From 5dd0616c45d4cc6298e5936e12ae1a3fb7bde641 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 23:08:31 +0000
Subject: [PATCH 1/2] chore(hono): Update dependency hono to v4.13.7 [SECURITY]

---
 pnpm-workspace.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index c666252d1cd..8272ae83580 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -83,6 +83,8 @@ minimumReleaseAgeExclude:
   - '@tanstack/start-storage-context@1.167.36'
   - 'pkglab'
   - 'pkglab-*'
+  # Renovate security update: hono@4.13.7
+  - hono@4.13.7
 
 trustPolicy: no-downgrade
 trustPolicyExclude:

From 639ca6f0f18c5d52fabe5eb46628d2c7faaa78a9 Mon Sep 17 00:00:00 2001
From: wobsoriano <sorianorobertc@gmail.com>
Date: Mon, 26 Oct 2026 11:26:21 -0700
Subject: [PATCH 2/2] chore(hono): bump hono to ^4.13.7 and drop stale
 release-age exclude

---
 .changeset/hono-security-update-4-13-7.md    |  2 ++
 integration/templates/hono-vite/package.json |  2 +-
 packages/hono/package.json                   |  2 +-
 pnpm-lock.yaml                               | 18 +++++++++---------
 pnpm-workspace.yaml                          |  2 --
 5 files changed, 13 insertions(+), 13 deletions(-)
 create mode 100644 .changeset/hono-security-update-4-13-7.md

diff --git a/.changeset/hono-security-update-4-13-7.md b/.changeset/hono-security-update-4-13-7.md
new file mode 100644
index 00000000000..a845151cc84
--- /dev/null
+++ b/.changeset/hono-security-update-4-13-7.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/integration/templates/hono-vite/package.json b/integration/templates/hono-vite/package.json
index 05c9a9d9a60..a7917e925d7 100644
--- a/integration/templates/hono-vite/package.json
+++ b/integration/templates/hono-vite/package.json
@@ -12,7 +12,7 @@
     "@hono/node-server": "^1.19.14",
     "dotenv": "^17.2.1",
     "express": "^5.1.0",
-    "hono": "^4.12.34",
+    "hono": "^4.13.7",
     "tsx": "^4.20.3",
     "vite-express": "^0.21.1"
   },
diff --git a/packages/hono/package.json b/packages/hono/package.json
index 1c2dd56b10e..d2850798161 100644
--- a/packages/hono/package.json
+++ b/packages/hono/package.json
@@ -78,7 +78,7 @@
     "@clerk/shared": "workspace:^"
   },
   "devDependencies": {
-    "hono": "^4.12.34"
+    "hono": "^4.13.7"
   },
   "peerDependencies": {
     "hono": ">=4"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2cc07e7eecb..aef5209befa 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -815,8 +815,8 @@ importers:
         version: link:../shared
     devDependencies:
       hono:
-        specifier: ^4.12.34
-        version: 4.13.4
+        specifier: ^4.13.7
+        version: 4.13.13
 
   packages/localizations:
     dependencies:
@@ -9888,8 +9888,8 @@ packages:
   hoist-non-react-statics@3.3.2:
     resolution: {integrity: sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==}
 
-  hono@4.13.4:
-    resolution: {integrity: sha512-AGEwKIyRMHRv1t8Wjwa3LHxQ61X5CqrdFT+4BRNTpqS5aJNnpl5WLjADb7vFlJzI/8uK7T5QLVApCMQKNa3LgQ==}
+  hono@4.13.13:
+    resolution: {integrity: sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==}
     engines: {node: '>=16.9.0'}
 
   hookable@5.5.3:
@@ -17876,9 +17876,9 @@ snapshots:
       '@hapi/hoek': 9.3.0
     optional: true
 
-  '@hono/node-server@1.19.14(hono@4.13.4)':
+  '@hono/node-server@1.19.14(hono@4.13.13)':
     dependencies:
-      hono: 4.13.4
+      hono: 4.13.13
 
   '@humanfs/core@0.19.1': {}
 
@@ -18436,7 +18436,7 @@ snapshots:
 
   '@modelcontextprotocol/sdk@1.30.1(@cfworker/json-schema@4.1.1)(zod@3.25.76)':
     dependencies:
-      '@hono/node-server': 1.19.14(hono@4.13.4)
+      '@hono/node-server': 1.19.14(hono@4.13.13)
       ajv: 8.20.0
       ajv-formats: 3.0.1(ajv@8.20.0)
       content-type: 1.0.5
@@ -18446,7 +18446,7 @@ snapshots:
       eventsource-parser: 3.0.8
       express: 5.2.1
       express-rate-limit: 8.3.2(express@5.2.1)
-      hono: 4.13.4
+      hono: 4.13.13
       jose: 6.2.2
       json-schema-typed: 8.0.2
       pkce-challenge: 5.0.1
@@ -26104,7 +26104,7 @@ snapshots:
     dependencies:
       react-is: 16.13.1
 
-  hono@4.13.4: {}
+  hono@4.13.13: {}
 
   hookable@5.5.3: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index b02d507527e..d92f9eaf43e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -71,8 +71,6 @@ minimumReleaseAgeExclude:
   - '@clerk/*'
   - 'pkglab'
   - 'pkglab-*'
-  # Renovate security update: hono@4.13.7
-  - hono@4.13.7
 
 trustPolicy: no-downgrade
 trustPolicyExclude: