Skip to content

chore(deps): bump @hono/zod-openapi from 0.19.10 to 1.5.1 - #37

Merged
mroops0111 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/hono/zod-openapi-1.4.0
Aug 3, 2026
Merged

chore(deps): bump @hono/zod-openapi from 0.19.10 to 1.5.1#37
mroops0111 merged 1 commit into
masterfrom
dependabot/npm_and_yarn/hono/zod-openapi-1.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 14, 2026

Copy link
Copy Markdown
Contributor

Bumps @hono/zod-openapi from 0.19.10 to 1.5.1.

Release notes

Sourced from @​hono/zod-openapi's releases.

@​hono/zod-openapi@​1.5.1

Patch Changes

@​hono/zod-openapi@​1.5.0

Minor Changes

  • #1878 443a8dc5cd8a6a65daa2bec1f251adfc605b05ce Thanks @​SAY-5! - feat: inherit defaultHook from parent app on nested routes mounted via app.route()

    Behavior change: if a parent app has a defaultHook and a mounted sub-app does not declare its own, the sub-app's routes now use the parent's defaultHook instead of the built-in validation response.

Patch Changes

  • #2033 740123c01aadb6c2ed742d1c67c2763a4cdc4f1f Thanks @​yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes

  • #2031 bf52ec2f18e32479ec85c00922c8aede68dc8286 Thanks @​tokiya-takai! - fix(zod-openapi): preserve onError()/notFound() set after basePath()

    OpenAPIHono.basePath() used to rebuild the instance by spreading the plain Hono clone returned by super.basePath(). That spread copied the clone's arrow-function instance fields (onError, notFound, request, fetch), which stay bound to the discarded clone — so calling .onError() (or .notFound()) after .basePath() mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead). basePath() now transplants only the routing state onto a properly constructed OpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.

@​hono/zod-openapi@​1.4.0

Minor Changes

  • #1881 e90e4fb30877f3e3f4b0588bdb2bbfc337efbf67 Thanks @​T4ko0522! - fix(zod-openapi): bump peerDependencies.hono to >=4.10.0 to match the runtime requirement coming through @hono/zod-validator.

    @hono/zod-openapi lists @hono/zod-validator as a direct (non-peer) dependency, so its peer range must be at least as strict as @hono/zod-validator's. After the typed-400 fix bumps @hono/zod-validator's peerDependencies.hono to >=4.10.0, leaving @hono/zod-openapi's peer at >=4.3.6 would let consumers install @hono/zod-openapi against e.g. [email protected], where the bundled @hono/zod-validator types reference the 4-argument MiddlewareHandler<E, P, I, R> (introduced in Hono v4.10.0) and fail to compile (TS2707).

Patch Changes

@​hono/zod-openapi@​1.3.0

Minor Changes

  • #1752 fe0f8e4b44ca8e78d2ed60ed8591f415cd85eaa9 Thanks @​destroSunRay! - This PR adds two new utilities to improve route definition and registration in @hono/zod-openapi:

    • defineOpenAPIRoute: Provides explicit type safety for route definitions
    • openapiRoutes: Enables batch registration of multiple routes with full type safety
    • Registering many routes individually was repetitive and verbose
    • Type inference for complex route configurations was challenging
    • Organizing routes across multiple files was difficult
    • No built-in support for conditional route registration
    • RPC type safety was hard to maintain across scattered route registrations
    • defineOpenAPIRoute: Wraps route definitions with explicit types for better IDE support and type checking
    • openapiRoutes: Accepts an array of route definitions and registers them all at once

... (truncated)

Changelog

Sourced from @​hono/zod-openapi's changelog.

1.5.1

Patch Changes

1.5.0

Minor Changes

  • #1878 443a8dc5cd8a6a65daa2bec1f251adfc605b05ce Thanks @​SAY-5! - feat: inherit defaultHook from parent app on nested routes mounted via app.route()

    Behavior change: if a parent app has a defaultHook and a mounted sub-app does not declare its own, the sub-app's routes now use the parent's defaultHook instead of the built-in validation response.

Patch Changes

  • #2033 740123c01aadb6c2ed742d1c67c2763a4cdc4f1f Thanks @​yusukebe! - fix: resolve defaultHook through the ancestor chain on nested routes

  • #2031 bf52ec2f18e32479ec85c00922c8aede68dc8286 Thanks @​tokiya-takai! - fix(zod-openapi): preserve onError()/notFound() set after basePath()

    OpenAPIHono.basePath() used to rebuild the instance by spreading the plain Hono clone returned by super.basePath(). That spread copied the clone's arrow-function instance fields (onError, notFound, request, fetch), which stay bound to the discarded clone — so calling .onError() (or .notFound()) after .basePath() mutated the throwaway clone instead of the returned app and silently had no effect (the parent's handler ran instead). basePath() now transplants only the routing state onto a properly constructed OpenAPIHono, keeping its own correctly-bound methods. Fixes #2021.

