Skip to content

drop the hono age-gate exclude once its release matures #837

Description

@zgeoff
trigger: date 2026-08-10

bunfig.toml excludes hono from the 7-day minimumReleaseAge gate so the tree could adopt the
advisory-patched release (hono 4.13.0, patching GHSA-8j4g-w8fx-2239 — the CORS-middleware ReDoS) the
day it shipped. Published 2026-08-03, it ages past the gate ~2026-08-10.

When the trigger fires:

  • delete the hono entry and its comment line from minimumReleaseAgeExcludes in bunfig.toml
  • run bun install and confirm bun run audit still passes

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/platformarea: deploy, db hosting, monorepo, CIupkeepevent- or date-triggered maintenance; body carries a trigger line the weekly sweep evaluatesupkeep-readyupkeep trigger has fired; cleanup is actionable now

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions