JavaGolangJavaScriptSwiftAndroidRustMiddleware
3 hours ago
hono
honojs

v4.12.34

Security fixes

This release includes fixes for the following security issues:

memo() retains SSR output across requests, leading to cross-user data disclosure

Affects: hono/jsx (server-side rendering). Fixes memo() reusing a retained render result across requests when props compare equal, where a component reading request-scoped values from ambient context — useContext(), useRequestContext(), or getContext() — could serve HTML rendered for another user's request, disclosing account data or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r

ReDoS in CORS middleware via Access-Control-Request-Headers

Affects: hono/cors. Fixes a whitespace-tolerant regular expression with quadratic backtracking used to parse the Access-Control-Request-Headers preflight header when allowHeaders is not configured (the default), where a single preflight request carrying a long whitespace run could consume seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239

Algorithmic complexity DoS in Language Middleware

Affects: hono/language. Fixes quadratic string processing in language-tag normalization, where a crafted language tag with a large number of hyphen-separated subtags — supplied via a query parameter, cookie, or Accept-Language header — could cause excessive CPU consumption and block the event loop. GHSA-54fx-42gc-7vw4

Proxy Helper does not remove response headers listed in the Connection header

Affects: hono/proxy. Fixes proxy() forwarding response headers that the origin's Connection header designates as connection-scoped, where headers intended only for the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to clients, disclosing connection-scoped or internal metadata. GHSA-79qm-7rj5-m7r9

Users who use hono/jsx for server-side rendering, hono/cors, hono/language, or hono/proxy are strongly encouraged to upgrade to this version.

5 hours ago
slidev
slidevjs

v52.19.0

   🐞 Bug Fixes

    View changes on GitHub
7 hours ago
leafer-ui
leaferjs

v2.2.9

更新日志

7 hours ago
ui
leaferjs

v2.2.9

更新日志

8 hours ago
formatjs
formatjs

@formatjs/cli-native-linux-x64: 1.1.10

1.1.10 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli-native-linux-x64@1.1.9...@formatjs/cli-native-linux-x64@1.1.10

8 hours ago
formatjs
formatjs

@formatjs/cli-native-linux-x64-musl: 1.0.8

1.0.8 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli-native-linux-x64-musl@1.0.7...@formatjs/cli-native-linux-x64-musl@1.0.8

8 hours ago
formatjs
formatjs

@formatjs/cli-native-linux-arm64-musl: 1.0.8

1.0.8 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli-native-linux-arm64-musl@1.0.7...@formatjs/cli-native-linux-arm64-musl@1.0.8

8 hours ago
formatjs
formatjs

formatjs_cli: 1.1.22

1.1.22 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/formatjs_cli_v1.1.21...formatjs_cli_v1.1.22

Binaries

  • macOS Apple Silicon: formatjs_cli-darwin-arm64
  • Linux ARM64: formatjs_cli-linux-arm64
  • Linux x86_64: formatjs_cli-linux-x64
  • Windows x64: formatjs_cli-win32-x64.exe

Installation

# macOS (Apple Silicon)
curl -LO https://github.com/formatjs/formatjs/releases/download/formatjs_cli_v1.1.22/formatjs_cli-darwin-arm64
chmod +x formatjs_cli-darwin-arm64
sudo mv formatjs_cli-darwin-arm64 /usr/local/bin/formatjs

# Linux
curl -LO https://github.com/formatjs/formatjs/releases/download/formatjs_cli_v1.1.22/formatjs_cli-linux-x64
chmod +x formatjs_cli-linux-x64
sudo mv formatjs_cli-linux-x64 /usr/local/bin/formatjs

# Linux ARM64
curl -LO https://github.com/formatjs/formatjs/releases/download/formatjs_cli_v1.1.22/formatjs_cli-linux-arm64
chmod +x formatjs_cli-linux-arm64
sudo mv formatjs_cli-linux-arm64 /usr/local/bin/formatjs
# Windows x64 (PowerShell)
curl.exe -LO https://github.com/formatjs/formatjs/releases/download/formatjs_cli_v1.1.22/formatjs_cli-win32-x64.exe

Verification

Verify the checksums:

curl -LO https://github.com/formatjs/formatjs/releases/download/formatjs_cli_v1.1.22/checksums.txt
shasum -a 256 -c checksums.txt
8 hours ago
formatjs
formatjs

@formatjs/cli: 6.16.16

6.16.16 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli@6.16.15...@formatjs/cli@6.16.16

Dependencies

  • The following workspace dependencies were updated
    • optionalDependencies
      • @formatjs/cli-native-darwin-arm64 bumped to 1.1.10
      • @formatjs/cli-native-linux-arm64 bumped to 1.2.10
      • @formatjs/cli-native-linux-arm64-musl bumped to 1.0.8
      • @formatjs/cli-native-linux-x64 bumped to 1.1.10
      • @formatjs/cli-native-linux-x64-musl bumped to 1.0.8
      • @formatjs/cli-native-win32-x64 bumped to 1.1.11
8 hours ago
formatjs
formatjs

@formatjs/cli-native-linux-arm64: 1.2.10

1.2.10 (2026-08-02)

What's Changed

Full Changelog: https://github.com/formatjs/formatjs/compare/@formatjs/cli-native-linux-arm64@1.2.9...@formatjs/cli-native-linux-arm64@1.2.10