get(key);
+          if (candidate && (isNodeString(child) ? isNodeString(candidate) : candidate.tag === child.tag && candidate.key === key)) {
+            oldChild = candidate;
+            oldChildrenByKey.delete(key);
+          }
+        } else if (oldVChildren && oldVChildren.length) {
+          const first = oldVChildren[0];
+          const isMatchFirst = isNodeString(child) ? isNodeString(first) : !isNodeString(first) && (child.key !== void 0 ? first.key === child.key && first.tag === child.tag : first.tag === child.tag);
+          if (isMatchFirst) {
+            oldChild = oldVChildren.shift();
+          } else {
+            const i2 = oldVChildren.findIndex(
+              isNodeString(child) ? (c) => isNodeString(c) : child.key !== void 0 ? (c) => c.key === child.key && c.tag === child.tag : (c) => c.tag === child.tag
+            );
+            scanBudget -= i2 === -1 ? oldVChildren.length : i2;
+            if (i2 !== -1) {
+              oldChild = oldVChildren[i2];
+              oldVChildren.splice(i2, 1);
+            }
+            if (scanBudget < 0) {
+              scanBudget = Infinity;
+              oldChildrenByKey = indexChildrenByKey(oldVChildren);
+            }
           }
         }
         if (oldChild) {
@@ -441,6 +476,7 @@ const build = (context, node, children) => {
         prevNode = child;
       }
     }
+    oldVChildren = oldChildrenByKey ? [...oldChildrenByKey.values()] : oldVChildren;
     node.vR = buildWithPreviousChildren ? [...node.vC, ...oldVChildren || []] : oldVChildren || [];
     node.vC = vChildren;
     if (buildWithPreviousChildren) {

package/dist/cjs/jsx/streaming.js

@@ -82,7 +82,7 @@ const Suspense = async ({
           const content = htmlArray.join("");
           if (buffer) {
             buffer[0] = buffer[0].replace(
-              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`),
+              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`, "s"),
               () => content
             );
           }

package/dist/cjs/middleware/language/language.js

@@ -101,7 +101,10 @@ function detectFromHeader(c, options) {
       return void 0;
     }
     const languages = parseAcceptLanguage(acceptLanguage);
-    for (const { lang } of languages) {
+    for (const { lang, q } of languages) {
+      if (q === 0) {
+        continue;
+      }
       const normalizedLang = normalizeLanguage(lang, options);
       if (normalizedLang) {
         return normalizedLang;

package/dist/cjs/middleware/pretty-json/index.js

@@ -28,8 +28,14 @@ const prettyJSON = (options) => {
     await next();
     const contentType = c.res.headers.get("Content-Type");
     if (pretty && contentType && jsonContentTypeRegex.test(contentType)) {
-      const obj = await c.res.json();
+      let obj;
+      try {
+        obj = await c.res.clone().json();
+      } catch {
+        return;
+      }
       c.res = new Response(JSON.stringify(obj, null, options?.space ?? 2), c.res);
+      c.res.headers.delete("Content-Length");
     }
   };
 };

package/dist/cjs/request.js

@@ -116,7 +116,10 @@ class HonoRequest {
         if (anyCachedKey === "json") {
           body = JSON.stringify(body);
         }
-        return new Response(body)[key]();
+        const contentType = anyCachedKey === "formData" ? void 0 : raw.headers.get("content-type");
+        return new Response(body, {
+          headers: contentType ? { "Content-Type": contentType } : void 0
+        })[key]();
       });
     }
     return bodyCache[key] = raw[key]();

package/dist/cjs/router/linear-router/router.js

@@ -108,11 +108,11 @@ class LinearRouter {
               } else {
                 let endValuePos = path.indexOf("/", pos + 1);
                 if (endValuePos === -1) {
-                  if (pos + 1 === path.length) {
-                    continue ROUTES_LOOP;
-                  }
                   endValuePos = path.length;
                 }
+                if (endValuePos === pos + 1) {
+                  continue ROUTES_LOOP;
+                }
                 value = path.slice(pos + 1, endValuePos);
                 pos = endValuePos;
               }

