deps: update dependency hono to v4.13.7

[mattdy]

This PR contains the following updates:

Package	Change	Age	Confidence
hono (source)	4.13.5 → 4.13.7

---

Release Notes

honojs/hono (hono)

v4.13.7

Compare Source

Security fixes

This release includes a fix for the following security issue:

hono/jsx renders plain strings unescaped in boundary components, leading to XSS

Affects: Suspense, ErrorBoundary, and Context.Provider in hono/jsx, and renderToString() / renderToReadableStream() in hono/jsx/dom/server. Fixes missing HTML escaping for a plain string placed directly as a child or fallback of these components, or as the root value of the server rendering functions, so untrusted strings could be emitted as markup. GHSA-hxh3-vqpv-xpqv

---

Users who render untrusted strings inside Suspense, ErrorBoundary, or Context.Provider, or pass them directly to hono/jsx/dom/server, are strongly encouraged to upgrade to this version.

v4.13.6

Compare Source

What's Changed

• fix(client): keep a param value of "index" in $url() and $path() in #​5297
• fix(client): normalize root WebSocket URLs in #​5291
• fix(types): allow symbol keys in Context get and set fallbacks in #​5300
• chore: bump editorconfig-checker in #​5336
• refactor(on-handler): use forEach for consistent handler iteration in #​5326

Full Changelog: honojs/hono@v4.13.5...v4.13.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

Summary by CodeRabbit

• Maintenance
  • Updated supporting server components to the latest available patch level.
  • No changes to user-facing features, workflows, or public functionality.
  • This update is limited to backend and mock-server maintenance.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 50acea68-3a36-478d-a5ee-705ad58db47c

📥 Commits

Reviewing files that changed from the base of the PR and between 23f4884 and a0160a9.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (2)

• apps/backend/package.json
• packages/mock-server/package.json

---

📝 Walkthrough

Walkthrough

The pull request updates the hono dependency from 4.13.5 to 4.13.7 in the backend and mock server package manifests.

Changes

Hono dependency update

Layer / File(s)	Summary
Update Hono package versions apps/backend/package.json, packages/mock-server/package.json	Both package manifests update hono from 4.13.5 to 4.13.7.

Estimated code review effort: 1 (Trivial) | ~2 minutes

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/hono-4.x

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}