v4.13.7 v1.18.0

honojs/honoSep 4, 2026 → Sep 8, 20263 days between releases

Generating AI comparison

Analyzing what changed between v4.13.7 and v1.18.0. This page updates automatically — usually within a minute.

The Two Releases

v4.13.7

v4.13.7

Sep 4, 2026· 2 months ago

This release addresses a critical XSS vulnerability in the `hono/jsx` library where plain strings were rendered unescaped in boundary components and server rendering functions. The update ensures proper HTML escaping for untrusted data within Suspense, ErrorBoundary, Context.Provider, and related server-side rendering methods.

Full release notes
v1.18.0

1.18.0 — Text geometry and PDF loading fixes

Sep 8, 2026· 1 month ago

Significantly improves text geometry and PDF loading performance. Introduces new metadata for superscripts, rotations, and bold fonts while optimizing CI processes.

Full release notes