v4.10.8

honojs/honov4.10.8Dec 9, 2025by yusukebe

AI Summary

This is a minor patch release (v4.10.8) of the Hono web framework that includes a bug fix for the linear-router's path matching, new async handler support for CSRF middleware, and various maintenance updates including documentation fixes and dependency bumps.

Key Highlights

  • Fixed incorrect path matching in linear-router
  • Added async support for IsAllowedOriginHandler in CSRF middleware
  • Added async support for IsAllowedSecFetchSiteHandler in CSRF middleware
  • Updated outdated RFC links in cookie documentation
  • Bumped linter, formatter, and GitHub actions

New Features

  • CSRF middleware now supports async IsAllowedOriginHandler
  • CSRF middleware now supports async IsAllowedSecFetchSiteHandler

Full Release Notes

## What's Changed
* chore: bump linter and formatter by @ryuapp in https://github.com/honojs/hono/pull/4568
* chore: bump github actions by @ryuapp in https://github.com/honojs/hono/pull/4569
* fix(linear-router): incorrect path matching by @cromery in https://github.com/honojs/hono/pull/4567
* docs(cookie): update outdated RFC links by @AyushCoder9 in https://github.com/honojs/hono/pull/4557
* feat(csrf): Support async `IsAllowedOriginHandler` by @baseballyama in https://github.com/honojs/hono/pull/4558
* feat(csrf): Support async `IsAllowedSecFetchSiteHandler` by @baseballyama in https://github.com/honojs/hono/pull/4559

## New Contributors
* @cromery made their first contribution in https://github.com/honojs/hono/pull/4567
* @AyushCoder9 made their first contribution in https://github.com/honojs/hono/pull/4557
* @baseballyama made their first contribution in https://github.com/honojs/hono/pull/4558

**Full Changelog**: https://github.com/honojs/hono/compare/v4.10.7...v4.10.8