@depup/hono 4.13.8-depup.0 → 4.13.9-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/hono
 
 | Field | Value |
 |-------|-------|
-| Original | [hono](https://www.npmjs.com/package/hono) @ 4.13.8 |
-| Processed | 2026-09-15 |
+| Original | [hono](https://www.npmjs.com/package/hono) @ 4.13.9 |
+| Processed | 2026-09-24 |
 | Smoke test | passed |
 | Deps updated | 0 |
 

package/changes.json

@@ -1,5 +1,5 @@
 {
   "bumped": {},
-  "timestamp": "2026-09-15T08:13:39.969Z",
+  "timestamp": "2026-09-24T08:12:48.055Z",
   "totalUpdated": 0
 }

package/dist/adapter/aws-lambda/handler.js

@@ -202,7 +202,7 @@ var EventV1Processor = class extends EventProcessor {
         ([key, values]) => values.map((value) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&")
       ).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
     }
   }
   getCookies(_event, _headers) {
@@ -262,7 +262,7 @@ var ALBProcessor = class extends EventProcessor {
     if (event.multiValueQueryStringParameters) {
       return Object.entries(event.multiValueQueryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value.join(`&${key}=`)}`).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${key}=${value}`).join("&");
     }
   }
   getCookies(event, headers) {
@@ -344,7 +344,10 @@ var isLatticeEventV2 = (event) => {
   return false;
 };
 var defaultIsContentTypeBinary = (contentType) => {
-  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/adapter/lambda-edge/handler.js

@@ -17,7 +17,8 @@ var handle = (app) => {
     const [context, callback] = args;
     let callbackError = null;
     let callbackResult;
-    const res = await app.fetch(createRequest(event), {
+    const cf = getCloudFrontRecord(event);
+    const res = await app.fetch(createRequest(cf), {
       event,
       context,
       callback: (err, result) => {
@@ -27,9 +28,9 @@ var handle = (app) => {
         }
         callback?.(err, result);
       },
-      config: event.Records[0].cf.config,
-      request: event.Records[0].cf.request,
-      response: event.Records[0].cf.response
+      config: cf.config,
+      request: cf.request,
+      response: cf.response
     });
     if (callbackError) {
       throw callbackError;
@@ -48,17 +49,27 @@ var createResult = async (res) => {
     ...isBase64Encoded && { bodyEncoding: "base64" }
   };
 };
-var createRequest = (event) => {
-  const queryString = event.Records[0].cf.request.querystring;
-  const host = event.Records[0].cf.request.headers?.host?.[0]?.value || event.Records[0].cf.config.distributionDomainName;
-  const urlPath = `https://${host}${event.Records[0].cf.request.uri}`;
+var getCloudFrontRecord = (event) => {
+  const cf = event?.Records?.[0]?.cf;
+  if (!cf?.request) {
+    throw new TypeError(
+      "Unable to map the CloudFront event to a Request: expected `Records[0].cf.request` in the Lambda@Edge event."
+    );
+  }
+  return cf;
+};
+var createRequest = (cf) => {
+  const request = cf.request;
+  const queryString = request.querystring;
+  const host = request.headers?.host?.[0]?.value || cf.config?.distributionDomainName;
+  const urlPath = `https://${host}${request.uri}`;
   const url = queryString ? `${urlPath}?${queryString}` : urlPath;
   const headers = new Headers();
-  Object.entries(event.Records[0].cf.request.headers).forEach(([k, v]) => {
+  Object.entries(request.headers ?? {}).forEach(([k, v]) => {
     v.forEach((header) => headers.append(k, header.value));
   });
-  const requestBody = event.Records[0].cf.request.body;
-  const method = event.Records[0].cf.request.method;
+  const requestBody = request.body;
+  const method = request.method;
   const rawBody = createBody(method, requestBody);
   let body = rawBody;
   if (rawBody !== void 0) {
@@ -85,7 +96,10 @@ var createBody = (method, requestBody) => {
   return requestBody.data;
 };
 var isContentTypeBinary = (contentType) => {
-  return !/^(text\/(plain|html|css|javascript|csv).*|application\/(.*json|.*xml).*|image\/svg\+xml.*)$/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/cjs/adapter/aws-lambda/handler.js

