From 61ed0231b56b911e48dcbf0553de45d450bf0d87 Mon Sep 17 00:00:00 2001
From: Ronald Tse <ronald.tse@ribose.com>
Date: Thu, 10 Sep 2026 05:50:15 +0200
Subject: [PATCH] deps: hono 4.13.7 (CVE fix below 4.13.5)

Three open Dependabot alerts on the worker are hono issues fixed
in 4.13.5; the lockfile pinned 4.13.2. In-range update, no manifest
change; build and tests green.
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index b42a7f8..48d58ac 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3016,9 +3016,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.2",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.2.tgz",
-      "integrity": "sha512-JydRilDRkYBQMt9qR9U92mXxmbGqsqSn/IKOrh4e7/gEbn+0zSr8igTu0obwJoNGN4sez28DIql7FBHWydoJpA==",
+      "version": "4.13.7",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.7.tgz",
+      "integrity": "sha512-c8/gF9ac8Y78/agExVocyLevgR+JlpNB444Py0FSX8pJoPdYUfUzRcXtYEYGwt6l19qIlVZPN5Mfsw9jFShmQQ==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"