package/dist/cjs/utils/accept.js

@@ -201,7 +201,7 @@ const parseAccept = (acceptHeader) => {
     ;
     [i, accept] = getNextAcceptValue(acceptHeader, i);
     if (accept) {
-      accept.q = parseQuality(accept.params.q);
+      accept.q = parseQuality(accept.params.q ?? accept.params.Q);
       values.push(accept);
       if (lastAccept && lastAccept.q < accept.q) {
         requiresSort = true;
@@ -225,16 +225,13 @@ const parseQuality = (qVal) => {
     return 0;
   }
   const num = Number(qVal);
-  if (num === Infinity) {
+  if (Number.isNaN(num)) {
     return 1;
   }
-  if (num === -Infinity) {
+  if (num < 0) {
     return 0;
   }
-  if (Number.isNaN(num)) {
-    return 1;
-  }
-  if (num < 0 || num > 1) {
+  if (num > 1) {
     return 1;
   }
   return num;

package/dist/cjs/utils/jwt/jwt.js

@@ -120,12 +120,13 @@ const verify = async (token, publicKey, algOrOptions) => {
     }
   }
   const headerPayload = token.substring(0, token.lastIndexOf("."));
-  const verified = await (0, import_jws.verifying)(
-    publicKey,
-    alg,
-    (0, import_encode.decodeBase64Url)(tokenParts[2]),
-    import_utf8.utf8Encoder.encode(headerPayload)
-  );
+  let signature;
+  try {
+    signature = (0, import_encode.decodeBase64Url)(tokenParts[2]);
+  } catch {
+    throw new import_types.JwtTokenInvalid(token);
+  }
+  const verified = await (0, import_jws.verifying)(publicKey, alg, signature, import_utf8.utf8Encoder.encode(headerPayload));
   if (!verified) {
     throw new import_types.JwtTokenSignatureMismatched(token);
   }

package/dist/context.js

@@ -402,7 +402,7 @@ var Context = class {
     const locationString = String(location);
     this.header(
       "Location",
-      // Multibyes should be encoded
+      // Multibytes should be encoded
       // eslint-disable-next-line no-control-regex
       !/[^\x00-\xFF]/.test(locationString) ? locationString : encodeURI(locationString)
     );

package/dist/helper/accepts/accepts.js

@@ -1,15 +1,17 @@
 // src/helper/accepts/accepts.ts
 import { parseAccept } from "../../utils/accept.js";
 var matchType = (acceptType, supportedType) => {
-  if (acceptType === supportedType) {
+  const accept = acceptType.toLowerCase();
+  const supported = supportedType.toLowerCase();
+  if (accept === supported) {
     return true;
   }
-  if (acceptType === "*/*" || acceptType === "*") {
+  if (accept === "*/*" || accept === "*") {
     return false;
   }
-  if (acceptType.endsWith("/*")) {
-    const [acceptMain] = acceptType.split("/");
-    const [supportedMain] = supportedType.split("/");
+  if (accept.endsWith("/*")) {
+    const [acceptMain] = accept.split("/");
+    const [supportedMain] = supported.split("/");
     return acceptMain === supportedMain;
   }
   return false;
@@ -25,7 +27,7 @@ var getSpecificity = (type) => {
 };
 var defaultMatch = (accepts2, config) => {
   const { supports, default: defaultSupport } = config;
-  const sortedAccepts = accepts2.slice().sort((a, b) => {
+  const sortedAccepts = accepts2.filter((accept) => accept.q > 0).sort((a, b) => {
     if (b.q !== a.q) {
       return b.q - a.q;
     }

package/dist/jsx/components.js

@@ -88,7 +88,7 @@ var ErrorBoundary = async ({ children, fallback, fallbackRender, onError }) => {
   if (resArray.some((res) => res instanceof Promise)) {
     getResume();
     const index = errorBoundaryCounter++;
-    const replaceRe = RegExp(`(<template id="E:${index}"></template>.*?)(.*?)(<!--E:${index}-->)`);
+    const replaceRe = RegExp(`(<template id="E:${index}"></template>)(.*?)(<!--E:${index}-->)`, "s");
     let caught = false;
     const catchCallback = async ({ error: error2, buffer }) => {
       if (caught) {

