Hono is a small, fast web framework built on Web Standards, designed to run on many JavaScript runtimes including Cloudflare Workers, Deno, Bun, Vercel, and Node.js. It provides routing and middleware features, with built-in support for first-class TypeScript development. Useful if you want to write the same web app code across different platforms.
Project status
- Actively maintained, with an upstream push on 2026-11-04 and updates as recently as 2026-11-01.
- Updates have been frequent in the period shown, including multiple patch updates within days and Hono 5 prereleases in October.
AI summary generated
Recent updates
v4.13.17
v4.13.17 fixes edge cases across cookies, URL query parsing, content negotiation, timing metrics, ETags, JSX rendering, SSG, and adapters. The diff also changes some JSX serialization behavior and the exported `booleanAttributes` value in ways not described in the release notes.
BreakingFeaturesv4.13.16
Hono v4.13.16 is primarily a security release, fixing path-scoped middleware bypasses, wildcard middleware omissions, form validation gaps, CSS style-tag injection, CSRF handling of hyperlink auditing, and JWT validation issues. The code also changes RegExpRouter behavior for overlapping wildcard routes and improves parsing of route patterns with bounded repetitions.
BreakingSecurityv4.13.15
v4.13.15 fixes escaping of backslashes in authentication challenge headers and allows `c.header()` to be used after a response body has been consumed. It also removes a contribution-guide note about linking a fork branch.
v4.13.14
Hono v4.13.14 delivers fixes across static-file serving, CSS minification, routing, query parsing, JSX cloning, and declaration generation, plus support for Response-returning bearer-auth messages. The supplied code diff aligns with the release notes on the behavior changes it contains; no significant undocumented breaking change is apparent.
BreakingFeaturesv5.0.0-rc.1
Release v5.0.0-rc.1 has no publisher-provided release notes. The code diff shows substantial internal API refactoring around error and not-found handling (switching to Context-first handlers with c.error), plus significant routing behavior changes for wildcard/pattern matching across multiple router implementations.
Featuresv5.0.0-rc.0
No release notes were provided for v5.0.0-rc.0. The code diff shows substantial structural changes, including removal of multiple platform adapter entry points from the main package and updates to workerd runtime logging and color handling.
@hono/service-worker@1.0.1
Release @hono/service-worker@1.0.1 is described as improving compatibility with Hono v5 prereleases and adjusting how internal types are exposed in the generated bundled d.ts. However, the provided code diff only shows a package version bump in adapters/service-worker/package.json.
@hono/vercel@1.0.1
Release @hono/vercel@1.0.1 is presented as a small update. However, the provided code diff only shows a package.json version bump, while the release notes describe peer dependency range adjustments and bundled d.ts internal type changes that are not visible in this diff.
@hono/netlify@1.0.2
Release @hono/netlify@1.0.2 is described as updating peer dependency behavior for Hono v5 prereleases and adjusting bundled d.ts contents. However, the provided code diff shows only a package.json version bump from 1.0.1 to 1.0.2, with no other observable functional or API changes.
@hono/lambda-edge@1.0.1
Release @hono/lambda-edge@1.0.1 claims to (1) widen the hono peer dependency range to accept Hono v5 prereleases, avoiding npm ERESOLVE failures, and (2) make internal types private in the bundled d.ts. However, the provided code diff only shows a package version bump in adapters/lambda-edge/package.json, with no other code or configuration changes visible.
@hono/deno@1.0.3
The provided code diff for this release only updates the @hono/deno package version from 1.0.2 to 1.0.3. No other code, configuration, or type bundle content is shown as changing in the diff.
@hono/cloudflare-workers@1.0.1
This release increments the @hono/cloudflare-workers package version from 1.0.0 to 1.0.1. In the provided code diff, the only actual change is the version bump in adapters/cloudflare-workers/package.json.
@hono/bun@1.0.1
Release @hono/bun@1.0.1 is described as a minor adjustment to dependency compatibility (accepting Hono v5 prereleases in the hono peer range) and a packaging/type privacy tweak for bundled d.ts. However, the provided code diff only shows a package.json version bump from 1.0.0 to 1.0.1, with no other code or configuration changes visible.
@hono/aws-lambda@1.0.1
This release primarily updates the package peer dependency constraints to allow installing with Hono v5 prereleases. The provided diff also includes documentation changes in the root README and contributing guidelines, with no runtime code changes shown.
v4.13.13
v4.13.13 introduces a new Mount Middleware, `hono/mount`, intended to replace the existing `app.mount()` API. The release notes also mention updates to JSX component return typing (allowing `JSXNode`) and a couple of test and documentation fixes.
Featuresv4.13.12
v4.13.12 includes a set of targeted fixes for ETag header retention case matching, JSX style numeric-to-px handling for grid gap properties, and middleware short-circuiting behavior in the combine utility. It also tightens TypeScript declaration generation for consumers by adjusting bundled .d.ts output and related build configuration, and upgrades vite-plus to the stable 1.0.0 release.
v4.13.11
v4.13.11 ships a security fix for `serveStatic` in `hono/serve-static`, addressing a double-decoding issue that could allow crafted URLs to bypass middleware mounted on a static prefix. The implementation also introduces an `allowPercentInPath` option to control how percent signs are handled in routed paths.
BreakingSecurity@hono/netlify@1.0.1
This release updates the Netlify adapter package metadata. The only code diff is a version bump in adapters/netlify/package.json from 1.0.0 to 1.0.1, with no functional implementation changes shown.
@hono/deno@1.0.2
Release notes for @hono/deno@1.0.2 were not provided. The code diff shows substantial new adapter code being added (AWS Lambda adapter and Bun adapter), along with repo build and CI workflow changes that migrate checks and publishing steps from Bun commands to pnpm.
Featuresv4.13.10
This release splits runtime adapters into dedicated scoped packages (for example, @hono/bun, @hono/deno, @hono/cloudflare-workers). It also ships adapter-related changes including an ESM-only @hono/bun package and a types improvement for returning Blob bodies.
BreakingFeatures