v4.13.3

honojs/honov4.13.3Aug 18, 2026by yusukebe

AI Summary

Improves router matching precision, ETag handling, and CSRF validation. This release adds support for structured JSON content-types in the pretty-json feature.

Key Highlights

Fixed trie-router and pattern-router matching for suffix wildcards and prefix overmatch.
Fixed ETag pending stream bytes and header filtering for 304 responses.
Fixed CSRF exemption for OPTIONS requests.
Added support for structured JSON content-types (+json) in `pretty-json`.

New Features

Support for structured JSON content-types (+json) in pretty-json

Full Release Notes

## What's Changed

* fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in https://github.com/honojs/hono/pull/5227
* fix(etag): copy pending stream bytes in https://github.com/honojs/hono/pull/5239
* fix(etag): avoid skipping headers when filtering 304 response headers in https://github.com/honojs/hono/pull/5234
* fix(cors): append Origin to Vary header on OPTIONS preflight in https://github.com/honojs/hono/pull/5235
* docs(context): add custom headers append option example to Context JSDoc in https://github.com/honojs/hono/pull/5248
* fix(trie-router): match suffix wildcard routes in https://github.com/honojs/hono/pull/5236
* fix(pattern-router/linear-router): prevent prefix overmatch on wildcard routes in https://github.com/honojs/hono/pull/5252
* fix(csrf): exempt OPTIONS request from CSRF validation in https://github.com/honojs/hono/pull/5250
* fix(utils/ipaddr): avoid truncation on embedded IPv4 addresses in expand IPv6 in https://github.com/honojs/hono/pull/5247
* feat(pretty-json): support structured JSON content-types (+json) in https://github.com/honojs/hono/pull/5226

**Full Changelog**: https://github.com/honojs/hono/compare/v4.13.2...v4.13.3