@@ -232,7 +232,7 @@ class EventV1Processor extends EventProcessor {
         ([key, values]) => values.map((value) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&")
       ).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value || "")}`).join("&");
     }
   }
   getCookies(_event, _headers) {
@@ -292,7 +292,7 @@ class ALBProcessor extends EventProcessor {
     if (event.multiValueQueryStringParameters) {
       return Object.entries(event.multiValueQueryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value.join(`&${key}=`)}`).join("&");
     } else {
-      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value).map(([key, value]) => `${key}=${value}`).join("&");
+      return Object.entries(event.queryStringParameters || {}).filter(([, value]) => value !== void 0).map(([key, value]) => `${key}=${value}`).join("&");
     }
   }
   getCookies(event, headers) {
@@ -374,7 +374,10 @@ const isLatticeEventV2 = (event) => {
   return false;
 };
 const defaultIsContentTypeBinary = (contentType) => {
-  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/cjs/adapter/lambda-edge/handler.js

@@ -50,7 +50,8 @@ const handle = (app) => {
     const [context, callback] = args;
     let callbackError = null;
     let callbackResult;
-    const res = await app.fetch(createRequest(event), {
+    const cf = getCloudFrontRecord(event);
+    const res = await app.fetch(createRequest(cf), {
       event,
       context,
       callback: (err, result) => {
@@ -60,9 +61,9 @@ const handle = (app) => {
         }
         callback?.(err, result);
       },
-      config: event.Records[0].cf.config,
-      request: event.Records[0].cf.request,
-      response: event.Records[0].cf.response
+      config: cf.config,
+      request: cf.request,
+      response: cf.response
     });
     if (callbackError) {
       throw callbackError;
@@ -81,17 +82,27 @@ const createResult = async (res) => {
     ...isBase64Encoded && { bodyEncoding: "base64" }
   };
 };
-const createRequest = (event) => {
-  const queryString = event.Records[0].cf.request.querystring;
-  const host = event.Records[0].cf.request.headers?.host?.[0]?.value || event.Records[0].cf.config.distributionDomainName;
-  const urlPath = `https://${host}${event.Records[0].cf.request.uri}`;
+const getCloudFrontRecord = (event) => {
+  const cf = event?.Records?.[0]?.cf;
+  if (!cf?.request) {
+    throw new TypeError(
+      "Unable to map the CloudFront event to a Request: expected `Records[0].cf.request` in the Lambda@Edge event."
+    );
+  }
+  return cf;
+};
+const createRequest = (cf) => {
+  const request = cf.request;
+  const queryString = request.querystring;
+  const host = request.headers?.host?.[0]?.value || cf.config?.distributionDomainName;
+  const urlPath = `https://${host}${request.uri}`;
   const url = queryString ? `${urlPath}?${queryString}` : urlPath;
   const headers = new Headers();
-  Object.entries(event.Records[0].cf.request.headers).forEach(([k, v]) => {
+  Object.entries(request.headers ?? {}).forEach(([k, v]) => {
     v.forEach((header) => headers.append(k, header.value));
   });
-  const requestBody = event.Records[0].cf.request.body;
-  const method = event.Records[0].cf.request.method;
+  const requestBody = request.body;
+  const method = request.method;
   const rawBody = createBody(method, requestBody);
   let body = rawBody;
   if (rawBody !== void 0) {
@@ -118,7 +129,10 @@ const createBody = (method, requestBody) => {
   return requestBody.data;
 };
 const isContentTypeBinary = (contentType) => {
-  return !/^(text\/(plain|html|css|javascript|csv).*|application\/(.*json|.*xml).*|image\/svg\+xml.*)$/.test(
+  if (/^application\/vnd\.(?:apple\.installer|mozilla\.xul)\+xml\s*(?:;|$)/i.test(contentType)) {
+    return true;
+  }
+  return !/^text\/(?:plain|html|css|javascript|csv)|(?:\/|\+)(?:json|xml)\s*(?:;|$)/i.test(
     contentType
   );
 };

