From a5c92b114e8bfcc66df97ca783809ccc3acb1182 Mon Sep 17 00:00:00 2001
From: "homarr-renovate[bot]"
 <158783068+homarr-renovate[bot]@users.noreply.github.com>
Date: Sun, 13 Sep 2026 03:53:52 +0000
Subject: [PATCH] chore(deps): update dependency hono@<4.6.5 to >=4.13.7
 [security] (#6842)

Co-authored-by: homarr-renovate[bot] <158783068+homarr-renovate[bot]@users.noreply.github.com>
---
 pnpm-lock.yaml      | 5 +++--
 pnpm-workspace.yaml | 4 +++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d620d34f4..0799e79b4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -567,7 +567,7 @@ overrides:
   brace-expansion@>=1.0.0 <=1.1.11: '>=5.0.7'
   esbuild@<=0.24.2: '>=0.28.1'
   form-data@>=4.0.0 <4.0.4: '>=4.0.6'
-  hono@<4.6.5: '>=4.12.28'
+  hono@<4.6.5: '>=4.13.7'
   linkifyjs@<4.3.2: '>=4.3.3'
   nanoid@>=4.0.0 <5.0.9: '>=5.1.16'
   prismjs@<1.30.0: '>=1.30.0'
@@ -5020,7 +5020,7 @@ packages:
     resolution: {integrity: sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==}
     engines: {node: '>=18.14.1'}
     peerDependencies:
-      hono: '>=4.12.28'
+      hono: '>=4.13.7'
 
   '@iconify/types@2.0.0':
     resolution: {integrity: sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==}
@@ -9407,6 +9407,7 @@ packages:
 
   crypto-js@4.2.0:
     resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
+    deprecated: Active development of CryptoJS has been discontinued. This library is no longer maintained.
 
   crypto-random-string@4.0.0:
     resolution: {integrity: sha512-x8dy3RnvYdlUcPOjkEHqozhiwzKNSq7GcPuXFbnyMOCHxX8V3OgIg/pYuabl2sbUPfIJaeAQB7PMOK8DFIdoRA==}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 6a3f0b9a9..f9489c365 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -212,6 +212,8 @@ minimumReleaseAgeExclude:
   - esbuild@0.28.1
   # Renovate security update: @auth/core@0.41.3
   - "@auth/core@0.41.3"
+  # Renovate security update: hono@4.13.7
+  - hono@4.13.7
 overrides:
   "@babel/helpers@<7.26.10": ">=7.29.7"
   "@babel/runtime@<7.26.10": ">=7.29.7"
@@ -220,7 +222,7 @@ overrides:
   "brace-expansion@>=1.0.0 <=1.1.11": ">=5.0.7"
   "esbuild@<=0.24.2": ">=0.28.1"
   "form-data@>=4.0.0 <4.0.4": ">=4.0.6"
-  "hono@<4.6.5": ">=4.12.28"
+  "hono@<4.6.5": ">=4.13.7"
   "linkifyjs@<4.3.2": ">=4.3.3"
   "nanoid@>=4.0.0 <5.0.9": ">=5.1.16"
   "prismjs@<1.30.0": ">=1.30.0"