Pull requests

• fix(context): allow c.header() after the response body is consumed

  #5587·yusukebe opened Oct 28, 2026Member·3 of 4 tasks·

  ·
  1

  3

• fix(router)!: reject an optional parameter right after a wildcard

  #5558·usualoma opened Oct 16, 2026Member·3 tasks done·

  ·
  4

• feat(request): support * as a path parameter

  #5535·yusukebe opened Oct 6, 2026Member·4 tasks·

  ·
  6

• fix(trie-router): match a multi-segment param followed by another param

  #5525·Harshavardhan-Sondakar opened Oct 5, 2026·3 of 4 tasks·

  ·

• fix(method-override): discard stale form content length

  #5521·imharjot opened Oct 4, 2026·3 of 4 tasks·

  ·
  1

• fix(jsx): escape element and object attribute values

  #5512·usualoma opened Oct 4, 2026Member·3 tasks done·

  ·
  4

• fix(proxy): process headers inherited from Request inputs

  #5509·Companion opened Oct 4, 2026·

  ·

• test(workerd): cover JSX Suspense streaming (#5352)

  #5492·spideydotjs opened Sep 30, 2026·2 of 4 tasks·

  ·
  1

• fix(aws-lambda): sanitize non-ASCII header values in API Gateway v2 events

  #5483·furuchanchan opened Sep 29, 2026·3 of 4 tasks·

  ·

• fix(timing): escape double quotes and backslashes in Server-Timing descriptions

  #5478·MustafaKemal0146 opened Sep 28, 2026·3 of 4 tasks·

  ·
  1

• perf(method-override): clone the request only for form bodies

  #5454·mhalikosen opened Sep 26, 2026·

  ·

• fix(jwt): filter JWKS keys by signature use and key_ops in verifyWithJwks

  #5452·agustin18 opened Sep 26, 2026·3 of 4 tasks·

  ·

• fix(utils/mime,ssg): match media types case-insensitively

  #5449·saryn17 opened Sep 25, 2026Contributor·3 of 4 tasks·

  ·

• fix(jwt): define HonoJsonWebKey and resolve CryptoKey safely across runtimes

  #5440·agustin18 opened Sep 24, 2026·4 tasks done·

  ·
  1

• fix(jwt): reject non-JWK objects as signature keys

  #5438·akasakariko opened Sep 24, 2026·

  ·
  1

  4

• fix(jsx): add the CSP nonce to all scripts generated by ErrorBoundary

  #5430·koreahghg opened Sep 22, 2026·3 of 4 tasks·

  ·

• feat(timeout): expose a cancellation signal for downstream work

  #5429·timkelty opened Sep 22, 2026·4 tasks done·

  ·

• feat(timeout): expose remaining request time

  #5428·timkelty opened Sep 22, 2026·4 tasks done·

  ·

• fix(accepts): preserve exact media type quality over subtype wildcards

  #5427·yearth opened Sep 22, 2026·4 tasks done·

  ·

• feat(client): type detailed response errors

  #5425·icecold009 opened Sep 21, 2026Contributor·

  ·
  1

• fix(serve-static): handle only GET/HEAD and stop wildcard routes from turning 404s into 405s

  #5417·nikolas-sapa opened Sep 19, 2026·

  ·
  1

  4

• fix(reg-exp-router): apply middleware with mid-path wildcards

  #5415·usualoma opened Sep 18, 2026Member·3 tasks done·

  ·
  3

• docs: fix JSDoc parameter types and missing annotations in middleware and helpers

  #5409·Lukecele opened Sep 18, 2026·3 of 4 tasks·

  ·
  2

• fix(router): read a parameter name to the end of the segment in LinearRouter and PatternRouter

  #5404·Maher-Reven opened Sep 16, 2026·3 of 4 tasks·

  ·
  1

• fix(combine): continue the chain when a Condition returns true in every()

  #5392·harshit-d3v opened Sep 13, 2026Contributor·

  ·
  2