Starstruk Logo MarkStarstruk

v4.13.2

honojs/honov4.13.2Aug 13, 2026by yusukebe

AI Summary

Enhances secure headers output, JSX rendering, and ETag incremental hashing. It also fixes client cookie serialization and adds missing W3C Permissions-Policy directives.

Key Highlights

  • Fixed Permissions-Policy output format to use empty parentheses instead of 'none'.
  • Fixed JSX rendering of async document metadata children.
  • Fixed ETag incremental hashing for chunked responses.
  • Added missing W3C Permissions-Policy directives.

New Features

  • Added missing W3C Permissions-Policy directives

Full Release Notes

## What's Changed
* fix(secure-headers): output standard empty parentheses () instead of none for disabled Permissions-Policy directives in https://github.com/honojs/hono/pull/5197
* fix(jsx): render async children of document metadata tags instead of [object Promise] in https://github.com/honojs/hono/pull/5204
* fix(etag): resolve incorrect incremental hashing for chunked responses in https://github.com/honojs/hono/pull/5199
* fix(client): serialize multiple cookies correctly in https://github.com/honojs/hono/pull/5202
* fix(etag): stabilize digest across stream chunks in https://github.com/honojs/hono/pull/5205
* fix(url): strip trailing question mark correctly for optional params with regex quantifiers in https://github.com/honojs/hono/pull/5209
* perf(cors): pre-join static array header options during initialization in https://github.com/honojs/hono/pull/5210
* fix(client): send falsy JSON bodies in https://github.com/honojs/hono/pull/5215
* feat(secure-headers): add missing W3C Permissions-Policy directives in https://github.com/honojs/hono/pull/5214

**Full Changelog**: https://github.com/honojs/hono/compare/v4.13.1...v4.13.2