package/dist/jsx/dom/render.js

@@ -332,6 +332,17 @@ var applyNodeObject = (node, container, isNew) => {
   }
 };
 var isSameContext = (oldContexts, newContexts) => !!(oldContexts && oldContexts.length === newContexts.length && oldContexts.every((ctx, i) => ctx[1] === newContexts[i][1]));
+var indexChildrenByKey = (children) => {
+  const index = /* @__PURE__ */ new Map();
+  for (const child of children) {
+    const key = child.key;
+    if (index.has(key)) {
+      return;
+    }
+    index.set(key, child);
+  }
+  return index;
+};
 var fallbackUpdateFnArrayMap = /* @__PURE__ */ new WeakMap();
 var build = (context, node, children) => {
   const buildWithPreviousChildren = !children && node.pC;
@@ -345,9 +356,11 @@ var build = (context, node, children) => {
       foundErrorHandler = children[0][DOM_ERROR_HANDLER];
       context[5].push([context, foundErrorHandler, node]);
     }
-    const oldVChildren = buildWithPreviousChildren ? [...node.pC] : node.vC ? [...node.vC] : void 0;
+    let oldVChildren = buildWithPreviousChildren ? [...node.pC] : node.vC ? [...node.vC] : void 0;
     const vChildren = [];
     let prevNode;
+    let scanBudget = (oldVChildren?.length || 0) * 2;
+    let oldChildrenByKey;
     for (let i = 0; i < children.length; i++) {
       if (Array.isArray(children[i])) {
         children.splice(i, 1, ...children[i].flat(Infinity));
@@ -366,13 +379,35 @@ var build = (context, node, children) => {
           }
         }
         let oldChild;
-        if (oldVChildren && oldVChildren.length) {
-          const i2 = oldVChildren.findIndex(
-            isNodeString(child) ? (c) => isNodeString(c) : child.key !== void 0 ? (c) => c.key === child.key && c.tag === child.tag : (c) => c.tag === child.tag
-          );
-          if (i2 !== -1) {
-            oldChild = oldVChildren[i2];
-            oldVChildren.splice(i2, 1);
+        if (oldChildrenByKey && child.key === void 0 && !isNodeString(child)) {
+          oldVChildren = [...oldChildrenByKey.values()];
+          oldChildrenByKey = void 0;
+        }
+        if (oldChildrenByKey) {
+          const key = child.key;
+          const candidate = oldChildrenByKey.get(key);
+          if (candidate && (isNodeString(child) ? isNodeString(candidate) : candidate.tag === child.tag && candidate.key === key)) {
+            oldChild = candidate;
+            oldChildrenByKey.delete(key);
+          }
+        } else if (oldVChildren && oldVChildren.length) {
+          const first = oldVChildren[0];
+          const isMatchFirst = isNodeString(child) ? isNodeString(first) : !isNodeString(first) && (child.key !== void 0 ? first.key === child.key && first.tag === child.tag : first.tag === child.tag);
+          if (isMatchFirst) {
+            oldChild = oldVChildren.shift();
+          } else {
+            const i2 = oldVChildren.findIndex(
+              isNodeString(child) ? (c) => isNodeString(c) : child.key !== void 0 ? (c) => c.key === child.key && c.tag === child.tag : (c) => c.tag === child.tag
+            );
+            scanBudget -= i2 === -1 ? oldVChildren.length : i2;
+            if (i2 !== -1) {
+              oldChild = oldVChildren[i2];
+              oldVChildren.splice(i2, 1);
+            }
+            if (scanBudget < 0) {
+              scanBudget = Infinity;
+              oldChildrenByKey = indexChildrenByKey(oldVChildren);
+            }
           }
         }
         if (oldChild) {
@@ -418,6 +453,7 @@ var build = (context, node, children) => {
         prevNode = child;
       }
     }
+    oldVChildren = oldChildrenByKey ? [...oldChildrenByKey.values()] : oldVChildren;
     node.vR = buildWithPreviousChildren ? [...node.vC, ...oldVChildren || []] : oldVChildren || [];
     node.vC = vChildren;
     if (buildWithPreviousChildren) {