1.4.0

Minor Changes

  • #1881 e90e4fb30877f3e3f4b0588bdb2bbfc337efbf67 Thanks @​T4ko0522! - fix(zod-openapi): bump peerDependencies.hono to >=4.10.0 to match the runtime requirement coming through @hono/zod-validator.

    @hono/zod-openapi lists @hono/zod-validator as a direct (non-peer) dependency, so its peer range must be at least as strict as @hono/zod-validator's. After the typed-400 fix bumps @hono/zod-validator's peerDependencies.hono to >=4.10.0, leaving @hono/zod-openapi's peer at >=4.3.6 would let consumers install @hono/zod-openapi against e.g. [email protected], where the bundled @hono/zod-validator types reference the 4-argument MiddlewareHandler<E, P, I, R> (introduced in Hono v4.10.0) and fail to compile (TS2707).

Patch Changes

1.3.0

Minor Changes

  • #1752 fe0f8e4b44ca8e78d2ed60ed8591f415cd85eaa9 Thanks @​destroSunRay! - This PR adds two new utilities to improve route definition and registration in @hono/zod-openapi:
    • defineOpenAPIRoute: Provides explicit type safety for route definitions
    • openapiRoutes: Enables batch registration of multiple routes with full type safety
    • Registering many routes individually was repetitive and verbose
    • Type inference for complex route configurations was challenging
    • Organizing routes across multiple files was difficult
    • No built-in support for conditional route registration

... (truncated)

Commits
  • 70623e3 Version Packages (#2037)
  • 8e59b17 Version Packages (#2032)
  • 740123c fix(zod-openapi): resolve defaultHook through the ancestor chain on nested ro...
  • 443a8dc fix(zod-openapi): inherit defaultHook from parent app on nested routes (#1878)
  • bf52ec2 fix(zod-openapi): preserve onError/notFound bindings set after basePath() (#2...
  • b86478a ci: apply automated fixes
  • 5e32c00 chore: migrate to pnpm (#2006)
  • c5ba38b chore(deps-dev): bump tsdown from 0.22.2 to 0.22.3 (#1996)
  • f89ea30 chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 (#1866)
  • bf845ad chore: unblock TypeScript v6 (#1937)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/zod-openapi since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono/zod-openapi-1.4.0 branch 7 times, most recently from 1666cb8 to bb1c003 Compare June 21, 2026 06:28
@mroops0111

Copy link
Copy Markdown
Owner

@dependabot rebase

1 similar comment
@mroops0111

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): bump @hono/zod-openapi from 0.19.10 to 1.4.0 chore(deps): bump @hono/zod-openapi from 0.19.10 to 1.5.1 Aug 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/hono/zod-openapi-1.4.0 branch from bb1c003 to 32870f7 Compare August 2, 2026 14:47
@mroops0111
mroops0111 force-pushed the dependabot/npm_and_yarn/hono/zod-openapi-1.4.0 branch from 32870f7 to 9fd10b6 Compare August 3, 2026 00:47
- bump zod to ^4.2.1 across all packages, pin a single version via a pnpm
  override, and @hono/zod-openapi to ^1.5.1 (its 1.x line requires zod 4)
- schema: z.record now needs an explicit key schema; strip defaults from
  UserUpdate and ProductManifestUpdate, since zod 4 keeps defaults through
  .partial() and a patch must not reset absent fields
- server: a vitest setup file loads the zod-openapi extension before any
  schema module so branded types keep .openapi() under a single zod instance

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
@mroops0111
mroops0111 force-pushed the dependabot/npm_and_yarn/hono/zod-openapi-1.4.0 branch from 9fd10b6 to 61e638c Compare August 3, 2026 00:49
@mroops0111
mroops0111 merged commit 2d9cf72 into master Aug 3, 2026
6 checks passed
@mroops0111
mroops0111 deleted the dependabot/npm_and_yarn/hono/zod-openapi-1.4.0 branch August 3, 2026 00:52
mroops0111 added a commit that referenced this pull request Aug 14, 2026
- bump zod to ^4.2.1 across all packages, pin a single version via a pnpm
  override, and @hono/zod-openapi to ^1.5.1 (its 1.x line requires zod 4)
- schema: z.record now needs an explicit key schema; strip defaults from
  UserUpdate and ProductManifestUpdate, since zod 4 keeps defaults through
  .partial() and a patch must not reset absent fields
- server: a vitest setup file loads the zod-openapi extension before any
  schema module so branded types keep .openapi() under a single zod instance

Co-authored-by: mroops0111 <[email protected]>
Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant