v4.10.6

honojs/honov4.10.6Nov 14, 2025by yusukebe

AI Summary

This minor release adds AWS Lattice event handling to the AWS Lambda adapter, introduces CSP TrustedTypePolicy support in secure-headers, and improves auth middlewares. The release also deprecates three bearer-auth options that will be removed in a future version.

Key Highlights

AWS Lambda adapter now handles AWS Lattice events
CSP TrustedTypePolicy support added to secure-headers middleware
Auth middlewares have been improved
Three bearer-auth options are deprecated (noAuthenticationHeaderMessage, invalidAuthenticationHeaderMessage, invalidTokenMessage)

New Features

AWS Lattice events support in AWS Lambda adapter
CSP TrustedTypePolicy support in secure-headers
Improved auth middlewares

Full Release Notes

## Deperecated

### bearer-auth options

The following options are deprecated and will be removed in a future version:
- `noAuthenticationHeaderMessage` => use `noAuthenticationHeader.message`
- `invalidAuthenticationHeaderMessage` => use `invalidAuthenticationHeader.message`
- `invalidTokenMessage` => use `invalidToken.message`

## What's Changed
* feat(aws-lambda): handle AWS Lattice events by @anho in https://github.com/honojs/hono/pull/4451
* feat(secure-headers): support CSP TrustedTypePolicy by @RosApr in https://github.com/honojs/hono/pull/4500
* feat: Improve auth middlewares by @MathurAditya724 in https://github.com/honojs/hono/pull/4485

## New Contributors
* @anho made their first contribution in https://github.com/honojs/hono/pull/4451

**Full Changelog**: https://github.com/honojs/hono/compare/v4.10.5...v4.10.6