package/dist/jsx/streaming.js

@@ -59,7 +59,7 @@ var Suspense = async ({
           const content = htmlArray.join("");
           if (buffer) {
             buffer[0] = buffer[0].replace(
-              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`),
+              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`, "s"),
               () => content
             );
           }

package/dist/middleware/language/language.js

@@ -71,7 +71,10 @@ function detectFromHeader(c, options) {
       return void 0;
     }
     const languages = parseAcceptLanguage(acceptLanguage);
-    for (const { lang } of languages) {
+    for (const { lang, q } of languages) {
+      if (q === 0) {
+        continue;
+      }
       const normalizedLang = normalizeLanguage(lang, options);
       if (normalizedLang) {
         return normalizedLang;

package/dist/middleware/pretty-json/index.js

@@ -7,8 +7,14 @@ var prettyJSON = (options) => {
     await next();
     const contentType = c.res.headers.get("Content-Type");
     if (pretty && contentType && jsonContentTypeRegex.test(contentType)) {
-      const obj = await c.res.json();
+      let obj;
+      try {
+        obj = await c.res.clone().json();
+      } catch {
+        return;
+      }
       c.res = new Response(JSON.stringify(obj, null, options?.space ?? 2), c.res);
+      c.res.headers.delete("Content-Length");
     }
   };
 };

package/dist/request.js

@@ -94,7 +94,10 @@ var HonoRequest = class {
         if (anyCachedKey === "json") {
           body = JSON.stringify(body);
         }
-        return new Response(body)[key]();
+        const contentType = anyCachedKey === "formData" ? void 0 : raw.headers.get("content-type");
+        return new Response(body, {
+          headers: contentType ? { "Content-Type": contentType } : void 0
+        })[key]();
       });
     }
     return bodyCache[key] = raw[key]();

package/dist/router/linear-router/router.js

@@ -87,11 +87,11 @@ var LinearRouter = class {
               } else {
                 let endValuePos = path.indexOf("/", pos + 1);
                 if (endValuePos === -1) {
-                  if (pos + 1 === path.length) {
-                    continue ROUTES_LOOP;
-                  }
                   endValuePos = path.length;
                 }
+                if (endValuePos === pos + 1) {
+                  continue ROUTES_LOOP;
+                }
                 value = path.slice(pos + 1, endValuePos);
                 pos = endValuePos;
               }

package/dist/types/helper/proxy/index.d.ts

@@ -27,7 +27,7 @@ interface ProxyFetch {
  * Fetch API wrapper for proxy.
  * The parameters and return value are the same as for `fetch` (except for the proxy-specific options).
  *
- * The “Accept-Encoding” header is replaced with an encoding that the current runtime can handle.
+ * The "Accept-Encoding" header is replaced with an encoding that the current runtime can handle.
  * Unnecessary response headers are deleted and a Response object is returned that can be returned
  * as is as a response from the handler.
  *

package/dist/types/helper/route/index.d.ts

@@ -31,7 +31,7 @@ export declare const matchedRoutes: (c: Context) => RouterRoute[];
  * Get the route path registered within the handler
  *
  * @param {Context} c - The context object
- * @param {number} index - The index of the root from which to retrieve the path, similar to Array.prototype.at(), where a negative number is the index counted from the end of the matching root. Defaults to the current root index.
+ * @param {number} index - The index of the route from which to retrieve the path, similar to Array.prototype.at(), where a negative number is the index counted from the end of the matching route. Defaults to the current route index.
  * @returns The route path registered within the handler
  *
  * @example
@@ -54,7 +54,7 @@ export declare const routePath: (c: Context, index?: number) => string;
  * Get the basePath of the as-is route specified by routing.
  *
  * @param {Context} c - The context object
- * @param {number} index - The index of the root from which to retrieve the path, similar to Array.prototype.at(), where a negative number is the index counted from the end of the matching root. Defaults to the current root index.
+ * @param {number} index - The index of the route from which to retrieve the path, similar to Array.prototype.at(), where a negative number is the index counted from the end of the matching route. Defaults to the current route index.
  * @returns The basePath of the as-is route specified by routing.
  *
  * @example

