SWI-3723 [Snyk] Security upgrade hono from 4.12.9 to 4.12.14

[bwappsec]

Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

• package.json

⚠️ Warning

Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-JS-HONO-16080667	95

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

[bwappsec]

This is a patch upgrade that includes bug fixes and important security updates, with no direct API breaking changes.

Highlights:

• Version 4.12.12 is a security release that addresses several vulnerabilities. Users are strongly encouraged to upgrade.
• The fixes address issues in the serveStatic, toSSG (Static Site Generation), cookie, and ipRestriction middleware.
• These changes correct behavior related to path normalization, IP address matching, and cookie name validation.

Risk Assessment:
While there are no API changes, the behavioral corrections in the security fixes could potentially impact applications that inadvertently relied on the previous, incorrect behavior. This warrants a medium risk level to encourage verification.

Recommendation:
Upgrade is highly recommended for the security benefits. Verify that your application's functionality, especially if using the affected middleware, is not unexpectedly impacted by the corrected behavior.

Source: GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[bwappsec]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.