v4.13.11 v4.13.12

low risk

honojs/honoSep 29, 2026 → Sep 30, 20261 day between releases

What's New

Fixed build types, ETag matching, and CSS grid properties.

Improvements

  • Upgraded vite-plus to 1.0.0 for improved build process.

Bug Fixes

  • Fixed self-referencing JSX.IntrinsicElements in bundled types.
  • Fixed ETag header name matching to be case-insensitive.
  • Fixed CSS grid gap properties to include 'px'.
  • Fixed combine middleware to return a Response on short-circuiting.

Upgrade Notes

No configuration changes or migrations are required.

The Two Releases

v4.13.11

v4.13.11

Sep 29, 2026· 23 days ago

Addresses a security vulnerability in serveStatic where path decoding could be bypassed to skip middleware.

Full release notes
v4.13.12

v4.13.12

Sep 30, 2026· 22 days ago

Contains build fixes to improve type generation and several functional fixes for ETag matching and CSS grid properties.

Full release notes