v4.12.32

domcyrus/rustnetv4.12.32Jul 24, 2026by yusukebe

AI Summary

This release focuses on adding type definitions for AWS Lambda API Gateway v2, fixing Server-Sent Events (SSE) behavior, and improving security in header and query parsing.

Key Highlights

Added JWT and Lambda authorizer types for API Gateway v2
Fixed SSE to reset Last-Event-ID by emitting empty ID fields
Improved security by using `Object.create(null)` for parsing query, headers, and params
Enhanced test coverage for Cloudflare Workers websocket adapter

New Features

Added JWT and Lambda authorizer types for API Gateway v2
Fixed SSE to reset Last-Event-ID by emitting empty ID fields

Full Release Notes

## What's Changed
* ci: enable reports for type & bundle size check in https://github.com/honojs/hono/pull/5148
* fix(aws-lambda): add jwt and lambda authorizer types for API Gateway v2 in https://github.com/honojs/hono/pull/5142
* fix(sse): emit empty id field to reset Last-Event-ID in https://github.com/honojs/hono/pull/5138
* test(cloudflare-workers): add coverage for onClose, onError, send, and close in Cloudflare Workers websocket adapter in https://github.com/honojs/hono/pull/5145
* fix: use `Object.create(null)` when parsing query, headers, and params in https://github.com/honojs/hono/pull/5161
* fix(secure-headers): keep CSP callbacks scoped to their header in https://github.com/honojs/hono/pull/5147

**Full Changelog**: https://github.com/honojs/hono/compare/v4.12.31...v4.12.32