package/dist/cjs/helper/accepts/accepts.js

@@ -23,15 +23,17 @@ __export(accepts_exports, {
 module.exports = __toCommonJS(accepts_exports);
 var import_accept = require("../../utils/accept");
 const matchType = (acceptType, supportedType) => {
-  if (acceptType === supportedType) {
+  const accept = acceptType.toLowerCase();
+  const supported = supportedType.toLowerCase();
+  if (accept === supported) {
     return true;
   }
-  if (acceptType === "*/*" || acceptType === "*") {
+  if (accept === "*/*" || accept === "*") {
     return false;
   }
-  if (acceptType.endsWith("/*")) {
-    const [acceptMain] = acceptType.split("/");
-    const [supportedMain] = supportedType.split("/");
+  if (accept.endsWith("/*")) {
+    const [acceptMain] = accept.split("/");
+    const [supportedMain] = supported.split("/");
     return acceptMain === supportedMain;
   }
   return false;

package/dist/cjs/jsx/components.js

@@ -110,7 +110,7 @@ const ErrorBoundary = async ({ children, fallback, fallbackRender, onError }) =>
   if (resArray.some((res) => res instanceof Promise)) {
     getResume();
     const index = errorBoundaryCounter++;
-    const replaceRe = RegExp(`(<template id="E:${index}"></template>.*?)(.*?)(<!--E:${index}-->)`);
+    const replaceRe = RegExp(`(<template id="E:${index}"></template>)(.*?)(<!--E:${index}-->)`, "s");
     let caught = false;
     const catchCallback = async ({ error: error2, buffer }) => {
       if (caught) {

package/dist/cjs/jsx/streaming.js

@@ -82,7 +82,7 @@ const Suspense = async ({
           const content = htmlArray.join("");
           if (buffer) {
             buffer[0] = buffer[0].replace(
-              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`),
+              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`, "s"),
               () => content
             );
           }

package/dist/cjs/middleware/pretty-json/index.js

@@ -28,8 +28,14 @@ const prettyJSON = (options) => {
     await next();
     const contentType = c.res.headers.get("Content-Type");
     if (pretty && contentType && jsonContentTypeRegex.test(contentType)) {
-      const obj = await c.res.json();
+      let obj;
+      try {
+        obj = await c.res.clone().json();
+      } catch {
+        return;
+      }
       c.res = new Response(JSON.stringify(obj, null, options?.space ?? 2), c.res);
+      c.res.headers.delete("Content-Length");
     }
   };
 };

package/dist/cjs/router/linear-router/router.js

@@ -108,11 +108,11 @@ class LinearRouter {
               } else {
                 let endValuePos = path.indexOf("/", pos + 1);
                 if (endValuePos === -1) {
-                  if (pos + 1 === path.length) {
-                    continue ROUTES_LOOP;
-                  }
                   endValuePos = path.length;
                 }
+                if (endValuePos === pos + 1) {
+                  continue ROUTES_LOOP;
+                }
                 value = path.slice(pos + 1, endValuePos);
                 pos = endValuePos;
               }

package/dist/cjs/utils/jwt/jwt.js

@@ -120,12 +120,13 @@ const verify = async (token, publicKey, algOrOptions) => {
     }
   }
   const headerPayload = token.substring(0, token.lastIndexOf("."));
-  const verified = await (0, import_jws.verifying)(
-    publicKey,
-    alg,
-    (0, import_encode.decodeBase64Url)(tokenParts[2]),
-    import_utf8.utf8Encoder.encode(headerPayload)
-  );
+  let signature;
+  try {
+    signature = (0, import_encode.decodeBase64Url)(tokenParts[2]);
+  } catch {
+    throw new import_types.JwtTokenInvalid(token);
+  }
+  const verified = await (0, import_jws.verifying)(publicKey, alg, signature, import_utf8.utf8Encoder.encode(headerPayload));
   if (!verified) {
     throw new import_types.JwtTokenSignatureMismatched(token);
   }

