From dd4d9fcf65d2ca1329248ca7517f71fbe17ea573 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 13 Nov 2026 00:56:42 +0000
Subject: [PATCH] chore(deps): update dependency hono to v4.13.16 [security]

---
 pnpm-lock.yaml      | 30 +++++++++++++++---------------
 pnpm-workspace.yaml |  4 +++-
 2 files changed, 18 insertions(+), 16 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1365287e7..424945e59 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -196,8 +196,8 @@ catalogs:
       specifier: 4.0.0
       version: 4.0.0
     hono:
-      specifier: 4.13.13
-      version: 4.13.13
+      specifier: 4.13.16
+      version: 4.13.16
     jose:
       specifier: 6.2.12
       version: 6.2.12
@@ -641,7 +641,7 @@ importers:
     dependencies:
       '@hono/node-server':
         specifier: 2.1.4
-        version: 2.1.4(hono@4.13.13)
+        version: 2.1.4(hono@4.13.16)
       '@modelcontextprotocol/server':
         specifier: 2.3.1
         version: 2.3.1
@@ -668,7 +668,7 @@ importers:
         version: 4.0.0
       hono:
         specifier: 'catalog:'
-        version: 4.13.13
+        version: 4.13.16
       marked:
         specifier: 18.1.1
         version: 18.1.1
@@ -1155,7 +1155,7 @@ importers:
         version: 0.43.0-beta.50(commander@14.0.3)(supports-color@8.1.1)(uuid@14.0.2)
       '@hono/otel':
         specifier: 1.2.0
-        version: 1.2.0(hono@4.13.13)
+        version: 1.2.0(hono@4.13.16)
       '@modelcontextprotocol/client':
         specifier: 2.3.1
         version: 2.3.1
@@ -1296,7 +1296,7 @@ importers:
         version: 4.0.0
       hono:
         specifier: 'catalog:'
-        version: 4.13.13
+        version: 4.13.16
       pg:
         specifier: 8.23.1
         version: 8.23.1
@@ -4426,8 +4426,8 @@ packages:
   hast-util-whitespace@3.0.0:
     resolution: {integrity: sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==}
 
-  hono@4.13.13:
-    resolution: {integrity: sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==}
+  hono@4.13.16:
+    resolution: {integrity: sha512-AOLOEhvrV+iH92xXCnFr/5+3KjPKcI3xP63XJtX5spAnkznPdHijlIsUTpi7/9EhWqrTCekw5c5zh1K+YsVw7A==}
     engines: {node: '>=16.9.0'}
 
   hookable@5.5.3:
@@ -6947,15 +6947,15 @@ snapshots:
       yargs: 17.7.3
     optional: true
 
-  '@hono/node-server@2.1.4(hono@4.13.13)':
+  '@hono/node-server@2.1.4(hono@4.13.16)':
     dependencies:
-      hono: 4.13.13
+      hono: 4.13.16
 
-  '@hono/otel@1.2.0(hono@4.13.13)':
+  '@hono/otel@1.2.0(hono@4.13.16)':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@opentelemetry/semantic-conventions': 1.43.0
-      hono: 4.13.13
+      hono: 4.13.16
 
   '@hyperjump/browser@1.6.0':
     dependencies:
@@ -7041,7 +7041,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.32.1(supports-color@8.1.1)(zod@4.6.7)':
     dependencies:
-      '@hono/node-server': 2.1.4(hono@4.13.13)
+      '@hono/node-server': 2.1.4(hono@4.13.16)
       ajv: 8.20.0
       ajv-formats: 3.0.1(ajv@8.20.0)
       content-type: 1.0.5
@@ -7051,7 +7051,7 @@ snapshots:
       eventsource-parser: 3.1.1
       express: 5.2.1(supports-color@8.1.1)
       express-rate-limit: 8.7.0(express@5.2.1(supports-color@8.1.1))(supports-color@8.1.1)
-      hono: 4.13.13
+      hono: 4.13.16
       jose: 6.2.12
       json-schema-typed: 8.0.2
       pkce-challenge: 5.0.1
@@ -8799,7 +8799,7 @@ snapshots:
     dependencies:
       '@types/hast': 3.0.5
 
-  hono@4.13.13: {}
+  hono@4.13.16: {}
 
   hookable@5.5.3: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index e9ccf9549..6e8708870 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -7,13 +7,15 @@ catalog:
   vitest: 5.0.3
   '@vitest/coverage-v8': 5.0.3
   effect: 4.0.0
-  hono: 4.13.13
+  hono: 4.13.16
   jose: 6.2.12
 
 minimumReleaseAge: 10080
 minimumReleaseAgeStrict: false
 minimumReleaseAgeExclude:
   - effect@4.0.0
+  # Renovate security update: hono@4.13.16
+  - hono@4.13.16
 trustPolicy: no-downgrade
 blockExoticSubdeps: true