package/dist/types/middleware/combine/index.d.ts

@@ -66,7 +66,9 @@ export declare const every: (...middleware: (MiddlewareHandler | Condition)[]) =
  * If there are multiple targets to match any of them, they can be passed as an array.
  * If a string is passed, it will be treated as a path pattern to match.
  * If a Condition function is passed, it will be evaluated against the request context.
- * @param middleware - A composed middleware
+ * @param middleware - Middleware to run when the condition is not met.
+ * Multiple middleware can be passed, and they are applied in the order they are passed.
+ * @returns A composed middleware.
  *
  * @example
  * ```ts

package/dist/types/utils/types.d.ts

@@ -32,7 +32,7 @@ export type JSONValue = JSONObject | JSONArray | JSONPrimitive;
  * `JSON.stringify()` throws a `TypeError` when it encounters a `bigint` value,
  * unless a custom `replacer` function or `.toJSON()` method is provided.
  *
- * This behaviour can be controlled by the `TError` generic type parameter,
+ * This behavior can be controlled by the `TError` generic type parameter,
  * which defaults to `bigint | ReadonlyArray<bigint>`.
  * You can set it to `never` to disable this check.
  */

package/dist/utils/accept.js

@@ -180,7 +180,7 @@ var parseAccept = (acceptHeader) => {
     ;
     [i, accept] = getNextAcceptValue(acceptHeader, i);
     if (accept) {
-      accept.q = parseQuality(accept.params.q);
+      accept.q = parseQuality(accept.params.q ?? accept.params.Q);
       values.push(accept);
       if (lastAccept && lastAccept.q < accept.q) {
         requiresSort = true;
@@ -204,16 +204,13 @@ var parseQuality = (qVal) => {
     return 0;
   }
   const num = Number(qVal);
-  if (num === Infinity) {
+  if (Number.isNaN(num)) {
     return 1;
   }
-  if (num === -Infinity) {
+  if (num < 0) {
     return 0;
   }
-  if (Number.isNaN(num)) {
-    return 1;
-  }
-  if (num < 0 || num > 1) {
+  if (num > 1) {
     return 1;
   }
   return num;

package/dist/utils/jwt/jwt.js

@@ -109,12 +109,13 @@ var verify = async (token, publicKey, algOrOptions) => {
     }
   }
   const headerPayload = token.substring(0, token.lastIndexOf("."));
-  const verified = await verifying(
-    publicKey,
-    alg,
-    decodeBase64Url(tokenParts[2]),
-    utf8Encoder.encode(headerPayload)
-  );
+  let signature;
+  try {
+    signature = decodeBase64Url(tokenParts[2]);
+  } catch {
+    throw new JwtTokenInvalid(token);
+  }
+  const verified = await verifying(publicKey, alg, signature, utf8Encoder.encode(headerPayload));
   if (!verified) {
     throw new JwtTokenSignatureMismatched(token);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/hono",
-  "version": "4.13.7-depup.0",
+  "version": "4.13.9-depup.0",
   "description": "Web framework built on Web Standards (with updated dependencies)",
   "main": "dist/cjs/index.js",
   "type": "module",
@@ -711,8 +711,8 @@
     "changes": {},
     "depsUpdated": 0,
     "originalPackage": "hono",
-    "originalVersion": "4.13.7",
-    "processedAt": "2026-09-05T00:31:41.567Z",
+    "originalVersion": "4.13.9",
+    "processedAt": "2026-09-24T08:13:10.881Z",
     "smokeTest": "passed"
   }
 }