package/dist/helper/accepts/accepts.js

@@ -1,15 +1,17 @@
 // src/helper/accepts/accepts.ts
 import { parseAccept } from "../../utils/accept.js";
 var matchType = (acceptType, supportedType) => {
-  if (acceptType === supportedType) {
+  const accept = acceptType.toLowerCase();
+  const supported = supportedType.toLowerCase();
+  if (accept === supported) {
     return true;
   }
-  if (acceptType === "*/*" || acceptType === "*") {
+  if (accept === "*/*" || accept === "*") {
     return false;
   }
-  if (acceptType.endsWith("/*")) {
-    const [acceptMain] = acceptType.split("/");
-    const [supportedMain] = supportedType.split("/");
+  if (accept.endsWith("/*")) {
+    const [acceptMain] = accept.split("/");
+    const [supportedMain] = supported.split("/");
     return acceptMain === supportedMain;
   }
   return false;

package/dist/jsx/components.js

@@ -88,7 +88,7 @@ var ErrorBoundary = async ({ children, fallback, fallbackRender, onError }) => {
   if (resArray.some((res) => res instanceof Promise)) {
     getResume();
     const index = errorBoundaryCounter++;
-    const replaceRe = RegExp(`(<template id="E:${index}"></template>.*?)(.*?)(<!--E:${index}-->)`);
+    const replaceRe = RegExp(`(<template id="E:${index}"></template>)(.*?)(<!--E:${index}-->)`, "s");
     let caught = false;
     const catchCallback = async ({ error: error2, buffer }) => {
       if (caught) {

package/dist/jsx/streaming.js

@@ -59,7 +59,7 @@ var Suspense = async ({
           const content = htmlArray.join("");
           if (buffer) {
             buffer[0] = buffer[0].replace(
-              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`),
+              new RegExp(`<template id="H:${index}"></template>.*?<!--/\\$-->`, "s"),
               () => content
             );
           }

package/dist/middleware/pretty-json/index.js

@@ -7,8 +7,14 @@ var prettyJSON = (options) => {
     await next();
     const contentType = c.res.headers.get("Content-Type");
     if (pretty && contentType && jsonContentTypeRegex.test(contentType)) {
-      const obj = await c.res.json();
+      let obj;
+      try {
+        obj = await c.res.clone().json();
+      } catch {
+        return;
+      }
       c.res = new Response(JSON.stringify(obj, null, options?.space ?? 2), c.res);
+      c.res.headers.delete("Content-Length");
     }
   };
 };

package/dist/router/linear-router/router.js

@@ -87,11 +87,11 @@ var LinearRouter = class {
               } else {
                 let endValuePos = path.indexOf("/", pos + 1);
                 if (endValuePos === -1) {
-                  if (pos + 1 === path.length) {
-                    continue ROUTES_LOOP;
-                  }
                   endValuePos = path.length;
                 }
+                if (endValuePos === pos + 1) {
+                  continue ROUTES_LOOP;
+                }
                 value = path.slice(pos + 1, endValuePos);
                 pos = endValuePos;
               }

package/dist/utils/jwt/jwt.js

@@ -109,12 +109,13 @@ var verify = async (token, publicKey, algOrOptions) => {
     }
   }
   const headerPayload = token.substring(0, token.lastIndexOf("."));
-  const verified = await verifying(
-    publicKey,
-    alg,
-    decodeBase64Url(tokenParts[2]),
-    utf8Encoder.encode(headerPayload)
-  );
+  let signature;
+  try {
+    signature = decodeBase64Url(tokenParts[2]);
+  } catch {
+    throw new JwtTokenInvalid(token);
+  }
+  const verified = await verifying(publicKey, alg, signature, utf8Encoder.encode(headerPayload));
   if (!verified) {
     throw new JwtTokenSignatureMismatched(token);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/hono",
-  "version": "4.13.8-depup.0",
+  "version": "4.13.9-depup.0",
   "description": "Web framework built on Web Standards (with updated dependencies)",
   "main": "dist/cjs/index.js",
   "type": "module",
@@ -711,8 +711,8 @@
     "changes": {},
     "depsUpdated": 0,
     "originalPackage": "hono",
-    "originalVersion": "4.13.8",
-    "processedAt": "2026-09-15T08:13:57.753Z",
+    "originalVersion": "4.13.9",
+    "processedAt": "2026-09-24T08:13:10.881Z",
     "smokeTest": "passed"
   }
 }